动态群组是一个 Google 群组，其成员资格使用成员资格查询或员工特性（如职位角色或建筑物位置）查询自动管理。例如，成员资格查询可以是“我的组织中职位是技术文档工程师的所有用户”。
作为群组定义的一部分，您提供查询，而 Google 系统确保组织中的所有匹配用户都是群组成员。成员资格查询使用通用表达式语言 (CEL) 编写，这是用于为 Google Cloud API 编写表达式的标准语言。
虽然动态群组的创建和维护与 Google 群组不同，但它们的用途是相同的。也就是说，动态群组用作电子邮件群组（以向一组特定人员发送电子邮件）并用于管理 Identity and Access Management (IAM) 和 Google Workspace 政策。如需详细了解 IAM 政策，请参阅 IAM。如需详细了解 Google Workspace 政策，请参阅通过访问权限群组自定义用户对 Google Workspace 服务的访问权限和通过配置群组自定义服务设置。
[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-18。"],[[["\u003cp\u003eDynamic groups are Google Groups with memberships automatically managed by a query based on employee attributes, such as job role.\u003c/p\u003e\n"],["\u003cp\u003eThese groups use Common Expression Language (CEL) for membership queries and are used for email distribution and managing Identity and Access Management (IAM) and Google Workspace policies.\u003c/p\u003e\n"],["\u003cp\u003eDynamic groups are available only to certain Google Workspace and Cloud Identity premium accounts, with a default limit of 500 groups per customer.\u003c/p\u003e\n"],["\u003cp\u003eDynamic groups can be managed via REST API or client libraries but cannot be added as members of a regular Google Group.\u003c/p\u003e\n"],["\u003cp\u003eUsers can formulate and test membership queries and create dynamic groups as next steps.\u003c/p\u003e\n"]]],[],null,["# Dynamic groups overview\n=======================\n\nA *dynamic group* is a\nGoogle Group whose memberships are automatically managed using a membership\nquery or a query on employee attributes, such as job role or building location.\nFor example, a membership query might be \"all users whose job role is Technical\nWriter in my organization.\"\n| **Note:** Dynamic groups are only available to Google Workspace Enterprise Standard, Enterprise Plus, Enterprise for Education, and Cloud Identity premium accounts. You can create up to 500 dynamic groups per customer. This limit can be increased on a case-by-case basis---contact [Google Workspace Support](https://support.google.com/a/answer/1047213) with your specific use case to request an increase.\n\nAs part of the group's definition, you supply the query and Google systems\nensure that all matching users in your organization are members of the group.\nMembership queries are written using\n[*Common Expression Language (CEL)*](https://opensource.google.com/projects/cel)\nwhich is the standard language used to write expressions for Google Cloud\nAPIs.\n\nThough dynamic groups are created and maintained differently than Google Groups,\nthey are used for the same purposes. Namely, dynamic groups are used as email\ngroups (to send email to a specific set of people) and for managing\nIdentity and Access Management (IAM) and Google Workspace policies.\nFor further information on IAM policies, see\n[IAM](/iam).\nFor further information on Google Workspace policies, see\n[Customize access to Google Workspace services using access groups](https://support.google.com/a/answer/9050643)\nand [Customize service settings with configuration groups](https://support.google.com/a/answer/9224126).\n\nFor introductory information on policies, refer to\n[Understanding policies](/iam/docs/policies).\n| **Note:** You cannot add a dynamic group as a member of a regular Google Group.\n\nTechnologies used to create a dynamic group\n-------------------------------------------\n\nYou can create and manage dynamic groups using the REST API or client libraries.\n\nWhat's next\n-----------\n\nHere are a few next steps you might take:\n\n- [Formulate and test a membership query](/identity/docs/how-to/test-query-dynamic-groups).\n- [Create a dynamic group](/identity/docs/how-to/create-dynamic-groups)."]]
