GoGuardian now supports organizational unit (OU) synchronization via Clever. OUs synced from Clever will depend on the schools and grade levels shared with GoGuardian via Clever's sharing rules. If GoGuardian Admin is used to filter teacher accounts, all teacher accounts will receive the filtering policy at the root(topmost level) of the domain, as teacher OUs are not imported via Clever. To get started changing OU sources to Clever, complete the Clever Integration process by following the guide here: https://help.goguardian.com/hc/en-us/articles/360029415692-Instructions-for-Integrating-Clever-with-GoGuardian-. Once Clever is successfully linked with GoGuardian, Clever can be used as a source for nightly OU syncs to ensure students are in the appropriate OUs.

Note: Syncing OUs is not necessary for accounts only subscribed to GoGuardian Teacher. OUs should be synced for GoGuardian Admin, GoGuardian Beacon, and GoGuardian Director.

When should Clever be used to sync Organizational Units?

GoGuardian can sync OUs from Clever, Google Admin Console, and Active Directory. If a school or district prefers to sync OUs based on the data structure within Clever (district -> school -> grade level) versus more flexible data structures offered by Google Admin Console, Clever OU sync should be used. An important distinction between Clever and Google Admin Console or Active Directory sync is that teachers will be excluded from the synced OU data received from clever. 

Note: Only one OU provider can be used with GoGuardian. Enabling AD/OU sync will disable GAC or Clever OUs.

How does it work?

GoGuardian's CleverOU Sync is based on the schools and grade levels students are categorized into within Clever. These structures usually differ as follows:

Example Clever OU data:

• GoGuardian Elementary
  • Grade 1
  • Grade 2
  • Grade 3
  • Grade 4
  • Grade 5
• GoGuardian Middle School
  • Grade 6
  • Grade 7
  • Grade 8
• GoGuardian High School
  • Grade 9
  • Grade 10
  • Grade 11
  • Grade 12

Example GAC/AD OU data:

• GoGuardian Elementary
  • 2031
  • 2030
  • 2029
  • 2028
  • 2027
    
• GoGuardian Middle School
  • 2026
  • 2025
    • 2025 restricted
    • 2025 no youtube
  • 2024
• GoGuardian High School
  • 2023
  • 2022
  • 2021
    • 2021 restricted
    • 2021 no Youtube
  • 2020
    • 2020 restricted
    • 2020 no Youtube

GAC/Active Directory sync offers more flexibility and segmentation of users than Clever. If sub OUs such as restricted and no Youtube are implemented in GAC or AD are configured to only contain students who should have restricted access to the internet, more restrictive policies can be applied to these subOUs without affecting students outside of those OUs.

How to sync OUs via Clever Integration

After Clever has been successfully enabled for the account:

1. Navigate to the Org Management portal at manage.goguardian.com and click on the Integrations tab at the top of the page. Then, click on the OU Settings tab on the left side of the screen. 
   
2. Scroll down to Clever and click Enable
3. Once enabled, return to the integrations tab and verify that OUs are either marked with a green check mark as synced or that the sync is currently running. If the sync is not running, click the Sync Now button and multitask until the sync has finished.
   
4. Click the User Management tab and click the edit button to the far right side of the page to bring up a user's permissions along with their Suborg Access.
   
5. Verify the appropriate imported OUs are now present in the Suborg Access menu. If there are OUs missing from the SubOrg Access menu, verify sharing settings in Clever and resync if changes have been made. If sharing settings match GoGuardian, please contact support@goguardian.com for further assistance.

Why isn't our newly created student account in their appropriate Clever OU?

Clever OUs sync once per day. If a new student is added to the SIS and is in shared with GoGuardian via Clever, the next nightly sync or a manual sync will index the student into the appropriate OU. Navigate to manage.goguardian.com, then to the Integrations tab to click the Sync Now button to initiate a manual sync.