Lexington One Contacts Sync Manager

Loading directory contacts...

Mosyle MDM Sync Settings

Configure these parameters inside your MDM payload

Push this CardDAV account to all school district iPhones via Mosyle MDM. Changes made on this dashboard will sync natively to each user's device.

Account Description

CardDAV Server URL

Username

Password

🔒

SSL is Required: iOS will only sync over HTTPS. Ensure your deployed URL resolves over an encrypted connection.

Google Workspace Directory Staff

Search all staff profiles and assign cell phone numbers to sync them to CardDAV (district iPhones).

0 Staff

Name	Job Title & Department	Location	Email	Phones	Actions
Loading staff directory from Google Workspace...

District Desk Phone Directory

Search all staff profiles across Lexington One and update desk phone numbers and extensions.

0 Staff

Name	Job Title & Department	Location	Email	Desk Phone	Actions
Loading staff directory from Google Workspace...

🛡️ Enterprise Audit & Logs Center

Comprehensive user change history with deep diffs, sync operations stream, and CardDAV device telemetry

📝

Total Logged Events

👤

Contact Mutations

🛡️

Roles & Whitelist

📸

Photo Updates

Timestamp	User (Who)	IP Address	Action	Target Entity	Summary & Changes	Diff
Loading user audit trail...

Showing 0 entries

Timestamp	Event Type	Mode	Triggered By	Status	Summary & Changes
Loading sync operations...

📱 CardDAV Telemetry & Protocol Stream

Real-time device registry, PROPFIND/REPORT activity stream, and diagnostic error logs

📱 Connected Devices Registry

Active iPhones, Macs, and CardDAV sync endpoints

Device / Client	Serial # / Account	IP Address	Requests	Last Active	Last Action
Loading connected devices telemetry...

T-Mobile Billing Audit

Upload a T-Mobile wireless billing spreadsheet (CSV/TSV) to compare carrier active lines with the district contact directory in real-time. This comparison runs entirely client-side and does not alter database contacts.

📊

Drag & Drop T-Mobile Billing File Here

Supports T-Mobile CSV and TSV export spreadsheets

LIVE BIGQUERY ID AUDIT • STAFF PORTRAITS

District Photo Compliance Check

Staff ID badge portrait compliance and PhotoDate freshness verified against BigQuery (dbo_AllStaff_IDData).

Connecting to BigQuery live staff directory...

Querying live staff compliance records from BigQuery (dbo_AllStaff_IDData)...

⚙️ General & Synchronization

Application Settings & Synchronization Hub

Configure Google Directory and CardDAV syncs, manage automated 2:00 AM nightly verification, and monitor directory operations.

⚙️

Google Workspace Integration & Setup Guide

Configure Domain-Wide Delegation credentials, impersonated admin, target Organizational Units (OUs), and synchronization rules.

➕

🔧 Configuration Parameters

Impersonated Administrator Email A Workspace user account with directory-reading administrative privileges.

Target Organizational Units (OUs)

Target directory folders (e.g., /Staff). Nested sub-OUs are matched recursively.

Only sync contacts with an assigned cell phone number

📖 Setup Instructions

1. Enable Admin SDK API

Open the Google Cloud Console, select your contactdav-lcsd project, and enable the Admin SDK API from the API library.

2. Retrieve Service Account Client ID

Open your local service-account.json credentials file and copy the numeric value inside the "client_id" field (e.g. 10738249...).

3. Grant Domain-Wide Delegation

Log in to Google Workspace Admin Console as a Super Admin. Navigate to Security → Access and data control → API controls → Manage Domain Wide Delegation. Click Add new (or edit your existing client), paste your Client ID, and authorize this scope:

https://www.googleapis.com/auth/admin.directory.user

4. Two-Way Desk Phone Sync & Safety

When you edit a staff member's desk phone, the system performs an isolated patch directly to Google Workspace Directory. Any existing mobile numbers are preserved, and no other account properties (names, passwords, OUs, titles) are modified.

Page Name & Purpose	Tab / Route Identifier	Target User Group	Active Theme	Action
Loading page theme configurations...

⚡

Directory, BigQuery ID Portrait & CardDAV Synchronization

On-demand synchronization tools for Google Directory staff records, BigQuery master ID portraits (dbo_AllStaff_IDData), Firebase photo cache (staff_photos_cache), and CardDAV client device caches.

⏰

Automated Daily 2:00 AM Verification & Multi-Stage Delta Sync

Runs automatically every night at 2:00 AM Eastern (America/New_York). Executes a 3-stage incremental delta pipeline across Google Workspace, BigQuery Master ID Data, Firebase, GCS, and CardDAV — logging structured v2 telemetry in both the Sync Audit Log and User Audit Hub.

Scheduled Time

02:00 AM Eastern Time

Target Timezone: America/New_York (District Local Time)

Next Verification

Tomorrow at 2:00 AM EST

Incremental change scan (only updates modified items)

Last Verification Execution

Checking status...

Last verified: --

📋 What Is Synced Nightly at 2:00 AM Eastern (Source-of-Truth Pipeline)

Firebase Photo Cache: Checking...

1. Google Workspace & Employee Barcodes

Scans Staff OUs for new hires and profile changes (name, title, school/location, desk phone) plus customSchemas.ID.employeeNumber barcodes. Updates workspace_users_cache and district_contacts.

2. BigQuery Master ID Portraits (PhotoDate Delta)

Compares live BigQuery PhotoDate against cached timestamps. Only fetches new/updated badge photos and writes to Firebase staff_photos_cache (instant Photo Check), GCS l1_photo_storage/Staff/, and CardDAV.

3. GCS/Workspace Fallbacks & CardDAV CTag

Checks GCS studio bucket & Google Workspace fallback portraits for any remaining staff, bumps the global CardDAV CTag only if records changed, and writes structured v2 logs to sync_logs & user_audit_logs.

Timestamp	Event Type	Mode	Triggered By	Status	Summary & Changes	Details
Loading synchronization audit logs...

🛡️ Role-Based Access Matrix

No Directory Modules Assigned

Mosyle MDM Sync Settings

Directory Contacts Exporter

CSV Contacts Importer

Parsed Contacts Preview (0 rows found)

Bulk Photo Uploader

Matched Contact Pictures (0 images selected)

Google Workspace Directory Staff

District Desk Phone Directory

🛡️ Enterprise Audit & Logs Center

🔄 Synchronization Operations History

📱 CardDAV Telemetry & Protocol Stream

📱 Connected Devices Registry

⚡ Real-Time Sync & Activity Stream

⚠️ CardDAV Error & Failure Log

T-Mobile Billing Audit

Drag & Drop T-Mobile Billing File Here

Google Workspace Integration & Setup Guide

🔧 Configuration Parameters

📖 Setup Instructions

1. Enable Admin SDK API

2. Retrieve Service Account Client ID

3. Grant Domain-Wide Delegation

4. Two-Way Desk Phone Sync & Safety

Page Theme Manager

Directory, BigQuery ID Portrait & CardDAV Synchronization

Google Directory & Barcode IDs

BigQuery ID Portraits (dbo_AllStaff_IDData)

GCS Studio & Workspace HD Portraits

CardDAV Client Sync ("Card Divs")

Automated Daily 2:00 AM Verification & Multi-Stage Delta Sync

Synchronization Audit Log (Structured v2 Format)

Authorized User Role Assignments

Lexington One

BigQuery ID Portraits (`dbo_AllStaff_IDData`)