Lexington One Contacts Sync Manager

Loading directory contacts...

Mosyle MDM Sync Settings

Configure these parameters inside your MDM payload

Push this CardDAV account to all school district iPhones via Mosyle MDM. Changes made on this dashboard will sync natively to each user's device.

Account Description

CardDAV Server URL

Username

Password

🔒

SSL is Required: iOS will only sync over HTTPS. Ensure your deployed URL resolves over an encrypted connection.

CSV Contacts Importer

Bulk upload a CSV spreadsheet to add many contacts at once

Drag & drop contact CSV file here or browse files

Parsed Contacts Preview (0 rows found)

First Name	Last Name	Job Title	Location	Email	Work Phone

Bulk Photo Uploader

Sync portrait images. Naming must match the contact's username (e.g. username.jpg)

Drag & drop multiple images here or browse files

Google Workspace Directory Staff

Search all staff profiles and assign cell phone numbers to sync them to CardDAV (district iPhones).

0 Staff

Name	Job Title & Department	Location	Email	Phones	Actions
Loading staff directory from Google Workspace...

District Desk Phone Directory

Search all staff profiles across Lexington One and update desk phone numbers and extensions.

0 Staff

Name	Job Title & Department	Location	Email	Desk Phone	Actions
Loading staff directory from Google Workspace...

🛡️ Enterprise Audit & Logs Center

Comprehensive user change history with deep diffs, sync operations stream, and CardDAV device telemetry

📝

Total Logged Events

👤

Contact Mutations

🛡️

Roles & Whitelist

📸

Photo Updates

Timestamp	User (Who)	IP Address	Action	Target Entity	Summary & Changes	Diff
Loading user audit trail...

Showing 0 entries

Timestamp	Event Type	Mode	Triggered By	Status	Summary & Changes
Loading sync operations...

📱 CardDAV Telemetry & Protocol Stream

Real-time device registry, PROPFIND/REPORT activity stream, and diagnostic error logs

📱 Connected Devices Registry

Active iPhones, Macs, and CardDAV sync endpoints

Device / Client	Serial # / Account	IP Address	Requests	Last Active	Last Action
Loading connected devices telemetry...

T-Mobile Billing Audit

Upload a T-Mobile wireless billing spreadsheet (CSV/TSV) to compare carrier active lines with the district contact directory in real-time. This comparison runs entirely client-side and does not alter database contacts.

📊

Drag & Drop T-Mobile Billing File Here

Supports T-Mobile CSV and TSV export spreadsheets

LIVE BIGQUERY ID BADGE AUDIT • FIREBASE + PHOTODATE DELTA CACHE

District Photo Compliance Check

Live staff ID badge compliance and PhotoDate freshness verified against BigQuery (dbo_AllStaff_IDData), with instant portrait delivery from Firebase (staff_photos_cache) & RAM cache. Nightly 2:00 AM delta sync updates Firebase, gs://l1_photo_storage/Staff/, and CardDAV.

0 Total Staff

0 With ID Photo

0 Missing Photo

0 Outdated (>3 Yrs)

Connecting to BigQuery live staff directory...

Querying live staff compliance records from BigQuery (dbo_AllStaff_IDData)...

⚙️ General & Synchronization

Application Settings & Synchronization Hub

Configure Google Directory and CardDAV syncs, manage automated 2:00 AM nightly verification, and monitor directory operations.

⚙️

Google Workspace Integration & Setup Guide

Configure Domain-Wide Delegation credentials, impersonated admin, target Organizational Units (OUs), and synchronization rules.

➕

🔧 Configuration Parameters

Impersonated Administrator Email A Workspace user account with directory-reading administrative privileges.

Target Organizational Units (OUs)

Target directory folders (e.g., /Staff). Nested sub-OUs are matched recursively.

Only sync contacts with an assigned cell phone number

📖 Setup Instructions

1. Enable Admin SDK API

Open the Google Cloud Console, select your contactdav-lcsd project, and enable the Admin SDK API from the API library.

2. Retrieve Service Account Client ID

Open your local service-account.json credentials file and copy the numeric value inside the "client_id" field (e.g. 10738249...).

3. Grant Domain-Wide Delegation

Log in to Google Workspace Admin Console as a Super Admin. Navigate to Security → Access and data control → API controls → Manage Domain Wide Delegation. Click Add new (or edit your existing client), paste your Client ID, and authorize this scope:

https://www.googleapis.com/auth/admin.directory.user

4. Two-Way Desk Phone Sync & Safety

When you edit a staff member's desk phone, the system performs an isolated patch directly to Google Workspace Directory. Any existing mobile numbers are preserved, and no other account properties (names, passwords, OUs, titles) are modified.

Page Name & Purpose	Tab / Route Identifier	Target User Group	Active Theme	Action
Loading page theme configurations...

⚡

Directory, BigQuery ID Portrait & CardDAV Synchronization

On-demand synchronization tools for Google Directory staff records, BigQuery master ID portraits (dbo_AllStaff_IDData), Firebase photo cache (staff_photos_cache), and CardDAV client device caches.

Stage 1 • Google Workspace Ready

🌐

Google Directory & Barcode IDs

Scans staff accounts in Google Workspace (filtered by Staff OUs). Syncs names, job titles, departments, work locations, desk phones, and customSchemas.ID.employeeNumber barcodes to workspace_users_cache and CardDAV contacts.

Last synced: Checking...

Stage 2 • BigQuery ID Source of Truth Ready

🪪

BigQuery ID Portraits (`dbo_AllStaff_IDData`)

Compares live BigQuery PhotoDate timestamps against Firebase. Syncs new or re-taken ID badge portraits to Firebase staff_photos_cache (400px Photo Check cache), GCS l1_photo_storage/Staff/ (800px studio master), and CardDAV district_contacts (512px Retina).

Last synced: Checking...

Stage 3 • GCS & Workspace Fallback Ready

📸

GCS Studio & Workspace HD Portraits

Verifies gs://l1_photo_storage/Staff/{username}.jpg and Google Workspace Directory fallback portraits for contacts without a BigQuery ID badge photo, saving validated Retina portraits directly into Firestore contact cards.

Last synced: Checking...

Stage 4 • CardDAV Clients Ready

📇

CardDAV Client Sync ("Card Divs")

Forces an immediate increment of the global CardDAV CTag, flushes and refreshes server memory cache, and prompts all enrolled Apple iOS/macOS and Android devices to download updated vCards.

Current CTag: Loading...

⏰

Automated Daily 2:00 AM Verification & Multi-Stage Delta Sync

Runs automatically every night at 2:00 AM Eastern (America/New_York). Executes a 3-stage incremental delta pipeline across Google Workspace, BigQuery Master ID Data, Firebase, GCS, and CardDAV — logging structured v2 telemetry in both the Sync Audit Log and User Audit Hub.

Enabled

Scheduled Time

02:00 AM Eastern Time

Target Timezone: America/New_York (District Local Time)

Next Verification

Tomorrow at 2:00 AM EST

Incremental change scan (only updates modified items)

Last Verification Execution

Checking status...

Last verified: --

📋 What Is Synced Nightly at 2:00 AM Eastern (Source-of-Truth Pipeline)

Firebase Photo Cache: Checking...

1. Google Workspace & Employee Barcodes

Scans Staff OUs for new hires and profile changes (name, title, school/location, desk phone) plus customSchemas.ID.employeeNumber barcodes. Updates workspace_users_cache and district_contacts.

2. BigQuery Master ID Portraits (PhotoDate Delta)

Compares live BigQuery PhotoDate against cached timestamps. Only fetches new/updated badge photos and writes to Firebase staff_photos_cache (instant Photo Check), GCS l1_photo_storage/Staff/, and CardDAV.

3. GCS/Workspace Fallbacks & CardDAV CTag

Checks GCS studio bucket & Google Workspace fallback portraits for any remaining staff, bumps the global CardDAV CTag only if records changed, and writes structured v2 logs to sync_logs & user_audit_logs.

📜

Synchronization Audit Log (Structured v2 Format)

Real-time audit records of manual sync operations and automated 2:00 AM daily verification passes across Google Directory, BigQuery ID Portraits, Firebase Photo Cache, GCS, and CardDAV.

Timestamp	Event Type	Mode	Triggered By	Status	Summary & Changes	Details
Loading synchronization audit logs...

⚙️ General & Synchronization 🛡️ Role-Based Access Matrix

Loading Permissions Matrix...

Permissions (Rights)

Authorized User Role Assignments

Assign configured roles to specific Lexington One staff Google accounts. Users immediately inherit permissions configured on the matrix above.

Staff Google Account	Assigned Role(s)	Granted Permissions	Authorized By	Actions
Loading assigned users...

Mosyle MDM Sync Settings

CSV Contacts Importer

Parsed Contacts Preview (0 rows found)

Bulk Photo Uploader

Matched Contact Pictures (0 images selected)

Google Workspace Directory Staff

District Desk Phone Directory

🛡️ Enterprise Audit & Logs Center

🔄 Synchronization Operations History

📱 CardDAV Telemetry & Protocol Stream

📱 Connected Devices Registry

⚡ Real-Time Sync & Activity Stream

⚠️ CardDAV Error & Failure Log

T-Mobile Billing Audit

Drag & Drop T-Mobile Billing File Here

District Photo Compliance Check

Google Workspace Integration & Setup Guide

🔧 Configuration Parameters

📖 Setup Instructions

1. Enable Admin SDK API

2. Retrieve Service Account Client ID

3. Grant Domain-Wide Delegation

4. Two-Way Desk Phone Sync & Safety

Page Theme Manager

Directory, BigQuery ID Portrait & CardDAV Synchronization

Google Directory & Barcode IDs

BigQuery ID Portraits (dbo_AllStaff_IDData)

GCS Studio & Workspace HD Portraits

CardDAV Client Sync ("Card Divs")

Automated Daily 2:00 AM Verification & Multi-Stage Delta Sync

Synchronization Audit Log (Structured v2 Format)

Authorized User Role Assignments

Lexington One

BigQuery ID Portraits (`dbo_AllStaff_IDData`)