Google Splice is used to connect to the Google accounts to IDHub
In IDHUB, there are two types of resources - User and Entitlement.
Account in IDHUB translates to User in SCIM and GSuite.
Entitlements in IDHUB translates to Group in SCIM and translates to Group in GSuite and Permissions for Google Drive
Add Entitlement (PATCH Only)
Revoke Entitlement (PATCH Only)
See if we can use App Scripts from google https://developers.google.com/apps-script/reference/drive/user to populate Entitlements for user instead of API calls.
To improve speed of populating membership, check feasibility to use cache with Push Notifications to update cache with latest data immediately https://developers.google.com/drive/api/v3/push . Consistency is important, hence need a mechanism to keep cache up-to-date before implementing the same.