How should updates be made to a user's last name and primary email address in G Suite synced from Active Directory?

To update a user's last name and primary email address in G Suite when the data is synced from Active Directory, the proper approach is to make those changes directly in Active Directory. This is because G Suite, when set up to sync with Active Directory, relies on the information stored there to maintain user profiles.

When changes are made in Active Directory, the synchronization process automatically updates the corresponding user profiles in G Suite. This means that the primary email address and last name will be accurately reflected in G Suite without the need for manual intervention in the G Suite Admin panel.

By updating these details in the source of truth - Active Directory - you ensure consistency and accuracy across your organizational data. This approach also adheres to best practices in managing user identities, keeping your directory aligned with your authentication and authorization systems while minimizing the chances of discrepancies that can arise from manual updates in multiple locations.