Applications do not sync from Google Workspace. Google publishes no API that lists the SAML and OIDC apps configured in a tenant, so add those applications to your catalog manually and grant access through a synced Google Group. See applications.
What you can do
User lifecycle
Create new users, check email availability, suspend and restore Google Workspace user accounts
Group management
Create, delete, list, and manage Google Groups; add/remove users programmatically
Access verification
Check user group memberships before granting permissions
Security operations
Reset multi-factor authentication or passwords for users