diff --git a/temporal/api/cloud/cloudservice/v1/request_response.proto b/temporal/api/cloud/cloudservice/v1/request_response.proto
index 5a84a8a..b23c8d3 100644
--- a/temporal/api/cloud/cloudservice/v1/request_response.proto
+++ b/temporal/api/cloud/cloudservice/v1/request_response.proto
@@ -241,14 +241,17 @@ message GetUserGroupsRequest {
     int32 page_size = 1;
     // The page token if this is continuing from another response - optional.
     string page_token = 2;
+    // Filter groups by their connection type - optional.
+    // Allowed values ["google-workspace"].
+    string connection_type = 3;
     // Only return groups that grant access to the specified namespace - optional.
-    string namespace = 3;
+    string namespace = 4;
     // Filter groups by their name - optional.
-    string name = 4;
+    string name = 5;
 }
 
 message GetUserGroupsResponse {
-    // The list of groups in ascending name order.
+    // The list of groups in ascending ids order.
     repeated temporal.api.cloud.identity.v1.UserGroup groups = 1;
     // The next page's token.
     string next_page_token = 2;
diff --git a/temporal/api/cloud/identity/v1/message.proto b/temporal/api/cloud/identity/v1/message.proto
index 83956a2..f212ec8 100644
--- a/temporal/api/cloud/identity/v1/message.proto
+++ b/temporal/api/cloud/identity/v1/message.proto
@@ -76,6 +76,7 @@ message UserGroupSpec {
     string name = 1;
     // The type of the group. e.g. "googleworkspace"
     // This field is immutable. Once set, it cannot be changed
+    // Allowed values ["google-workspace"].
     string type = 2;
     // The access assigned to the group
     Access access = 3;