Google Workspace Integration

Overview

The Google Workspace integration enables monitoring of Gmail, Google Drive, Calendar, and user management. Get comprehensive security insights across your Google environment.

Prerequisites

• Super Admin access to Google Workspace Admin Console
• Google Workspace Business, Enterprise, or Education edition
• Permission to authorise third-party applications

Step 1: Initiate Connection

1. Navigate to Integrations → Available Integrations
2. Find Google Workspace and click "Connect"
3. Review the OAuth scopes that will be requested
4. Click "Authorise with Google"

Step 2: Google Authentication

1. Sign in with your Google Workspace Super Admin account
2. Select the correct Google Workspace domain if prompted
3. Review and approve the requested permissions
4. Click "Allow" to complete authorisation

Step 3: Domain-Wide Delegation (If Required)

For full functionality, you may need to set up domain-wide delegation:

1. Go to Google Admin Console → Security → API Controls
2. Click "Manage Domain Wide Delegation"
3. Add the Bleach service account (provided in the integration settings)
4. Add the required OAuth scopes (listed in the integration guide)

Step 4: Configure and Sync

1. Select which Workspace services to monitor
2. Configure organisational unit scope if needed
3. Start the initial sync process
4. Wait for completion (typically 10-45 minutes)

What's Monitored

• User accounts and 2-Step Verification status
• Gmail security settings and external forwarding
• Drive sharing and external access settings
• Admin roles and privileged accounts
• Third-party app access and OAuth grants
• Security alerts from Google Security Centre