Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.oleria.com/llms.txt

Use this file to discover all available pages before exploring further.

Oleria provides adaptive and autonomous access security that sets your business free. As part of that promise, we provide deep integration of your Google Workspace into the Oleria platform. Google Workspace includes both Google Cloud Identity (Admin) and Google Drive. This document provides step-by-step guidance to integrate Google Workspace with your Oleria workspace.

​
Prerequisites

  • Google Super Admin privileges
  • Grant domain-wide delegation to the Oleria app for the required scopes
Use a service account (and not an employee account) with super admin privileges for the integration to ensure continuity.

​
Grant Domain-Wide Delegation

1

Sign in to Google Workspace Admin

Use your Super Admin account to login to Google Workspace and select the Admin console.Use Super Admin account to login to your Google Workspace and select Admin console
2

Open Domain-Wide Delegation settings

In the Admin console, go to https://admin.google.com/ac/owl/domainwidedelegation or navigate to Menu → Security → Access and data control → API controls → Manage Domain Wide Delegation.Menu, Security, Access and data control, API controls, Manage Domain Wide Delegation
3

Add the Oleria Client ID and OAuth scopes

Select Add new, enter the Client ID and scopes below, then select Authorize.Client ID: 101716000692695758600Google Admin - Directory
https://www.googleapis.com/auth/admin.directory.user.readonly,
https://www.googleapis.com/auth/admin.directory.user.alias.readonly,
https://www.googleapis.com/auth/admin.directory.user.security,
https://www.googleapis.com/auth/admin.directory.group.readonly,
https://www.googleapis.com/auth/admin.directory.group.member.readonly,
https://www.googleapis.com/auth/admin.directory.orgunit.readonly,
https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly,
https://www.googleapis.com/auth/admin.directory.userschema.readonly,
https://www.googleapis.com/auth/admin.directory.customer.readonly,
https://www.googleapis.com/auth/admin.directory.domain.readonly
Google Admin - Reports
https://www.googleapis.com/auth/admin.reports.audit.readonly
Cloud Identity
https://www.googleapis.com/auth/cloud-identity.groups.readonly
Google Drive
https://www.googleapis.com/auth/drive.metadata.readonly,
https://www.googleapis.com/auth/drive.activity.readonly,
https://www.googleapis.com/auth/drive.readonly
Google Workspace domain-wide delegation dialog with Client ID and OAuth scopes entered
4

Grant remediation scopes (optional)

To perform remediations, grant domain-wide delegation for the following additional scopes:To revoke external users’ access:
https://www.googleapis.com/auth/drive
To disable dormant users:
https://www.googleapis.com/auth/admin.directory.user
To remove user accounts from groups:
https://www.googleapis.com/auth/admin.directory.group.member
5

Grant Drive label scopes (optional)

To view and manage Drive labels, grant the following scopes:
https://www.googleapis.com/auth/drive.labels
https://www.googleapis.com/auth/drive.labels.readonly
https://www.googleapis.com/auth/drive.admin.labels
https://www.googleapis.com/auth/drive.admin.labels.readonly

​
Connect Google Workspace to Oleria

1

Open the integration

Go to your Oleria workspace, select Integrations → select Google Drive.
2

Authenticate

Select Connect to complete the integration.Click connect to complete the integration.Provide your Super Admin credentials and complete the authentication process.Provide the super admin credential and complete the authentication process
3

Confirm the connection

You can find the newly integrated Google Admin and Google Drive instance in your Oleria workspace connected integrations.Oleria workspace Connected Integrations showing newly added Google Admin and Drive instances

​
Re-integrate Google Drive and Admin

1

Initiate re-integration

Go to the connected integrations page and click the re-integration button to begin.Oleria Connected Integrations page with re-integration button highlighted in red
2

Complete with service account

Select Update and use a service account with Super Admin privileges to complete the re-integration.Click on Update and use a service account with super admin privileges to complete the re-integration

​
Contact us

For questions about this integration, contact us at support@oleria.com.