/
Google Workspace

Google Workspace

Owned by Ryan Seymour
Last updated: Apr 15, 2025

You can find this module at the Company level only.

Setting up Google Workspace scanning requires configuration in the Google Workspace Console, the Admin portal, and the ConnectSecure integration.

Google Workspace - Table of Contents

Watch The Video.png

Visit our YouTube Channel for more video content: https://www.youtube.com/@connectsecure

Google Workspace - Overview

Access the Google Workspace from the company-level module, Cloud Assessments.

image-20250320-131147.png

Google Workspace Setup

  • Login to your Google Workspace account using an account with super admin permissions.

    • https://cloud.google.com

  • Tap on the Console option

image-20250415-141740.png

  • Navigate to IAM & Admin and select Create a Project.

image-20250320-131745.png

  • Create a new project. Enter a project name. By default, the Organization and Location should auto-populate. Your project name is your choice, you can use something like ConnectSecure.

image-20250415-142031.png

  • Once the new project is created, navigate to API & Services > Library from the left navigation menus.

image-20250415-142352.png
image-20250415-142330.png

  • Use the search box and query for Google Workspace Events API and Admin SDK API. You will need to tap into each of these selections and tap the Enable button.

image-20250415-142640.png
image-20250415-142706.png
image-20250415-142731.png

  • Repeat these steps for the Admin SDK API

image-20250415-142836.png

  • Next, we will create service accounts for the project. Tap on the left menu and choose IAM. If you do not see this option, you can search for it at the top, as shown below.

image-20250415-143832.png
image-20250415-143904.png

  • Near the top, top on the + Create service account button.

image-20250415-143955.png

  • Enter the service account details and click the Create and continue button. You only need to set the name up, which is a name of your choice. The service account ID will fill itself in based on your service account name.

image-20250415-144207.png

  • Assign the Owner role to the project service account.

image-20250415-144340.png

  • Tap on Continue.

image-20250415-144409.png

  • The following section is optional, simply tap on Done.

image-20250415-144517.png

  • Select the created Service Account and navigate to Keys, where you will need to Add Key.

image-20250415-144616.png
image-20250415-144705.png

  • Use the Add key > Create new key option menu.

image-20250415-144754.png

  • Select JSON as the Key Type and click on Create.

  • This will download the credentials JSON. Keep a copy of the JSON. This is required in the ConnectSecure portal for integration setup.

image-20250320-133100.png

  • Once the credential.json is downloaded, go back to the Service Account, and you can see the OAuth2 Client ID; please copy this for the next steps.

image-20250415-145001.png

  • Browse to admin.google.com

  • Navigate to Security > Access and data Control > API Controls

  • Tap on Domain Wide Delegations.

image-20250415-145212.png

  • Add New Client ID.

image-20250415-145246.png

  • Copy/paste in the OAuth2 Client ID from the steps above.

image-20250415-145449.png

  • We must assign the 5 permissions scopes below to this new Client ID. You can add them with a single copy/paste using the box below. The individual URL’s are also available below.

https://www.googleapis.com/auth/admin.reports.audit.readonly, https://www.googleapis.com/auth/admin.directory.user.security, https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.rolemanagement

https://www.googleapis.com/auth/admin.reports.audit.readonly

https://www.googleapis.com/auth/admin.directory.user.security

https://www.googleapis.com/auth/admin.directory.user.readonly

https://www.googleapis.com/auth/admin.directory.user

https://www.googleapis.com/auth/admin.directory.rolemanagement

image-20250320-133515.png

Proceed to the ConnectSecure Portal to continue setup

ConnectSecure Setup

Login to the ConnectSecure portal and navigate to Global > Settings > Integrations > Google Workspace.

image-20250320-133807.png

Credentials

  • Enter a name to the integration, use the super credential username, and upload the credentials.json downloaded from the Google Workspace account from the steps above.

image-20250320-133917.png

  • Once the credentials are saved, please finish the company mapping, navigate to Company>>Cloud Assessment module>>Google Workspace, and click SYNC.

image-20250320-133954.png


Google Workspace - Action Toolbar Overview

image-20250320-131302.png

Google Workspace - Action Toolbar Details

Jobs

Tap to view the Google Workspace-related jobs data.

image-20250318-141827.png

Alerts

Tap to view the timeline style of System Events with filtering options.

image-20240426-160844.png

Info

Tap to view the Getting Started info; see the link below for additional information.

https://cybercns.atlassian.net/wiki/x/MIDKfw

Need Support?

You can contact our support team by emailing support@connectsecure.com or visiting our Partner Portal, where you can create, view, and manage your tickets.

https://cybercns.freshdesk.com/en/support/login

image-20240206-144508.png