Google Workspace - User Guide

Integrating with Google Workspace will allow Scytale to collect all user access information and their access privileges on Google Workspace. This will help to ensure that only authorized users have access to Google Workspace, which is one of the key criteria when testing logical access. Manually collecting this type of evidence can take some time, especially when you need to prove to the auditors that the user listings are complete and accurate.

Automating the collection of user listings and access privileges will streamline the sampling process for the audit and also provide more assurance over the accuracy and completeness of the evidence collected.

How to connect Google Workspace integration?

❗In order to integrate with Google Workspace, the user who integrates must be an admin in Google Workspace 

Step 1: Log in to the Scytale web app

• Click on the "Integrations" menu screen to the left.
• Click on the "Connect" button under the Google Workspace icon.
• Connection Name - is used to differentiate between your connections.
  For instance, if you manage multiple accounts or would like to connect multiple times to the integration. It's automatically titled (Connection 1,2,3 etc), but you can change it to a custom name to make it easier to identify.
  For example: scytale-production-env.
• Click on "Next".
• In the next step, you will be directed to Google to approve the authorization with Scytale, by clicking on "Connect".  
  • Note: you might have to sign in to your Google account first. 
    
    

Step 2: Authorize integrate with Google Workspace

• You will be redirected to Google's marketplace to allow Scytale access.

• Select the account you want to integrate.

• Read the conditions below and once you are satisfied click the "Allow" button.

Permissions:

❗In order to integrate with Google Workspace, the user who integrates must be an admin in Google Workspace. 

Click on the link below for more information on the permissions required for the integration: https://developers.google.com/admin-sdk/directory/v1/guides/authorizing

After clicking on the link, please refer to the following permissions below which will be used in the integration:

• Https://www.googleapis.com/auth/admin.directory.user.readonly

• Https://www.googleapis.com/auth/admin.directory.group.readonly

• Https://www.googleapis.com/auth/admin.directory.group.member.readonly

• Https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly

• Https://www.googleapis.com/auth/admin.reports.usage.readonly

   

💡Troubleshooting for Google Workspace in case of an error "Access blocked: Authorization Error" - Error 400

1. Log in to the Google Workspace Admin Console.
2. Go to Security > API Controls > Manage Google Services.
3. Find Google Workspace Admin and select Change Access.
4. Select Unrestricted: Any user-approved app can access a service to enable API Access

1. Log in to the Google Workspace Admin Console.
2. Go to Security > API Permissions.
3. Enable any disabled systems: