# Google Workspace

The Google Workspace integration connects data from your Google Workspace to your Sola workspace, making it easy to search and find answers to your specific use cases.

{% embed url="<https://www.youtube.com/watch?v=GHNEochvVyU>" %}

## Overview

The Google Workspace gives you visibility into drive and file-sharing activity across Google Workspace, enabling you to identify exposure risks and maintain compliance across your organization.

With the Google Workspace integration, you can:

* Detect publicly or externally shared files.
* Monitor file sharing permissions to prevent unauthorized access.
* Investigate access levels granted to third parties.
* Maintain compliance with internal and external data-sharing policies.

{% hint style="warning" %}
**Your data can only be retrieved, never modified.**

Once connected, your data is securely stored, and access is restricted to retrieving configurations and meta-data only. Authentication methods ensure secure delegation of permissions while maintaining data integrity.
{% endhint %}

## Set up Google Workspace data source integration with Sola

{% columns %}
{% column width="66.66666666666666%" %}
Go to ***Integrations*** > [***Data Sources***](https://app.sola.security/integrations/data-sources) > click ***New data source*** > select ***Google Workspace***.

*The Sola wizard will take you through the steps.*
{% endcolumn %}

{% column width="33.33333333333334%" %} <a href="https://app.sola.security/integrations/data-sources?integration=googleworkspace" class="button primary">Set up Google Workspace -></a>

{% endcolumn %}
{% endcolumns %}

### Connect Google Workspace to Sola

This integration links a **Google Cloud Platform (GCP) service accoun**t with a Google Workspace user.

It allows Sola to **impersonate workspace users** and securely sync their data without needing individual credentials.

{% tabs %}
{% tab title="Google Cloud Platform (GCP) Prerequisites" %}

* **GCP project with owner permissions** - Use an existing project or [create a new](https://developers.google.com/workspace/guides/create-project) one for this integration.

{% hint style="info" %}
The **setup script**, provided in the Sola wizard, creates the relevant resources needed for accessing Google Workspace data:

1. **Enabling APIs** - Enables the following Google Workspace APIs: `admin`, `drive`, `gmail`, `people`, `drivelabels`, `cloudidentity`
2. **Creating service account** - Creates a service account in the project for Sola
3. **Creating service account key** - Creates a service account key
   {% endhint %}
   {% endtab %}

{% tab title="Google Workspace Prerequisites" %}

* **Google Workspace** [**business plan**](https://workspace.google.com/pricing.html) (starter or above).
* **Super admin user** - Required for the initial integration setup, and will not be used by Sola.
  {% endtab %}
  {% endtabs %}

#### Troubleshooting Google Workspace setup script common errors <a href="#troubleshooting-azure-setup-script-common-errors" id="troubleshooting-azure-setup-script-common-errors"></a>

| Error Code           | Description                                                                           | Resolution                                                                                                     |
| -------------------- | ------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------- |
| MISSING\_PERMISSIONS | Your GCP account lacks a required IAM permission on the project.                      | Ensure your account has the **Service Account Admin** and **Service Usage Admin** roles and re-run the script. |
| RESOURCE\_NOT\_FOUND | A required GCP resource does not exist or is not visible to you.                      | Verify the project ID in the GCP Console and re-run the script.                                                |
| RESOURCE\_EXISTS     | A service account with the requested name already exists.                             | Re-run the script (a new random name will be generated).                                                       |
| QUOTA\_EXCEEDED      | A GCP quota limit has been reached (e.g. max service accounts or keys per project).   | Delete unused resources or request a quota increase in the GCP Console, then re-run.                           |
| UNAUTHENTICATED      | The gcloud CLI is not authenticated.                                                  | Run `gcloud auth login` and try again.                                                                         |
| PROPAGATION\_TIMEOUT | The service account did not propagate within the expected time window after creation. | Wait a few minutes and try again.                                                                              |
| UNEXPECTED\_ERROR    | An unexpected error occurred.                                                         | Try again. Contact Sola support if the issue persists.                                                         |

## Explore the app gallery for Google Workspace apps

![](https://633303660-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FMkiDTkdEK7CdyQX8KZZH%2Fuploads%2FXMRpFbpx9LSRblEJ68Mo%2FApp-Gallery-icon.svg?alt=media\&token=a7a5e8e8-f1fc-4dab-b430-5e5c0ad78e66) Get started with [Google Workspace-focused security apps](https://sola.security/app-gallery/?search=google-workspace), built by our expert team.

<figure><img src="https://633303660-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FMkiDTkdEK7CdyQX8KZZH%2Fuploads%2Fg3tzrtaRpCa9pzMnEyqq%2Fgoogle_workspace.svg?alt=media&#x26;token=d49364a3-4b53-4864-8b41-80b373549a7c" alt="Connect Sola and Google Workspace"><figcaption></figcaption></figure>