Google Admin
Version: 1.2
Updated: Sep 21, 2023
Google Admin relies on the Admin SDK API, which empowers administrators to efficiently manage Google Workspace organizations on a large scale.
Actions​
- Get Activity Report (Enrichment) - Retrieves a list of activities for a specific customer's account and application such as the Admin console application or the Google Drive application.
Google Admin Configuration​
To create a Service Account in Google Workspace and generate the JSON file needed to configure the Google Admin integration, follow these steps:
- Log in to the Google Cloud portal.
- Select a Google Cloud project (or create a new one).
- Go to the API&Services > Credentials page.
- Click CREATE CREDENTIALS and select Service Account.
- Enter a Service account name to display in the Google Cloud console. The Google Cloud console generates a service account ID based on this name.
- Optional: Enter a description of the service account.
- Skip two optional grant permissions steps and click Done to complete the service account creation.
- Click on the generated service account to open the details.
- Under the KEYS tab, Click ADD KEY and choose Create new key.
- Click on CREATE (make sure JSON is selected).
- The JSON file is downloaded. Make sure you save it in a safe place
- Enable the Admin SDK API for the project at https://console.cloud.google.com/flows/enableapi?apiid=admin.googleapis.com.
- Go to https://admin.google.com/ac/owl/domainwidedelegation open the Domain-Wide delegation settings in the Google Admin portal.
- Click on Add new.
- In the Client ID field, provide the client ID from the JSON file.
- In the OAuth scopes (comma-delimited) field, provide the following scopes: 'https://www.googleapis.com/auth/admin.reports.audit.readonly'
- Click Authorize.
Google Admin in Automation Service and Cloud SOAR​
- Label. The desired name for the resource.
- User Service Account JSON. Provide the content of the JSON file generated in the previous steps. Open the file and copy-paste the whole content in the field.
- Admin User Email. The e-mail address of an admin user.
Change Log​
- September 19, 2023 (v1.1) - First upload
- September 21, 2023 (v1.2)
- changed docker to gmail
- implemented error handling for User Service Account JSON