Required: Enable the Google Admin SDK API
Before completing the integration, the Google Admin SDK API must be enabled for your Google Cloud project:
Open the Admin SDK API page in Google Cloud Console: https://console.cloud.google.com/marketplace/product/google/admin.googleapis.com
Click Enable.
Once enabled, Thoropass can use the Admin SDK and Reports APIs (subject to the scopes above) to read directory and usage data needed for automated evidence collection.
Required Scopes During Integration
To successfully integrate Google Workspace with Thoropass, the following OAuth scopes are required for Thoropass compliance automation capabilities:
Sign in and read basic user identity (openid, auth/userinfo.email, auth/userinfo.profile)
Allows Thoropass to authenticate the user and read basic profile and email information.
Read Google Drive files and labels (auth/drive.readonly, auth/drive.labels.readonly)
Allows Thoropass to read files and labels in Google Drive that the connected account can access.
Read directory user data (auth/admin.directory.user)
Allows Thoropass to read user objects and related directory attributes in your Google Workspace domain.
Read directory role configuration (auth/admin.directory.rolemanagement.readonly)
Allows Thoropass to read admin roles and role assignments in your Google Workspace directory.
Read directory user security settings (auth/admin.directory.user.security)
Allows Thoropass to read security-related attributes for users exposed via the Admin SDK.
Read usage and activity reports (auth/admin.reports.usage.readonly)
Allows Thoropass to read usage and activity reports from the Google Workspace Reports API.
Admin Permissions Required
Like with Microsoft 365, the user completing the setup should be an admin so they can grant all required scopes.
A Google Workspace super administrator (or an administrator with sufficient privileges) is required to complete the initial connection and OAuth flow in Thoropass because they can:
Enable and manage the Admin SDK and related APIs for your Workspace environment.
Approve the requested Google OAuth scopes on behalf of your organization.
Authorize Thoropass to access directory, Drive, and reports data for all relevant users and services.
Thoropass will leverage this connection to sync Google Workspace data, which will then populate your Thoropass monitors for continuous compliance monitoring.
Steps to Complete the Connection
Follow these steps within the Thoropass platform to integrate your Google Workspace account:
Log into the Thoropass app.
Select Settings → Integrations.
Click +Browse Integrations.
Scroll to Google Workspace and select it to proceed to connect to the integration.
Follow the wizard’s steps to sign in with an appropriate admin account, grant the requested scopes, and complete the connection.