We’ve recently enhanced the security posture of our Google Workspace integration by tightening the permissions it requires.
The integration now uses read only directory access, allowing Thoropass to retrieve only the minimum user and organizational structure data needed for compliance evidence and monitoring. The integration does not have the ability to modify users, settings, or organizational units in your Google Workspace environment.
This update aligns the integration more closely with least-privilege access principles and common customer security expectations.
What this means for you
The Google Workspace integration operates with read only permissions only
No write or administrative changes can be made by Thoropass
Customers who previously disconnected or declined the integration can now safely reconnect
Do I need to take action?
If your Google Workspace integration is already connected, no action is required.
If you previously chose not to connect or disconnected the integration due to permission concerns, you can now reconnect at any time to apply the updated permissions.
If you have additional questions or would like help reconnecting the integration, please contact your CSM or Thoropass Support.
How do I reconnect?
In order to reconfigure your integration to have the updated scopes, you must first uninstall the old application from google workspace and then create a new connection in Thoropass. This will ensure you encounter the updated OAuth consent grant screen,