Google Workspace Admin integration setup

Note: Rewst supports multi-instance for Google Workspace Admin, but generally one instance of Google Workspace Admin is not multi-tenant. You may need a 1:1 relationship between an instance of this integration and a sub-tenant or a Rewst sub-org.

Currently, Rewst does not support domain-wide delegation. The integration will only have access to resources that the user who authorized the integration has access to. In particular, there will be no Mailbox Delegation or personal Drive access for other user accounts.

If you’re new to integrations in Rewst, read through our introductory integration documentation here.

As of May 2025, this integration now supports the following APIs using the generic request action:

Google Drive
Gmail
Group Settings

Rewst customers who set up this integration prior to the additional API support can take advantage of this development by enabling the corresponding API services in the Google Cloud Console, then re-authorizing their integration in Rewst. Set up steps for these API services can be found further down in this document, under the section titled Enable Google APIs.

Set up steps in Google

Create a new project

To complete these steps in Google Cloud Console, project Editor or Owner permissions are required.

Log in to your Google Cloud Console at https://console.cloud.google.com/ .
Navigate to Navigation Menu > IAM & Admin > Manage Resources.
Click the CREATE PROJECT.
Enter a descriptive name for your project that will help you identify it later.
If applicable, choose the organization that this project will belong to. You can also leave this as No organization if necessary.
Optionally, select a location for your project. This choice may affect resource availability and pricing.
Click CREATE.

Obtain client ID and secret

The user who is authorizing this integration in Rewst must have Super Admin access in Google Workspace Admin.

Choose the GCP project you just created from the project drop-down menu at the top of the page
Click APIs & Services in the left side menu.
Select Library.
Use the search bar within the API Library to find the Admin SDK API and select it from the results.
Click Enable.
Navigate back to the APIs & Services menu. Click OAuth consent screen.
Select the appropriate user type for your application. Choose Internal for this.
Enter the necessary information about your application into the relevant fields, including the App name, and User support email.
Click SAVE AND CONTINUE.
Click on the Scopes tab.
Click ADD OR REMOVE SCOPES. Select the specific scopes that your application requires access to.
Search for Admin SDK in the search box, and select all related scopes.
Click UPDATE.
Navigate to the Credentials tab within APIs & Services. Click CREATE CREDENTIALS and choose OAuth client ID from the drop-down selector.
Select the type of application you are building, such as Web application, Android, iOS, etc.
Enter a name for your ID in the Client ID field.
Enter the following URL under Authorized Redirect URIs:

https://engine.rewst.io/integrations/google_workspace_admin_sdk/callback

After creation, you will be presented with a pop-up window containing your client ID and client secret. Make sure to copy both of these.

Set up steps in Rewst

Navigate to Configuration > Integrations in the left side menu of the Rewst platform.
Search for Google Workspace Admin.
Click on the integration tile to launch set up.
Enter the API credentials copied from Google into the relevant fields:
1. Client ID
2. Client Secret
3. Email / User ID: this should be the one used to authenticate with the API
Click Save Configuration.

Final setup steps in Google

Add integraton as trusted app

Navigate to Security > API controls > App access control > Rewst in your Google console.
Click to expand the Access to Google data accordion menu.
Select Trusted under Status.
Check on the box Allowlist for exemption from API access blocks in context-aware access.

Set reauthentication policy for exemption

Navigate to Security > Google Cloud session control.
Click to expand the Google Cloud cloud session control accordion menu.
Select Require authentication.
Check on the box Exempt trusted apps.
Choose your method under the Re-authentication method menu.
Click Save.

Enable Google APIs

Enable Google Drive API

Select your Project from the drop-down selector.
Select APIs and Services from the left side menu.
Search for Google Drive API.
Click Enable.

Enable Gmail API

Select your Project from the drop-down selector.
Select APIs and Services from the left side menu.
Search for Gmail API.
Click Enable.

Enable Group Settings API

Select your Project from the drop-down selector.
Select APIs and Services from the left side menu.
Search for Google Drive API.
Click Enable.

Got an idea for a new Integration? Rewst is constantly adding new integrations to our integrations page. Submit your idea or upvote existing ideas here in our Canny feedback collector.

Actions and endpoints

For more on how actions work in Rewst, check out our introductory actions documentation here.