🎯 Getting Started 📚 Documentation 📦 Prebuilt Automations 📢 Updates

Google Workspace Admin integration setup

PreviousGoogle Enterprise actions and endpoints NextNerdio

Last updated 9 days ago

Was this helpful?

Google Workspace Admin integration setup

Note: Rewst supports multi-instance for Google Workspace Admin, but generally one instance of Google Workspace Admin is not multi-tenant. You may need a 1:1 relationship between an instance of this integration and a sub-tenant or a Rewst sub-org.

Set up steps in Google

Create a new project

To complete these steps in Google Cloud Console, project Editor or Owner permissions are required.

Log in to your Google Cloud Console at .
Navigate to Navigation Menu > IAM & Admin > Manage Resources.
Click the CREATE PROJECT.
Enter a descriptive name for your project that will help you identify it later.
If applicable, choose the organization that this project will belong to. You can also leave this as No organization if necessary.
Optionally, select a location for your project. This choice may affect resource availability and pricing.
Click CREATE.

Obtain client ID and secret

The user who is authorizing this integration in Rewst must have Super Admin access in Google Workspace Admin.

Choose the GCP project you just created from the project drop-down menu at the top of the page
Click APIs & Services in the left side menu.
Select Library.
Use the search bar within the API Library to find the Admin SDK API and select it from the results.
Click Enable.
Navigate back to the APIs & Services menu. Click OAuth consent screen.
Select the appropriate user type for your application. Choose Internal for this.
Enter the necessary information about your application into the relevant fields, including the App name, and User support email.
Click SAVE AND CONTINUE.
Click on the Scopes tab.
Click ADD OR REMOVE SCOPES. Select the specific scopes that your application requires access to.
Search for Admin SDK in the search box, and select all related scopes.
Click UPDATE.
Navigate to the Credentials tab within APIs & Services. Click CREATE CREDENTIALS and choose OAuth client ID from the drop-down selector.
Select the type of application you are building, such as Web application, Android, iOS, etc.
Enter a name for your ID in the Client ID field.
Enter the following URL under Authorized Redirect URIs:

After creation, you will be presented with a pop-up window containing your client ID and client secret. Make sure to copy both of these.

Set up steps in Rewst

Navigate to Configuration > Integrations in the left side menu of the Rewst platform.
Click on the integration tile to launch set up.
Enter the API credentials copied from Google into the relevant fields:
1. Client ID
2. Client Secret
3. Email / User ID: this should be the one used to authenticate with the API
Click Save Configuration.

Final setup steps in Google

Add integraton as trusted app

Navigate to Security > API controls > App access control > Rewst in your Google console.
Click to expand the Access to Google data accordion menu.
Select Trusted under Status.
Check on the box Allowlist for exemption from API access blocks in context-aware access.

Set reauthentication policy for exemption

Navigate to Security > Google Cloud session control.
Click to expand the Google Cloud cloud session control accordion menu.
Select Require authentication.
Check on the box Exempt trusted apps.
Choose your method under the Re-authentication method menu.
Click Save.

Actions and endpoints