Modify Security Parameters In Your Google Apps Account

This is for:

Developer System Administrator

In this article

Authorize your service account client ID
What’s next?

The Gmail for Work source will soon be deprecated. Starting September 2024, it won’t be available anymore.

If you have any questions, contact your Coveo representative.

To authorize Coveo to access your Google content, you must perform a Google Workspace (formerly G Suite) domain-wide delegation of authority after creating a Google Cloud Console project and service account.

Authorize your service account client ID

Access the Google Workspace Admin Console with a super administrator account. Super administrator privileges are required for domain-wide delegation, which you’ll configure later on.
In the main menu, select Apps > Google Workspace > Service status.
In the Services list, ensure that the status for Drive and Docs is set to On for everyone.
In the main menu, select Security > Access and data control > API controls.
In the Domain wide delegation pane, click Manage Domain Wide Delegation.
Click Add new.
In the Add a new client ID panel, configure your new API client.
1. Enter the Client ID associated with your project’s service account.
  
  Note
  
  You can get your project’s client ID from the project’s service account page of the Google Cloud Console.
2. In the OAuth scopes field, enter the following addresses, separating them with a comma.
  - https://www.googleapis.com/auth/docs
  - https://www.googleapis.com/auth/drive.readonly
  - https://www.googleapis.com/auth/userinfo.email
  - https://www.googleapis.com/auth/admin.directory.user.readonly
  - https://www.googleapis.com/auth/admin.directory.group.readonly
3. Click Authorize. The new client ID appears at the top of the API clients list.

What’s next?

In the Coveo Administration Console, add a Gmail for Work source.