---
title: Index handpicked shared drives only
slug: nceg8428
canonical_url: https://docs.coveo.com/en/nceg8428/
collection: index-content
source_format: adoc
---
# Index handpicked shared drives only
Basic configurations for a **Google Drive** source allow you to index [only _Shared drives_ content for a specified set of existing users](https://docs.coveo.com/en/1531#index-content-of-shared-drives).
However, determining the set of users you need to target for indexing the desired shared drives can be challenging.
The targeted users' shared drives may also change over time and this can lead to unwanted changes to the indexed content.

This article details a scenario where the goal is to index only a handpicked set of shared drives.
The [setup procedure](#procedure) involves the creation of a dedicated user account, which is then granted access to this specific set of shared drives.

## Prerequisites

Ensure you have a Google account with administrator credentials.
These credentials allow your Coveo organization to read your Google account using OAuth 2.0, a protocol that authorizes access without giving your password.

## Procedure

. [Add a Google Drive source](https://docs.coveo.com/en/1531#Add).

. [Create a Google Cloud Console project](https://docs.coveo.com/en/3365/).

. [Authorize Coveo to access your Google content](https://docs.coveo.com/en/3369/).

. Create a user account to be used as the [crawling account](https://docs.coveo.com/en/2122/) for your **Google Drive** source.
The drives you'll share with this user are the ones that will be indexed.

.. Access the [Google Workspace Admin Console](http://admin.google.com/) with a super administrator account.

.. In the main menu, select [**Directory** > **Users**](https://admin.google.com/ac/users).

.. Click **Add new user**.

![Add a new user | Coveo](https://docs.coveo.com/en/assets/images/index-content/add-user.png)

.. Fill in the **User information** form, and then click **Add new user**.

. Create a user group, and add the user as the sole member of the group.

.. In the main menu, select [**Directory** > **Groups**](https://admin.google.com/ac/groups).

.. Click **Create group**.

.. Create the group and add the user you created earlier.

![Add the user to the new group | Coveo](https://docs.coveo.com/en/assets/images/index-content/add-user-to-group.png)

. Publish a new internal app.

.. Log into the [Google Cloud Console](https://console.cloud.google.com) using a Google Account with administrator credentials.

.. In the header dropdown menu, select your project.

.. Click **APIs & Services**.

.. In the menu, select [**OAuth consent screen**](https://console.cloud.google.com/apis/credentials/consent).

![OAuth consent screen | Coveo](https://docs.coveo.com/en/assets/images/index-content/oauth-consent-screen.png)

.. In the **OAuth consent screen**, select the **Internal** user type, and then click **Create**.
You don't need to create new OAuth credentials or to publish them for verification since you're publishing an internal app.
However, if you still want to do so, you may want to see [Configure OAuth](https://developers.google.com/workspace/marketplace/configure-oauth-consent-screen) for help with this section.

.. Configure your app in the Google Workspace Marketplace SDK.

> **Tip**
>
> See [Configure your app in the Google Workspace Marketplace SDK](https://developers.google.com/workspace/marketplace/enable-configure-sdk) for help with this section.

... Access the [**Google Workspace Marketplace SDK**](https://console.cloud.google.com/apis/library/appsmarket-component.googleapis.com) page.

![Google Workspace Marketplace SDK | Coveo](https://docs.coveo.com/en/assets/images/index-content/google-workspace-marketplace-sdk.png)

... Click **Enable**.

... In the [**App Configuration**](https://console.cloud.google.com/apis/api/appsmarket-component.googleapis.com/googleapps_sdk) tab, set the **App Visibility** to **Private**.

... Set the **Installation Settings** to **Admin Only Install**.

... Under **App Integration**, select **Web App**.

... Under **Universal Nav Url**, enter any safe site.
This URL doesn't matter.

... Under **OAuth Scopes**, enter the following:

```
https://www.googleapis.com/auth/userinfo.email
```

```
https://www.googleapis.com/auth/userinfo.profile
```

```
https://www.googleapis.com/auth/admin.directory.user.readonly
```

```
https://www.googleapis.com/auth/admin.directory.group.readonly
```

```
https://www.googleapis.com/auth/drive.readonly
```

.. Create a store listing.

> **Tip**
>
> See [Create a store listing](https://developers.google.com/workspace/marketplace/create-listing) for help with this section.

... Select the [**Store Listing**](https://console.cloud.google.com/apis/api/appsmarket-component.googleapis.com/googleapps_sdk_publish) tab.

![Google Workspace Marketplace SDK Store Listing tab | Coveo](https://docs.coveo.com/en/assets/images/index-content/store-listing-tab.png)

... Fill in all required fields.
The URLs, email addresses, and images don't matter, as long as they exist.

... Once you've created the store listing, copy the **App Url**.
You'll need it later on.

. Create a Google Workspace Marketplace-compatible OAuth Client for the [service account](https://docs.coveo.com/en/3365#create-a-service-account) you created.

.. Log into the [Google Cloud Console](https://console.cloud.google.com) using a Google account with administrator credentials.

.. Access the [**Service Accounts**](https://console.cloud.google.com/projectselector2/iam-admin/serviceaccounts) page.

.. Select the project the service account is associated with.

.. Click the service account email.

.. On the **Details** tab, expand the **Advanced settings** section.

.. Click **Create Google Workspace Marketplace-compatible OAuth Client**.

![Create the Google Workspace Marketplace-compatible OAuth Client | Coveo](https://docs.coveo.com/en/assets/images/index-content/create-google-workspace-oauth-client.png)

. Install the app.

.. Access the app URL using a super admin account.

.. While installing the app, under **Install the app automatically for the following users**, select only the group you created earlier.
This ensures that the Coveo source can only impersonate the dedicated user account you created.

. Configure your **Google Drive** source to use the dedicated user account you created.

.. On the [**Sources**](https://platform.cloud.coveo.com/admin/#/orgid/content/sources/) ([platform-ca](https://platform-ca.cloud.coveo.com/admin/#/orgid/content/sources/) | [platform-eu](https://platform-eu.cloud.coveo.com/admin/#/orgid/content/sources/) | [platform-au](https://platform-au.cloud.coveo.com/admin/#/orgid/content/sources/)) page of the Coveo Administration Console, click your **Google Drive** source, and then click **Edit** in the Action bar.

.. Under **Content**, select **Specific users**, and then enter your dedicated user account email address.

.. Select **Index shared drives**, and then click **Save**.

.. On the [**Sources**](https://platform.cloud.coveo.com/admin/#/orgid/content/sources/) ([platform-ca](https://platform-ca.cloud.coveo.com/admin/#/orgid/content/sources/) | [platform-eu](https://platform-eu.cloud.coveo.com/admin/#/orgid/content/sources/) | [platform-au](https://platform-au.cloud.coveo.com/admin/#/orgid/content/sources/)) page, click your **Google Drive** source, and then click **More** > **Edit configuration with JSON**.

.. In the **Edit configuration with JSON** panel, set the [`ForceIndexSharedDrivesNotManagedByUser`](https://docs.coveo.com/en/o73a8409#forceindexshareddrivesnotmanagedbyuser-boolean) parameter value to `true`.
Then, click **Save**.

. Share the desired shared drives with your dedicated user account.

.. Access the [Google Workspace Admin Console](http://admin.google.com/) with a super administrator account.

.. In the main menu, select **Apps** > **Google Workspace** > **Drive and Docs**.

.. Click **Manage shared drives**.

.. Hover over a shared drive you want to give your dedicated user account access to, and click **Manage members**.

![Manage members | Coveo](https://docs.coveo.com/en/assets/images/index-content/manage-members.png)

.. In the **Manage members** panel, select the dedicated user account.

.. Choose the access level for this user.
To index comments, select **Commenter**.
Otherwise, select **Viewer**.

.. Click **Send**.

.. Repeat the process for each shared drive you want to index.

. [Finish configuring](https://docs.coveo.com/en/1531#content-to-index-subtab) your source.