Google Workspace

Setting Up

For Turngate to access the audit logs, you must authorize us to query the Audit API using Google's Admin SDK. You must do this with a user account that has authorization to grant these permissions on your Google Workspaces account. If you’re not an admin for your Google instance, invite your admin on the User Administration page.

You can review or revoke this access at any time within your Google Account Security & Privacy Settings

License required

One of the following is required

• Cloud Identity

• Cloud Identity Premium

• Any Google Workspace Licenses

Setting up the Google Data Source in the Turngate App

Google setup uses OAuth 2.0 for authentication. To set up, you'll only need to click install from within the Turngate app and proceed through the Authorization prompts to authorize Turngate to access your audit logs. It is important to check the box for "Select All" when Google prompts you to select what Turngate can access.

Scopes Requested

• See your profile info

  • See your primary Google Account email address

  • See your personal info, including any personal info you've made publicly available

• See info about users on your domain

  • See profile info about your domain users, such as their:

    • Names

    • Email

    • Addresses

    • Phone numbers

    • Metadata, including user's role, manager info, and last login time

• View usage reports for your G Suite domain

  • View reports of how users are using Google apps within your G Suite domain (e.g., number of users and quantity of emails sent by each user)

• View audit reports for your G Suite domain

  • View audit reports of admin and user activity in your G Suite domain (e.g., password change events and document view events)

• View delegated admin roles for your domain

  • View delegated admin roles that are currently defined for your domain

Other Resources

Event Types — Activity Audit Events