Google Drive

Setup Domain Wide Delegation

1. In Google Workspace Admin, go to Security > Access and Data Control > API Controls > Domain Wide Delegation (manage domain wide delegation) > Add New

2. Enter the unique service account ID provided by Teleskope

3. Under Scopes, please input the following scopes separated by a comma. We need these scopes to be able to scan personal and shared drives as well as when the user last viewed those resources:

   1. https://www.googleapis.com/auth/drive

   2. https://www.googleapis.com/auth/admin.directory.user.readonly

   3. https://www.googleapis.com/auth/admin.reports.audit.readonly

   4. https://www.googleapis.com/auth/admin.directory.group.readonly

   5. https://www.googleapis.com/auth/drive.labels.readonly

   6. https://www.googleapis.com/auth/drive.admin.labels.readonly

Create Teleskope Super Admin User

1. In Google Workspace Admin, go to Directory > Users > Add new user and create a user for the Teleskope service account (e.g. [email protected])

2. Ensure that the service account user is licensed (cloud identity is sufficient).

3. Go to Account > Admin roles, and assign the Teleskope service account to the Super Admin role.

4. Share the email of the Super Admin user created above with Teleskope.