# Google Drive

## Setup Domain Wide Delegation

1. In [Google Workspace Admin](https://admin.google.com), go to Security > Access and Data Control > API Controls > Domain Wide Delegation (manage domain wide delegation) > Add New
2. Enter the unique service account ID provided by Teleskope
3. Under Scopes, please input the following scopes separated by a comma. We need these scopes to be able to scan personal and shared drives as well as when the user last viewed those resources:
   1. <https://www.googleapis.com/auth/drive>
   2. <https://www.googleapis.com/auth/admin.directory.user.readonly>
   3. <https://www.googleapis.com/auth/admin.reports.audit.readonly>
   4. <https://www.googleapis.com/auth/admin.directory.group.readonly>
   5. <https://www.googleapis.com/auth/drive.labels.readonly>
   6. <https://www.googleapis.com/auth/drive.admin.labels.readonly>

## Create Teleskope Super Admin User

1. In Google Workspace Admin, go to Directory > Users > Add new user and create a user for the Teleskope service account (e.g. <teleskope@company.com>)
2. Ensure that the service account user is licensed (cloud identity is sufficient).
3. Go to Account > Admin roles, and assign the Teleskope service account to the Super Admin role.
4. Share the email of the Super Admin user created above with Teleskope.