Overview

These instructions are used for onboarding Google Workspace accounts as Infrastructure Connections within Dasera. Such connections permit Dasera to discover, connect, and scan Google Drive files. Follow the steps below for each Google Drive Account you wish to onboard to Dasera. 

Create Service Account in Google Cloud

1. Login to Google Cloud Console. 
2. Within the relevant project, click APIs & Services. Google Drive API and Admin SDK API should be enabled for the relevant project.
3. Click on Credentials from the left nav.
4. Click Manage service accounts → Create Service Account
5. Input a Service account name. Service account ID will automatically populate. 
6. Click Create and Continue. Optional service account access steps are not necessary.
7. Click Done to create the service account.
8. From the Service Accounts screen, click on the email for the service account you just created, just under the Email column header.
9. Click KEYS, then ADD KEY → Create new key from the drop-down.
10.  Make sure JSON is selected for Key type, then click Create.
11. The private key will save to your computer as a JSON file. This file will be used when making the infrastructure connection in Dasera.
12. Navigate to Details tab and open Advanced settings.
13. Copy Client ID value to clipboard.

Grant Permissions

1. In a separate tab on your browser, navigate to Google admin console. 
2. Click Security → API Controls → Domain wide delegation → Manage domain wide delegation.
3. Click Add new next to API clients. 
4. Paste in the Client ID copied in Step 13 in the section above.
5. Input https://www.googleapis.com/auth/admin.directory.user.readonly and https://www.googleapis.com/auth/drive.readonly for OAuth scopes.
6. Click Authorize.

Create Dasera Infrastructure Connection

1. Log into Dasera
2. Navigate to the Administration > Infrastructure Connections > Google Workspace tab
3. Click the Add Infrastructure button.
4. Click Next. 
5. Disable auto-discovery to Apps (only if desired). If enabled, Dasera will auto-detect Google Drive data stores to connect with.
6. Click Next.
7. Enter the following values:

Field	Value
Workspace Name	Any value (this is used to identify your infrastructure connection within the Dasera UI).
Customer ID	Obtain value from Google Admin console within Account Settings.
Admin User Email	Obtain value from Google Admin console, pictured above below Primary admin.

5. Click Next.
6. Review Summary Info.
7. Upload Service Account JSON Key File obtained in Step 11 of Create Service Account in Google Cloud section above.
8. Hit Save to complete the Infrastructure connection.

Next Steps

• Repeat the above steps if you have additional Google Workspace Accounts to onboard in Dasera.
• Review discovered Google Drive sites from the Data Store Inventory and connect them to start scanning.