Google Workspace connector

This is a cloud connector.

The Google Workspace connector gathers data from Chrome OS devices, devices, mobile devices, and users using Google Workspace.

To retrieve the data, this connector uses Google’s Admin SDK API services. The following prerequisites are required:

  • A Google Workspace account and Cloud Identity account. By setting up these accounts, an organization resource instance will be automatically generated for this connector to retrieve data. For information on organizations, see Creating and managing organizations in the Google help.

  • A service account. For information on creating a service account, see Creating a service account in the Google Identity help. This account requires administrator access, domain-wide authority, and the following scopes to grant access to Google’s API services:

    https://www.googleapis.com/auth/admin.directory.user
    https://www.googleapis.com/auth/admin.directory.device.chromeos

    https://www.googleapis.com/auth/admin.directory.device.mobile

    https://www.googleapis.com/auth/cloud-identity.devices

  • For information on granting access to and managing the Google Workspace account to enable this connector to collect data, see Delegating domain-wide authority to the service account in the Google Identity help.

Chrome OS devices:

  • Device manufacturer and model

  • Location

  • Asset ID

  • Serial number

  • MAC address and IP address

  • OS name and version

  • Platform and firmware version

  • Device user type, org unit, and email address

  • Asset notes

  • Last sync and last enrollment timestamps

  • Last hardware scan date

  • Device status

  • MEID and Chrome OS ID

  • Total and available RAM

  • Total and available disk storage

  • Auto-update expiration

  • Boot mode

  • Support end date

  • TPM information, including family, firmware version, manufacturer, model, and spec level

  • If the device will auto-renew

Google Workspace devices:

  • Device ID

  • Asset and OS information

  • SIM card

  • System serial number

  • Device model and type

Google Workspace mobile devices:

  • Carried network
  • SIM card
  • Manufacturer
  • Device name and type
  • OS name and platform
  • Network hostname
  • Serial number
  • System information

Google Workspace users:

  • User ID, department, title, and type

  • Email

  • Full name

  • Employee ID

  • Phone number

  • Login information

  • User address

A Google Workspace connector has the following options:

  • Connector name: A name for the connector.
  • Connector server name: For cloud connectors, this server is the Cloud option on the Connector Servers page. If you already added the connector to the Cloud option, this field will be populated for you. Otherwise, select Cloud from the list.
  • Customer ID. The customer ID associated with your Google Workspace or Cloud Identity. For information on finding your Customer ID, see the Google Workspace Admin help.
  • Admin email and Private key. The credentials must be for a service account with administrator access and domain-wide authority.
  • Chrome device, device, mobile device, and user stale thresholds: To limit the amount of data that is gathered for Neurons, set a threshold for a specific number of days. The connector will not include records unless the device (or user) has checked in or otherwise changed during that time.
  • Repeats: How often the connector should gather data.
  • Start time: The time of day the connector should start running. To minimize the impact on your network and applications, we recommend that connectors generally run at night or on weekends.
  • Active: Whether the connector is active or not. While the connector is active, it runs according to the schedule you create. If you clear the check box, the connector is inactive and will not gather data until the check box is enabled again and the connector is saved.

For details on configuring or using connectors, see Setting up connectors.