Google Workspace (G Suite)
Overview
The Google Workspace (formerly G Suite) Adapter integrates Axonius with Google Workspace to collect visibility for users, devices, applications, configurations, and activities across the organization. By leveraging Google Workspace APIs and delegated administrative access, Axonius can inventory identity and SaaS assets, enrich security context, and support enforcement actions—while adhering to least-privilege access principles where applicable.
Use Cases the Adapter Solves
The Google Workspace adapter helps organizations:
- Gain full visibility into users, devices, applications, and licenses in Google Workspace
- Track user access, roles, permissions, and group memberships
- Monitor OAuth applications, browser extensions, and SaaS integrations
- Audit security-relevant activities using Google Workspace audit logs
- Identify misconfigurations, over-privileged users, and unused licenses
- Enrich identity and SaaS posture data for risk analysis and compliance
- Enable enforcement actions such as suspending users, changing OUs, managing roles, or removing extensions
Types of Assets Fetched
Devices |
Users |
Groups |
Roles |
Accounts & Tenants |
Permissions |
Rules |
Software |
SaaS Applications |
Application Settings |
Licenses |
Application Extensions |
Admin Managed Extensions |
User Initiated Extensions |
Application Keys |
Activities |
Application Resources
Before You Begin
Authentication Methods
The Google Workspace (G Suite) adapter supports the following authentication method:
- Service Account and Enable Domain-Wide Delegation
Required Permissions
These read privileges and scopes are required to fetch Cyber Assets into Axonius.
Required Privileges
- Users
- Organizational Units
- Devices
Required Scopes
admin.directory.user.readonlyadmin.directory.orgunit.readonlyadmin.directory.device.mobile.readonlyadmin.directory.device.chromeos.readonly
Optional Privileges
- Chrome Management
- Groups
- Reports
Optional Scopes
admin.directory.device.chromebrowsers.readonlyadmin.directory.group.readonlycloud-identity.devices.readonlyadmin.reports.usage.readonlyapps.groups.settings
More Information About This Adapter
Deploying the Google Workspace (G Suite) Adapter
Google Workspace Advanced Permissions
Updated 8 days ago
