Google Workspace (G Suite)

Overview

The Google Workspace (formerly G Suite) Adapter integrates Axonius with Google Workspace to collect visibility for users, devices, applications, configurations, and activities across the organization. By leveraging Google Workspace APIs and delegated administrative access, Axonius can inventory identity and SaaS assets, enrich security context, and support enforcement actions—while adhering to least-privilege access principles where applicable.

Use Cases the Adapter Solves

The Google Workspace adapter helps organizations:

  • Gain full visibility into users, devices, applications, and licenses in Google Workspace
  • Track user access, roles, permissions, and group memberships
  • Monitor OAuth applications, browser extensions, and SaaS integrations
  • Audit security-relevant activities using Google Workspace audit logs
  • Identify misconfigurations, over-privileged users, and unused licenses
  • Enrich identity and SaaS posture data for risk analysis and compliance
  • Enable enforcement actions such as suspending users, changing OUs, managing roles, or removing extensions

Types of Assets Fetched

Devices | Users | Groups | Roles | Accounts & Tenants | Permissions | Rules | Software | SaaS Applications | Application Settings | Licenses | Application Extensions | Admin Managed Extensions | User Initiated Extensions | Application Keys | Activities | Application Resources

Before You Begin

Authentication Methods

The Google Workspace (G Suite) adapter supports the following authentication method:

  • Service Account and Enable Domain-Wide Delegation

Required Permissions

These read privileges and scopes are required to fetch Cyber Assets into Axonius.

Required Privileges

  • Users
  • Organizational Units
  • Devices

Required Scopes

  • admin.directory.user.readonly
  • admin.directory.orgunit.readonly
  • admin.directory.device.mobile.readonly
  • admin.directory.device.chromeos.readonly

Optional Privileges

  • Chrome Management
  • Groups
  • Reports

Optional Scopes

  • admin.directory.device.chromebrowsers.readonly
  • admin.directory.group.readonly
  • cloud-identity.devices.readonly
  • admin.reports.usage.readonly
  • apps.groups.settings

More Information About This Adapter

Deploying the Google Workspace (G Suite) Adapter

Google Workspace Advanced Permissions

Google Workspace Advanced Settings

Google Workspace Related Enforcement Actions