Google Workspace - Change Browser OU
  • 15 Jan 2025
  • 3 Minutes to read
  • Dark
    Light
  • PDF

Google Workspace - Change Browser OU

  • Dark
    Light
  • PDF

Article summary

Google Workspace - Change Browser OU moves a web browser into an OU in Google Workspace.

See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

Note:

Required Fields

These fields must be configured to run the Enforcement Set.

  • Action name - The name of this Enforcement Action. The system sets a default name. You can change the name.
  • Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.

  • Use stored credentials from Google Workspace adapter - Select this option to use credentials from the adapter connection. By default, the first connection is selected.

    • When you select this option, the Select Adapter Connection drop-down becomes available. Select the adapter connection to use for this Enforcement Action.
    Note:

    To use this option, you must successfully configure a Google Workspace adapter connection.

  • ORG Unit Path - The path to the OU into which you want to move the web browser. The format must contain all levels of the OU hierarchy separated by a "/" character starting with the root level (which is represented by the "/" character).
    If you need to move the users to the root OU, enter only the / character in this field.
    GoogleOUs

  • Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.

Additional Fields

These fields are optional.

  • Gateway Name - Select the Gateway through which to connect to perform the action.

Connection and Credentials

When Use stored credentials from the adapter is toggled off, some of the connection fields below are required to create the connection, while other fields are optional.

  • Email of an admin account to impersonate - The email of your Google Workspace admin.
  • JSON Key pair for the service account - Upload the JSON file you have created for your service account. For more details, refer to Google Workspace adapter.
  • Get OAuth Apps - Select this option to fetch the OAuth applications used by each user.
  • Fetch Cloud Identity Devices - Select this option to fetch Cloud Identity devices.
  • Fetch Chrome Browsers - Select this option to fetch Chrome browsers information.
  • Fetch Calendars - Select this option to fetch users' calendars.
  • User Name and Password - The credentials for a user account that has the Required Permissions to fetch assets.
  • Login URL - The hostname or IP address of the Google server.
  • 2FA Secret Key - The secret generated in Google Workspace for setting up 2-factor authentication for the Google Workspace user created for collecting SaaS Management data.
  • SSO Provider - If your organization uses Google Workspace for SSO, you can select this check box. For more information, see Connecting your SSO Solution Provider Adapter .
  • Proxy address - Connect the adapter to a proxy instead of directly connecting it to the domain.
  • Proxy port - The port for the proxy server.
  • Proxy username - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in Proxy address.
  • Proxy password - The password to use when connecting to the server using the Proxy.
  • Gateway Name - Select the Gateway through which to connect to perform the action.

APIs

Axonius uses the Google Workspace - Manage user accounts API.

Required Permissions

The stored credentials, or those provided in Connection and Credentials, must have the following permission(s) to perform this Enforcement Action:

  • The Get OAuth Apps option requires addition of the following scope to your Google Workspace (G Suite) admin account: https://www.googleapis.com/auth/admin.directory.user.security

  • The Fetch Cloud Identity Devices option requires the following:

    • Addition of the following scope to your Google Workspace (G Suite) admin account: https://www.googleapis.com/auth/cloud-identity.devices.readonly
    • Enabling the Cloud Identity API.
  • The Fetch Chrome Browsers option requires an additional privilege to your Google Workspace (G Suite) admin account: https://www.googleapis.com/auth/admin.directory.device.chromebrowsers.readonly

  • The Fetch Calendars option requires the following:

    • An additional privilege to your Google Workspace (G Suite) admin account: https://www.googleapis.com/auth/calendar

    • Enabling the Cloud Identity API.

For more information on adding a privilege/scope to your Google Workspace (G Suite) admin account, refer to Configure the OAuth Scopes.
For more information on enabling the Cloud Identity API, refer to Enable Cloud API.


For more details about other Enforcement Actions available, see Action Library.


Was this article helpful?