# Google Workspace data sources
Google Workspace data sources allow Workato Go to search content from Gmail, Google Calendar, and Google Drive.
# Prerequisites
You must complete the following tasks before you add a Google Workspace data source to Workato Go:
- Enable APIs
- Create a custom admin role
- Create a service account in Google Cloud Console
- Add API scopes
# Enable APIs
Complete the following steps to enable your Google Workspace API:
Go to the Google Cloud Console API library (opens new window) using the Google Workspace account that provides the service accounts.
Go to the Google Cloud Console API library
Search for and select Admin SDK API.
Select Admin SDK API
REQUIRED FOR INDEX CRAWLING
You must enable the Admin SDK to allow index crawling.
Click Enable.
Enable Admin SDK API
Search for and enable the APIs for the Google Workspace data sources you plan to add:
- Gmail API
- Google Calendar API
- Google Drive API
# Create a custom admin role
After you enable the required APIs, you must create a service account to access them. This requires creating a custom admin role and assigning it to the appropriate user account.
Complete the following steps to create a custom Super Admin role for your service account:
Go to the Google admin roles page (opens new window).
Click Create new role to create a custom admin role.
Create new role
Name the role Workato AI.
Name the role
Optional. Add a Description for the role.
Click Continue.
Go to Admin Console Privileges and select the following permissions:
- Users > Read
- Services > Drive and Docs > Settings
Select permissions
Go to Admin API Privileges and select the following permissions:
- Reports
- Groups > Read
- Users > Read
Click Continue > Create Role. Google redirects you to a page where you can assign users to the Workato AI role you created in the preceding steps.
Click Assign members and then add a Google Workspace user. This user must have logged in at least once to the Google Workspace and accepted the Terms of Service.
Assign members
Click Assign role. Store the email to use for your data source configuration.
Copy the Client ID from the service account details page in Google Cloud Console.
# Create a service account in Google Cloud Console
Complete the following steps to create a service account:
Go to Google Service Accounts (opens new window) in Google Cloud Console and select an existing project or create a new project if one doesn't already exist.
USE THE SAME SERVICE ACCOUNT FOR YOUR GOOGLE APPS
You can use the same service account for the Gmail, Google Calendar, and Google Drive Workato GO data sources.
Click CREATE SERVICE ACCOUNT and skip the optional steps.
Create service account
Open the service account in Google Cloud Console.
Copy and store the OAuth 2.0 Client ID in a secure location. You must provide this value when you configure the data source.
Go to the Actions column for the service account and click the manage menu (three dots).
Click the manage menu
Click Manage keys. The Keys page automatically displays.
Manage keys
Click Add key > Create new key. The Create private key modal opens.
Create new key
Select JSON and click Create. A JSON file automatically downloads to your computer. Store the file safely as its contents are required for the Service Account JSON section in the Workato GO platform.
Create private key
# Add API scopes
Now that we have a service account we now need to grant the service account specific permissions.
Complete the following steps to add API scopes to your service account:
Go to Google Admin Console and sign in as an admin.
Go Menu > Security > Access and data control > API controls > Manage Domain Wide Delegation.
Click Add new.
Add API scopes
Enter the OAuth 2.0 Client ID that you created in the preceding steps into the Client ID field.
Enter the Client ID
Copy and paste the following values into the OAuth scopes (comma-delimited) field:
| Scope | Product | Description | Documentation |
|---|---|---|---|
| https:// www. googleapis. com/auth/ admin.directory .group.readonly | Admin SDK | View groups on your domain. | Admin SDK API Scopes (opens new window) documentation |
| https:// www. googleapis. com/auth/ admin.directory .user.readonly | Admin SDK | View information about users on your domain. | Admin SDK API Scopes (opens new window) documentation |
| https:// www .googleapis. com/ auth/admin.reports .audit.readonly | Admin SDK | View audit reports for your Google Workspace domain. | Admin SDK API Scopes (opens new window) documentation |
| https:// www .googleapis. com/auth/drive .readonly | Google Drive API | View and download all Drive files. | Google Drive API Scopes (opens new window) documentation |
Click Authorize.
Last updated: 3/13/2026, 7:56:30 PM