Google Drive configuration

Google Drive can be shared with Supersimple either by:

1. Sharing Google Drive or a folder with google-drive-reader@supersimple-production.iam.gserviceaccount.com
2. Configure your own Service Account and share its credentials with Supersimple.

Sharing Google Drive with Supersimple

The easiest option is to share your Google Drive or specific folders directly with Supersimple's service account.

1. Open Google Drive in your browser
2. Navigate to the shared drive or folder you want to share with Supersimple
3. Right-click on the shared drive or folder and select Share
4. In the Manage members dialog, click Add people and groups
5. Enter the email address: google-drive-reader@supersimple-production.iam.gserviceaccount.com
6. Set the permission level to Viewer (read-only access)
7. Click Done to grant access

IMPORTANT

Provide Supersimple the following:

• The URL of Shared Google Drive or folder.

Once shared, Supersimple will be able to access the shared drive or folder content.

Setting up Google Cloud Service Account Optional

To integrate with Google Drive with your own service account, create it in the Google Cloud Console and download its credentials JSON file.

Step 1: Create Service Account

Perform the following sections in Google Cloud Console:

1. Go to IAM & Admin > Service Accounts
2. Click Create Service Account
3. Enter the following details:
   • Service account name: supersimple-admin
   • Service account ID: This will auto-populate as supersimple-admin
   • Description: Service account for Supersimple Google Drive integration
4. Click Done

Step 2: Create and Download JSON Key

1. In the Service Accounts list, click on the supersimple-admin service account
2. Go to the Keys tab
3. Click Add Key > Create new key
4. Select JSON as the key type
5. Click Create and share the file downloaded to your computer with Supersimple.

Step 3: Share the drive with service account

Use the instructions above to share Google Drive with a service account. Another option is to add service account to a group that has access to shared Google Drive.

IMPORTANT

Provide Supersimple the following:

• JSON credentials file for supersimple-admin service account.
• The URL of Shared Google Drive.

Setting up Domain-Wide Delegation Optional

If your Google Drive permissions is set up using Google Workspace roles, Supersimple needs access to role membership over the Admin API. To allow the supersimple-admin service account to read workspace groups data Google Workspace domain, you need to set up domain-wide delegation.

Note: Only Google Workspace super administrators can set up domain-wide delegation.

Step 1: Enable Domain-Wide Delegation

1. In the Google Cloud Console, go to IAM & Admin > Service Accounts
2. Find and click on the supersimple-admin service account
3. Click Advanced Settings if needed
4. Check the Enable Google Workspace Domain-wide Delegation checkbox, if needed
5. Copy the Client ID for the service account.

Step 2: Configure in Google Admin Console

1. Navigate to Domain Wide Delegation management view in Google Admin Console
2. Click Add new
3. Enter the Client ID from your service account copied from service account details page.
4. Add the following OAuth scopes:

• https://www.googleapis.com/auth/admin.directory.group.readonly
• https://www.googleapis.com/auth/admin.directory.group.member.readonly

5. Click Authorize

IMPORTANT

Provide Supersimple the following:

• Google Workspace primary domain name.
• JSON credentials file for supersimple-admin service account.
• The URL of Shared Google Drive.