Google Workspace Gmail Connector

Overview

Pod Residency

google-scanner

Connection Method

JWT authentication with service account

Supported Scan Actions

Catalog

Pulls in all account information.

Catalog and Scan

Scans all email message content and attachments.

Credential & System Permissions

Important:

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base and/or support resources.

Use minimum permissions with a setup following the instructions in Google Workspace Connector.

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Scope

  • Include path account similar to Google Drive naming pattern.

  • Include/Exclude attachment file types for scanning.

Collected Objects & Fields

Object

Field

Objects in Catalog

Users (accounts) only in the catalog only if the account has content to scan.

Metadata only includes account name but terms are from messages and attachments.

Scan Attachments: Support OCR

Scan Message Content

Index (for scan action and when indexing is turned on):

Store Messages: Storage User ID, Message ID (Required when emails are classified)

Store Attachments: Storage User ID, Message ID, Attachment ID (Required when emails are classified)