Skip to main content

Google Workspace Integration

This guide walks a Google Workspace Super Administrator through configuring Domain-Wide Delegation (DWD) for the Viven service account. This grants Viven the read-only access it needs to integrate with Gmail, Drive, Calendar, and other Google services on behalf of your users.

The most common failure point

Copy-paste errors in the scope string cause silent authorization failures. Follow the instructions in Step 3 carefully, and use the code block provided to copy the scope string.

Required Information​

Have the following ready before you begin:

DetailValueNotes
Viven Client ID113554434873822843144This 21-digit number identifies the Viven service account
OAuth ScopesSee Step 3 belowA comma-delimited list of 14 read-only permissions

Step 1: Navigate to the Admin Console​

  1. Log in to the Google Workspace Admin Console
  2. Go to Security → Access and data control → API controls
  3. Under the Domain-wide Delegation section, click MANAGE DOMAIN WIDE DELEGATION

Step 2: Add the Viven Client and Scopes​

  1. Click Add new
  2. In the pop-up window, enter:
    • Client ID: 113554434873822843144
    • OAuth Scopes: Copy the full scope string from Step 3 below and paste it into this field

Step 3: Copy the Scope String​

The table below lists all 14 required read-only scopes and what each one grants:

ScopeWhat it grants
https://www.googleapis.com/auth/gmail.readonlyRead Gmail messages and metadata
https://www.googleapis.com/auth/drive.readonlyRead Drive files
https://www.googleapis.com/auth/admin.directory.user.readonlyRead user directory records
https://www.googleapis.com/auth/admin.directory.group.readonlyRead group directory records
https://www.googleapis.com/auth/documents.readonlyRead Google Docs
https://www.googleapis.com/auth/spreadsheets.readonlyRead Google Sheets
https://www.googleapis.com/auth/presentations.readonlyRead Google Slides
https://www.googleapis.com/auth/calendar.readonlyRead calendar events
https://www.googleapis.com/auth/drive.activity.readonlyRead Drive activity
https://www.googleapis.com/auth/admin.reports.audit.readonlyRead audit reports
https://www.googleapis.com/auth/drive.metadata.readonlyRead Drive file metadata
https://www.googleapis.com/auth/apps.groups.settingsRead Google Groups settings
https://www.googleapis.com/auth/calendar.acls.readonlyRead calendar access control lists
https://www.googleapis.com/auth/meetings.space.readonlyRead Google Meet space details

Copy the entire string below and paste it into the OAuth Scopes field — it must be a single unbroken line:

https://www.googleapis.com/auth/gmail.readonly,https://www.googleapis.com/auth/drive.readonly,https://www.googleapis.com/auth/admin.directory.user.readonly,https://www.googleapis.com/auth/admin.directory.group.readonly,https://www.googleapis.com/auth/documents.readonly,https://www.googleapis.com/auth/spreadsheets.readonly,https://www.googleapis.com/auth/presentations.readonly,https://www.googleapis.com/auth/calendar.readonly,https://www.googleapis.com/auth/drive.activity.readonly,https://www.googleapis.com/auth/admin.reports.audit.readonly,https://www.googleapis.com/auth/drive.metadata.readonly,https://www.googleapis.com/auth/apps.groups.settings,https://www.googleapis.com/auth/calendar.acls.readonly,https://www.googleapis.com/auth/meetings.space.readonly

Click AUTHORIZE to complete setup. Viven will now be able to access the necessary data on behalf of your users.

Appendix: Why Automation Isn't Possible​

There is currently no public Google API that allows programmatic configuration of DWD scopes. Google reserves this step exclusively for Super Administrators via the Admin Console web interface — this is an intentional security measure to ensure a human administrator explicitly reviews and approves third-party permissions.

Best practices to avoid copy-paste errors:

  1. Use the code block above — it's a single continuous line with no hidden spaces or line breaks
  2. Copy to clipboard directly — don't retype or reformat the string
  3. Verify the Client ID — ensure no extra spaces are added before or after the 21-digit number