Data Connection: Google Suite

How to connect Transcend's Google Docs, Slides, and Sheets integrations

Transcend integrates with Google Suite (GSuite) offerings such Google Docs, Google Slides, Google Sheets, and Gmail. In order to connect with your GSuite instance with Transcend, and use our Google Docs, Google Slides, and Google Sheets integrations, we use a client credentials method which requires you to generate credentials specific to your GSuite organization.

Requirements

Before starting, please ensure that you meet these requirements:

  1. Your organization has a Google Vault license
  2. You have access to your organization's Google Cloud Console, and have permissions to create a new project, and provision a service account
  3. You have access to the Google Admin Console, with permissions to modify Security Settings for your organization, and
  4. You have access to an account in your organization that can run and manage Google Vault Searches and Exports

Setup

The GSuite integrations (except Gmail) offered by Transcend use Service Accounts to create an API connection between Google and Transcend. Below are the instructions to provision a Service Account, and provide Transcend with its credentials, to begin making API calls on your behalf.

Service Account Provision

  1. Create a new project in your organization's Google Cloud Console, and enable the following APIs:
  2. Under the "IAM & Admin" tab for the project created in step 1, visit the "Service Accounts" page, and select "Create Service Account". Give this service account a name you'll remember, for example, "transcend-dsr-robot"
    • You do not need to grant this service account any specific IAM roles or permissions
    • You will need the email address associated with this service account when connecting the integration.
  3. Once the service account is created, select "Enable G Suite Domain-wide Delegation" for the service you created, and record the unique "Client ID", as you will need to refer to this later
Domain Wide DelegationDomain Wide Delegation

Domain Wide Delegation

  1. You will also need to generate a set of public-private key pairs for this account. You can do so by visiting the "Key" tab in the service account's settings page, and generating one in the JSON format. You will need the JSON key file during the connection phase for the integration.
    • Transcend only supports key files generated in the JSON format

🚧

Note

We recommend using a different service account for each GSuite integration you connect with Transcend.

Allowlisting The Service Account

Once you've finished provisioning a service account, and its associated credentials, we must now give it access to call the appropriate APIs in your organization.

  1. Go to your organization's Google Admin Console, and
  2. Navigate to the "Security" page
  3. Select on "API Controls", then "Manage Domain Wide Delegation"
  4. Add a new "API Client", and in the form enter the Client ID of the Service Account noted in Step 3 of the previous section.
  5. You will also need to add the following OAuth scopes, as comma-separated values, and then click on "Authorize": https://www.googleapis.com/auth/ediscovery,https://www.googleapis.com/auth/devstorage.read_only,https://www.googleapis.com/auth/admin.directory.user.readonly,https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly

You're now ready to connect Transcend's GSuite integrations!

Read more on Connecting data silos.

📘

Before you leave!

In order to connect a GSuite integration with Transcend, you will need the following:

  1. A user that can run and manage Google Vault Searches, and Exports
  2. The service account's email address
  3. The Private Key from the JSON key file, generated in step 4 of the service account provisioning instructions.
  • Note: you will want to replace "\n" with newlines when inserting this private key into the Transcend Admin Dashboard.