Connect Google Workspace

For your workspace to read your team's calendars and, for the client history, the emails with your clients, your Google administrator grants our service account domain-wide delegation once. Read-only, only for the domains you name. Every customer has a service account of their own.

Option A (recommended): we set it up for you

  1. Book a screen-sharing session with us (about 15 minutes). Your administrator clicks, we guide every step. No credentials leave your company.
  2. Or create a temporary user for us in your Google Workspace, e.g. support-temp@your-domain, with the Super Admin role, and send us the credentials securely.
  3. We add exactly one entry under domain-wide delegation: your workspace's client ID with the two scopes below. Nothing else is changed.
  4. We check in your workspace that the delegation works.
  5. Afterwards you delete the temporary user, or we remind you. The delegation stays, our access to your Admin console does not.

Option B: set it up yourself

  1. Sign in to admin.google.com as a Super Admin.
  2. Open Security › Access and data control › API controls.
  3. Under «Domain-wide delegation», click «Manage domain-wide delegation», then «Add new».
  4. Enter your workspace's client ID under «Client ID». It is shown there under Settings › Anbindungen › Google Workspace, with a copy button.
  5. Enter the two scopes below under «OAuth scopes», separated by a comma, and click «Authorize».
  6. Check in your workspace under Settings › Anbindungen › Google Workspace with «Check». Google usually needs a few minutes, rarely up to 24 hours.

The scopes

  • https://www.googleapis.com/auth/calendar.readonlyRead calendars
  • https://www.googleapis.com/auth/gmail.readonlyRead emails, for the client history

What the check says

  • «Granted»: Google grants access for this staff member.
  • «Not granted»: the scope is missing in the delegation, or the client ID differs. Check the entry in admin.google.com.
  • «Google does not know this address»: the address is not a user of your Google Workspace.
  • «This domain is not allowed»: tell us the domain and we add it.

Privacy

  • Read-only: we cannot create events, send emails or delete anything.
  • Calendars: time, title and attendees of your team's events, so meetings appear in the right room.
  • Emails: the exchange with your clients, so it shows in the room's client history. Only for addresses of the allowed domains.
  • Who sees what is set by the roles in your workspace. We as the operator see data only for support, under the data processing agreement.
  • Revoke at any time: delete the entry under «Domain-wide delegation». From then on Google grants no access. If you cancel, we delete the service account.