Getvisibility DSPM - Google Drive Scanning

This document provides information on how to configure Google Drive connection for DSPM product in order to files and folders.

Create OAuth2 Credentials

• Create a Project in Google Cloud Console:

  • Go to the Google Cloud Console

  • Create a new project or select an existing project

  Open

  

• Enable the Google Drive API:

  • In the Google Cloud Console, navigate to the "APIs & Services" > "Library"

  Open

  

  • Search for "Google Drive API" and click on it

  • Click the "Enable" button to enable the Goolge Drive API for your project

• Create OAuth 2.0 Credentials:

  • In the Google Cloud Console, navigate to the "APIs & Services" > "Credentials" tab

  • Click "Create credentials" and select "Service account"

  • Enter a name in the Service account name field and CREATE AND CONTINUE

  • Under Grant this service account access to the project, select role as Owner and click DONE

  • Select the newly created service account and click Keys > Add Key > Create new key

  • Make sure the key type is set to json and click Create

  • The new private key pair is generated and downloaded to the machine. Note the values of private_key, client_email and client_id

Delegate domain-wide authority to your service account

• From your domain's Admin console, go to Main menu menu > Security > Access and data control > API controls

• In the Domain wide delegation pane, select Manage Domain Wide Delegation

• Click Add new

• In the Client ID field, enter the client ID obtained from the service account creation steps above

• In the OAuth Scopes field, enter a comma-delimited list of the scopes required for your application

• Use the below scopes:

  For scanning

  • https://www.googleapis.com/auth/admin.directory.user.readonly

  • https://www.googleapis.com/auth/drive.readonly

  For revoke permissions

  • https://www.googleapis.com/auth/drive

  For tagging

  • https://www.googleapis.com/auth/drive.file

  • https://www.googleapis.com/auth/drive

  • https://www.googleapis.com/auth/drive.admin.labels

  • https://www.googleapis.com/auth/drive.metadata

  • https://www.googleapis.com/auth/drive.labels

• Click Authorize

Configuring Google Drive connector in Dashboard

• Navigate to Administration -> Data Sources -> Google Drive -> New scan

• Enter the details of the OAuth2 credentials obtained previously

• Click on the Folder icon in Path to select a particular space to scan, or leave the path as empty to scan all spaces

• Save the configuration

• Once the configuration is saved, click on the icon on the right and select Start file scan to begin the scanning

• The scan results can be viewed under Dashboard -> Enterprise Search