The Google Workspace integration is dormant until Venvera enables the platform service account. Until then the Connect step returns a "not configured" error. The setup instructions below apply once it is enabled.
The Google Workspace integration performs a read-only posture scan of your directory through the Admin SDK Directory API and maps the results to your framework controls. It connects with a Venvera-hosted service account using domain-wide delegation.
Connecting your workspace
Authorize the service account
The setup page shows the service account client id and the three read-only Directory scopes it needs. In your Google Admin console, authorize that client id for those scopes.
Enter a super-admin email
Provide a super-administrator email address for the service account to impersonate when it reads directory data.
Test connectivity
Venvera runs a connectivity test against your directory before saving the connection.
What the scan checks
| Check | What it looks for |
|---|---|
| 2-Step Verification | Enrollment and enforcement of 2SV across users |
| Super-admins | No more than three super-administrator accounts |
| Dormant accounts | Accounts inactive for more than 90 days |
| Device compliance | Managed device posture; users, mobile, and ChromeOS devices are captured as resources |