Minimum Permissions Required for a Google User for Google Workspace Integration

Overview

Customers setting up a Google Workspace integration can encounter a scenario where they do not want to allow all the permissions to the user on the Google side, also known as a super user.

Applies To

  • Google Workspace Integration
  • Google User

Solution

Select only the Basic Profile and Extended Profile attributes for the Google Workspace enterprise connection.

The following are the minimum required permissions for the user on the Google side:

{
"name": "Auth0 Integration Role",
"rolePrivileges": [
{
"serviceId": "admin.googleapis.com",
"privilegeName": "READ",
"resourceName": "users"
},
{
"serviceId": "admin.googleapis.com",
"privilegeName": "READ",
"resourceName": "groups"
},
{
"serviceId": "admin.googleapis.com",
"privilegeName": "READ",
"resourceName": "organizationUnits"
}
]
}