Google Workspace Admin
Manage and fetch information from Google Workspace Admin
Set up the Google Workspace Admin connector
The Google Workspace Admin connector links Suptask to your Google Workspace directory. Once connected, agents can view user details and - depending on the permissions you grant — manage accounts directly from a ticket, such as suspending or unsuspending a user.
To connect it, you create an OAuth 2.0 client in the Google Cloud Console, then paste the resulting Client ID and Client Secret into Suptask. This guide covers every step.
You set up this connector in the Suptask Web App as an admin. Your agents then use it from Slack while working on tickets.
Common workflows
A few common workflows for Google Workspace Admin:
Access requests - grant a user access to a shared drive, group, or other resource after confirming their details.
Onboarding - create a new team member's account and add them to the right groups and resources.
Offboarding - suspend a leaver's account and revoke their access.
Before you begin
You'll need:
An admin role in Suptask.
Access to the Google Cloud Console with rights to create OAuth credentials in a project.
A Google Workspace account with the admin privileges needed for the data you want to access.
What you'll do:
Keep the Connect Google Workspace Admin window in Suptask open in a separate browser tab. You'll switch back to it at the end.
Step 1 - Open Google Cloud and select your project
Go to the Google Cloud Console.
In the top bar, select the project you want to use, or create a new one.
The screenshots in this guide use a project named Suptask.
Step 2 - Enable the Admin SDK API
The connector reads your directory through Google's Admin SDK. Enable it before creating credentials.
In the Cloud Console, open APIs & Services → Library.
Search for Admin SDK API.
Open it and click Enable.
If the Admin SDK API isn't enabled, authorization will fail or return no directory data.
Step 3 - Configure the OAuth consent screen (first time only)
If this is the first OAuth client in the project, configure the consent screen under Google Auth Platform.
Open Google Auth Platform (APIs & Services → OAuth consent screen).
Under Branding, set the app name and a support email.
Under Audience, choose Internal so only users in your Google Workspace organization can use it.
Save.
Skip this step if your project already has a configured consent screen.
Step 4 - Create the OAuth client
In Google Auth Platform, open Clients and click + Create client.
Set Application type to Web application.
For Name, enter something recognizable, for example
Suptask AI. This name is only shown inside the console.Under Authorized JavaScript origins, add:
Under Authorized redirect URIs, add:
Click Create.
Enter both URLs exactly as shown, with no trailing slash. A mismatch is the most common cause of authorization errors.
Step 5 - Copy your Client ID and Client Secret
After you create the client, Google shows your OAuth Client ID and Client Secret.
Copy the Client ID (it ends with
.apps.googleusercontent.com).Copy the Client Secret.
Treat the Client Secret like a password. You can find both values again later by reopening the client under Clients.
Step 6 - Connect in Suptask
Switch back to the Connect Google Workspace Admin window in Suptask.
Paste your Client ID into OAuth Client ID.
Paste your Client Secret into OAuth Client Secret.
Select the Permissions you want to grant (see the next section).
Click Authorize.
A Google sign-in window opens. Sign in with a Google Workspace admin account and approve access.
When it's done, the status changes from Not connected to connected.
Choosing permissions
Each permission maps to what Suptask can do in your directory. Grant only what your team needs.
Users (read-only) — View user accounts and details.
Users (read/write) — Manage user accounts: create, update, suspend, delete.
Groups (read-only) — View groups and memberships.
Groups (read/write) — Manage groups and memberships.
Org Units (read-only / read/write) — View or manage organizational units.
Roles (read-only / read/write) — View or manage admin roles and assignments.
Domains (read-only) — View verified domains.
Start with read-only access. You can reopen the connector and grant read/write later if needed.
Troubleshooting
redirect_uri_mismatch— The redirect URI in Google doesn't match. Confirm it's exactlyhttps://ai-prod.suptask.com/oauth/callback.Access blocked / app not verified — Your consent screen Audience is likely set to External. Change it to Internal (Step 3).
No data after connecting — The Admin SDK API isn't enabled (Step 2), or the signed-in Google account lacks admin privileges.
Authorize button stays disabled — Make sure both the Client ID and Client Secret fields are filled and at least one permission is selected.
Need help?
Reach out to Suptask Support and our team will help you connect Google Workspace Admin.
Last updated
Was this helpful?