Google Drive / Workspace

Google Workspace hybrid connector using the gws CLI for governed read/discovery paths.

Property	Value
Key	google_workspace
Source type	saas
Status	native
Active by default	no
Default cache strategy	semantic_first
Capabilities	supports_discovery, supports_field_permissions, supports_ingestion

Connection configuration

Secret fields should be given as a reference, <field>_ref, such as env://NAME, rather than a literal.

Key	Secret
workspace_domain	no
enabled_services	no
access_token_ref	no
credentials_file_ref	no
service_account_json_ref	no
gws_config_dir	no
project_id	no
subject_user	no
drive_id	no
drive_query	no
gmail_users	no
gmail_labels	no
gmail_query	no
calendar_ids	no
calendar_time_min	no
calendar_time_max	no
admin_report_applications	no
access_token	yes; prefer access_token_ref
credentials_file	yes; prefer credentials_file_ref
service_account_json	yes; prefer service_account_json_ref

Default role templates

Offered when a source is created with default roles. Edit them to fit.

admin_auditor

Effect	Action	Resource type	Pattern
allow	workspace.admin.report.read	workspace.admin.report	gadmin://reports/*/*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*

blocked

Effect	Action	Resource type	Pattern
deny	*	*	*

calendar_reader

Effect	Action	Resource type	Pattern
allow	workspace.calendar.event.read	workspace.calendar.event	gcal://calendar/*/event/*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*

drive_reader

Effect	Action	Resource type	Pattern
allow	workspace.drive.file.read	workspace.drive.file	gdrive://*
allow	workspace.drive.file.download	workspace.drive.file	gdrive://*
allow	workspace.docs.document.read	workspace.docs.document	gdocs://document/*
allow	workspace.sheets.spreadsheet.read	workspace.sheets.spreadsheet	gsheets://spreadsheet/*
allow	workspace.slides.presentation.read	workspace.slides.presentation	gslides://presentation/*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*

gmail_reader

Effect	Action	Resource type	Pattern
allow	workspace.gmail.message.read	workspace.gmail.message	gmail://user/*/message/*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*

workspace_knowledge_reader

Effect	Action	Resource type	Pattern
allow	workspace.drive.file.read	workspace.drive.file	gdrive://*
allow	workspace.drive.file.download	workspace.drive.file	gdrive://*
allow	workspace.docs.document.read	workspace.docs.document	gdocs://document/*
allow	workspace.sheets.spreadsheet.read	workspace.sheets.spreadsheet	gsheets://spreadsheet/*
allow	workspace.slides.presentation.read	workspace.slides.presentation	gslides://presentation/*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*

workspace_reader

Effect	Action	Resource type	Pattern
allow	workspace.drive.file.read	workspace.drive.file	gdrive://*
allow	workspace.drive.file.download	workspace.drive.file	gdrive://*
allow	workspace.docs.document.read	workspace.docs.document	gdocs://document/*
allow	workspace.sheets.spreadsheet.read	workspace.sheets.spreadsheet	gsheets://spreadsheet/*
allow	workspace.slides.presentation.read	workspace.slides.presentation	gslides://presentation/*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*