Google Workspace
Users, 2-step verification and admin settings. Prerequisites, setup steps and troubleshooting.
What it does
Google Workspace connects over OAuth and covers directory, group membership and admin activity. Connect it once for the whole organization; teammates do not each need to authorize.
Prerequisites
- A cSquare GRC workspace where you are an owner or admin.
- Connection method: OAuth sign-in.
- Access needed at Google Workspace: Super administrator for the initial consent; the token itself is read-only.
Set up
Open Settings > Integrations in the app, find Google Workspace, then:
- Sign in as a Workspace super administrator when the consent screen opens.
- Approve the read-only directory and reports scopes.
- Confirm the connection lands in Active connections with the status Connected.
Verify the connection
- Back in Settings > Integrations, Google Workspace should show Connected with a recent sync time.
- Open Evidence and filter by source Google Workspace. The first sync can take a few minutes.
- Open a control that depends on Google Workspace and confirm the new evidence is linked.
AI prompts
Paste these into Fibo in the app, or into any assistant connected through MCP.
I just connected Google Workspace to cSquare GRC. Check that it is syncing, list the evidence it has collected so far, and tell me which controls in my active programs now have evidence from Google Workspace.
Which controls in my programs could be covered by Google Workspace evidence but still have no current evidence? Group them by framework and suggest what to collect.
Troubleshooting
Error 400 redirect_uri_mismatch
A platform administrator has to register the callback URL shown on the OAuth setup guide page in the Google Cloud project.
admin_policy_enforced
Workspace is blocking unapproved third-party apps. Allow-list the cSquare client ID in Admin console, Security, API controls.
Test connection fails immediately
Nine times out of ten the credential was pasted with a trailing space, or it was issued in a different tenant or region. Re-copy it and try again.
The connector is quarantined
Collection paused after three consecutive failures. Fix the credential, then use Re-test and re-enable on the Active connections tab; it only resumes when the test passes.
Connected, but no evidence appears
Check that at least one collection type is selected and that the account can see the resources. Read-only accounts scoped to a single project will only return that project.
Still stuck?
My Google Workspace connector in cSquare GRC is failing. Here is the error I see: <paste error>. Walk me through the likely causes and the exact fix, step by step.