Enable API Scopes - Configure the API client ID and OAuth scopes required by the client.Add new API client corresponding to the service account created in the previous steps.Navigate to Domain-Wide delegation configuration.Go to Dashboard -> Security -> Access and Data Control -> API Controls.Ensure that the user has Super Admin role.Alternatively you can use the user account with which you logged in. (optional) Create a dedicated user for the purpose of Egnyte connection.For Gmail Classification, ensure that the Gmail API and Admin SDK are visible and enabled (if not, choose the Enable APIs and Services option to enable them). For Google Drive Classification, ensure that the Google Drive API and Admin SDK are visible and enabled in the list (if not, choose the Enable APIs and Services option to enable them).Go to APIs & Services -> Enabled APIs to view the summary of currently used APIs.Record the service account client id and email in the details view in service accounts list.The key will have to be exported to P12 format and downloaded to the local hard drive. Create a private key for the service account. ![]() Select the defaults on the subsequent screens. Choose a name and description for the service account.Create new service account and proceed with the creation wizard.It should display the list of already configured service accounts. Go to service accounts management screen IAM & Admin -> Service Accounts.If the project does not exist create one choosing some name for the project.Remediation Options for Sensitive Content in Emails.Add the Google Drive and/or Gmail Content Source in Egnyte.GSuite domain with super-admin privileges.Prerequisites for Setting Up Google Drive and/or Gmail If you have already set up one source, you can use the same service account with the other source by extending the list of API scopes available to the service account with the required additional scopes. You can use the same service account for both Gmail and Google Drive - simply ensure you add both sets of Oauth scopes when configuring domain-wide delegation. ![]() Note that the steps for connecting Google Drive and Gmail are almost identical with the exception of the step where domain-wide delegation is configured where a different set of Oauth scopes are required. Furthermore, email is a common medium through which sensitive information is shared and Egnyte can discover the most sensitive discussions happening over email. Many regulatory compliance policies apply to email. ![]() Scanning Gmail covers content in emails and attachments sent to, from, and between mailboxes within your Google Workspace instance. Scanning Google Drive covers all content in user and team drives and provides some remediation options for unpermitted sensitive content. In this article, we'll walk you through how to add Google Drive and Gmail as Cloud Content Sources in your Secure & Govern tenant.
0 Comments
Leave a Reply. |