Supported Features
File Aggregation File Permission ManagementIntegrating with Google Drive
Follow these steps to integrate Google Drive with Admina. The integration retrieves information about publicly shared files. (About the External Shared Content Management feature)- Account information is not retrieved.
- Only the names and links of files shared (made public) in shared drives (including My Drive) are retrieved. Data is not synced to Admina.
- Viewing files requires the Admin role in Admina. For details on Admina roles, see the page below.
Prerequisites
Enable APIs (Google Cloud Platform)
- Create an account for the integration from Google Cloud Platform. Go to Google Cloud Console and select or create a project.
-
Under APIs & Services > Enabled APIs & Services, confirm that the following two APIs are enabled. If they are not enabled, add them from the API Library.
- Google Drive API
- Admin SDK API

Create a Service Account
- Go to APIs & Services > Credentials > Create Credentials > Service account.

- Enter any name for the service account name and click Done (steps 2 and 3 are not required).

Issue an API Key
- The service account you created will appear under APIs & Services > Credentials — click it.
- Go to the Keys tab and click Add Key > Create new key.

- Select JSON and click the Create button. A message “Private key saved to your computer” will appear, and a JSON file will be downloaded automatically. Keep this file safe, as it contains parameters such as the Client ID required for the Admina integration.

Configure Domain-Wide Delegation (Google Admin Console)
- Go to the Google Workspace Admin console and click Security > API controls > Manage Domain Wide Delegation.

- Click the Add new button.
-
Open the JSON file you saved. Enter the value of
client_idfrom the JSON file in the Client ID field.

- Enter the following four values in OAuth scopes, then click Authorize.
https://www.googleapis.com/auth/drivehttps://www.googleapis.com/auth/admin.directory.user.readonlyhttps://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.domain.readonly

You can also set scope (a) to
https://www.googleapis.com/auth/drive.readonly.
This allows all data to be retrieved as Read Only, but only files in My Drive will be retrieved (files in shared drives cannot be retrieved).Integration Setup
- In the Admina integrations screen, search for Google Drive.
- Open the JSON file you saved. Enter the values listed below and click Connect.

-
Service account email address: Enter the value of
client_emailfrom the JSON file. -
Private key: Enter the private key
private_keyfrom the JSON file. Enter everything from -----BEGIN PRIVATE KEY----- to -----END PRIVATE KEY-----. (The leading"and trailing\n",are not required.) - Email address: Enter the email address of the Google Workspace super admin.

Trusted domains: You can exclude specified domains from external sharing detection. Use this to specify domains such as group company domains that you do not want to be detected as external. If there are multiple domains, separate them with commas (,) as shown below. (Your own company domain does not need to be entered.)
moneyfoward.co.jp, i.moneyfoward.com- Once the integration with Google Drive is successful, a “Files” tab will appear under the service, displaying information about shared files. (Synchronization may take some time depending on the number of files.)

Stopping Sharing
You can check the sharing status of retrieved files and stop sharing. Click the Share button from the drawer on the right side.

FAQ
Q. Can you explain the sharing status for each file?
A. Please refer to the following.| Status | Description |
|---|---|
| External sharing | Files shared with addresses outside the domains registered in Google Workspace are classified as “externally shared.” |
| Public (anyone with link) | Files shared with “Anyone with the link” are displayed as “Public.” |

