Google Workspace integration
Connects Google Workspace admin and directory data to automate user lifecycle and access governance workflows.
What it connects
- User accounts, org units, and group memberships from Admin SDK.
- OAuth token grants, app access, and third-party app inventory.
- Drive sharing permissions and external collaboration settings.
- Admin audit logs, login events, and device management data.
What it automates
- Provision and deprovision Google accounts from HR ticket triggers.
- Detect and remediate overshared Drive files via policy tickets.
- Auto-assign Google licenses based on role and department rules.
- Flag suspicious OAuth grants and create security review tickets.
In practice
- A new hire onboarding ticket triggers automatic Google Workspace account creation, org unit assignment, group additions, and license provisioning based on department templates.
- STLabs scans OAuth token grants and flags a third-party app with broad Drive access that was authorized by 50 users, creating a security review ticket with full scope details.
- External Drive sharing is monitored and tickets are generated when sensitive folders are shared outside the organization, with one-click remediation to revoke access.
- License usage reports identify over-provisioned accounts, feeding software asset management workflows for right-sizing.
