Connect Robin with Google Workspace by granting the Atera service account domain-wide delegation of authority. With this in place, Robin can act on behalf of users to handle key tasks such as Gmail management, Drive access, and Calendar operations.

Connect to Google Workspace

You must log in using an administrator account with Super Admin permissions in your Google Workspace domain to configure domain-wide delegations and continue.

Note: Changes may take a few minutes to load across your domain.

To configure your Google account:

1. Log in to your Google Admin Console

2. From the Admin Console dashboard, go to Security > Access and data control > API Controls.

3. Click Add new.

4. Under Client ID, enter the Atera Autopilot client ID:

117667288367996498143

5. Under OAuth Scopes, enter the following list of scopes (comma-separated):

https://mail.google.com/,
https://www.googleapis.com/auth/gmail.send,
https://www.googleapis.com/auth/drive,
https://www.googleapis.com/auth/drive.readonly,
https://www.googleapis.com/auth/gmail.modify,
https://www.googleapis.com/auth/gmail.settings.basic,
https://www.googleapis.com/auth/admin.reports.usage.readonly,
https://www.googleapis.com/auth/admin.directory.group,
https://www.googleapis.com/auth/admin.directory.group.readonly,
https://www.googleapis.com/auth/admin.directory.group.member,
https://www.googleapis.com/auth/admin.directory.group.member.readonly,
https://www.googleapis.com/auth/admin.directory.user.readonly,
https://www.googleapis.com/auth/admin.directory.resource.calendar.readonly,
https://www.googleapis.com/auth/calendar.readonly,
https://www.googleapis.com/auth/calendar.events,
https://www.googleapis.com/auth/calendar.settings.readonly

Scopes define what type of access Robin will have. Ensure all the listed scopes are included for full functionality. For a detailed breakdown of what actions each scope permits, please see the "Understanding Scope Permissions" section below.

6. Click Authorize.

The new entry with the Atera client ID and all associated scopes appears in your API client access list.

7. In Atera, go to AI Center > Integrations.

8. Click Google Workspace. Then enter the admin email address to authorize the connection.

9. Toggle Sync contacts to automatically import users from Google Workspace into Atera and keep their details up to date (enabled by default).

10. Click Connect to finalize the integration.

Once configured, Robin can securely communicate with your organization's Google services.

Understanding Scope Permissions

The permitted actions within Google Workspace are defined by the OAuth 2.0 scopes granted and are also strictly governed by the user's existing permissions within Google Workspace itself. It is important to note that if a user lacks the native Google Workspace permission to perform an action (such as modifying a user's contact information or altering group settings), they will be unable to execute that action through an external application like Autopilot, even if the OAuth scope is granted.

Below is a service-by-service breakdown of the specific actions allowed by each OAuth scope:

Gmail Scopes

• https://mail.google.com/

  • Description: Full access to the user's Gmail account.

  • Actions: Read all messages and threads; send new emails; delete emails (bypass trash); create, update, and delete labels; manage filters and forwarding rules; and modify account settings. This is the most permissive Gmail scope.

• https://www.googleapis.com/auth/gmail.send

  • Description: Send messages only.

  • Actions: Create and send new email messages and replies. The application cannot read existing emails, see the inbox, or see who the user has received mail from.

• https://www.googleapis.com/auth/gmail.modify

  • Description: Read, compose, and update messages; limited deletion.

  • Actions: Read messages and threads, create drafts, and send them. It allows changing labels (e.g., archiving or moving to "Trash"), but it does not allow permanent deletion of messages (emptying the trash) or management of account settings like filters.

• https://www.googleapis.com/auth/gmail.settings.basic

  • Description: Manage basic Gmail settings.

  • Actions: View and modify basic settings such as your email signature, vacation responder (out-of-office), and display language.

Google Drive Scopes

• https://www.googleapis.com/auth/drive

  • Description: Full access to Google Drive.

  • Actions: Create, open, edit, and delete any file or folder in a user's Drive. It also allows the app to manage sharing permissions and move files to the trash.

• https://www.googleapis.com/auth/drive.readonly

  • Description: Read-only access to Drive.

  • Actions: View the metadata (filenames, dates) and download the content of all files in the user's Google Drive. The app cannot make changes or delete anything.

Admin SDK (Directory & Reports) Scopes (These are typically used for domain-wide management by administrators.)

• https://www.googleapis.com/auth/admin.reports.usage.readonly

  • Description: View usage reports for the domain.

  • Actions: Access data regarding how users are using Workspace services (e.g., storage used per user, last login dates, and activity logs).

• https://www.googleapis.com/auth/admin.directory.group

  • Description: View and manage Google Groups.

  • Actions: Create, update, and delete Groups within the Workspace organization.

• https://www.googleapis.com/auth/admin.directory.group.readonly

  • Description: View Google Groups.

  • Actions: List the groups in the domain and view their settings/metadata without the ability to edit or delete them.

• https://www.googleapis.com/auth/admin.directory.group.member

  • Description: Manage Group members.

  • Actions: Add members to a group, remove members, or change a member's role (e.g., changing a Member to an Owner).

• https://www.googleapis.com/auth/admin.directory.group.member.readonly

  • Description: View Group members.

  • Actions: See who is in a specific group and their membership roles.

• https://www.googleapis.com/auth/admin.directory.user.readonly

  • Description: View user profiles in the domain.

  • Actions: View user names, email addresses, phone numbers, and organizational units for all users in the Workspace domain.

• https://www.googleapis.com/auth/admin.directory.resource.calendar.readonly

  • Description: View calendar resources.

  • Actions: View a list of organizational resources like conference rooms, projectors, or company vehicles that are available for booking.

Google Calendar Scopes

• https://www.googleapis.com/auth/calendar.readonly

  • Description: Read-only access to calendars.

  • Actions: View all events on all calendars the user has access to. The app can see event titles, times, and attendees but cannot create or change them.

• https://www.googleapis.com/auth/calendar.events

  • Description: Manage calendar events.

  • Actions: Create, edit, and delete events on any calendar the user has write-access to. It does not allow the app to change high-level calendar settings (like sharing the whole calendar with a new person).

• https://www.googleapis.com/auth/calendar.settings.readonly

  • Description: View calendar settings.

  • Actions: Read the user's calendar settings, such as their primary time zone, notification preferences, and working hours.