---
description: >-
  Integrate Google Workspace within a click, by installing the Rezonate
  Marketplace Integration
---

# 1-Click Integration

{% hint style="info" %}
Google Workspace 1-Click Integration requires a privileged Google user for the process
{% endhint %}

With Google Workspace integration Rezonate is analyzing the Workspace environment, mapping inventory, scanning for Posture Issues, and hunting for threats.&#x20;

This integration has 2 Modes:

* Read Only - This enables Identity mapping, Posture scanning, and ITDR Capabilities.
* Read\Write - This enables all of the read capabilities, plus, the ability to remediate risks from the product automatically.

To Integrate, browse to the Rezonate integrations screen, and select Google Workspace\


<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FjOE6gNSl7jwOxpYTkd2P%2Fimage.png?alt=media&#x26;token=983bee67-995e-4190-adb0-59a0a5e6c76f" alt=""><figcaption><p>Select Google Workspace from the second line, to the right.</p></figcaption></figure>



Then, Select the preferred integration mode (Read-only or Read-Write)

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FRKd3EaPmps9huSc0AKlz%2Fimage.png?alt=media&#x26;token=d1aef891-0af0-4e1a-8f00-4311ad44ec29" alt=""><figcaption></figcaption></figure>

You will see the following screen, click Advanced and Approve.

![](https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FArlZPQLSEJewwM57Mo6c%2Fimage.png?alt=media\&token=6677841d-14c5-4c2f-a66f-eb1079807ffe)\
\


Clicking on the button will redirect you to the Google Consent screen. select your user and then after reviewing the required permissions click on the Allow button. You will be redirected to the platform and the integration process is completed.

<figure><img src="https://2355086414-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIkSba0W4HlnmPJ93gVOS%2Fuploads%2FUswWdGFiLFLpdUyT28IE%2Fimage.png?alt=media&#x26;token=aff4f46e-9cd5-48ae-8144-bd578afb826a" alt="" width="375"><figcaption><p>Concent Screen - Rezonate Integration</p></figcaption></figure>

### Additional permissions that are required for remediation support

To support remediations executed from the Rezonate platform, additional permissions are required.\
These privileges allow the platform to Suspend\Delete users, enforce MFA, change group assignments, and perform additional actions as part of risk reduction features.\


<table><thead><tr><th width="528">Permission</th><th width="204">Description</th><th data-hidden></th></tr></thead><tbody><tr><td><a href="https://www.googleapis.com/auth/admin.directory.user">https://www.googleapis.com/auth/admin.directory.user</a></td><td>Global scope for access to all user and user alias operations.</td><td></td></tr><tr><td><a href="https://www.googleapis.com/auth/admin.directory.user.security">https://www.googleapis.com/auth/admin.directory.user.security</a></td><td>Scope for access to all application-specific password, OAuth token, and verification code operations.</td><td></td></tr><tr><td><a href="https://www.googleapis.com/auth/admin.directory.group">https://www.googleapis.com/auth/admin.directory.group</a></td><td>Global scope for access to all group operations, including group aliases and members.</td><td></td></tr><tr><td><a href="https://www.googleapis.com/auth/admin.directory.group.member">https://www.googleapis.com/auth/admin.directory.group.member</a></td><td>Scope for access to all group member roles and information operations</td><td></td></tr></tbody></table>
