Guides
ProductDeveloper
Guides
ProductDeveloper

Enable SaaS API Data Loss Protection for Google Drive Tenants

Suggest Edits

Table of Contents

Prerequisites

  • Chrome or Firefox (recommended) with pop-up blockers and ad blockers disabled (only for the duration of authorization)
  • Cisco CASB Gov must be installed in the tenant by a Google Admin User.
  • It is recommended to use a service account for the installation.

Validation

  1. Log in to https://admin.google.com with admin credentials.

  2. Navigate to Apps > Google Workspace Marketplace Apps > App List.

  3. Ensure that the Cisco CASB Gov application is present and enabled for your admin or for the group you are a part of.

  4. Navigate to Apps > Google Workspace > Drive And Docs and ensure that the drive service is enabled for your admin or for a group you are part of.

The Cisco CASB Gov application needs access to your Google account. This allows the Cisco CASB Gov application to:

View, Edit, Create, and Delete all of your Google Drive files
View domains related to your customers
View groups on your domain
View organization units on your domain
View and manage the provisioning of users on your domain
View Information about users on your domain
View audit reports for your G suite domain
View usage reports for your G suite domain
View, Edit, Configure, and Delete your Google Cloud data and view the email address for your Google Account
View your primary Google Account email address
View your personal information that is made publicly available
Manage your sites
View the activity history of your Google apps

Authorize a Tenant

  1. Navigate to Admin > Authentication.
  2. Under Platforms, click Google.
  3. Click Authorize New Tenant to add a Google Drive tenant to your Umbrella environment.
1434
  1. In the Google Authorization dialog, check the checkbox to verify you meet the prerequisite, then click Next.

📘

NOTE:

The link to the SaaS API Connector brings you to the Cisco CASB Gov site in the Google Workspace Marketplace. This is correct, despite the nomenclature difference.

  1. Enter the tenant name, then click Next.
1392
  1. Enter the Email Address, then click Next.
1182

You are redirected to the Umbrella Dashboard and a message appears showing the integration was successful. It may be up to 8 hours for the integration to be confirmed and appear as Authorized.

  1. Click Done to complete.

Revoke Authorization

  1. Under Action, click Revoke. You can revoke any authorised tenant.
1336
  1. Confirm to proceed. The selected account will no longer be authorized.

Manage SaaS API Data Loss Prevention < Enable SaaS API Data Loss Protection for Google Drive Tenants > Enable SaaS API Data Loss Protection for Webex Teams Tenants

Updated 4 months ago