Google Workspace

FortiCASB utilizes and API based approach to monitor your cloud SaaS application. In this example, FortiCASB authenticates itself to your Google Workspaces account using OAuth2.0 credentials, and then utilized the Google Workspaces API to pull information from your cloud accounts. FortiCASB uses this information to monitor and track Google Workspaces user activities and scan data stored in Google Drive.

Prerequisites

To use API access, your organization must be using one of the following editions (the API is enabled by default):

• Business Edition
• Enterprise Edition

The user account installed in FortiCASB must be a Super Administrator in your Google Workspace account. For steps on how to check if your account is a Super Adminstrator, see Google Workspace connection errors.

Due to Google requirements, only Google Workspace accounts with a business or enterprise license can use FortiCASB. Google Workspace accounts with a basic license will be not be able to use FortiCASB.

You may either use an existing account or create a new account. Wait at least 24 hours for the new account to take effect before granting access to FortiCASB.

There are four steps you need to setup your Google Workspace account before you can add the Google Workspace account on FortiCASB:

1. Configure OAuth Consent Screen
2. Create Google Service Account
3. Enable Google Drive API & Authorize Client ID
4. Enable activity and alert monitoring
5. Add Google Workspace Account