Fortinet black logo

Online Help

Configure Google Workspace Account

Copy Link
Copy Doc ID e0288d11-27c1-11ec-8c53-00505692583a:737051

Configure Google Workspace Account

The Google Workspace account to be added to FortiCWP requires a Super Admin Role or Custom User Role (recommended) assigned.

It is recommended to create a user within the Google Workspace account that is designated to be added to FortiCWP and assigned it with Custom User Role.

Follow the configurations below to create a Custom User Role, then assign it to a Google Workspace account user.

Create Custom User Role

  1. Log into Google Admin Console with your Google Workspace Super Administrator Account. (Only Super Administrator Account can create roles)
  2. From Google Admin navigation menu, go to Account > Admin roles, then click Create new role.
  3. Fill in a name for the role, a short description, and click Continue.
  4. Select the role privileges according to the table below, then click Continue.
  5. Privilege Permission
    Admin console privileges
    Organization Units Read
    Users Read
    Groups
    Domain Settings
    Reports
    Admin API privileges
    Organization Units Read
    Users Read
    Groups Create, Read, Update, Delete
    Billing Management Billing Read
    Domain Management
    Domain Allowlist Management Domain Allowlist Read

  6. Review all the role privileges selected, then click Create Role.

The custom role can now be assigned to a Google Workspace user that is designated to be added to FortiCWP.

Assign Custom User Role

  1. Log into Google Admin Console with your Google Workspace Super Administrator Account.
  2. From the Google Admin navigation menu, go to Directory > Users.
  3. Click on the user that will be added to FortiCWP Workload Protection.
  4. Scroll down and click on Admin roles and privileges.
  5. Click on the edit button to reveal all available roles.
  6. Click on the toggle switch button to assign the custom user role created. Make sure Super Admin role is not assigned.
  7. Click Save to finish assigning the custom user role to the user.

After Google Workspace user configuration is completed, continue with the rest of the configurations.

Configure Google Workspace Account

The Google Workspace account to be added to FortiCWP requires a Super Admin Role or Custom User Role (recommended) assigned.

It is recommended to create a user within the Google Workspace account that is designated to be added to FortiCWP and assigned it with Custom User Role.

Follow the configurations below to create a Custom User Role, then assign it to a Google Workspace account user.

Create Custom User Role

  1. Log into Google Admin Console with your Google Workspace Super Administrator Account. (Only Super Administrator Account can create roles)
  2. From Google Admin navigation menu, go to Account > Admin roles, then click Create new role.
  3. Fill in a name for the role, a short description, and click Continue.
  4. Select the role privileges according to the table below, then click Continue.
  5. Privilege Permission
    Admin console privileges
    Organization Units Read
    Users Read
    Groups
    Domain Settings
    Reports
    Admin API privileges
    Organization Units Read
    Users Read
    Groups Create, Read, Update, Delete
    Billing Management Billing Read
    Domain Management
    Domain Allowlist Management Domain Allowlist Read

  6. Review all the role privileges selected, then click Create Role.

The custom role can now be assigned to a Google Workspace user that is designated to be added to FortiCWP.

Assign Custom User Role

  1. Log into Google Admin Console with your Google Workspace Super Administrator Account.
  2. From the Google Admin navigation menu, go to Directory > Users.
  3. Click on the user that will be added to FortiCWP Workload Protection.
  4. Scroll down and click on Admin roles and privileges.
  5. Click on the edit button to reveal all available roles.
  6. Click on the toggle switch button to assign the custom user role created. Make sure Super Admin role is not assigned.
  7. Click Save to finish assigning the custom user role to the user.

After Google Workspace user configuration is completed, continue with the rest of the configurations.