Configure Google Workspace Account

The Google Workspace account to be added to FortiCWP requires a Super Admin Role or Custom User Role (recommended) assigned.

It is recommended to create a user within the Google Workspace account that is designated to be added to FortiCWP and assigned it with Custom User Role.

Follow the configurations below to create a Custom User Role, then assign it to a Google Workspace account user.

Create Custom User Role

1. Log into Google Admin Console with your Google Workspace Super Administrator Account. (Only Super Administrator Account can create roles)
2. From Google Admin navigation menu, go to Account > Admin roles, then click Create new role.



3. Fill in a name for the role, a short description, and click Continue.



4. Select the role privileges according to the table below, then click Continue.

Privilege	Permission
Admin console privileges
Organization Units	Read
Users	Read
Groups
Domain Settings
Reports
Admin API privileges
Organization Units	Read
Users	Read
Groups	Create, Read, Update, Delete
Billing Management	Billing Read
Domain Management
Domain Allowlist Management	Domain Allowlist Read



5. Review all the role privileges selected, then click Create Role.

The custom role can now be assigned to a Google Workspace user that is designated to be added to FortiCWP.

Assign Custom User Role

1. Log into Google Admin Console with your Google Workspace Super Administrator Account.
2. From the Google Admin navigation menu, go to Directory > Users.



3. Click on the user that will be added to FortiCWP Workload Protection.



4. Scroll down and click on Admin roles and privileges.



5. Click on the edit button to reveal all available roles.



6. Click on the toggle switch button to assign the custom user role created. Make sure Super Admin role is not assigned.



7. Click Save to finish assigning the custom user role to the user.

After Google Workspace user configuration is completed, continue with the rest of the configurations.