Fortinet black logo

Version:

Version:

Version:

Version:


Table of Contents

Online Help

Configure Google Workspace Account

The Google Workspace account to be added to FortiCWP requires a Super Admin Role or Custom User Role (recommended) assigned.

It is recommended to create a user within the Google Workspace account that is designated to be added to FortiCWP and assigned it with Custom User Role.

Follow the configurations below to create a Custom User Role, then assign it to a Google Workspace account user.

Create Custom User Role

  1. Log into Google Admin Console with your Google Workspace Super Administrator Account. (Only Super Administrator Account can create roles)
  2. From Google Admin navigation menu, go to Account > Admin roles, then click Create new role.
  3. Fill in a name for the role, a short description, and click Continue.
  4. Select the role privileges according to the table below, then click Continue.
  5. Privilege Permission
    Admin console privileges
    Organization Units  Read
    Users Read
    Groups  
    Domain Settings  
    Reports  
    Admin API privileges
    Organization Units Read
    Users Read
    Groups Create, Read, Update, Delete
    Billing Management Billing Read
    Domain Management
    Domain Allowlist Management Domain Allowlist Read

  6. Review all the role privileges selected, then click Create Role.

The custom role can now be assigned to a Google Workspace user that is designated to be added to FortiCWP.

Assign Custom User Role

  1. Log into Google Admin Console with your Google Workspace Super Administrator Account.
  2. From the Google Admin navigation menu, go to Directory > Users.
  3. Click on the user that will be added to FortiCWP Workload Protection.
  4. Scroll down and click on Admin roles and privileges.
  5. Click on the edit button to reveal all available roles.
  6. Click on the toggle switch button to assign the custom user role created. Make sure Super Admin role is not assigned.
  7. Click Save to finish assigning the custom user role to the user.

After Google Workspace user configuration is completed, continue with the rest of the configurations.

 

 

 

Configure Google Workspace Account

The Google Workspace account to be added to FortiCWP requires a Super Admin Role or Custom User Role (recommended) assigned.

It is recommended to create a user within the Google Workspace account that is designated to be added to FortiCWP and assigned it with Custom User Role.

Follow the configurations below to create a Custom User Role, then assign it to a Google Workspace account user.

Create Custom User Role

  1. Log into Google Admin Console with your Google Workspace Super Administrator Account. (Only Super Administrator Account can create roles)
  2. From Google Admin navigation menu, go to Account > Admin roles, then click Create new role.
  3. Fill in a name for the role, a short description, and click Continue.
  4. Select the role privileges according to the table below, then click Continue.
  5. Privilege Permission
    Admin console privileges
    Organization Units  Read
    Users Read
    Groups  
    Domain Settings  
    Reports  
    Admin API privileges
    Organization Units Read
    Users Read
    Groups Create, Read, Update, Delete
    Billing Management Billing Read
    Domain Management
    Domain Allowlist Management Domain Allowlist Read

  6. Review all the role privileges selected, then click Create Role.

The custom role can now be assigned to a Google Workspace user that is designated to be added to FortiCWP.

Assign Custom User Role

  1. Log into Google Admin Console with your Google Workspace Super Administrator Account.
  2. From the Google Admin navigation menu, go to Directory > Users.
  3. Click on the user that will be added to FortiCWP Workload Protection.
  4. Scroll down and click on Admin roles and privileges.
  5. Click on the edit button to reveal all available roles.
  6. Click on the toggle switch button to assign the custom user role created. Make sure Super Admin role is not assigned.
  7. Click Save to finish assigning the custom user role to the user.

After Google Workspace user configuration is completed, continue with the rest of the configurations.