ComplyJet integrates with Google Workspace to automatically fetch user, group, and role data across your organization. This allows us to run access reviews, monitor admin privileges, and ensure compliance with frameworks like SOC 2 and ISO 27001 — without any manual effort.
Follow the steps below to securely connect your Google Workspace account using domain-wide delegation and read-only permissions.
Step 1: Sign in to Google Admin Console
To get started, you’ll sign into your Google Admin Console using a super-admin account and provide ComplyJet with your Primary Domain or Customer ID. This allows ComplyJet to identify and link to your organization correctly.
Go to https://admin.google.com and sign in with super-admin credentials
Locate your Primary Domain (e.g.,
yourcompany.com) or Customer ID (e.g.,C012345678)Paste this value into ComplyJet when prompted
Step 2: Set Up Domain-Wide Delegation
Now, you’ll configure domain-wide delegation. This grants ComplyJet the ability to read your user, group, and role data across the organization — without needing to authorize each user individually.
In the Google Admin Console, go to:
Security > Access & Data Controls > API Controls > Manage Domain-Wide Delegation
Click Add New to add a new client
Paste the Client ID into the Google Client ID field
Step 3: Grant Required Read-Only Permissions
Next, you’ll provide ComplyJet with the minimal read-only permissions needed to fetch user and group data for compliance automation.
Copy and paste the following scopes into the OAuth Scopes field (one per line):
https://www.googleapis.com/auth/admin.directory.user.readonly https://www.googleapis.com/auth/admin.directory.group.readonly https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly
Click Authorize to grant access
✅ This gives ComplyJet permission to monitor users, groups, and admin roles.
Step 4: Confirm Delegation Is Active
After completing the previous steps, you’ll now verify that the domain-wide delegation to ComplyJet has been correctly set up.
Ensure that the ComplyJet Google Workspace Integration now appears in your domain-wide delegation list
This confirms ComplyJet can now securely access your directory data
Step 5: Enter Super-Admin Email
To finalize the setup, you’ll need to tell ComplyJet which super-admin account to use when initiating API requests.
Enter the email address of a Google Workspace user with super-admin rights in the ComplyJet setup form
Example:[email protected]
You’re Done!
✅ Your Google Workspace integration is now active
✅ ComplyJet will start syncing users, groups, and admin role information
✅ Automated access reviews and compliance checks will begin in the background