Google Workspace integration
Connects Google Workspace admin and directory data to automate user lifecycle and access governance workflows.
What it connects
- User accounts, org units, and group memberships from Admin SDK
- OAuth token grants, app access, and third-party app inventory
- Drive sharing permissions and external collaboration settings
- Admin audit logs, login events, and device management data
What it automates
- Provision and deprovision Google accounts from HR ticket triggers
- Detect and remediate overshared Drive files via policy tickets
- Auto-assign Google licenses based on role and department rules
- Flag suspicious OAuth grants and create security review tickets
In practice
A new hire onboarding ticket triggers automatic Google Workspace account creation, org unit assignment, group additions, and license provisioning based on department templates.
STLabs scans OAuth token grants and flags a third-party app with broad Drive access that was authorized by 50 users, creating a security review ticket with full scope details.
External Drive sharing is monitored and tickets are generated when sensitive folders are shared outside the organization, with one-click remediation to revoke access.
License usage reports identify over-provisioned accounts, feeding software asset management workflows for right-sizing.
