View a markdown version of this page

Setting up Google Workspace authentication - Amazon Q Business

Amazon Q Business will no longer be open to new customers starting on July 31, 2026. If you would like to use the service, please sign up prior to July 30. For capabilities similar to Q Business, explore Amazon Quick. Learn more.

Setting up Google Workspace authentication

Complete these steps in your Google Workspace environment to prepare for the Amazon Q Business connection:

To set up Google Workspace authentication

  1. Verify you have Google Workspace (not personal Gmail accounts).

  2. Create a Google Cloud Platform admin account and Google Cloud project if you don't already have them.

  3. Enable the Gmail API and Admin SDK API in your Google Cloud project:

    1. Go to the Google Cloud Console API Library.

    2. Search for and enable the Gmail API.

    3. Search for and enable the Admin SDK API.

  4. Create a service account and download the JSON private key. For detailed instructions, see Create a service account key and Service account credentials in the Google Cloud documentation.

  5. Configure OAuth scopes for your service account. Add these required scopes:

    • https://www.googleapis.com/auth/admin.directory.user.readonly

    • https://www.googleapis.com/auth/admin.directory.group.readonly

    • https://www.googleapis.com/auth/gmail.readonly

  6. Save the following information for use in Amazon Q Business:

    • Admin account email address

    • Service account email address

    • Private key from the JSON file