View a markdown version of this page

Setting up Google Workspace authentication - Amazon Q Business

Setting up Google Workspace authentication

Complete these steps in your Google Workspace environment to prepare for the Amazon Q Business connection:

To set up Google Workspace authentication

  1. Verify you have Google Workspace (not personal Gmail accounts).

  2. Create a Google Cloud Platform admin account and Google Cloud project if you don't already have them.

  3. Enable the Gmail API and Admin SDK API in your Google Cloud project:

    1. Go to the Google Cloud Console API Library.

    2. Search for and enable the Gmail API.

    3. Search for and enable the Admin SDK API.

  4. Create a service account and download the JSON private key. For detailed instructions, see Create a service account key and Service account credentials in the Google Cloud documentation.

  5. Configure OAuth scopes for your service account. Add these required scopes:

    • https://www.googleapis.com/auth/admin.directory.user.readonly

    • https://www.googleapis.com/auth/admin.directory.group.readonly

    • https://www.googleapis.com/auth/gmail.readonly

  6. Save the following information for use in Amazon Q Business:

    • Admin account email address

    • Service account email address

    • Private key from the JSON file