GSuite Configuration

Follow these steps to analyze GSuite users and groups with Cartography.

1. Prepare your GSuite Credential.

   Ingesting GSuite Users and Groups utilizes the Google Admin SDK.

   1. Enable Google API access

   2. Create a new G Suite user account and accept the Terms of Service. This account will be used as the domain-wide delegated access.

   3. Perform G Suite Domain-Wide Delegation of Authority

   4. Download the service account’s credentials

   5. Export the environmental variables:

      1. GSUITE_GOOGLE_APPLICATION_CREDENTIALS - location of the credentials file.

      2. GSUITE_DELEGATED_ADMIN - email address that you created in step 2