Integration Permissions
Detailed information about the default permissions enabled by our Google Workspace Marketplace app and additional scopes for Google Automation.
Installing Blissfully's Google Workspace integration via the Google Workspace Marketplace app will ask for a set of permissions. This is our default permission set that unlocks the full read-only Google Workspace capabilities of Blissfully. We can customize our approach depending on how you value various features.

Base Permission Settings

Category
Allows Blissfully
Scope & Permission
Gmail
Enable advanced invoice/receipt detection.
https://www.googleapis.com/auth/gmail.readonly
  • View your email messages.
  • Search your email messages.
  • View your settings. (e.g., filters and labels)
Admin - Directory User Security
Uncover OAuth logins & relationships to apps, including which fine-grained Google Workspace permissions they were granted.
https://www.googleapis.com/auth/admin.directory.user.security
  • View and manage data access permissions for users on your domain
Admin - Audit Reports
https://www.googleapis.com/auth/admin.reports.audit.readonly
  • View audit reports of admin and user activity in your G Suite domain. (e.g., password change events and document view events)
Admin - Directory User
Allows Blissfully to enumerate all Google Workspace accounts and add them to our System of Record.
https://www.googleapis.com/auth/admin.directory.user.readonly
  • View access to user profile info on the domain such as names, emails, addresses, phone numbers, metadata, including user's role, manager info, and last login time.
Google Workspace Admin - Usage Reports
Enables Blissfully to track account login activity and native Google Workspace app/license usage/assignment.
https://www.googleapis.com/auth/admin.reports.usage.readonly
  • View reports of how users are using Google apps within your G Suite domain. (e.g., number of users and quantity of emails sent by each user)

Google Workspace Automation Integration

In addition to the default permission settings, Google Workspace Automation Integration requires additional scopes to enable specific automated features in Blissfully.
Category
Allows Blissfully
Scope & Permission
Automation - Data transfer
Reassign Drive files to another user during offboarding.
https://www.googleapis.com/auth/admin.datatransfer, https://www.googleapis.com/auth/admin.datatransfer.readonly
Automation - Directory Group
Add/remove users from Google Groups/Organization Units during onboarding and offboarding.
https://www.googleapis.com/auth/admin.directory.domain.readonly, https://www.googleapis.com/auth/admin.directory.group, https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/admin.directory.orgunit.readonly
Automation - Calendars
Transfer Calendar data during offboarding.
https://www.googleapis.com/auth/calendar, https://www.googleapis.com/auth/calendar.readonly
Automation - Backup
Allows Blissfully to backup Drive files and reassign them to another user during offboarding
https://www.googleapis.com/auth/devstorage.read_only, https://www.googleapis.com/auth/drive, https://www.googleapis.com/auth/drive.file, https://www.googleapis.com/auth/ediscovery
  • Note: We require Vault licenses on the user account to generate the Backup.
Last modified 3mo ago