Click on ‘Create Project’
Project name: ’Reco Google Drive’
Organization: ‘Company Name’
Location: ‘’Company Location’
Click Create
Wait for the creation to finish
Click ‘Create Service Account’
Service Account Name: “Reco-google-drive-connector’
Service Account ID: Automatically Prefilled
Service Account Description: ‘Enter Description’
Click on Create and Continue
No role needed
Click on Done
Click on the created service account
Click on Show Advanced Settings
Copy the Client ID found under ‘Domain-wide delegation’
In a new tab, navigate to https://admin.google.com/ac/owl/domainwidedelegation
Click on ‘Add New’
Paste the previously copied Client ID
Paste in the following 3 scopes
https://www.googleapis.com/auth/drive (if you want Reco to remediate permissions automatically)
https://www.googleapis.com/auth/admin.directory.user.readonly (for users listing)
Navigate back to the previous tab for the Google Cloud Admin Console
Click on Keys
Click Add Key
Click Create New Key
Select JSON
Click Create
At this point, Google will automatically create the file and download it to the computer
Open the downloaded json
Add the key-value pair: "admin_email": "<email of google workspace admin>",
* make sure to add ,
Click on the Google Cloud Platform Navigation Menu (3 Lines At the Top Left of the page)
Click on API and Services
Select Library
Search for “Drive API”
Select it and Enable it
At this point go to the Reco dashboard for your organization
Copy the contents of the downloaded file (including the added key-value pair) and paste it into the UI
How to add Google Drive API for Remediation
Written by Reco Product Management
Updated over 4 months ago