> ## Documentation Index
> Fetch the complete documentation index at: https://docs.praxis-ai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Workspace

> Connect Google Workspace to a Digital Twin so it can work with Gmail, Drive, Calendar, Meet, Sheets, Docs, Slides, Classroom and Maps — for each person, or through one account for the whole twin.

Google Workspace lets a Digital Twin reach into Gmail, Drive, Calendar and the other Google services on behalf of the people who use it. You set it up per Digital Twin in the admin editor's **Configuration and Integrations** tab (**Admin › Instances › Edit**), in the **Google** section.

<Info>
  Any administrator who may edit the Digital Twin (the `institutions.edit` entitlement) can set it up — no help from the Praxis AI team needed.
</Info>

## Services and permissions

Tick the Google services the twin may use. Each one asks Google only for the permissions it needs:

| Service | What the twin can do | Permissions asked of Google |
| - | - | - |
| **Gmail** | Search and read mail, send mail | Read mail; send mail |
| **Google Drive** | Find and read files, import them into the IP Vault | Read files and their details |
| **Google Calendar** | Read calendars; create, change and delete events | Read calendars; manage events |
| **Google Meet** | Recordings and transcripts of past meetings | Read meeting spaces and Meet recordings. Needs **Google Calendar** |
| **Google Sheets** | Read spreadsheets | Read spreadsheets. Needs **Google Drive** |
| **Google Docs** | Read documents | Read documents. Needs **Google Drive** |
| **Google Slides** | Read presentations | Read presentations. Needs **Google Drive** |
| **Google Classroom** | Courses, the person's coursework and submissions, announcements — read only | Read courses; read coursework; read submissions; read announcements |
| **Google Maps** | Place and address lookups | None — it uses a key set by Praxis AI, not Google sign-in |

A service that needs another brings that one with it: ticking Google Sheets also asks for Google Drive, and Google Meet also asks for Google Calendar.

### What counts as connected

A Google service counts as connected only when **every** permission it needs was allowed at Google. If a permission was skipped, that service's tools are not offered — a Digital Twin connected only for Google Meet, for example, gets no Google Drive tools. To add a service later, connect Google again with it ticked. If Google Classroom was connected before it asked for coursework access, connect again.

## Two ways to connect

<Tabs>
  <Tab title="Each person connects their own account (default)">
    With **Use Digital Twin identity** off, each person connects their own Google account from their profile — see [Google Services](/mdx/user-guide/profile-settings/google-services). The twin acts on that person's data only.
  </Tab>

  <Tab title="One shared account for the whole Digital Twin">
    Turn on **Use Digital Twin identity** and select **Connect Google Account**: everyone reaches Google through that one account, which an administrator authorizes once. Use it when the twin should work with your organization's own mailbox, drive or calendar rather than each person's — a department's shared drive or calendar, for example — or when people should not have to go through Google's consent screen themselves.
  </Tab>
</Tabs>

<Steps>
  <Step title="Open the Google section">
    **Admin › Instances**, select **Edit** on the Digital Twin, open **Configuration and Integrations** and scroll to **Google**.
  </Step>

  <Step title="Turn on Enable Access">
    **Enable Access** makes Google available in this Digital Twin. While it is off, members are not offered Google tools, even with their own Google account connected.
  </Step>

  <Step title="Choose how people connect">
    Leave **Use Digital Twin identity** off, or turn it on for a shared account.
  </Step>

  <Step title="Tick the services">
    Tick the services the twin should use. With a shared account, Drive, Sheets, Docs, Slides, Meet and Classroom are read-only; Gmail can also send email and Calendar can also change events, so include those two deliberately.
  </Step>

  <Step title="Connect (shared account only)">
    Select **Connect Google Account** and accept the permissions on Google's consent screen. The section then shows the connected email address and the last token refresh; tokens refresh on their own. **Disconnect** revokes the authorization and clears the saved credentials.
  </Step>
</Steps>

A save keeps only the switches you changed, so two administrators editing at once do not undo each other, and after **Disconnect** the section shows the service's real state.

<Warning>
  A connected shared account takes precedence over any personal Google account a person connected — everyone goes through the shared account. The service list is locked while the shared account is connected: to change it, disconnect and connect again.
</Warning>

## Permissions to approve in Google Workspace

Pria is a Google-verified app and has completed Google's Cloud Application Security Assessment (CASA) for the Google data it uses.

If your Google Workspace administrator must approve Pria before people can connect, these are the permissions it asks for. Every connection asks for `openid`, `profile` and `email`, plus the scopes of the services selected (all under `https://www.googleapis.com/auth/`):

| Service | Scopes |
| - | - |
| Gmail | `gmail.readonly`, `gmail.send` |
| Google Drive | `drive.readonly`, `drive.metadata.readonly` |
| Google Calendar | `calendar.readonly`, `calendar.events` |
| Google Meet | `meetings.space.readonly`, `drive.meet.readonly` |
| Google Sheets | `spreadsheets.readonly` |
| Google Docs | `documents.readonly` |
| Google Slides | `presentations.readonly` |
| Google Classroom | `classroom.courses.readonly`, `classroom.coursework.me.readonly`, `classroom.student-submissions.me.readonly`, `classroom.announcements.readonly` |

Google Maps asks for no Google permission.

## Troubleshooting

<AccordionGroup>
  <Accordion title="People don't see Google tools">
    * Check that **Enable Access** is on for the Digital Twin.
    * With a shared account, check that the service was ticked when the account was connected.
    * Without one, each person must connect their own Google account and allow every permission of the service — see [Google Services](/mdx/user-guide/profile-settings/google-services).
  </Accordion>

  <Accordion title="A shared connection stops working after a while">
    Google may have revoked or expired the authorization. Select **Disconnect**, then **Connect Google Account** again: the new consent gives the twin fresh access.
  </Accordion>
</AccordionGroup>

## Related

* [Google Services (user guide)](/mdx/user-guide/profile-settings/google-services) — how people connect their own accounts
* [Microsoft 365](/mdx/admin-guide/microsoft-365) — the same setup for Microsoft
* [Configuration](/mdx/admin-guide/configuration) — the rest of the Digital Twin editor
* [Tools](/mdx/admin-guide/tools) — the tools that act on connected services


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.