Skip to main content
Pria integrates with Google Workspace to give your Digital Twin access to Gmail, Google Drive, Calendar, Sheets, Docs, Slides, Meet, Classroom, and Maps. Users can ask their Digital Twin to read emails, search files, create calendar events, and more — all within the conversation interface.

​
Available Services

What you can say:
  • “Show me my unread emails from this week”
  • “Search my inbox for messages from jane@example.com about the budget”
  • “Send an email to the team with a summary of today’s discussion”
  • “Find emails with attachments from the last 30 days”
  • “List my recent Google Meet recordings”
  • “Get the transcript from yesterday’s team meeting”

​
Authorization Models

Pria supports two authorization models that can be used independently or together.

​
Personal Authorization

Each user connects their own Google account through their Profile settings. They select which services to enable, authorize through Google’s consent screen, and the tokens are stored securely per-user.

​
Institution-Shared Authorization

Administrators can connect a shared Google account at the institution level. When configured, all users on the instance automatically gain access to the connected Google services — no individual OAuth authorization needed. Key use cases:
  • Departmental access — Share a department’s Google Drive, Gmail, or Calendar with all students and staff
  • Simplified onboarding — Users can access Google services immediately without going through OAuth consent
  • Centralized control — Administrators manage exactly which services are available and whether access is read-only
Service-level controls:
  • Service selection — When connecting the shared account, the administrator chooses which Google services it covers (each service maps to its own Google permissions). Only the selected services are available through the shared credentials.
  • Enabled for Users — A single switch controls whether end users on the instance can use the shared Google Workspace services at all.
  • Conservative permissions by design — Drive, Sheets, Docs, Slides, and Classroom are connected with read-only permissions; Gmail can also send email and Calendar can also create events, so grant those services deliberately on a shared account.

​
Authorization Priority

When both personal and institution-shared credentials exist, Pria resolves tokens with this priority:
  1. Institution-shared credentials (when the admin has connected a shared account and switched the instance to use it)
  2. Personal credentials (the user’s own Google account)
This means institution-shared credentials take precedence for the services they cover. If an admin connects a shared Gmail, all users will use that shared Gmail rather than their personal one — even if they’ve also authorized their personal account.

​
Google Maps

Google Maps does not require OAuth authorization. It uses a server-side API key managed by the platform, so users can ask their Digital Twin for place search and geolocation without any personal authorization or setup.

​
Service Dependencies

Some Google services require parent services to function: When a user enables a dependent service, the parent service is automatically enabled as well.

​
Troubleshooting

During the OAuth consent screen, Google may display a warning that the application is not yet verified. This is expected — the Pria middleware is currently undergoing CASA Tier 2 compliance verification with Google. To proceed, click Advanced and then Go to [app name] (unsafe) to continue the authorization. This warning will be removed once verification is complete.
If a connected service starts failing after working initially, the stored refresh token may have been revoked or expired. Disconnect the service in Profile settings (or the admin panel, for a shared account) and reconnect it — the fresh consent flow issues a new refresh token.
  • Check that the Google connection is configured for the instance (or that users have connected their own accounts)
  • Verify the corresponding APIs are enabled in Google Cloud Console
  • For institution-shared services, confirm the Enabled for Users switch is on and the service was included when the shared account was connected
  • Google Services User Guide — End-user authorization and usage guide
  • Configuration — Instance settings including Google OAuth
  • Tools — Tool definitions that power Google service interactions
  • IP Vault — Files downloaded from Google Drive are stored here