To connect your Google Workspace to ChatGPT using admin-managed setup, you'll first configure access in Google’s admin consoles:

• Create a service account with read-only access to Google Drive, users, and groups.

  • This service account is strongly recommended to be created under the same Google account that is associated with your ChatGPT Workspace. If the accounts in the ChatGPT workspace have a different email domain than that used in Google Workspace, there are additional steps you have to follow to enable this connector for your users.

• Create an admin account that the service account will act on behalf of.

Then, complete the setup in the ChatGPT admin console:

• Upload the service account’s private key (a JSON file from Google)

• Specify the admin account (no credentials required).

• Select which files to sync and choose the users who will have access to the connection.

This guide walks through each of these 6 steps.

Setting up a Service Account

1. Navigate to console.cloud.google.com.

2. Click on the projects dropdown.ImageEnsure you are logged into the same Google workspace as the one associated with your ChatGPT workspace (if you do not have a Google workspace associated with your ChatGPT workspace and have different emails between the two, you will have to follow additional steps, otherwise your users may not be able to use Google Drive synced connectors).

3. Choose New Project

   

4. Input a Project Name

   

5. Create the project

   

6. Wait until the project has been created, then click on Select Project

   

7. Click on APIs & Services

   

8. Click on Library

   

9. We’re now going to add three APIs, using the search box to find them

   

10. Search for and choose Google Drive API

    

11. Click Enable

    

12. Click on Library

    

13. Search for Google Drive Activity

    

14. Choose Google Drive Activity API

    

15. Click Enable

    

16. Click on Library

    

17. Search for Admin SDK API

    

18. Choose Admin SDK API

    

19. Click Enable

    

20. Click on Credentials

    

21. Click on Create Credentials

    

22. Click on Service account

    

23. Provide a name and description of your choice for this service account

    

24. (Optional) You can assign a role - this is not required by ChatGPT.

    

25. (Optional) You can grant access to the service account - this is not required by ChatGPT.

    

26. Click Done.

    

27. Click on the service account which has now been created.

    

28. Click on keys.

    

29. Click on Add Key

    

30. Click on Create new key

    

31. Keep the default JSON key type and click Create
    If you see an error message that says “Service account key creation is disabled” follow these steps to enable creation.

    

32. Click Close. The key has now been downloaded to your computer. You will later upload this to the ChatGPT admin console.

    

33. Click on details

    

34. Note that the Unique ID. This will be needed in Step 42.

    

35. Expand Advanced settings

    

36. Scroll down and click on View Google Workspace Admin Console. The Google Workspace console will open in a new tab.

    

37. Click Show more

    

38. Expand the Security section

    

39. Expand the Access and data controls section

    

40. Click on the API controls section

    

41. Click on Manage Domain Wide Delegation

    

42. Click on Add new

    

43. Use the Unique ID previously noted as the value for this Client ID

    

44. For the OAuth scopes, refer to the following comma de-limited auth scopes values that you'll need to copy and paste:

45. Click Authorize

46. Success!

Setting up the Admin Account

1. Expand Directory

   

2. Click on Users

   
   

3. Provide a first name, last name, and primary email address of your choosing

   

4. Click Add new user

   

5. (Optional) Record these credentials. ChatGPT does not need these credentials.

   

6. Click Done.

   

7. Click on the account you just created. If it does not appear in the list, refresh the page or clear your cache and cookies and try again.

   

8. Click on assign roles.

   

9. Toggle on the Groups Reader, User Management Admin, and Storage Admin roles.

   

10. Scroll down and click Save. The admin account has now been successfully created and configured.

Completing setup on the ChatGPT Admin Console

1. Navigate to ChatGPT and click on the profile icon on the upper right corner of the page.

   

2. Click on Manage workspace

   

3. Click on Connections and then under ‘Synced connectors’ → Enable Sync

   

4. Ensure Admin-managed is selected and click on Next

   

5. Type in a display name. We recommend using the name of your Google Workspace.
   Please note that we currently do not support changing the name of your connection.

   

6. Click Save Draft and Continue

7. Click Upload key. Choose the JSON file, which is the key you downloaded as part of setting up the service account above. Ensure this key is accurate

   

8. Type in the admin email address. This is the admin account you created previously.

   

9. Click Save.

   

10. Choose whether you want the files in all of your users’ My Drives to be included.

    

11. Click Next

    

12. Choose how to manage shared drives. We support the following three scenarios:

    1. If you want to include all shared drives, then choose Include by default and do not add shared drive IDs to be excluded

    2. If you want to include most shared drives, then choose Include by default and add the IDs for the shared drives you want excluded

    3. If you want to exclude most shared drives, then choose Exclude by default and add the IDs for the shared drives you want included

    

13. To look up the ID for a shared drive, navigate to it in a web browser. The last portion of the URL is the shared drive ID.
    In the following example, it is `0ADvY03uUbEcQUk9PVA`'

    

14. Click Next

    

15. Choose who should have access to the Google Drive connection. You can either select Admins of the ChatGPT workspace only, or enable it for everyone. If enabled for everyone, new users added to the workspace will automatically be included.

    

16. Click Start syncing

    

17. Your Google Drive connection has now been successfully created!
    Please note that, while it will start syncing immediately, it can take hours to days to complete depending on how many files were included based on your settings.
    Once files added/edited in the past 30 days have finished syncing, the connector will become available to the users you enabled it for.

    

Enabling service account key creation

If you receive the following error, you will need to enable service account creation for this specific project:

> The organization policy constraint ‘iam.disableServiceAccountKeyCreation’ is enforced on your organization.

1. Open up a new tab and navigate to console.cloud.google.com. Make sure the selected project is the one you’ve already selected.
   Click on the menu icon in the upper left corner.

   

2. Hover over IAM & Admin

   

3. Click on Organizational Policies

   

4. Search for iam.disableServiceAccountKeyCreation

   

5. Click on the result for constraints/iam.disableServiceAccountKeyCreation

   

6. Click on the … for the row with the ID of iam.disableServiceAccountKeyCreation

   

7. Click on Edit policy. If Edit policy is disabled, you’ll need to become an Organization Policy Administrator.

   

8. Click on Override parent’s policy

   

9. Click on Add a rule

   

10. Click on Set Policy

    

11. You can now create a service account key. This enablement may take several minutes to take effect.

Becoming an Organization Policy Administrator

1. Navigate to console.cloud.google.com and click on the project/organization selector

   

2. Click on your organization

   

3. Click on the menu icon in the upper-left corner

   

4. Hover over IAM & Admin

   

5. Click on IAM

   

6. Click on the pencil for your account

   

7. Click on Add Another Role

   

8. Search for Organization Policy Administrator

   

9. Click on Organization Policy Administrator

   

10. Click Save

    

11. Your account now has permission to enable service account key creation. This may take several minutes to take effect.

Using a Google Email Alias to Maintain Different Email Accounts for Google Workspace and ChatGPT

If you're an admin connecting Google Workspace to your ChatGPT workspace using the admin-managed setup for Google Drive synced connectors, and your organization uses different email domains for ChatGPT and Google Workspace, you’ll need to take additional steps to ensure users can successfully access Google Drive synced connectors.

If this isn’t feasible, follow the instructions below to configure a Google Workspace email alias that matches the ChatGPT sign-in email.

Steps to Add a Google Workspace Alias

Follow these steps in the Google Admin Console to ensure each user's ChatGPT email can be linked to their Google Workspace account:

1. Go to the Admin Console. Navigate to: Directory > Users

2. Select a User, then “ADD ALTERNATIVE EMAILS”.

3. Add an Alternative Email. Ensure it corresponds to the user’s ChatGPT account.

4. Select Save

Known Limitations

Personal email addresses are not supported

Users who register for ChatGPT using personal addresses (e.g., example@gmail.com) cannot connect to Google Workspace. This setup is unsupported and presents a security risk, as it enables access to internal data from outside the organization.

Gmail "+" aliases are not supported

Gmail allows users to create aliases by appending a "+" to their address (e.g., user+alias@gmail.com). This type of aliasing does not work with Google Drive synced connectors. The alias must be explicitly configured in Google Workspace.

Common Error Message

If email addresses are not properly linked, users may encounter this message: "We were unable to connect your account to Google Drive. Click to learn more."

If users receive this message, review the steps in this document and ensure they are followed accurately. If additional assistance is needed, please contact our support team.