Google Workspace

May 24, 2026

Connect Google Workspace to monitor user accounts, MFA status, and security settings across your organization for compliance evidence.

What is Google Workspace?

Google Workspace (formerly G Suite) is Google's productivity suite — Gmail, Drive, Docs, Calendar, and more. Because it manages your organization's user accounts and identities, it is one of the most impactful integrations for compliance. Imara uses it to verify that your team's accounts are properly secured.

What Imara collects from Google Workspace

  • All user accounts and their active/suspended status
  • Multi-factor authentication (MFA / 2-Step Verification) status per user
  • Admin accounts and their assigned roles
  • Security settings — login challenges, session duration, OAuth app access
  • User enrollment in security keys or authenticator apps

Required permissions

Imara connects via OAuth using a Google Workspace Super Admin account. The following read-only Google API scopes are requested:

  • admin.directory.user.readonly — read user accounts and MFA status
  • admin.directory.group.readonly — read group memberships
  • admin.reports.audit.readonly — read audit log events

Imara does not create users, reset passwords, or modify any Workspace settings.

How to connect

  1. In Imara, go to Integrations and select Google Workspace.
  2. Click Connect. You will be redirected to a Google sign-in page.
  3. Sign in with a Super Admin account for your Workspace domain.
  4. Review the requested permissions and click Allow.
  5. You will be redirected back to Imara and the initial sync will begin.

Frameworks supported

SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF, LGPD, GDPR.

What to expect

This is typically one of the highest-impact integrations. Imara will immediately surface findings like users without MFA, inactive admin accounts, or overly permissive OAuth app access — each linked to specific controls your auditor will review.

Google Workspace | Imara Documentation