[Email DLP] Group Synchronization Settings in Google Workspace

Overview

This article explains the setup procedure required to synchronize group information from Google Workspace to Email DLP for customers who synchronize group information from Google Workspace to Email DLP.

Notes

1. A Google Workspace privileged administrator account is required to perform this procedure.
2. Before performing this procedure, you need to enable the directory in Google Workspace in advance.
   Turn the directory on or off (external link)
3. Email DLP Administrator privileges are required to check the actual screen or change settings.
   Please refer to the following article for how to configure an Administrator.
   Setting up Email DLP administrator privileges
4. Please refer to the following article for how to access the administration screen.
   [Email DLP] How to log in to the administration screen
5. The content of this article is based on the product information as of July 2026 and may be changed without notice.

Procedure

When configuring the settings for the first time

1. Access the [Google Admin console] of Google Workspace.
2. From the menu list, click [Security] - [Access and data control] - [API controls].
3. Click [Manage Domain Wide Delegation].
4. Click [Add new] in the [API clients] column.

5. On the [Add a new client ID] screen, enter the following values.
   Client ID

   102937852759751394212

   OAuth Scopes (comma-delimited)

   https://www.googleapis.com/auth/admin.directory.group.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly

6. Confirm that the information for the added API client is displayed on the screen.

7. Access [Tenant Settings] - [Integrations] from the left menu of the Email DLP administration screen.

   

8. Click the [Authorize] button for [Group Sync with Google Workspace Setup].

   

9. Enter the email address of the Google Workspace privileged administrator and click [Next].

   

10. Once "enable" is displayed on the [Integrations] page, the integration is Completed.

    

    ※ Be sure to perform the integration task in the Email DLP administration screen only after completing the work through Step 7.
    If you perform this task before completing the work through Step 7, an error message like the one shown below will be displayed.

    

If you want to change the linked Google Workspace privileged administrator account

1. Access [Tenant Settings] - [Integrations] from the left menu of the Email DLP administration screen.

   

2. Click [Reconfigure Route] for [Group Sync with Google Workspace Setup].

   

3. Enter the email address of the Google Workspace privileged administrator and click [Next].

   

4. Once "enable" is displayed on the [Integrations] page, the integration is Completed.

   

   ※ If an error message like the one shown below is displayed, please refer to the following article.
   [Email DLP] What should I do if synchronization between the Address group and groupware fails?

   

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.