How to prepare a Gmail Connection.

Description

This article will walk through the process of configuring the Gmail pre-requisites in order to create the connector that will capture the data.  

A few notes to consider:

The process will require elevated access to the Google Workspace console.
The connector only supports capturing data of gmail accounts present in Google Workspace. 

Authentication and Authorization
A service account is required in order to access resources, including delegated access to users Gmail account

Step 1:  Create the Project

A project is a collection of settings, credentials, and metadata about the application or applications you're working on that make use of Google APIs and Google Cloud Platform resources.

1. Create a Project by logging into the console via the following URL: https://console.cloud.google.com/apis/credentials
2. Create a Credential of type service account.

Step 2: Enable the APIs

Click the Enable APIS AND SERVICES button.  From the list, enable the required APIs listed below:

Gmail
Service Directory API
Admin SDK API

Step 3: Create the service account, making it an owner of the project

Step 4:  Create the service account key and download the JSON 

This JSON file will be used when configuring the connector.  

Step 5: Enable domain-wide delegation for the service account

1. Browse to: https://admin.google.com/ac/owl/domainwidedelegation
2. Select Security, then API controls, then Domain-wide delegation
3. Click the Add new button
4. Enter the Client ID, which is the service account Unique ID
5. Enter the URL's below for the scopes:*

https://www.googleapis.com/auth/admin.directory.user.readonly
https://www.googleapis.com/auth/gmail.modify
https://www.googleapis.com/auth/gmail.readonly
https://www.googleapis.com/auth/admin.directory.group.member.readonly

6. Click the Authorise button

This completes the process.
 
Now it is time to create and configure the Connector that will capture this data