Views:

Provision a service account for Gmail to allow Cloud App Security to run advanced threat protection and data loss prevention scanning on email messages in protected Gmail mailboxes.

The steps outlined below detail how to provision a service account for Gmail from Dashboard.

  1. Log on to the Cloud App Security management console.
  2. Hover over Gmail and click Provision.

    The Provision Service Account for Gmail screen appears.

  3. Click Click here in Step 1.

    The Trend Micro Cloud App Security application screen in the Google Workspace Marketplace appears.

    Condition

    Steps

    The Cloud App Security application is not installed.

    1. Click Admin install.

      A new window appears for you to sign in to Google.

    2. Specify your Google Super Admin credentials, and click Next and then CONTINUE.

      An authorization screen appears.

    3. Choose who to install the app for.

      • Everyone at your organization (recommended)

      • Certain groups or organizational units

        Note: If you select this option, make sure the selected groups or organizational units include the Google Super Admin account to be used for provisioning in step 5.

    4. Select I agree to the application's Terms of Service, Privacy Policy, and Google Workspace Marketplace's Terms of Service and click Finish to start installation.

      The application is successfully installed.

    The Cloud App Security application is already installed.

    1. Log on to https://admin.google.com as a Google Super Admin.

    2. Go to Apps > Google Workspace Marketplace apps > Apps list and click Trend Micro Cloud App Security.

    3. Click Grant access in the Data Access section.

      The "Status: Granted" message appears on the screen.

    Note:

    If you change the application scope for Trend Micro Cloud App Security in the User Access section, make sure the selected groups or organizational units include the Google Super Admin account to be used for provisioning in step 5.
  4. Go back to the Cloud App Security management console as instructed and click Click here in Step 2.
  5. In the new browser tab that appears, click your Google Super Admin account.
  6. Go back to the Cloud App Security management console as instructed and click Done.

    Cloud App Security then synchronizes your Gmail user and group information. The time required depends on how many users and groups you have in Gmail.

  7. Hover over the notification icon in the upper-right corner of the management console.

    If the message "Gmail protected." appears on the Notifications screen, the provisioning is successful.

If for some reason the access token becomes invalid, a notification appears on Dashboard. Cloud App Security also sends an email message to notify the administrator of this event. To continue using the service account, go to Administration > Service Account to create a new access token. For more information, see Service Account.

Parent topic: Provisioning Gmail