Documentation Index

Fetch the complete documentation index at: https://help.goveagle.com/llms.txt

Use this file to discover all available pages before exploring further.

Connecting Google Drive to GovEagle

Prev Next

GovEagle's Google Drive connector makes Drive files available to GovEagle for search and retrieval.

Create a service account

  1. Go to the Google Cloud Console and create a service account in your project.
  2. Make sure the Google Drive API is enabled for that project.
  3. In GovEagle, go to Settings → Integrations (as an administrator with the Integrations permission) and add a Google Drive integration.

From here, you have two options for connecting.

Option 1: Direct service account connection (recommended)

Upload the service account JSON and leave the "Impersonate user email" field empty.

That's it — you're done. The service account will sync exactly the files to which it has been granted access, nothing more. To add files to the sync, share them with the service account's email address (shown on the integrations page) the same way you would share with any other user.

This is the preferred method. Under the least-privilege model, you explicitly choose which files the service account can see, and the sync mirrors that access.

Option 2: Domain-wide delegation

Some customers prefer to use a dedicated Workspace user instead of sharing files directly with a service account email, for example, in organizations where external sharing is restricted. This method requires allowing the service account to authenticate on behalf of Workspace users via domain-wide delegation (DWD).

  1. In the Google Admin console, set up domain-wide delegation for the service account.
  2. Upload the service account JSON to GovEagle.
  3. Fill in the "Impersonate user email" field with the Workspace user to impersonate.

Managing the sync

In both cases, GovEagle syncs every file the designated identity can access — either the service account itself (Option 1) or the impersonated Workspace user (Option 2).

The integrations page shows the email address with which to share files. Share a file with that address to add it to the sync; revoke access to remove it.