Google Workspace

What it covers

2-Step Verification enforcement and super-admin count.

Credential to create

One click to connect (keyless). Optionally one more click to turn on Alert Center - no service account, no key, no files.

Authorize Alert Center (Workspace Admin)

Permissions to grant

• https://www.googleapis.com/auth/admin.directory.user.readonly
• https://www.googleapis.com/auth/admin.reports.audit.readonly
• https://www.googleapis.com/auth/apps.alerts

Setup steps

1. Click "Connect with Google" above and approve as a Workspace admin. That covers 2-Step Verification, super-admin and dormant-account review, the audit log, external mail-forwarding, and risky OAuth grants - no keys, nothing to paste.
2. Optional, to also monitor Google Alert Center (leaked passwords, suspicious logins, phishing, government-backed attacks): click "Authorize Alert Center" below. It opens your Admin console with Joopler's ID and the exact read-only scopes already filled in - just review and click Authorize.
3. That's it. The admin to read as is set automatically from the account you connected with, so once the authorization propagates (a few minutes) Alert Center reports on the next run.

Notes and gotchas

• Read-only, metadata only. Joopler never reads message content - only Google's own security signals and directory/audit data.
• Alert Center uses domain-wide delegation to Joopler's service account. You authorize it with one click; there is no service-account key or JSON for you to create, download, or store - that is Joopler's platform infrastructure, not yours.
• If Alert Center still shows "set up" a few minutes after authorizing, the delegation can take time to propagate across Google; it clears on a later run with no action needed.