Prepare Your Google Drive Unstructured Data Connection (Beta)
Before you connect Google Drive to Data 360, gather the required information and complete the preliminary setup in Google Console and Google Drive.
This feature is a Beta Service. A customer may opt to try a Beta Service in its sole discretion. Any use of the Beta Service is subject to the applicable Beta Services Terms provided at Agreements and Terms. If you have questions or feedback about this Beta Service, contact the Data 360 Connector team at datacloud-connectors-beta@salesforce.com.
-
In the Google Cloud Console, turn on the Google Drive API.
-
Service accounts are Google identities used by applications to securely access Google APIs. For this connector, authentication is service account-based. With a service account, the connector can read files from Google Drive and access user information in your Google Workspace domain.
Note: You must use an admin account to complete these steps.
- Go to https://console.cloud.google.com/.
- Navigate to IAM & Admin Select.
- Click on Create service account.
- Enter a Service account name and click on Create and continue. This will create a service account in Google.
- To delegate permissions to the service account, go to Permissions.
- Select Manage access.
- Assign the Service Account Token Creator role.
- Save your changes.
- To create a key for the service account, go to Keys.
- Select Add Key.
- Click Create new key.
- Select JSON for the key type and click Create.
This will save a JSON file that contains client_email, scope, private_key, and token_url. You use these values to authorize users with the Google Drive connector.
Below is how the private key JSON file will look like:
Note: You can now use your service account for Agentforce use cases. To use this account to access data for multiple users, you must configure domain-wide delegation for the service account. If you want to ingest all shared or personal drives, configure domain-wide delegation. If you're ingesting a specific shared drive ID, you can skip these steps.
- Go to https://admin.google.com/.
- Navigate to Security and select API controls.
- Click Domain-wide delegation.
- Click Add new to create a domain-wide delegation for your client ID.
- Enter the
client_idfrom the private key JSON file, and add these scopes: - Click Authorize.
Your service account is ready.
- Ensure that you complete these steps using a Google account with access to the files and folders that you want to connect to Salesforce.
- To ingest unstructured data, find the shared drive or folder in Google Drive that contains the relevant files. Identify the drive ID at the end of the folder's URL, such as https://drive.google.com/drive/folders/{drive_id}.
- If you're ingesting a specific shared drive ID, verify that the admin account email used to create the connection has access to that drive.