Gmail setup

The Intric Gmail integration uses Google OAuth 2.0 with the https://www.googleapis.com/auth/gmail.readonly scope to access Gmail data on behalf of signed-in users. Google classifies this scope as sensitive, which means:

• Google Workspace admin approval may be required: organizations that restrict third-party app access must explicitly trust the Intric app before users can connect
• Personal Google accounts are unaffected: users with personal Google accounts (outside Google Workspace) can connect directly without any administrator action
• Delegated access only: Intric always acts on behalf of the signed-in user and can only access that user’s own mailbox

All configuration is done in the Google Workspace Admin console (https://admin.google.com). You must be a Super Admin or have the Services Admin role to complete these steps.

Already set up the Google Calendar integration? The Intric app is likely already added in your Google Workspace API controls. Check whether it is already trusted before repeating step 1 — if the app is already trusted, only step 2 is needed.

Step 1: Add Intric as a trusted app in Google Workspace

1. Go to https://admin.google.com and sign in as an admin
2. Navigate to Security → Access and data control → API controls
3. Click Manage Third-Party App Access
4. Click Add app → OAuth App Name or Client ID
5. Search for Intric or enter the Intric OAuth client ID:

Field	Value
OAuth Client ID	(contact Intric support for your deployment’s client ID)
App name	Intric

6. Select the app from the results and click Select
7. Choose which organizational units the app should be trusted for (or select all users)
8. Set the access level to Trusted and confirm

Once saved, users in the selected organizational units will be able to connect their Gmail accounts from My Integrations in Intric.

Step 2: Configure in Intric

Once the Google Workspace trust is in place:

1. Navigate to Admin in the main menu
2. Go to Integrations in the admin panel
3. Find and select Gmail from the list of available integrations
4. Confirm the integration is enabled

Users can then individually connect their Google accounts from My Integrations.

Revoking access

To remove trust for all users (prevents all users in the domain from connecting):

1. Go to https://admin.google.com → Security → Access and data control → API controls
2. Find the Intric app under Third-party app access
3. Click the app and change the trust level to Blocked or remove it entirely

Users who have already connected their Google accounts will lose access immediately.

To revoke a single user’s access, the user can disconnect from My Integrations. An admin can also revoke the token from the Google Workspace Admin console under Users → select user → Security → Connected applications → remove Intric.

For the end-user guide, see Gmail.