Skip to content

Google ​

2 min read

Google connects Gmail, Calendar, and Drive to your agents. Before adding accounts, configure a Google Cloud application for the organization. The same application is reused by every account you connect later.

Configure the application ​

Open Settings > Google in Kujira. It provides the redirect URL and permissions to configure in Google Cloud.

Create the project

In Google Cloud, create a project and configure its consent screen.

Set audience and permissions

Choose internal for your own Google Workspace, or external for personal or third-party accounts. Add the five scopes shown by Kujira to the consent screen.

Create the OAuth client

Create a web-application client and add Kujira's redirect URL.

Save credentials

Copy the client ID and secret into **Settings > Google**.

Permissions Kujira needs ​

  • openid and email identify the account authorizing the connection.
  • https://mail.google.com/ lets the agent read, send, and manage email.
  • https://www.googleapis.com/auth/calendar lets it view and change calendars and events.
  • https://www.googleapis.com/auth/drive lets it access Drive files according to connected-account permissions.

Restricted permissions

Gmail and Drive scopes are restricted. If you publish an external application, Google may require validation before people outside your organization can authorize it.

Connect accounts and assign them ​

Connect every account from Connectors or while configuring an agent channel. Assign it only to agents that need it, then select calendars, labels, or folders to watch.

ServiceEvents it can receiveActions of the authorized account
GmailEmail filtered by sender or labelRead, send, and manage email
CalendarCreated, changed, cancelled events and remindersView and modify calendars and events
DriveChanges in the selected folderRead, upload, edit, and share files according to account permissions

Filters control events reaching the agent; they do not restrict the scope Google granted to the account. If you replace the Google application, accounts must authorize again.