---
sourceDocument: Xanadu IT Asset Management
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/it-asset-management

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu IT Asset Management

ft:clusterId :

    - itam

bundleId :

    - itam

workflow :

    - Technology


---

# Integrating with Google Workspace

# Integrating with Google Workspace {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 12, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 5 minutes to read

Integrating your Software Asset Management application with the Google Workspace service enables you to track your software subscriptions and to reclaim unused licenses.  
Note:  
The Google Workspace integration supports the following products:

* Google Apps
* Google Vault SKUs
* Archived User SKUs
{#integrate-with-gsuite__ul_wyl_4vg_hgc}

For additional information about the Google Workspace service, see [Google Workspace Admin Help](https://support.google.com/a/?hl=en#topic=7570177).  
Important:  
Minimize security risks and protect information by granting access only to the necessary user or API permissions.{#integrate-with-gsuite__table_box__entry__3}

| Process | Required user role in the Google Workspace application | Authentication scopes |
|-|-|-|
| Download subscriptions | Admin API privileges: Users Read | * \[Admin SDK API\] https://www.googleapis.com/auth/admin.directory.user.readonly * \[Admin SDK API\] https://www.googleapis.com/auth/admin.directory.domain.readonly * \[Enterprise License Manager API\] https://www.googleapis.com/auth/apps.licensing {#integrate-with-gsuite__ul_h4p_1fr_dcc} |
| Pull user activity | Admin API privileges: Users Read | * \[Admin SDK API\] https://www.googleapis.com/auth/admin.directory.user.readonly * \[Admin SDK API\] https://www.googleapis.com/auth/admin.reports.usage.readonly {#integrate-with-gsuite__ul_qp3_3fr_dcc} |
| Reclaim subscription | Super Administrator | * \[Admin SDK API\] https://www.googleapis.com/auth/admin.directory.user.readonly * \[People SDK API\] https://www.googleapis.com/auth/userinfo.email * \[People SDK API\] https://www.googleapis.com/auth/userinfo.profile * \[Admin SDK API\] https://www.googleapis.com/auth/admin.datatransfer.readonly * \[Admin SDK API\] https://www.googleapis.com/auth/admin.directory.user {#integrate-with-gsuite__ul_ojw_lfr_dcc} |
[Table 1. Minimal user permissions]

{#integrate-with-gsuite__box-title}

## Create a Google Workspace project {#ariaid-title2}

Create a new project in the Google API Console.

### Before you begin

Google Workspace Role required: Refer to the [Minimal user permissions](https://www.servicenow.com/docs/msBlBBSA3DRg9vU7VrgBSA#integrate-with-gsuite "Integrating your Software Asset Management application with the Google Workspace service enables you to track your software subscriptions and to reclaim unused licenses.") table.

### Procedure

1. Log in to [Google API Console](https://console.developers.google.com).
2. Select Select a projectNew Project.
3. Enter a name for your project in the Project name, then select your Organization and Location.
4. Select Create.
5. Select the OAuth consent screen on the left navigation menu.
6. Select User Type as Internal and select Create.
7. Enter the App name and select User support email in the App information section.
8. In Authorized domains, select the ADD DOMAIN button and add <kbd class="ph userinput">service-now.com</kbd>.
9. Enter Email addresses in the Developer contact information section.
10. Select Save and Continue to add scopes.
11. On the Scopes page, select the Add or Remove Scopes button.
12. In the Manually add scopes section, enter the following scopes by pasting them to the text area:  
    * https://www.googleapis.com/auth/apps.licensing
    * https://www.googleapis.com/auth/admin.directory.user
    * https://www.googleapis.com/auth/admin.directory.user.readonly
    * https://www.googleapis.com/auth/admin.directory.domain.readonly
    * https://www.googleapis.com/auth/admin.datatransfer
    * https://www.googleapis.com/auth/admin.datatransfer.readonly
    * https://www.googleapis.com/auth/admin.reports.usage.readonly
    * https://www.googleapis.com/auth/userinfo.profile
    * https://www.googleapis.com/auth/userinfo.email
    {#create-gsuite-project__ul_ldk_cqm_mwb}
13. Select ADD TO TABLE and then select Update.
14. Select Save and Continue.
15. Select Credentials on the left navigation menu and select CREATE CREDENTIALS.
16. Select OAuth client ID.
17. Fill out the form as shown and select Create.  
    {#create-gsuite-project__table_tgs_fjf_1hb__entry__2}

    | Field | Value |
    |-|-|
    | Application type Note: Selecting a value for this field causes the remaining fields to be displayed. | Web application |
    | Name | Any name of your choice |
    | Authorized JavaScript origins | https://<var class="keyword varname">instance</var>.service-now.com, where <var class="keyword varname">instance</var> is the name of your ServiceNow instance |
    | Authorized redirect URIs | https://<var class="keyword varname">instance</var>.service-now.com/oauth_redirect.do, where <var class="keyword varname">instance</var> is the name of your ServiceNow instance |
    [ ]

    {#create-gsuite-project__table_tgs_fjf_1hb}
18. Select OK.  
    You can now view your client ID and client secret that you would use in your ServiceNow instance.  
    Note:  
    Your client ID and client secret are sensitive. Don't share them.
19. Select Library on the left navigation menu.  
    Search for and enable the following APIs:
    * Enterprise License Manager API
    * Admin SDK
    * Google People API
    {#create-gsuite-project__ul_ukg_rgc_chb}
{#create-gsuite-project__steps_m5h_xtg_ynb}

## Create a Google Workspace integration profile {#ariaid-title3}

Create an integration profile to track software subscriptions and optimize licensing for the Google Workspace service.

### Before you begin

To create a Google Workspace integration profile, request the Software Asset Management - SaaS License Management plugin (sn_sam_saas_int) from the [ServiceNow Store](https://store.servicenow.com/).

ServiceNow Role required: sam_integrator or admin

### About this task

If you're using Software Asset Workspace, the option to create the Google Workspace integration profile in Core UI is inactive.

### Procedure

1. Navigate to the integration profile.

   | Interface | Action |
   | Core UI | 1. Navigate to AllSoftware AssetSaaS LicenseDirect Integration Profiles. 2. Select New. 3. Select Google Workspace Integration Profile. {#create-integration-profile-gsuite__ol_ijd_bjk_qtb} |
   | Software Asset Workspace | 1. Navigate to License operationsUser SubscriptionsDirect integration profiles. 2. Select New. 3. Select Google Workspace from the drop-down list. 4. Select Continue. {#create-integration-profile-gsuite__ol_wjd_bjk_qtb} |
   |-|-|

   {#create-integration-profile-gsuite__choicetable_o3p_z3k_qtb}
2. On the form, fill in the fields.  
   {#create-integration-profile-gsuite__table_gnm_whv_5fb__entry__2}{#create-integration-profile-gsuite__display-name-def}{#create-integration-profile-gsuite__client-id-def}{#create-integration-profile-gsuite__redirect-url-def}{#create-integration-profile-gsuite__client-secret-def}{#create-integration-profile-gsuite__profile-type-def}

   | Field | Value |
   |-|-|
   | Display name | Name of the integration profile. For example, <kbd class="ph userinput"><span class="keyword">Google Workspace</span> Integration</kbd> |
   | Client Id | Client ID for the OAuth application created in the SaaS admin account. |
   | Redirect url | URL of the OAuth provider that you're redirected to after authentication. This value is automatically populated. |
   | Client secret | Password associated with the client ID. |
   | Profile type | Type of integration profile. This value is automatically set to Google Workspace Subscription. |
   [Table 2. Integration Profile form]

   {#create-integration-profile-gsuite__integration-form-title}
3. Select Submit.
4. On the integration profile, select Get OAuth Token.  
   Note:  
   For the role required to perform this step, refer to the [Minimal user permissions](https://www.servicenow.com/docs/msBlBBSA3DRg9vU7VrgBSA#integrate-with-gsuite "Integrating your Software Asset Management application with the Google Workspace service enables you to track your software subscriptions and to reclaim unused licenses.") table.
5. In the pop-up window, select your Google admin account and select Allow.  
   Note:  
   When user subscriptions are reclaimed, files from the reclaimed accounts are transferred to the admin account selected in this step. This account can be a different admin account than the one used to set up the integration. If you have to start transferring files to a new admin, you can select the Get OAuth Token related link again at any time to select a different admin account. After selecting a new admin, you can reclaim the old admin account to transfer all of their files to the new admin, including all previously reclaimed user files.

### Result

You can view events performed by individual users up to one year prior to the current date. For more information, see [Review a software reclamation rule](https://www.servicenow.com/docs/nAflLzIGyHaK_OpPmTYTvw "Use reclamation rules to cancel user subscriptions that have limited to no activity.").  
Note:  
Software Asset Management pulls the events from the time that you start downloading user subscriptions irrespective of the profile creation date.

### What to do next

After the integration connects, your ServiceNow instance automatically creates software models, reclamation rules, and software subscriptions that are refreshed daily.

If you want to set up multiple integration profiles with unique connections, create child aliases to manage different configurations and settings for each integration profile. For more information, see [Create a child alias to set up multiple integration profiles](https://www.servicenow.com/docs/ank2kL8kWf4RhxBVQvFw5g "Create a child alias to set up multiple integration profiles with unique connections and manage different configurations for each integration profile.").

Review all automatically generated reclamation rules to reclaim user subscriptions. For more information, see [Review a software reclamation rule](https://www.servicenow.com/docs/nAflLzIGyHaK_OpPmTYTvw "Use reclamation rules to cancel user subscriptions that have limited to no activity.").  
Create software entitlements for the automatically generated software models to track used software against owned software.

* For more information on creating software entitlements in the Software Asset Management Core UI, see [Create entitlements in Software Asset Management classic](https://www.servicenow.com/docs/MAohEZPg4SjZLPTVioRdog "Create entitlements in the Software Asset Management application classic to record your license details and allocate purchased software rights to users or devices.").
* For more information on creating software entitlements in the Software Asset Workspace, see [Create entitlements in workspace](https://www.servicenow.com/docs/Jh~FO6x8BChwOmSEDyY0kA "Create entitlements in the Software Asset Workspace to enter your license details and allocate purchased software rights to users or devices.").
* For more information on creating software entitlements using the Software Asset Management Playbook, see [Create entitlements using the guided walk-through](https://www.servicenow.com/docs/Tiy_LA~jOKwaLS2ioqEHRA "Use the guided walk-through playbook for a step-by-step process of creating entitlements.").
{#create-integration-profile-gsuite__ul_cbz_vhr_sqb}  
Reconciliation also runs on your subscriptions as a scheduled job or on-demand. You can view your reconciliation results in the [License Workbench](https://www.servicenow.com/docs/O_bB4w6fQREuwthkTeWiqg "Review reconciliation results in a simplified workbench view.") (Software Asset Management classic application) or the [License usage view](https://www.servicenow.com/docs/UZ6v3AA1wKSbw~zTb_Xy6w "Use the license usage view as a single plane to understand the license position of all software products, remediate non-compliance, view reconciliation results, view, or add removal candidates, and view Software Asset Management related reports.") (Software Asset Workspace). Use these results to determine your license compliance position and to remediate any non-compliance.

* For more information on running reconciliation in the Software Asset Management classic application, see [Run software reconciliation](https://www.servicenow.com/docs/xJni40GL3ctIVn4LYUkVVQ "Reconciliation is run as a scheduled job (default is weekly), but you can also run reconciliation manually to reconcile software products in your environment on demand.").
* For more information on running reconciliation in the Software Asset Workspace, see [Run software reconciliation in the workspace](https://www.servicenow.com/docs/F4t9mIl3Z6yakXJGjLthTg "Reconciliation is run as a scheduled job (default is weekly), but you can also run reconciliation manually to reconcile software products in the Software Asset Workspace environment on-demand.").
{#create-integration-profile-gsuite__ul_qgf_zhr_sqb}

*[\>]: and then