Execute Response Actions with Google Workspace

Configure the action connector for Google Workspace.

In this guide, you'll configure the integration between Google Workspace and Radiant to automatically run containment and remediation actions after phishing attacks.

Available actions

The following actions are available after you set up the Google Workspace action connector. Keep in mind, additional permissions are required.

• Find and soft delete emails

• Find and hard delete emails

• Block sender

To be able to add the action connector, you will need to provide Radiant Security with the following values, from the data connector onboarding:

• BigQuery Project Id

• BigQuery Dataset Name

• Delegate User Email

• JSON File containing the API key previously downloaded from your Google Workspace project

If you haven't configured the Google Workspace data connector yet, check out the Google Workspace guide.

Add the action connector in Radiant Security

1. Log in to Radiant Security.

2. From the navigation menu, select Settings > Action Connectors and click + Add Connector.

3. Select Google Workspace and click Credentials.

4. Add the following values from the previous steps:

   • BigQuery Project ID: {customer name}-workspace-logs

   • BigQuery Dataset Name: google_workspace_log

   • Delegate User Email: The service account that has the Radiant Security Read Only admin role

   • Upload the JSON File

5. Click Add Connector to save the connector configuration.