Documentation
User & admin guide
Back to Calendar
Admin guide

Google Workspace

Connect a Google Workspace domain via service account for calendar sync and user listing.

The Google Workspace connection reads Google Calendar events for all users in your domain and lists those users for the person selector. It uses a service account with domain-wide delegation — no per-user OAuth consent required.

Configure at Admin → Config → Google Workspace.

What you need

FieldWhere to find it
Service Account EmailGoogle Cloud Console → IAM & Admin → Service Accounts → your account's email
Service Account Private KeyThe private_key value from the JSON key file you download
Admin EmailA Workspace admin email — used as the impersonation subject for delegation
DomainYour Workspace domain, e.g. company.com

Enter these in Admin → Config → Google Workspace, save, and test. A passing test reports how many users were found.

Google Cloud setup

  1. Go to console.cloud.google.com and create or select a project.
  2. Enable two APIs: Google Calendar API and Admin SDK API.
  3. IAM & Admin → Service Accounts → Create service account. Name it "herbe.calendar". Assign no roles.
  4. Click the service account → Details → Show advanced settings → enable Google Workspace Domain-wide Delegation. Note the numeric Client ID.
  5. Click the service account → Keys → Add key → Create new key → JSON. Save the file. You'll use the private_key and client_email fields.

Grant OAuth scopes in Workspace Admin

  1. Go to admin.google.com → Security → Access and data control → API controls → Manage Domain-wide Delegation.
  2. Add new API client:
    • Client ID: the numeric ID from step 4 above.
    • OAuth scopes: 
      https://www.googleapis.com/auth/calendar,https://www.googleapis.com/auth/calendar.events,https://www.googleapis.com/auth/admin.directory.user.readonly
  3. Save.

Per-user Google OAuth (optional)

Users can also connect their personal Google accounts under Settings → Integrations → Google. This uses a standard OAuth flow and adds that user's personal calendars to their view only. Personal Google connections coexist with the domain-wide Workspace connection.