This article is a condensed version of the documentation referenced below describing how to set up the Transfer of Ownership Features for the Workflows Gmail connector.

• Workflows Gmail connector cards:

  • Add Delegate
  • Add Send Alias
  • Delete Delegate
  • Delete Send Alias
  • Forward Emails
  • List Delegates
  • Set Auto Reply
  • Update User Gmail Settings

Google Cloud Platform 

1. Create a new Google Cloud Project (an existing project can also be used).

   1. Click on the Quickstart drop-down at the top of the navigation bar that displays the currently selected project, select an organization, and click New Project.

   2. Enter the project name and click Create.

   3. From the Quickstart drop-down at the top of the navigation bar, select the new project.

   4. From the Project info panel on the Project Dashboard, click ADD PEOPLE TO THIS PROJECT.

   5. Add the Google Workspace service account used to authorize the Workflows Gmail connection as a new principal with the Viewer role.

2. Navigation menu > APIs & Services > Library.

   • Search for and enable the Gmail API.

3. Navigation menu > IAM & Admin > Service Accounts.

   1. Click CREATE SERVICE ACCOUNT.

   2. Enter a name and description, and click DONE.

   3. Click on the service account in the list of service accounts to edit it.

   4. Navigate to the PERMISSIONS tab and click GRANT ACCESS.

   5. Add the Google Workspace account used to authorize the Gmail connection as a New Principal.

   6. Add the following roles to the principal, then click SAVE.

      1. Service Account User;

      2. Service Account Token Creator.

   7. Navigate to the DETAILS tab and copy the Unique ID (the same as the OAuth 2 Client ID as seen from the list of service accounts).

Google Admin Console

1. Navigate to Security > Access data and control > API controls.

2. Click on MANAGE DOMAIN WIDE DELEGATION.

3. Click Add new to add a new API client.

4. Enter the Client ID that was copied from the service account created above.

5. Add the following scopes:

   1. https://www.googleapis.com/auth/gmail.settings.basic

   2. https://www.googleapis.com/auth/gmail.settings.sharing

6. Click AUTHORIZE and the API client will be saved.

Workflows console

1. Create a new flow and add one of the Transfer of Ownership cards referenced in the Applies To section above.

2. The card options will include drop-downs for the Google Cloud Platform Project and Service Account, which should be populated with the project and service account created in the above steps.

3. Configure the card and verify it executes successfully.

Related References

• Authorize an Account for Transfer of Ownership Features
• Invoke Function in Google Cloud Functions Causes a "403 Forbidden" Error