Skip to main content
Google Drive Logo

​
Google Drive

Cloud storage and file management

✅ Ready📖 Documentation Available

​
Configuration Guide

​
Overview

The Google Drive connector allows you to access, manage, and synchronize files and documents stored in Google Drive.Google Drive is Google’s cloud storage service that provides access to files, folders, and documents including Google Docs, Sheets, and Slides. This connector enables synchronization of Drive content and associated documents.

​
Authentication

The Google Drive connector uses OAuth 2.0 for authentication. This requires users to grant permission for the application to access their Google Drive data within the scopes specified.

​
How to configure and enable the Google Drive Connector

​
Step 1: Create a Google Cloud Project & Set Up Admin Access

  1. Sign in as Super Administrator:
    Log in to the Google Cloud Console using an account with super administrator privileges.
  2. Create a New Project:
    • Click on the project dropdown at the top of the console and select New Project
    • Enter a project name and (optionally) assign it to a folder or organization
    • Click Create
Create Google Cloud Project
Only the project creator has full control by default. It is recommended to add at least one additional administrator (using the IAM settings) to ensure continued access even if the original creator leaves your organization.

​
Step 2: Enable Required APIs

  1. Navigate to APIs & Services > Library in the Cloud Console
  2. Search for and enable the following APIs required for Google Drive sync:
    • Google Drive API (required for Drive file access)
    • Google Docs API (required for Google Docs files)
    • Google Sheets API (required for Google Sheets files)
    • Google Slides API (required for Google Slides files)
    • Admin SDK API (required for domain-wide delegation)
Enabled Google APIs in Google Cloud Console
Make sure that all of the listed APIs are enabled to ensure smooth operation of the Google Drive connector.

​
Step 3: Create a Service Account

  1. Navigate to IAM & Admin > Service Accounts in the Cloud Console
  2. Click Create Service Account
Create Service Account
  1. Enter a Service Account Name and an optional Description
  2. Click Create and Continue, then Done
Create Service Account
  1. Copy the Unique ID for use in the next step
Copy Service Account ID

​
Step 4: Delegate Domain-Wide Authority

  1. Sign in to the Google Admin Console with a super administrator account
  2. Navigate to Security > Access and data control > API controls
  3. Click Manage Domain Wide Delegation
  4. Click Add new and paste the service account’s client ID
  5. Add the following OAuth scopes required for Google Drive sync:
https://www.googleapis.com/auth/admin.directory.group.readonly,https://www.googleapis.com/auth/admin.reports.audit.readonly,https://www.googleapis.com/auth/admin.directory.user.readonly,https://www.googleapis.com/auth/admin.directory.domain.readonly,https://www.googleapis.com/auth/admin.directory.orgunit,https://www.googleapis.com/auth/drive.readonly,https://www.googleapis.com/auth/drive.metadata.readonly,https://www.googleapis.com/auth/drive.metadata,https://www.googleapis.com/auth/documents.readonly,https://www.googleapis.com/auth/spreadsheets.readonly,https://www.googleapis.com/auth/presentations.readonly,https://www.googleapis.com/auth/drive.file,https://www.googleapis.com/auth/drive
These scopes are required for Google Drive synchronization:
  • drive.readonly: Read-only access to Drive files
  • drive.metadata.readonly: Read-only access to Drive file metadata
  • drive.metadata: Access to Drive file metadata
  • drive.file: Access to files created by the app
  • drive: Full access to Drive files
  • documents.readonly: Access to Google Docs files
  • spreadsheets.readonly: Access to Google Sheets files
  • presentations.readonly: Access to Google Slides files
  • Admin scopes: Required for domain-wide delegation
  1. Click Authorize
Domain-wide delegation lets your service account impersonate users within your domain. Make sure that both the service account and the end user email belong to the same domain.

​
Step 5: Create a JSON Key for the Service Account

  1. In the Service Accounts list, select your newly created service account
  2. Click on the Keys tab
  3. Click Add Key and select Create new key
  4. Choose JSON as the key type and click Create
  5. Save the automatically downloaded JSON key file
Store this JSON file securely as it contains sensitive credentials and cannot be recovered if lost.
It might be that while creating the key you get the error:
Organization Policy Error
In this case, follow the steps given under the heading Enable Service Account Key Creation.
If your key was successfully created and downloaded, you can use that key in the enterprise search application.

​
Configuring and enabling connector

  1. Navigate to Workspace Settings > Under Workspace section in sidebar > Connectors in your application.
Go to Workspace Settings
  1. Search for the Drive Workspace connector and click on Setup to configure a connector instance.
Search for Drive Workspace connector
  1. In the configuration dialog that opens:
    • Enter an Instance Name for your connector (e.g., “Company Drive”)
    • Enter the Admin Email (Admin user’s email with which you created the Google Cloud credentials)
    • Select the JSON key file to upload
    • Click on the Next button to save the configuration and move to configure connector settings page. You can learn about the connector settings in the Connector Settings section.
Configure Google Drive connector
  1. After configuring connector settings, you can click on Save Configuration.
Once PipesHub confirms the instance is ready, you can choose either Start syncing now or select the I’ll do it later option.
Google Drive connector sync status

​
Enable Service Account Key Creation

If you encounter an error while creating the service account key due to organization policy constraints, follow these steps:

​
1. Switch to the Organization Context

At the top of the Google Cloud Console (where the project name is shown), click the drop-down to see a list of organizations and projects.Select your organization rather than a specific project.If you don’t see an organization listed, make sure you’re signed in with an account that has access to the organization.

​
2. Add Organisation Policy Administrator Role

Navigate to IAM & Admin > IAM in the Cloud ConsoleFind the current user and Click on the Pencil icon.Click on the Add another role button.Search for the Organisation Policy Administrator role.Click on the Add button.
Add Organisation Policy Administrator
Click on the Save button.

​
3. Disable the Service Account Key Creation constraint

Navigate to IAM & Admin > Organization Policies in the Cloud ConsoleSearch for "iam.disableServiceAccountKeyCreation"Select the policyClick on the Manage Policy buttonIn Policy source, Select Override parent’s policy. Add a rule and set the enforcement to “Off”Click on the Save buttonAfter completing these steps, return to Step 5 and try creating the service account key again.

​
Google PubSub Configuration

PubSub setup enables real-time updates for Google Drive content. While optional, it’s highly recommended for maintaining up-to-date content in Enterprise search.

​
Step 1: Set Up a Cloud Pub/Sub Topic

  1. Navigate to Pub/Sub > Topics in the Cloud Console sidebar
  2. Click Create Topic
  3. Enter a unique name (e.g., projects/your-project-id/topics/drive-webhook-topic)
  4. Check “Add a default subscription”
  5. Click Create to confirm
Create Topic

​
Step 2: Configure the Subscription

  1. Go to Pub/Sub > Topics
  2. Select the subscription created with the topic
  3. Click Edit
  4. Change Delivery type to “Push”
  5. Set Endpoint URL as “your_base_url/drive/webhook”
  6. Adjust Expiry Period as needed
  7. Click Update
Ensure your base URL matches the Enterprise search connector service base URL

​
Step 3: Set Topic Permissions

  1. In Pub/Sub > Topics, select your topic
  2. Open the Info Panel (right side)
  3. Click Add Principals
  4. Add drive-api-push@system.gserviceaccount.com
  5. Assign the Pub/Sub Publisher role
Add Principals
  1. Click Save
If you encounter an organizational policy constraint error, modify the policy in organizational policies to allow the given domain. Allow 5-10 minutes for changes to propagate.

​
Overview

The Google Drive connector allows you to access, manage, and synchronize files and documents stored in Google Drive.Google Drive is Google’s cloud storage service that provides access to files, folders, and documents including Google Docs, Sheets, and Slides. This connector enables synchronization of Drive content and associated documents.

​
Authentication

The Google Drive connector uses OAuth 2.0 for authentication. This requires users to grant permission for the application to access their Google Drive data within the scopes specified.

​
Step 1: Create a Google Cloud Project

  1. Access the Google Cloud Console
  2. Create a project (if you don’t have one)
  3. Note your project ID for later use

​
Step 2: Enable Required APIs

  1. Navigate to APIs & Services > Library in the Cloud Console
  2. Search for and enable the following APIs required for Google Drive sync:
    • Google Drive API (required for Drive file access)
    • Google Docs API (required for Google Docs files)
    • Google Sheets API (required for Google Sheets files)
    • Google Slides API (required for Google Slides files)
Enabled Google APIs in Google Cloud Console
Make sure that all of the listed APIs are enabled to ensure smooth operation of the Google Drive connector.
  1. Navigate to APIs & Services > OAuth consent screen in the Cloud Console
  2. Configure the OAuth consent screen with your application details
  3. Add the required scopes (see Step 5)

​
Step 4: Create OAuth Client ID

  1. Navigate to APIs & Services > Credentials in the Cloud Console
  2. Click Create Credentials and select OAuth client ID
  3. Select Web application as the application type
  4. Set the Authorized redirect URI to: 
    http://your-frontend-dns/connectors/oauth/callback/Drive
    or for HTTPS: 
    https://your-frontend-dns/connectors/oauth/callback/Drive
  5. Click Create and note your Client ID and Client Secret
Redirect URI must match exactly your frontend URL. For example: if your app is running on https://f7f0-240.ngrok-free.app then redirect URI should be https://f7f0-240.ngrok-free.app/connectors/oauth/callback/Drive in Google Cloud Console.

​
Step 5: Configure OAuth Scopes

  1. In the OAuth consent screen, navigate to the Scopes section
  2. Add the following OAuth scopes required for Google Drive sync:
    • https://www.googleapis.com/auth/drive.readonly - Read-only access to Drive files
    • https://www.googleapis.com/auth/drive.metadata.readonly - Read-only access to Drive file metadata
    • https://www.googleapis.com/auth/drive.metadata - Access to Drive file metadata
    • https://www.googleapis.com/auth/documents.readonly - Read Google Docs files
    • https://www.googleapis.com/auth/spreadsheets.readonly - Read Google Sheets files
    • https://www.googleapis.com/auth/presentations.readonly - Read Google Slides files
    • https://www.googleapis.com/auth/drive.file - Access to files created by the app
    • https://www.googleapis.com/auth/drive - Full access to Drive files
These scopes allow the connector to:
  • Access and read files from Google Drive
  • Access file metadata for indexing and search
  • Access Google Docs, Sheets, and Slides files stored in Drive

​
Configuring and enabling connector

  1. Navigate to Workspace Settings > Under Personal section in sidebar > Your Connectors in your application.
Go to Workspace Settings
  1. You will see a list of connectors with Individual Setup.
Connector registry
  1. Search for the Drive connector and click on Setup to configure a connector instance.
  2. In the configuration dialog that opens:
    • Enter an Instance Name for your connector (e.g., “My Drive”)
    • Enter the Google Client ID from your Google Cloud Console
    • Enter the Google Client Secret from your Google Cloud Console
    • Click on the Next button to save the configuration and move to Authorize page.
      Google Drive auth configuration
Configuring OAuth App can only be performed by Admins. If you are not an Admin, you must request an Admin to configure the OAuth App for you. You can then access configured OAuth Apps via a dropdown menu.
  1. In the Authorize page that opens:
    • Click on Authenticate Drive to Proceed button
    • You will be redirected to Google’s consent screen where you need to sign in and grant permission for Google Drive and related document access
    Google consent screen for Google Drive connector
  2. After giving consent, you can click on Continue to configuration to configure connector settings. You can learn about the connector settings in the Connector Settings section.
  3. After configuring connector settings, you can click on Save Configuration.
Once PipesHub confirms the instance is ready, you can choose either Start syncing now or select the I’ll do it later option.
Google Drive connector sync status
Important: Authorize using the same email address as your PipesHub account. Using a different email will cause permission issues on the PipesHub platform.
For setting up Google PubSub notifications, please refer to the Google PubSub Configuration Guide in the Enterprise documentation.

​
Sync Settings

Sync settings allow you to control how the connector syncs data from Google Drive.Sync Strategy:
  • Scheduled - The connector will automatically sync data from Google Drive at the scheduled interval.
  • Manual - The connector will sync data from Google Drive only when Admin manually triggers the sync from the connector settings page.
Sync Interval: In what interval the connector will sync data (default: 60 minutes).

​
Sync Filters

Sync filters control which files are fetched from Google Drive. Files that don’t match are skipped entirely. Folders are always synced regardless of these settings to preserve directory structure.

​
Created Date

Filters files by when they were created. Accepts operators like Last 365 Days, Is After, Is Before, or Is Between for a specific range.For example, set Last 365 Days to fetch only files created in the last year.

​
Modified Date

Same as Created Date but filters by the file’s last modified timestamp. Use Last 30 Days or Is After to limit sync to recently updated files.

​
File Extensions

Filters files support 2 options: In (only sync listed extensions) or Not In (sync everything except listed extensions). After selecting your desired option, you can select your desired extensions from a list of supported extensions.
Unsupported extensions are excluded under In and allowed through under Not In.

​
Indexing Filters

Indexing filters control which synced files are made searchable. Unlike sync filters, these don’t prevent files from being fetched — files are still recorded in the system but their indexing status is set to Manual Indexing.They can be manually indexed later from the All Records section.

​
Manual Indexing

When enabled, files are synced but not automatically indexed. They won’t appear in search results until explicitly indexed.This can allow you to explicitly control which files and folders are indexed for search, by going to the All Records section and indexing the records manually.To index records manually go to the All Records section, go to a record, click on the 3 dots > Start Indexing.

​
Index Shared Items

When enabled, files shared with others are indexed alongside personal files. Disable this to exclude shared content and index only files that are not shared with others.

​
Index Shared with Me

When enabled, files that others have shared with the user are indexed. Disable this to exclude externally shared content and index only files the user owns or created. (Only available for Enterprise setup)

​
Index Shared by Me

When enabled, files the user has shared with others are indexed. Disable this to exclude content the user has shared outward and index only their private or unshared files. (Only available for Enterprise setup)

​
FAQ

AspectDrive ConnectorDrive Toolset
PurposeSync and index files for searchEnable agents to perform file actions
Data FlowOne-way (import data into PipesHub)Two-way (read and write via API)
When to UseQuery/search files and foldersCreate files, manage folders
Example: Use Drive Connector to search and retrieve document content. Use Drive Toolset to let agents create folders and manage file organization.
There are three common causes:
  1. Email mismatch - The email used during connector authentication doesn’t match your PipesHub account email. This causes permission issues preventing you from accessing synced data.
    • Fix: Reconfigure the connector and authenticate using the same email as your PipesHub account.
  2. Records show in “All Records” but not in search - Documents display in the All Records section but don’t appear in search query results.
    • Fix: Verify sync filters in the connector settings and ensure indexing has completed. Check that the data matches your search query criteria.
  3. Data not yet indexed - The connector is still syncing or hasn’t completed the initial indexing process.
    • Fix: Go to Settings > Connectors, check the sync status, and wait for indexing to complete.

​
Ready to Get Started?

The Google Drive connector is fully operational and ready for use. Follow the configuration guide above for your setup type (Enterprise or Individual), or reach out to our support team if you need assistance.