Google Drive Last Access Date

This job calculates and updates the last accessed date for files indexed by the Google Drive Connector.

Prerequisites

• A Google Directory Secondary Security Sync is run using the Google Directory Secondary Security Sync plugin.

• An initial crawl is run using the Google Drive Connector plugin.

• The Last Accessed Date Job must be configured to use the same Google Directory Secondary Security Sync and Google Drive Connector configurations.

• A service account associated with the relevant project is needed to perform tasks for the connector.

Required APIs

Aiimi Insight Engine's Google Drive Job requires 1 API to be enabled on the relevant project.

1. Google Drive API

For information on enabling APIs see Google's documentation on enabling an API in your Google Cloud project. (https://cloud.google.com/endpoints/docs/openapi/enable-api)

API Secret Key

Your service account requires an API secret key for a secure connection. The secret key is used as a secret-only credential in Aiimi Insight Engine.

• We recommend you download the key as a JSON file when prompted.

Once generated your private key will be downloaded to your machine. You must store this securely as Google does not store it and you cannot regenerate it.

Once the JSON is downloaded, use its contents to create a secret-only credential in Aiimi Insight Engine.

For support setting up a secret-only credential see our guide on creating secret-only credentials.

For more information on assigning keys see Google's documentation on Creating a service account. (https://developers.google.com/identity/protocols/oauth2/service-account#creatinganaccount)

Client Domain-Wide Delegation

To get the most out of your connection, the service account must have domain-wide delegation and the correct scopes authorised.

A super admin must delegate domain-wide authority ensuring the correct Client ID is used for the service account.

Required Scope:

1. https://www.googleapis.com/auth/drive.readonly

For more information on delegating authority see Google's documentation on Delegating domain-wide authority (https://developers.google.com/identity/protocols/oauth2/service-account#delegatingauthority)

Connection

1. Select GoogleDriveLastAccessedDate from the Job Type dropdown.

2. Select Credentials - Select the Credentials for Google Drive from the dropdown.

   • This must match the information used for the source configuration.

3. Delegated User - Enter the username of the Service Account user used for domain-level operations.

   • This must match the information used for the source configuration.

Source

1. Source Configuration - Select the Google Drive Configuration for this job.

   • You can only select one source per job.

Security

1. Security Configuration - Select the Google Security Sync you want to use for this job.

Advanced

1. Parallel Folder Crawling - Enter the maximum number of folders that can be processed at the same time.

2. Batch Size - Enter the maximum number of files that can be retrieved from Google Drive per batch.