In this article, we’ll cover key features, setup options, and security permissions you’ll need for the Google Shared Drive file storage integration to work properly. We will also provide step-by-step instructions for End users, Site managers, and App managers.
Note:This article focuses on the Shared Drive integration. For the My Drive only integration explanation, check out this article.
- Integration path
- Integration features
- Need to know before setup
- Security overview
- Connect Google Drive as an Application manager
- Connect Google Drive as a Site owner
- Connect Google Drive as an End user
- Google Drive file search
- Review the integration features below and decide specifications needed for your organization.
- Define the Drive structure your organization wants to use in connecting the integration.
- App managers connect the integration at the application level.
- Site owners connect their integration profile to their Simpplr profile.
- Site owners connect to the integration at the Site level and select which folders to share.
- Content teams add the correct files to their target folders, and connect them to Simpplr content.
- End users connect their integration to their Simpplr profile.
- Now the files will be available for site members to access.
- Connect your Google Drive folder(s) to a Simpplr site to make files searchable by site members.
- Attach files from your Drive directly to your Simpplr content.
- Upload and download files to Google Drive from your intranet interface.
- Add folders to Google Drive from your intranet interface.
- Manage which folders are visible and available via your intranet while maintaining your robust file structure on Google Drive.
- Engage with files: Download, like, favorite, share, preview, and create new versions of files.
Need to know
- As of the Gorgonio release, organizations will be able to integrate Google Shared Drive on top of our My Drive integration, promoting more knowledge sharing and collaboration. This Google Drive extension will allow App managers to pick and choose which Google Drive components (My Drive and/or Shared Drive) they want to enable on the app level. Once enabled, Shared Drive content will be discoverable in Global Search, and Site managers can link a Shared Drive to a site.
- The Google Drive integration pushes access permissions based on Site membership from your intranet to Google Drive via Google Groups. E.g. You have a public site with a mandatory global audience, making all users members of that site. When Site managers are added to the site, they will be automatically given Edit access to the applicable Google Drive Folders. When new members are added to the site, they will automatically receive Read access to the same folders.
- When Google Drive is enabled on your intranet, and you set up file access based on Simpplr permissions (as opposed to Google permissions), an all-company group will be created in the Google Drive’s service account.
- When a user connects their Google Drive account to their user profile on the intranet, they will be added to the all-company group and will gain access to Google Drive folders currently connected to any sites of which they are members. Only connected folders will be indexed for search via Simpplr.
- When Google Drive is enabled on your intranet, an application root folder will be created in the Google Drive service account and is used to define search parameters.
- Even though site members can access the folders once connected to a site (if set up with Simpplr permissions as opposed to Google Drive permissions), those folders will not appear in their Google Drive. If a user wants to navigate to the folder structure, they will need the URL of that folder to get to it.
- Google Suite Super Administrator or Group Administrator - Simpplr will need to use the Admin's account to do the initial connection for the entire application.
- Site owner - This is the overall person responsible for the site, and the role that can enable connection to external files in the Manage site menu. Can connect Google Drive Folders.
- Site managers - Once the Site owner enables Google Drive connection, Site managers can add additional folder structures and connect files from those folders to content.
- Content managers/End users - Content managers can only access Google Drive content once the connection has been set up by the Site managers/owner. Once connected, they can attach files directly from the Google Drive to content on their site.
My Drive and Shared Drives
When connecting the Google Drive account, App managers choose to connect with Simpplr:
- both Shared Drives and My Drive content (default)
- only My Drive content
All permissions in Simpplr essentially 'piggyback' off existing Google permissions set up by the Google admin account. Therefore, if a user doesn't have access to a drive, folder or file in Google, they won't have access in Simpplr, regardless of their site membership or Simpplr permissions. They must be given access in Google first.
If a user doesn't have access to My Drive files displayed on a site, you have two options to display:
- Display ‘Open in Google Drive’ action (recommended). This will prompt the user to open the file in Google Drive, where they can request access to view it.
- Do not display ‘Open in Google Drive’ action. This will not display any action for the user, and the user will not be able to see the file.
Google Drive OAuth Permissions/Scopes
|See, edit, create, and delete all of your Google Drive files||Used for all API calls made to Google Drive APIs||
|View and manage the provisioning of groups on your domain||Prior to Laki (and for users who choose not to upgrade to Google multi-domain), this scope is used for the purpose of hitting Google Groups APIs in order to create & update App-Level and Site-Level Google Groups to support Simpplr-managed Permissions.||
Note that only one Shared drive can be linked to a site at any time.
For more information on My Drive only setups, click here.
Note:If your organization is on the Laki release or later (or if you're using Google multi-domain and not switching to it from previously using Simpplr-managed permissions), then we don’t require nor do we ask for the 'manage groups' permission. However, if a user has previously granted Simpplr the manage groups permission (for example, if they were using the pre-Laki, Simpplr-managed permissions configuration), 'manage groups' permission will continue to show in the request. This is because when requesting new permissions, the Google authorization screen will always display all permissions previously granted together with the new requests, so that the user can review them all.
Changing site ownership
If a site’s owner or manager leaves your company, the site’s files will be unchanged. Ownership of the files in the account will need to be given to another user (by the Site owner or Google Admin), as long as that user is connected to the same account. The new Site owner will be given the root folder in their storage account, including the sub-folders contained in the root folder. If the new owner isn’t connected to the same file storage software, the original owner will receive a warning. They must choose another user, or the new designated owner must connect their account to the file storage software.
Follow the steps below to change the Site owner:
- Know which Site owner is leaving and decide who the new Site owner should be.
When deactivating the previous Site owner's account, have the Google Workspace admin transfer the folders to the new Site owner's account within Google. This is a standard option when deactivating Google accounts. There may be some cleanup required as the admin needs to transfer their entire Drive, not just one folder. This Google article will instruct you on how to transfer file ownership.
- Reconnect the integration at the site level using the new Site owner's account. Click here for setup at the site level instructions.
Connect Google Drive as an App manager in Simpplr
Note: As of the Laki release, you can enable multiple domains for your Google Drive and Google Calendar integrations with Simpplr. To learn more, see this article.
App managers can integrate Google Drive with their Simpplr intranet. Until Google Drive is integrated with Simpplr, your Site owners and Content managers will not be able to access My Drive and/or Shared Drives. To integrate Google Drive with Simpplr:
Go to Manage > Manage application.
Go to the Integrations tab and select File management.
Select Google Drive, then Sign in with Google. Simpplr will request access to your Google Drive admin account. Select Allow.
Note:By clicking Allow, you are giving Simpplr access to:
- See, edit and delete all your files
- View and manage the provisioning of groups on your domain (pre-Laki release only; see note in Security Overview section above)
- View and edit events on all your calendars
- See, edit, share, and permanently delete all the calendars you can access using Google Calendar
4. Choose to enable sharing from shared drives and My Drive, or enable sharing from My Drive (see My Drive and Shared drives).
Google is now integrated with your Simpplr intranet.
5. Choose your org’s access permissions (see Access permissions).
6. Click Save. Google Drive is now integrated with Simpplr.
Connect Google Drive as a Site owner in Simpplr
As a Site owner, it is up to you to enable Google Drive functionality at the site level. To link folders to a site where Google Drive has been integrated, you must select Google Drive as the site’s file storage. To do so:
From your Simpplr site, go to Manage site > Setup > External files.
- From the dropdown list, choose Google Drive. Note you can only select one file storage option per site.
Note:All Site owners and managers can link folders to a site, as long as they and the site are connected to Google Drive.
To link Google Drive folders to your site:
Navigate to Files from your site landing page.
Select the Google Drive files folder.
Select Link Google Drive Folder. If you can’t see this option, it is likely because:
- You need to create a new Google Drive folder first, or
- You are not the Site owner or manager.
NoteYou can also Create New Google Drive Folder. Doing so will create a new folder directly in Google Drive. If you create a new folder inside another folder, the permissions will be inherited from the parent folder. However, you can only create a folder inside another folder if the parent folder is linked.
- Select the folder you wish to link to the Simpplr site from Shared Drives (if enabled) or My Drive.
NoteYou can also unlink folders. Any folders unlinked are removed from the Site root folder. The permissions for the folder are removed from the Site group.
Connect Google Drive as an End user on Simpplr
As a Simpplr Standard user/Content manager, once your Application manager has set up the connection with Simpplr, you will be able to attach, share, and edit files you have access to in Google Drive, all from within your Simpplr intranet. First you must enable Google Drive on your profile. To do so:
Navigate to your user profile image and click Profile & settings. Once your profile is open, click Profile & settings.
Click External apps, then next to Google Drive, click Sign in with Google. You will be asked to allow the permissions from Google. Click Allow. Your Google account is now connected with your Simpplr interface.
Now when you create content and want to attach files, you'll be given the option to include files from your Google Drive account.
Linking Google Drive to sites
Once Google Shared Drives and/or My Drive is enabled, users can link Google Drive files and folders to sites, making them available for users to discover within Simpplr as well as sharing content on the site.
- Users can only link a single drive to a site.
- Users can still link multiple folders from My Drive.
How to fix the Authorization Error if the Google Workspace account won't connect
Users have reported receiving the following Google authorization error when attempting to connect at the Application level:
To fix this issue:
Log in to the Google Admin console.
From the Home page, go to Security API controls.
Under App access control, click MANAGE THIRD-PARTY APP ACCESS.
Find the “Simpplr for Google Workspace” app in the list.
Check the box for “Simpplr for Google Workspace” app and click Change access.
If the value is “Blocked” you will get above error. It should be changed to “Limited”
- Navigate back to the Google Admin login from Simpplr and try connecting again.
Google Drive file search
Once Google Drive is connected, users that have connected their Simpplr profile to Google Drive can search Google Drive content directly in Simpplr.
If content from Shared Drives is enabled:
- Shared Drive content will be discoverable on Global Search, based on the user's Google Drive permissions.
If content from My Drive is enabled
and Simpplr permissions are used:
- then users will be able to access content linked to sites they're members of.
and Google Drive permissions are used:
- then users will be able to access content that was linked to sites they're members of, based on their permission set in Google Drive.
- and Simpplr permissions are used:
If your org has enabled sharing from shared drives and My Drive, when searching for Google Drive files in Simpplr, you'll be given results from all Shared Drives and My Drives you have access to, regardless of whether or not that drive is connected to Simpplr.