Trouble Connecting Google Workspace for Auto-Discovery?
Sheaf’s Auto-Discovery feature helps your team uncover and manage all the SaaS tools in use across your company — without the manual work.
It automatically identifies:
- Who is using which SaaS tools
- When users last accessed those tools
- Opportunities to cancel unused subscriptions or reduce licensing costs
To do that, Sheaf needs secure access to data from your Google Workspace account.
If you’re seeing errors during setup, here’s what’s likely happening — and how to fix it.
Step 1: Are you a Google Workspace admin?
Auto-Discovery requires access to sensitive organization-wide data. Google only allows this if the person connecting has admin-level permissions — specifically, access to the Admin SDK, Directory API, and Reports API.
If you’re not a Super Admin or delegated admin, Google will block Sheaf from completing the connection.
What to do if you’re not an admin:
You have two options:
- Invite your IT admin or Google Workspace admin to your Sheaf workspace, and ask them to complete the connection
- Ask your IT team to upgrade your account permissions in the Google Admin Console
Once that’s done, return to Sheaf and try again.
💡 What kind of access is needed: To enable Auto-Discovery, you must be able to grant organization-wide access to Google Workspace’s admin tools. This allows Sheaf to read login activity, view user accounts, and identify third-party app access across your team
Step 2: Did you approve all permissions?
When you begin the setup process, Google shows a window asking you to approve access to specific types of data.
These permissions allow Sheaf to:
- List all users in your organization
- Detect what apps users have connected via Google SSO
- Check the last time each app was used
If you clicked “Cancel” or skipped any requested scopes, Sheaf won’t be able to complete the sync.
What to do:
- Try again, make sure to approve all requested permissions
- Or ask your admin to set up domain-wide delegation in the Admin Console to allow Sheaf access on behalf of all users
Still not working? It could be temporary
Connection issues can sometimes be caused by:
-
Temporary Google API issues
- Misconfigurations in the Admin Console
If you’re experiencing these issues, it’s best to wait a few minutes and try again.
Don’t want to wait? You can still use Sheaf manually — or connect through Microsoft SSO
We know waiting on IT can be frustrating. That’s why Sheaf always gives you the option to:
-
Manually add users and apps — it’s not as fast as Auto-Discovery, but still gives you full control over your SaaS inventory
-
Or, connect through Microsoft SSO if your organization uses Microsoft instead of Google — setup is fast and just as powerful
💡 You can always switch to Google Workspace later once your permissions are sorted.
Summary
| Requirement | What’s Needed | What to Do If Missing |
|---|---|---|
| Google Admin Role | You must be a Super Admin or delegated admin | Invite someone who is, or ask your IT team to upgrade access |
| Permissions Approved | You must approve all requested scopes | Try again or set up domain-wide delegation |
| Still stuck? | Manual setup or integration through Microsoft SSO is always available in Sheaf | Start managing your stack manually or through Microsoft SSO. |
Need help?
If you’re unsure what to do next or need help inviting the right person, reach out to us anytime at sheaf.ca/support — we’re happy to help.