Google Workspace GDrive Troubleshooting and Validation

Follow these steps to verify and troubleshoot the GDrive integration after onboarding.

Validation Steps

In the SailPoint Entro Dashboard, navigate to Accounts & Integrations → Google Workspace (GDrive) and confirm the connection status is Verified.

Validate APIs

Confirm the following APIs are activated:
- Google Drive API
- Admin SDK API
Service Account Access

Ensure the Service Account has one of the following:
- Viewer or Contributor access (Option 1)
- Domain-wide delegation (Option 2)
Verify Scan Results

Check that recent file scan results appear in SailPoint Entro Findings.

Common Issues & Resolutions

Issue	Possible Cause	Resolution
Drive API error	API not enabled	Enable Drive API in GCP project
Missing or limited results	Insufficient access scope	Use Domain-Wide Delegation (Option 2)
Invalid domain error	Incorrect Workspace domain	Verify domain in onboarding form
Expired key	Rotated or revoked Service Account key	Regenerate key and update SailPoint Entro
No findings shown	OCR not enabled	Enable OCR in SailPoint Entro settings

Does SailPoint Entro scan image files? Yes, except embedded images in documents. Enable OCR for full support.
What file types are supported? Documents, images, and non-binary files up to 2.5 MB.
Does SailPoint Entro scan history? Available in V2 when using Contributor permissions.
How are public or external shares handled? Detected and flagged as "Externally Shared" in risk reports.