Google Workspace

Google Workspace is the first managed CLI integration. It supports Gmail, Calendar, Meet, Tasks, Drive, Docs, Sheets, Slides, and Forms as independently selectable services.

Before You Connect

The local stack must include a Google OAuth client ID and client secret. The configured redirect URI uses the local backend callback path generated from the backend port.

Decide:

• which Google account represents the organization;
• which services Oblive needs;
• whether access should be read-only or full; and
• which external changes require human approval.

Connect Google

1. Open Integrations and select Google Workspace.
2. Choose the services to enable.
3. Choose read-only or full access.
4. Select Connect Google.
5. Complete Google consent with the intended organization account.
6. Return to Oblive and confirm the redacted connected identity and active services.

Oblive requests scopes incrementally from the selected service set. Reauthorization must use the same Google account. Disconnect first when switching identities.

Reads and Changes

Read operations execute through the scoped gateway. Sends, invitations, sharing, deletion, and other consequential operations require a task, an idempotency key, a plain-language summary, and the normal action policy.

Chat may use permitted reads but cannot perform consequential Google commands.

Files

Uploads and downloads must stay inside the active run workspace. Each invocation is bounded to 50 MB. Temporary credential material and files are created with restricted permissions and removed after execution.

Troubleshooting

• Google is not available: configure googleOAuth in local-stack.json, regenerate the stack environment, and restart the backend.
• A service is denied: reconnect with that service selected so the necessary incremental scope can be granted.
• Wrong Google account: disconnect, then connect the intended account.
• A write is blocked: confirm full access, task execution, service grant, and approval state.
• Approval or reconciliation exit: resolve the corresponding Human Inbox item instead of retrying with a new command.