Permissions G Suite

Permissions required for GSuite authentication

For customers that will be hosted on portal.timetoreply™.com, only bulk addition of Gsuite agents is supported.

The portal.timetoreply™.com instance authenticates via a Google App

The following Google API scopes have been enabled under the timetoreply™ Google App

https://www.googleapis.com/auth/userinfo.email View your email address
https://www.googleapis.com/auth/userinfo.profile See your personal info, including any personal info you’ve made publicly available
openid Associate you with your personal info on Google
https://www.googleapis.com/auth/gmail.metadata View your email message metadata such as labels and headers, but not the email body

New customers deployed to portal.timetoreply™.com must complete the following steps under their Google Admin Console in order to allow the timetoreply™ application to poll their domain.

These steps will grant timetoreply™ permission to read Gmail Metadata and read a list of all the users on the customer’s G Suite Account.

  1. Visit https://admin.google.com to log in to your G Suite Admin Panel
  2. Click “Security”
  3. Click “Advanced settings”
  4. Click “Manage API client access”
  5. You should be presented with a screen that allows you to add a new API client, and shows your existing API Clients. 
  6. Should you ever wish to revoke access to your G Suite Account, you can simply remove our Client ID from this screen.
  7. For Client Name, enter timetoreply™ app Client ID: 106363700407289388807
  8. For “One or More API Scopes”, enter the following:

https://www.googleapis.com/auth/gmail.metadata, https://www.googleapis.com/auth/admin.directory.user.readonly

Once you have completed the steps above, we also need to know which GSuite Administrator email address we should use.

timetoreply™ will impersonate this Admin account (with read-only permissions) to list all users within your G Suite account.

This will allow you to tick each one you want to add as an agent in timetoreply™.

From the portal, the administrator account details will then need to be entered on the screen when performing a bulk addition of GSuite accounts for the first time.