Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=google-permissions

About Google permissions

When you connect supported Sophos products or features to Google Workspace, Google asks you to grant permissions.

These permissions allow Sophos products to complete setup and provide the features you selected, such as directory synchronization, post-delivery protection, and direct delivery.

The permissions requested depend on the feature you configure.

Supported features

The following features can request Google permissions during setup:

  • Google Directory
  • Google Post-Delivery Protection
  • Google Direct Delivery

Permission details

The following permissions are requested during setup.

Permission scope Why it's required Used by
https://www.googleapis.com/auth/cloud-platform Create, read, update, or validate required Google Cloud resources during setup. All supported features.
https://www.googleapis.com/auth/userinfo.email Identify the Google administrator account granting consent. All supported features.

Permission behavior

Sophos uses the granted permissions only for the feature you configure.

Some permissions are required during setup to validate the configuration. Others remain active while the connection is turned on, so the feature continues to work.

If you revoke permissions in Google Workspace, the related Sophos feature stops working until you reconnect it in Sophos Central.

You can review or remove permissions for third-party apps in your Google Admin Console.