Google Workspace Integration
Contents
- What can you do with a Dado-Google Workspace integration?
- What data is exchanged between Dado and Google Workspace?
- How to set up the Google Workspace integration
- Finding out which Google account is used by Dado (your Google integration user)
What can you do with a Dado <> Google Workspace integration?
The Dado <> Google Workspace Integration allows you to:
- Import users from a spreadsheet
- Write answers given during an Experience to spreadsheets
- Create Documents automatically, using the Create Document automation
- Upload files provided during an Experience to a Google Drive folder
- Create Google Calendar events for Experience Participants
- Invite Experience Participants to existing Google Calendar events
What data is exchanged between Dado and Google Workspace?
Dado's access to data in your Google Workspace is limited by the permissions granted to the user who sets up the integration (see "Create a dedicated Google Workspace account for Dado" below). For clarity, we'll refer to this as the Google integration user in the rest of this section.
As a consequence, it's easy to precisely define the access Dado has by configuring the integration user's permissions in Google Workspace's user management tool.
When all the requested scopes are granted (see list below), the following data from Google Workspace is accessible to Dado:
- The email address of the Google integration user
- Any files and folders in Google Drive which are viewable by the Google integration user
- The name and membership of any Google Group which is viewable by the Google integration user
- A full list of the calendars accessible by the Google integration user
- The name, date & time, invitees and description of events in any calendars accessible to the Google integration user
When all the requested scopes are granted (see list below), the following data from Dado is accessible to Google Workspace:
- User data that is configured to write to Google Sheets, via sub-task data destination settings (read more about this)
- the data destination settings enable you to specify exactly which data is sent to Google Sheets
- the only exception here is Dado's unique ID for that user, which will be sent along with any other data. This is a non-identifiable ID made of randomly generated numbers and symbols, such as "QZ2swz-LKJT"
- Documents uploaded by users in response to 'Upload file' sub-tasks
- this only applies if the sub-task settings are configured to send these files to Google Drive
Permissions and Scopes requested by Dado
| Scope | How it's used by Dado |
|
Used to inform you which account provided OAuth access |
See, edit, create, and delete only the specific Google Drive files you use with this app |
Add files and folders to Google Drive, for instance files uploaded by employees. Dado never deletes files/folders. |
See and download all your Google Drive files |
Find the spreadsheets Dado reads from/writes to, and template documents used to create personzalized versions of those documents. This sounds broad, but in fact only grants Dado access to the specific documents owned by owned by the user who made the OAuth connection (see Step1 of set up instructions below). |
See, edit, create, and delete all your Google Docs documents |
Access documents provided as templates for Dado to create personalized versions of those documents. This sounds broad, but in fact only grants Dado access to the specific documents owned by the user who made the OAuth connection (see Step1 of set up instructions below). |
See, edit, create, and delete all your Google Sheets spreadsheets |
Read and write to spreadsheets |
View and manage the provisioning of groups on your domain |
Add people to Google Groups |
View and edit events on all your calendars |
Allow Dado to invite people to events This only encompasses calendars explicitly shared with the user who makes the OAuth connection. |
See and download any calendar you can access using your Google Calendar |
Allow users to choose a Calendar to operate on This only encompasses calendars explicitly shared with the user who makes the OAuth connection. |
See, edit, share, and permanently delete all the calendars you can access using Google Calendar |
Allow Dado to create new calendar events This only encompasses calendars explicitly shared with the user who makes the OAuth connection. |
How to set up the Google Workspace integration
Activation of the integration depends on your organization-specific settings within the Google Suite and will likely require you to work together with your IT team.
Step 1. Create a dedicated Google Workspace account for Dado (your Google integration user)
We recommend you authenticate with a dedicated Google Workspace account, which is only used for the purpose of Dado. We call this the Google integration user. This way you can grant permissions on a granular level to this one account, so that Dado can only access what's strictly necessary.
Request your IT Team set up a new Google Workspace account, e.g. dado.admin@yourcompany.org.
Requirements for this account
- If your organization uses Google Groups:
- Admin role: Groups Admin or both Groups Reader and Groups Editor
- Drive and Calendar access permitted
- If your organization does not use Google Groups:
- No admin roles needed
- Drive and Calendar access permitted
- We recommend that the people managing Dado at your organization have the ability to log in to the email inbox of this account, to enable calendar set up (see Step 3 below)
- if this is not possible, then the person who does have access to this account will need to be available to receive and respond to calendar permissions emails in the account's inbox
Step 2. Set up the integration in Dado
- Log into the Google integration user's account
- Log into Dado as an Admin
- Within Dado go to Settings > Integrations
- You'll see a list of integration options. Click on “Google Workspace”
- In the modal that appears, click "Sign in with Google"
A new screen will appear, in which you can select the Google account you'd like to use for this integration. Select the the new account you set up in step 1.
You will be able to review the access scopes we’re asking for once more (see above for detailed descriptions of how we use each scope). For the integration to function correctly, you will need to allow all the scopes requested.
- Click Allow and follow the remaining on-screen instructions by Dado.
- You’ve successfully activated the Google Workspace integration!
Step 3. Provide the Google integration user with calendar access
In order for Dado to automate inviting people to calendar events, the Google account you created in Step 1 must have permissions on the relevant calendars (i.e. your "Onboarding Sessions" calendar).
- First, share each relevant calendar with the Google integration user. Follow these instructions on how to share a calendar.
- Grant the Google integration user "make changes and manage sharing" permissions for the calendar
- Then the Google integration user must accept the share request(s). Do so by logging into this account's email inbox, opening the relevant email and clicking the 'Accept' button.
Find out which Google account is used by Dado (your Google integration user)
Your Google Workspace integration is most likely connected to Dado via a dedicated Google Workspace account made just for the sake of this integration. We call this the Google integration user. In some cases, the Google Workspace account of one of your Dado Admin users is used instead.
To find out your Google integration user:
- Go to Settings > Integrations
- Click on the Google Workspace tile. The Google integration user will be listed in the modal, under 'email'
