Google Drive

Google Drive is a data and attribution integration, not an AI activity source. Forge correlates Drive audit records with agent activity and imports published Drive labels for use as data context in policies.

Access

The hosted OAuth flow requests:

https://www.googleapis.com/auth/admin.reports.audit.readonly
https://www.googleapis.com/auth/drive.metadata.readonly
https://www.googleapis.com/auth/drive.labels.readonly
https://www.googleapis.com/auth/drive.admin.labels.readonly

Forge supports the hosted OAuth refresh-token flow and service-account domain-wide delegation. Service-account setup requires the delegated admin subject email and the same approved scopes.

Collection

Source	Data
Admin Reports Drive feed	Native event ID, actor, action, timestamp, resource references, and sharing context
Drive metadata	File name/type, owner, shared-drive context, and identifiers needed to resolve a referenced file
Drive Labels API	Published label definitions, fields, selection choices, and descriptions

Label sync calls the Drive Labels API with publishedOnly=true, useAdminAccess=true, and full label view. Forge imports the taxonomy; it does not create, edit, or publish customer labels.

Attribution

Forge evaluates a Drive event using direct resource IDs, resource-name matches, OAuth application context, and bounded temporal behavior. The result is one of:

agent_attributed
likely_agent
human_or_unobserved
unknown_automation
conflict

The record also preserves the attribution method and competing candidates. Forge does not force a match when evidence conflicts.

Setup

Open Settings → Integrations → Google Drive and complete the Google OAuth flow, or save the approved domain-wide-delegation credential.
Configure poll interval, import delay, and lookback window.
Run Sync labels and confirm the expected published taxonomy count.
Enable or resume the connector, then run an audit sync.
Compare one known Drive action with its actor, file, native event ID, and attribution result in Forge.

Verification

Symptom	Check
Zero labels	Labels exist but are not published, admin label scope is missing, or the wrong customer was authorized
Audit works, metadata does not	`drive.metadata.readonly` scope or file visibility
Unresolved owner	Workspace identity email/alias correlation
`conflict` attribution	Multiple candidates are within the scoring threshold; review source evidence instead of overriding automatically

Pausing the connector stops polling without deleting prior attribution records. Revoking the Google grant removes provider access.

Get started

Observe

Secure

Enable

Integrations

Resources

Google Drive

Access

Collection

Attribution

Setup

Verification

​Access

​Collection

​Attribution

​Setup

​Verification

Access

Collection

Attribution

Setup

Verification