Tesorio connects directly to email accounts to send and receive email. An API connection to your Google Suite account is required for any Google email integration.
Google offers two methods for establishing trust between 3rd party applications:
an external verification process
a customer opt-in whitelisting process
Because Tesorio works with Google Workspace (enterprise) accounts rather than consumer accounts, we follow Google's published process which requires an administrator account for a managed Google service, such as Google Workspace or Cloud Identity to complete these steps.
Step 1
Navigate to the following URL: https://admin.google.com/ac/owl/list?tab=configuredApps&hl=en
or
Navigate to Security > Access and data control > API controls from your Google Admin console.
Step 2
Select Manage third-party app access.
Step 3
Select Configure new app.
Step 4
Search for the Tesorio application. For connections in Production, search for:
218699299682-ark4l1a948sa8h84n392eqqjr3u1r62i.apps.googleusercontent.com
For connections in Sandbox, search for:
1061999537831-lp7vcrcjd577j93331b7bal4nkfqn254.apps.googleusercontent.com
After clicking the Search button, select Tesorio.
Step 5
Determine the scope that this application should have in your workspace. You can choose from all organizational units, or a specific unit.
All Units
If you select all units, you can click Continue.
Specific Org Units
Organizations with strict security postures can scope to specific organizational units in order to control which users can authorize Tesorio to connect to their email. Select Select org units to allow a subset of your users to connect their email to Tesorio.
Next Select your desired org unit and click Select.
Your selected org unit will appear as [parent org/org unit]. Add any additional units if needed and click Next.
Step 6
Under Access to Google Data select Trusted and click Continue.
Due to the OAuth scopes associated with the API permissions required for email integration, the Tesorio application must be Trusted.
Limited or Specific Google data options are not supported by Google for the Tesorio connection.
The exact permissions the API will access include:
View your email messages and settings
See and edit your email labels
Read, compose, and send emails from your Gmail account
Manage drafts and send emails
Send email on your behalf
See your personal info, including any personal info you've made publicly available
Associate you with your personal info on Google
See your primary Google Account email address
Step 7
Review your configuration settings and click Finish to complete.
If you would like to know more about API access into the Google workspace you can find this link to Google's FAQs