Tesorio connects directly to email accounts to send and receive email. An API connection to your Google Suite account is required for any Google email integration.

Google offers two methods for establishing trust between 3rd party applications:

Because Tesorio works with Google Workspace (enterprise) accounts rather than consumer accounts, we follow Google's published process which requires an administrator account for a managed Google service, such as Google Workspace or Cloud Identity to complete these steps.

Navigate to the following URL: https://admin.google.com/ac/owl/list?tab=configuredApps&hl=en

or

Navigate to Security > Access and data control > API controls from your Google Admin console.

Select Manage third-party app access.

Select Configure new app.

Search for the Tesorio application. For connections in Production, search for:

For connections in Sandbox, search for:

After clicking the Search button, select Tesorio.

Determine the scope that this application should have in your workspace. You can choose from all organizational units, or a specific unit.

If you select all units, you can click Continue.

Organizations with strict security postures can scope to specific organizational units in order to control which users can authorize Tesorio to connect to their email. Select Select org units to allow a subset of your users to connect their email to Tesorio.

Next Select your desired org unit and click Select.

Your selected org unit will appear as [parent org/org unit]. Add any additional units if needed and click Next.

Under Access to Google Data select Trusted and click Continue.

The exact permissions the API will access include:

Review your configuration settings and click Finish to complete.

If you would like to know more about API access into the Google workspace you can find this link to Google's FAQs