Tesorio connects directly to email accounts to send and receive email. An API connection to your Google Suite account is required for any Google email integration.

Google offers two methods for establishing trust between 3rd party applications:

Because Tesorio works with Google Workspace (enterprise) accounts rather than consumer accounts, we follow Google's published process which requires an administrator account for a managed Google service, such as Google Workspace or Cloud Identity to complete these steps.

Navigate to the following URL: https://admin.google.com/ac/owl/list?tab=configuredApps&hl=en

or

Navigate to Security > Access and data control > API controls from your Google Admin console.

Select Manage third-party app access.

Select Configure new app.

Search for the Tesorio application. For connections in Production, search for:

For connections in Sandbox, search for:

After clicking the Search button, select Tesorio.

Determine the scope that this application should have in your workspace (all organization units or specific units) and click Continue.

Select the access type for the API and click Continue.

Tesorio recommends selecting Trusted to ensure that if enhancements are made to functionality in the future and scopes are added, your administrator will not have to reconfigure API access and your organization maintains email continuity.

You can also choose Specific Google Data and the necessary scopes will be listed, but if the API is updated in the future to include additional permissions/scopes, your administrator will have to modify access for full functionality.

The exact permissions the API will access include:

Review your configuration settings and click Finish to complete.

If you would like to know more about API access into the Google workspace you can find this link to Google's FAQs