To provision a service account for Google Drive from the Cloud App Security web console, do the following:

1. Log on to the Cloud App Security management console.
2. Hover over Google Drive, and click Provision.

   

   ^{Click the image to enlarge.}

3. The Provision Service Account for Google Drive screen appears. Click the Click here link under Step 1. This will open the Google Workspace Marketplace.

   

   ^{Click the image to enlarge.}

4. Click ADMIN INSTALL. A new window appears for you to sign in to Google.

   

   ^{Click the image to enlarge.}

5. Specify your Google Super Admin credentials, click Next and then click CONTINUE. An authorization screen appears.

   

   ^{Click the image to enlarge.}

6. Tick I agree to the application's Terms of Service and Google Workspace Marketplace Terms of Service, then click Accept to start the installation.
7. Go back to the Cloud App Security management console.
8. Hover over Google Drive, and click Provision. This will show the Provision Service Account for Google Drive screen.

   

   ^{Click the image to enlarge.}

9. Click the Click here link under Step 2.

   

   ^{Click the image to enlarge.}

10. In the new window that appears, click your Google Super Admin account, and once the authorization screen appears, click Allow.
11. Go back to the Cloud App Security management console as instructed and click Done.
     

    Cloud App Security will start to synchronize your Google Drive user and organization unit information including the user ID, user name, user email address, organization unit ID, and organization unit name. The time required depends on how many users and groups you have in Google Drive.

     
12. Cloud App Security generates the following folders in the Box administrator's root directory:
    • Quarantine folder (trendmicro_cas_quarantine__dont_change_or_delete)
      The Quarantine folder can be accessed only by the administrator.
    • Temporary folder (trendmicro_cas_temp__dont_change_or_delete)
      The Temporary folder can be edited only by users belonging to the group.
13. In the upper-right corner of the management console, hover over the bell icon and verify if the Google Drive provisioning has succeeded.

    

    ^{Click the image to enlarge.}

    

    ^{Click the image to enlarge.}

14. To avoid unnecessary notifications, all users must exclude the temporary folder (trendmicro_cas_temp__dont_change_or_delete) from the synchronization list. Perform the following steps as a user:
    1. Locate and click the Google Drive tray icon on your desktop.
    2. Click Settings, and choose Preferences.
    3. Click the Sync options tab, then click Sync only these folders.
    4. Clear the check box of the temporary folder (trendmicro_cas_temp__dont_change_or_delete) in the box below.