Google Workspace Synchronisation Error
In most cases, if you encounter an error while adding Google Workspace as a data source, the problem is related with how your administrator has configured your Workspace account.
But fret not! This article will help you get through it step by step 🙌
Checking your Google Workspace account type
Checking access rights
Error 400: admin_policy_enforced
Unfortunately LicenceOne can only detect applications and login activity from paid Google Workspace accounts.
To check what account type you have, head to https://admin.google.com/ac/billing/subscriptions
If you get something similar to the following message, that means you are using a Gmail account and will not be able to analyse your Google data with LicenceOne (unless, of course, you switch to a Google Workspace account 😉)
If this is the problem, you will have seen a message like the following (if you didn't get this message, you can continue to the next step):
If this is your error, you have two options available to you:
Head to Settings > Users in LicenceOne
Click the Add new users button on the top right of the interface
Enter the full email address of the person who manages your Google Workspace account, then click the Invite {email} option on the dropdown
Click Send invitations at the bottom right of the pop-up
Once your administrator has access to LicenceOne, ask them to synchronize Google Workspace for you
To help you explain LicenceOne to your administrator when they inevitably ask, we've prepared a little template that might help:
You may also ask the administrator of your Google Workspace account to go to the Roles list section (Account > Admin roles) and change your permissions to Super Admin.
Once they've done so, you should have sufficient access privileges to synchronize Google Workspace with LicenceOne.
If you're here, that means that when your Google Workspace administrator was setting up your account, they probably set up extra security measures (sometimes without knowing it) so that users couldn't synchronize with any old application.
To troubleshoot this, we need to try four different steps.
Installing LicenceOne from the Google Workspace store
Set LicenceOne as trusted in the configured apps section
Change Google Workspace Admin access type
Changing less secure apps limitations
After each of these steps, we strongly recommend that you try to re-add Google Workspace to your LicenceOne account (rather than trying all four items then retrying).
Head to the Google Workspace Marketplace listing for LicenceOne
Click on the Install button at the top right of the page
Retry adding Google Workspace to your LicenceOne account
If this doesn't work, head to step 2 below 👇
Head to the Configured apps section of your Google Workspace admin console (Security > Overview > API Controls > Manage third-party app access)
Click Add a filter, select App name and then search for licenceone
Select all the licenceone lines, then select change access on the top bar
Change the access type to Trusted: Can access all Google services
Retry adding Google Workspace to your LicenceOne account
If this doesn't work, head to step 3 below 👇
Head to the App access control section of your Google Workspace admin console (Security > Overview > API Controls > Manage Google services)
Search for the Google Workspace Admin row in the applications table
While hovering over the Google Workspace Admin row, click the Change access button that should appear to the right of that row
Set the access type to Unrestricted: Any user approved app can access a service
Retry adding Google Workspace to your LicenceOne account
If this doesn't work, head to step 4 below 👇
Head to the Less secure apps section of your Google Workspace admin console (Security > Access and data control > Less secure apps)
Select the Allow users to manage their access to less secure apps
Retry adding Google Workspace to your LicenceOne account
Hopefully, if you've got to this point, you're now singing…
However, if after all of that, your Google Workspace integration still isn't working, send us a message on our chat tool and we'll try our best to fix the problem.
But fret not! This article will help you get through it step by step 🙌
Checking your Google Workspace account type
Checking access rights
Error 400: admin_policy_enforced
Checking your Google Workspace account type
Unfortunately LicenceOne can only detect applications and login activity from paid Google Workspace accounts.
To check what account type you have, head to https://admin.google.com/ac/billing/subscriptions
If you get something similar to the following message, that means you are using a Gmail account and will not be able to analyse your Google data with LicenceOne (unless, of course, you switch to a Google Workspace account 😉)
Checking access rights
If this is the problem, you will have seen a message like the following (if you didn't get this message, you can continue to the next step):
If this is your error, you have two options available to you:
1. Invite your administrator to LicenceOne
Head to Settings > Users in LicenceOne
Click the Add new users button on the top right of the interface
Enter the full email address of the person who manages your Google Workspace account, then click the Invite {email} option on the dropdown
Click Send invitations at the bottom right of the pop-up
Once your administrator has access to LicenceOne, ask them to synchronize Google Workspace for you
To help you explain LicenceOne to your administrator when they inevitably ask, we've prepared a little template that might help:
Hello,
I just tried to synchronize our Google Workspace with LicenceOne but it looks like I don't have administrator access.
Can I invite you to our account so you can do it for me please?
For background: LicenceOne is a neat little tool that helps us detect all the free and paid software in our company, who has access to them, and how often they actually log in to use them (among other cool things).2. Change your user permissions
You may also ask the administrator of your Google Workspace account to go to the Roles list section (Account > Admin roles) and change your permissions to Super Admin.
Once they've done so, you should have sufficient access privileges to synchronize Google Workspace with LicenceOne.
Error 400: admin_policy_enforced
If you're here, that means that when your Google Workspace administrator was setting up your account, they probably set up extra security measures (sometimes without knowing it) so that users couldn't synchronize with any old application.
To troubleshoot this, we need to try four different steps.
Installing LicenceOne from the Google Workspace store
Set LicenceOne as trusted in the configured apps section
Change Google Workspace Admin access type
Changing less secure apps limitations
After each of these steps, we strongly recommend that you try to re-add Google Workspace to your LicenceOne account (rather than trying all four items then retrying).
1. Install LicenceOne from the Google Workspace store
Head to the Google Workspace Marketplace listing for LicenceOne
Click on the Install button at the top right of the page
Retry adding Google Workspace to your LicenceOne account
If this doesn't work, head to step 2 below 👇
2. Set LicenceOne as trusted in the configured apps section
Head to the Configured apps section of your Google Workspace admin console (Security > Overview > API Controls > Manage third-party app access)
Click Add a filter, select App name and then search for licenceone
Select all the licenceone lines, then select change access on the top bar
Change the access type to Trusted: Can access all Google services
Retry adding Google Workspace to your LicenceOne account
If this doesn't work, head to step 3 below 👇
3. Change Google Workspace Admin access type
Head to the App access control section of your Google Workspace admin console (Security > Overview > API Controls > Manage Google services)
Search for the Google Workspace Admin row in the applications table
While hovering over the Google Workspace Admin row, click the Change access button that should appear to the right of that row
Set the access type to Unrestricted: Any user approved app can access a service
Retry adding Google Workspace to your LicenceOne account
If this doesn't work, head to step 4 below 👇
4. Change less secure apps limitations
Head to the Less secure apps section of your Google Workspace admin console (Security > Access and data control > Less secure apps)
Select the Allow users to manage their access to less secure apps
Retry adding Google Workspace to your LicenceOne account
Hopefully, if you've got to this point, you're now singing…
However, if after all of that, your Google Workspace integration still isn't working, send us a message on our chat tool and we'll try our best to fix the problem.
Updated on: 18/08/2023
Thank you!