Google Workspace Synchronisation Error

In most cases, if you encounter an error while adding Google Workspace as a data source, the problem is related with how your administrator has configured your Workspace account.

But fret not! This article will help you get through it step by step 🙌

1. Checking your Google Workspace account type

2. Checking access rights

3. Error 400: admin_policy_enforced

Checking your Google Workspace account type

Unfortunately LicenceOne can only detect applications and login activity from paid Google Workspace accounts.

To check what account type you have, head to https://admin.google.com/ac/billing/subscriptions

If you get something similar to the following message, that means you are using a Gmail account and will not be able to analyse your Google data with LicenceOne (unless, of course, you switch to a Google Workspace account 😉)

Checking access rights

If this is the problem, you will have seen a message like the following (if you didn't get this message, you can continue to the next step):

If this is your error, you have two options available to you:

1. Invite your administrator to LicenceOne

1. Head to Settings > Users in LicenceOne

2. Click the Add new users button on the top right of the interface

3. Enter the full email address of the person that manages your Google Workspace account then click the Invite {email} option on the dropdown

   

4. Click Send invitations at the bottom right of the popup

5. Once your administrator has access to LicenceOne, ask them to synchronise Google Workspace for you

To help you explain LicenceOne to your administrator when they inevitably ask, we've prepared a little template that might help:

Hello,

I just tried to synchronise our Google Workspace with LicenceOne but it looks like I don't have administrator access. 

Can I invite you to our account so you can do it for me please?

For background: LicenceOne is a neat little tool that helps us detect all of the free and paid software in our company, who has access to them, and how often they actually login to use them (amongst other cool things).

2. Change your user permissions

You may also ask the administrator of your Google Workspace account to go to the Roles list section (Account > Admin roles) and change your permissions to Super Admin.

Once they've done so, you should have sufficient access privileges to synchronise Google Workspace with LicenceOne.

Error 400: admin_policy_enforced

If you're here, that means that when your Google Workspace administrator was setting up your account, they probably set up extra security measures (sometimes without knowing it) so that users couldn't synchronise with any old application.

To troubleshoot this, we need to try four different steps.

1. Installing LicenceOne from the Google Workspace store

2. Set LicenceOne as trusted in the configured apps section

3. Change Google Workspace Admin access type

4. Changing less secure apps limitations

After each of these steps, we strongly recommend that you try to re-add Google Workspace to your LicenceOne account (rather than trying all 4 items then retrying).

1. Installing LicenceOne from the Google Workspace store

1. Head to the Google Workspace Marketplace listing for LicenceOne

2. Click on the Install button at the top right of the page

3. Retry adding Google Workspace to your LicenceOne account

If this doesn't work, head to step 2.

2. Set LicenceOne as trusted in the configured apps section

1. Head to the Configured apps section of your Google Workspace admin console (Security > Overview > API Controls > Manage third-party app access)

2. Click Add a filter, select App name and then search for licenceone

   

3. Select all of the licenceone lines, then select change access on the top bar

4. Change the access type to Trusted: Can access all Google services

5. Retry adding Google Workspace to your LicenceOne account

3. Change Google Workspace Admin access type

1. Head to the App access control section of your Google Workspace admin console (Security > Overview > API Controls > Manage Google services)

2. Search for the Google Workspace Admin row in the applications table

3. While hovering over the Google Workspace Admin row, click the Change access button that should appear to the right of that row

   

4. Set the access type to Unrestricted: Any user approved app can access a service

5. Retry adding Google Workspace to your LicenceOne account

4. Change less secure apps limitations

1. Head to the Less secure apps section of your Google Workspace admin console (Security > Access and data control > Less secure apps)

2. Select the Allow users to manage their access to less secure apps

3. Retry adding Google Workspace to your LicenceOne account

Hopefully if you've got to this point, you're now singing...

However, if after all of that, your Google Workspace integration still isn't working, send us a message on our chat tool and we'll try our best to fix the problem.