Composio connects AI agents to Google Admin so they can work with Google Workspace directory users and groups within the signed-in administrator’s permissions.
Use your own Google OAuth app to control its credentials and the permissions your workflow requests.
Use a Google Workspace administrator account with the Directory privileges your workflow needs. Your organization may also need to allow the OAuth app under its app-access policy.
Part 1. Set up your Google OAuth app
Step 1. Select a project and enable the API
Open Google Cloud Console and select the project that will own your OAuth client.
In APIs & Services → Library, find the service for your workflow. Enable the Admin SDK API (admin.googleapis.com) in your Google Cloud project. This toolkit uses its Directory API.
Step 2. Configure branding and audience
Open Google Auth Platform → Branding. Enter an app name, support email, and developer contact details.
Under Audience, choose the audience that matches your users. For an external app in Testing, add the accounts you will use under Test users.
Step 3. Choose permissions for your workflow
Open Google Auth Platform → Data Access and select Add or remove scopes. Add the scopes your workflow needs and save.
The user-listing example uses admin.directory.user.readonly. Composio also checks the signed-in directory user. Choose the relevant group, member, or write scopes only if the actions you plan to use require them.
The example requests https://www.googleapis.com/auth/admin.directory.user.readonly. Choose scopes for the actions you plan to use.
Directory API user-listing requirements · Directory API user-profile permissions
Step 4. Create the OAuth client
Open Google Auth Platform → Clients, select Create client, and choose Web application.
Under Authorized redirect URIs, add the production callback used by the Composio auth form.
https://backend.composio.dev/api/v1/auth-apps/add
Select Create. Save the client ID and copy or download the client secret before you close the dialog. Google shows the full secret once. Store it privately.
Part 2. Connect Google Admin in Composio
Step 1. Create an auth config
In the Composio dashboard, open Auth Configs → Create and select Google Admin. Enter a config name and choose Next.
Select OAuth 2.0 if prompted. Choose Your Own Credentials when that option appears. Enter your client ID and client secret, verify the redirect URI, and select the scopes your workflow requires. Then select Create Auth Config.
Step 2. Authorize the account
Open the auth config and select Connect Account. Sign in with a Google account that meets the prerequisites above and review the permissions before you continue.
If Google returns an access error, check the user’s Directory privileges and organization app-access policy. A valid OAuth grant does not add Workspace admin privileges.
Step 3. Verify the connection
Return to the auth config and check that the connected account shows Active in Accounts.
Before using the app in production
Review Google’s verification requirements for the audience and scopes you chose. External apps in Testing can receive refresh tokens that expire after seven days. Check the requirements for your app before inviting production users.