Stega Workspace Connector
Google Workspace inventory and searchable audit history
Stega Networks helps its managed customers understand their Workspace environment, monitor licenses and storage, and investigate changes using retained audit records. An authorized Workspace administrator connects the organization through Google; ongoing collection runs in the background.
What the connector provides
- Directory inventory: users, account status, aliases, groups and direct memberships, organizational units, domains, administrator roles, and role assignments.
- License reporting: license assignments for configured Google products. Subscription information is available separately where Stega has an authorized reseller relationship.
- Storage and usage: organization and user storage reports. Google's reporting delay and feature availability apply.
- Audit and history search: activity records from configured Workspace services and historical inventory changes, searchable by organization, date, actor, service, action, and other available fields. Coverage depends on the customer's Workspace edition, administrator privileges, and Google's source availability.
- Email message trace: searches Google's Gmail delivery log events to show what happened to a message (delivered, bounced, rejected, quarantined, and so on), by mailbox, recipient, subject, or Message-ID, for up to 180 days. It uses delivery metadata only and never reads message bodies or attachments.
- Threat monitoring: watches audit events for signs of account takeover, such as an unusual sign-in followed by credential, recovery, or mail-rule changes, and raises incidents for Stega's security staff. Serious incidents can receive an advisory review by an AI model from a bounded summary of the incident's evidence. Monitoring reports findings; it does not change your Workspace.
Why Google permissions are requested
The connector requests directory, license, usage, and audit permissions needed for these features, together with the administrator's Google account identity to verify the connection. Directory and reporting access is read-only. Google's licensing permission also allows changes, but this connector currently uses it only for license reporting.
The connector does not request access to Google Drive files. It does not download document contents or read email bodies or attachments. Audit and delivery-log events can contain file names, email subjects, identifiers, IP addresses, and information about sharing or service activity.
The current connector does not provide settings changes, license assignment actions, a Chat bot, or access to Google Cloud workloads. Such features would require separate implementation, appropriate permissions, and updated disclosures.
Connect your organization
A Workspace administrator can connect a Google Workspace tenant using the Stega-owned connector. No StegaApp account is needed to provide Google consent. After authorization, a confirmation page explains the result and lets you close the tab. Stega checks the organization's capabilities before activating scheduled collection.
Access to inventory, audit search, and connection management in StegaApp requires an authorized StegaApp account. Administrators can revoke the connector through Google Account connections or their Workspace Admin console. Revocation stops future collection but does not automatically delete retained records.
Privacy and retention
Use of the connector is subject to our terms of service. Read our Workspace Connector privacy policy for the data collected, its uses, access, retention, and deletion arrangements. The standard audit/history period is one calendar year from event or record time, through the end of the anniversary day. Immutable archive locks and separate backup lifecycles can delay physical deletion. A different contract period must be agreed and technically supported before activation.
Contact Stega
For connection assistance or privacy requests, email [email protected]. Please do not send passwords or authorization tokens.