---
title: Google workspace
description: Configure the Google Workspace audit logs integration with the coralogix_integration Terraform resource, with an example and parameters for each revision.
url: https://coralogix.com/docs/developer-portal/infrastructure-as-code/terraform-provider/integrations/google-workspace-audit-logs-collector/
product: ingress
feature: Google Workspace Ingress
feature_id: logs.google-workspace-ingress
feature_identifier: ingress/logs.google-workspace-ingress
last_updated: '2026-11-02'
---

# Google workspace

## Overview

Google Workspace provides detailed audit logs of user activities, such as logins, file sharing, and administrative actions. Monitor these logs to understand how your Google Workspace applications are being used, and optimize their efficiency and security.

## How to use with Terraform

To deploy this integration using Terraform, you can use the [`coralogix_integration`](https://registry.terraform.io/providers/coralogix/coralogix/latest/docs/resources/integration) resource provided by the Coralogix Terraform provider. Below is an example configuration:

```
resource "coralogix_integration" "google-workspace-audit-logs-collector" {

  integration_key = "google-workspace-audit-logs-collector"

  version         = "0.2.2"



  parameters = {

    IntegrationName                 = "GoogleWorkspaceAdminLogs"

    ServiceAccountKey               = "<ServiceAccountKey>"

    ImpersonatedEmail               = "<ImpersonatedEmail>"

    GoogleWorkspaceApplicationNames = [ "admin", "login", "drive", "vault" ]

    ApplicationName                 = "<ApplicationName>"

  }

}
```

Replace the placeholder values with your actual configuration parameters. Refer to the parameter table below for required fields and their descriptions.

## Revisions

0.2.2

Adds every application the Google Admin Reports API exposes, bringing `GoogleWorkspaceApplicationNames` to 41 options. New in this revision: `vault`, `gcp`, `gmail`, `takeout`, `ldap`, `directory_sync`, `access_evaluation`, `admin_data_action`, `chrome_sync`, `classroom`, `assignments`, `cloud_search`, `contacts`, `data_migration`, `graduation`, `meet_hardware`, `profile`, `tasks`, `voice`, and `workspace_studio`. The OAuth scopes you already granted cover all of them, so no re-authorization is needed.

| Name                            | Type   | Required | Description                                                                                                                            |
| ------------------------------- | ------ | -------- | -------------------------------------------------------------------------------------------------------------------------------------- |
| ApplicationName                 | String | Yes      | The application name for the integration                                                                                               |
| GoogleWorkspaceApplicationNames | List   | Yes      | Select the applications for which Coralogix will read the audit logs                                                                   |
| ImpersonatedEmail               | String | Yes      | Enter a valid email address of a super admin user to be impersonated                                                                   |
| IntegrationName                 | String | Yes      |                                                                                                                                        |
| BillingProjectId                | String | No       | A caller-specified project for quota and billing purposes. The caller must have `serviceusage.services.use` permission on the project. |
| ServiceAccountKey               | String | No       |                                                                                                                                        |
| ServiceAccountTargetPrincipal   | String | No       | Email of the created Service Account.                                                                                                  |
| SubsystemName                   | String | No       | The subsystem name for the integration, if not provided then google workspace application name will be used                            |

0.2.1

Adds `gemini_in_workspace_apps` to the applications you can select.

Parameters are the same as in 0.2.0.

0.2.0

Adds service account impersonation as an authentication method, removing the need to create and upload a service account key. During setup a Coralogix principal is created for the integration; assign it the `Service Account Token Creator` role on your service account so it can impersonate it. `ServiceAccountKey` is now optional and the key-based flow is still supported. Setting up a new account pauses data collection until setup completes, and GCP IAM changes take a few minutes to propagate.

| Name                            | Type   | Required | Description                                                                                                                            |
| ------------------------------- | ------ | -------- | -------------------------------------------------------------------------------------------------------------------------------------- |
| ApplicationName                 | String | Yes      | The application name for the integration                                                                                               |
| GoogleWorkspaceApplicationNames | List   | Yes      | Select the applications for which Coralogix will read the audit logs                                                                   |
| ImpersonatedEmail               | String | Yes      | Enter a valid email address of a super admin user to be impersonated                                                                   |
| IntegrationName                 | String | Yes      |                                                                                                                                        |
| BillingProjectId                | String | No       | A caller-specified project for quota and billing purposes. The caller must have `serviceusage.services.use` permission on the project. |
| ServiceAccountKey               | String | No       |                                                                                                                                        |
| ServiceAccountTargetPrincipal   | String | No       | Email of the created Service Account.                                                                                                  |
| SubsystemName                   | String | No       | The subsystem name for the integration, if not provided then google workspace application name will be used                            |

0.1.0

| Name                            | Type   | Required | Description                                                                                                 |
| ------------------------------- | ------ | -------- | ----------------------------------------------------------------------------------------------------------- |
| ApplicationName                 | String | Yes      | The application name for the integration                                                                    |
| GoogleWorkspaceApplicationNames | List   | Yes      | Select the applications for which Coralogix will read the audit logs                                        |
| ImpersonatedEmail               | String | Yes      | Enter a valid email address of a super admin user to be impersonated                                        |
| IntegrationName                 | String | Yes      |                                                                                                             |
| ServiceAccountKey               | String | Yes      |                                                                                                             |
| SubsystemName                   | String | No       | The subsystem name for the integration, if not provided then google workspace application name will be used |