Create a Google Workspace connection

Important

This feature is in Beta. Workspace admins can control access to this feature from the Previews page. See Manage Azure Databricks previews.

Create a Google Workspace connection in Catalog Explorer to store authentication credentials for Lakeflow Connect ingestion. Any user with the USE CONNECTION privilege on the connection can then create Google Workspace ingestion pipelines without needing direct access to the credentials.

Alternatively, admin users can create a connection and a pipeline at the same time in the data ingestion UI. See Ingest data from Google Workspace.

For privilege requirements, see Connect to managed ingestion sources.

Prerequisites

Complete the source setup. Use the credentials retrieved there to create the connection.

Create a connection

1. In the Azure Databricks workspace, click Catalog > Create > Create a connection.
2. On the Connection basics page of the Set up connection wizard, specify a Connection name.
3. In the Connection type drop-down menu, select Google Workspace.
4. (Optional) Add a comment.
5. Click Next.
6. On the Authentication page, enter the OAuth client credentials from Configure authentication to Google Workspace:
   • Client ID: The client ID of your Google Cloud OAuth app.
   • Client Secret: The client secret of your Google Cloud OAuth app.
7. Click Sign in with Google and complete the consent in the popup as a Google Workspace Super Admin. This authorizes the Admin SDK Reports API audit-readonly scope. The authorization and token endpoints, OAuth scope, and credential exchange method are configured automatically.
8. After the page shows Successfully authorized, click Create connection.

Next steps

Create an ingestion pipeline.