Google Cloud Storage data classification integration

📘

Draft note (remove before publishing)

Migrated from the HubSpot article "Integration for Google Storage", updated to the current setup labels. Add screenshots of the Google Workspace API controls and the MineOS integration form.

Automate data classification by integrating MineOS with Google Cloud Storage

How It Works

MineOS connects to your Google Cloud project and scans the files in the Cloud Storage buckets you choose to detect the types of personal data they contain.

Note: This integration supports data classification only.

Before You Start

• You need access to the Google Workspace admin dashboard, with permission to set up third-party apps (Super Admin, Security Admin or a custom admin role).
• Create an integration user and share all relevant buckets with it. The shared buckets define the scope of the scan; files outside them can't be scanned. The user needs the devstorage.read_only scope.
• Have the Project ID of the buckets you want to scan ready.
• If your organization enforces a session timeout for Google Cloud scopes, mark the MineOS app as trusted and exempt trusted apps from session timeout. Otherwise the integration expires and has to be reconnected.
• [Optional] Enable Preview mode to view sample PII values alongside classification results. You must enable Preview mode before running the scan.

Setting Up

Step 1: Allow the MineOS app in Google Workspace

1. Log in to the Google Workspace Admin dashboard at admin.google.com with an admin account.
2. Click Security → Access and data control → API Controls.
3. Under App access control, click Manage third-party app access, then Configure new app.
4. Search for 476692529048-d6el4g4n125gh4ucd2r7voo5k5i2eok6.apps.googleusercontent.com and select MineOS Radar.
5. Choose the OAuth Client ID and click Select.
6. Select the organizational units to enable and click Continue. We recommend the entire organization for the widest coverage.
7. Select Trusted, click Continue, review the settings and click Finish.

For more information, see Google's article on controlling which third-party and internal apps access Google Workspace data.

Step 2: Connect in MineOS

1. Log in to MineOS. On the left sidebar, click Inventory → Data Sources. Click Add Data Source, search for Google Cloud Storage and click Add.
2. Open the data source → Integrations tab → Request Handling section → select Integration.
3. Mark the Scan this source using Data Classifier checkbox.
4. Click Connect and follow the on-screen instructions to grant the required permissions.
5. Fill in the scan scope:
   • Project ID: the project that holds the buckets to scan.
   • Bucket Regex: * for all buckets, or a regex that matches specific buckets.
6. Click Save.

You're done! MineOS has been connected to your Google Cloud Storage buckets. Click Start Scan in the Data Classifier panel to start the scan.

Need Help?

If you need any help with this integration, please contact your Customer Success Manager. They will be happy to assist you!