Connect Google Workspace

What you need

For continuous archiving, Gmail sends a copy of every message to your relay address. The connector is optional. It syncs users, groups and domains and imports existing Gmail mailboxes.

You need a Google Workspace administrator account. Your relay address is on the SMTP BCC relay card under Admin > Integrations:

{slug}-{token}@smtp.easymailarchive.com

The part after the hyphen is a token that differs for each tenant. Copy the exact address from Admin > Integrations. Addresses without the token stop working after a short grace period.

Create the routing rule

1. Under Admin > Integrations, open the SMTP BCC relay card and click Set up.
2. Copy the address under Your relay address.
3. Open the Google Admin console and go to Apps > Google Workspace > Gmail > Routing.
4. Click Add another rule.
5. Under Messages to affect, select all three options: Inbound, Outbound and Internal.
6. Enable Also deliver to and add the relay address.
7. Save the rule.
8. Go back to EasyMailArchive and click Done. The source is saved.

Other platforms: Setting up email journaling.

Wait time

Changes to routing rules can take up to an hour to take effect. Mail sent before that does not arrive through the rule. Bring in existing mail with the connector below.

Test the rule

1. Wait until the rule is active.
2. Send a mail from a Workspace mailbox to an external address (outbound).
3. Send a mail from outside to a Workspace mailbox (inbound).
4. Send a mail between two Workspace mailboxes (internal).
5. Open Search and search for the subject. If nothing matches, it shows "No emails found."
6. Under Admin > Dashboard, the Compliance status card then shows "Active, {count} emails archived".

Domains do not need verification. Mail for domains you have not added under Admin > Domains is archived but not assigned to a user.

Optional: Google Workspace connector

The connector does not replace the routing rule. It adds users, groups and the import of existing mail.

Set up domain-wide delegation in Google

1. In the Google Cloud console, create a service account and generate a JSON key.
2. Note the client ID from the JSON file.
3. In the Google Admin console, open Security > Access and data control > API controls > Domain-wide delegation.
4. Click Add new and enter the client ID.
5. Add these four scopes, each with the prefix https://www.googleapis.com/auth/:
   • admin.directory.user.readonly
   • admin.directory.group.readonly
   • admin.directory.group.member.readonly
   • gmail.readonly
6. Authorize the delegation.

Save the connector in EasyMailArchive

1. Open Admin > Integrations and start the setup on the Google Workspace card. The Google Workspace setup dialog opens.
2. Under Service account JSON key, choose the JSON file.
3. Under Admin email, enter the address of a Workspace administrator.
4. Under Domains, click Add domain and enter at least one domain.
5. Click Test connection.
6. After a successful test, click Save.

You then see "Google Workspace connector created. Initial sync started." The connector syncs users, groups and domains and creates Gmail import jobs.

Check import jobs

Find the jobs under Admin > Import Jobs. They show type, user, status (Pending, Running, Finished, Failed) and progress. You do not create jobs there yourself, the connector creates them.