This guide is for the Google Workspace Administrator setting up domain-wide delegation for Connect The Dots. Once complete, CTD can process email accounts for users in your organization — no action required from individual employees.

Who does this: Your Google Workspace super administrator. The whole process takes under five minutes.

Steps

  1. Go to admin.google.com → Security → API controls → Domain-wide delegation
  2. Click Add new
  3. Enter the following:
    • Client ID: 112764625517011504363
    • OAuth scopes (see table below for your access level)
  4. Click Authorize
  5. You're done — let your CTD Account Executive know and they'll verify the connection

OAuth scopes by access level

Choose the row that matches the access scope you agreed on with your Account Executive. Copy the full list of scopes and paste them into the OAuth scopes field, one per line or comma-separated.

ScopeOAuth scopes to enter
Metadata only https://www.googleapis.com/auth/gmail.metadata
https://www.googleapis.com/auth/admin.directory.user.readonly
Metadata + Send https://www.googleapis.com/auth/gmail.metadata
https://www.googleapis.com/auth/admin.directory.user.readonly
https://www.googleapis.com/auth/gmail.send
Read-only https://www.googleapis.com/auth/gmail.readonly
https://www.googleapis.com/auth/admin.directory.user.readonly
Read-only + Send https://www.googleapis.com/auth/gmail.readonly
https://www.googleapis.com/auth/admin.directory.user.readonly
https://www.googleapis.com/auth/gmail.send
What these scopes allow: CTD is authorized to read the list of users in your workspace (admin.directory.user.readonly) and fetch their emails — and, if you chose a Send scope, send emails on their behalf for ghost email workflows. Nothing beyond what's listed here.

Optional, but highly recommended: add Contacts & Calendar sync

CTD can also build your relationship graph from Google Contacts and Google Calendar. Saved contacts and meeting history are two of the strongest relationship signals. To enable this, add these read-only scopes to the list you enter in step 3, alongside the scopes for your access level:

  • Google Contacts: https://www.googleapis.com/auth/contacts.readonly
  • Google Calendar: https://www.googleapis.com/auth/calendar.events.readonly and https://www.googleapis.com/auth/calendar.calendarlist.readonly

Both are read-only: CTD can never modify your contacts or calendar. You can also add them later at any time by editing the same delegation entry.

Example: if your access level is Read-only + Send and you want both Contacts and Calendar sync, the complete list to paste in step 3 is:

https://www.googleapis.com/auth/gmail.readonly
https://www.googleapis.com/auth/admin.directory.user.readonly
https://www.googleapis.com/auth/gmail.send
https://www.googleapis.com/auth/contacts.readonly
https://www.googleapis.com/auth/calendar.events.readonly
https://www.googleapis.com/auth/calendar.calendarlist.readonly

More information

Google's own documentation on domain-wide delegation: Delegate domain-wide authority to your service account, section "Delegate domain-wide authority to your service account."

Revoking access

Return to domain-wide delegation, find Client ID 112764625517011504363, and click Delete. CTD immediately loses all access.