# Importing from Google

When importing users & groups from Google, you will face the below error on the first-time you try to authenticate:

<figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2FtFkRoAYRs2sokw6q6ktZ%2Fusers-google-autherror.png?alt=media&#x26;token=510a37b4-b6b5-4bcb-b904-5a0254b19f75" alt="" width="375"><figcaption></figcaption></figure>

The reason is that certain sensitive permissions are required for the import:

| Sensitivity                      | Scopes                                                                                                                                                                                                                                                                  | Why Dope Requires This                                                                                                                                                      |
| -------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Non‑sensitive** (OIDC Auth)    | `openid` `https://www.googleapis.com/auth/userinfo.profile` `https://www.googleapis.com/auth/userinfo.email`                                                                                                                                                            | Returns the user’s ID‑token +  profile + primary email for identification                                                                                                   |
| **Sensitive** (User/Group Synch) | `https://www.googleapis.com/auth/admin.directory.user.readonly` `https://www.googleapis.com/auth/admin.directory.group.readonly` `https://www.googleapis.com/auth/admin.directory.group.member.readonly` `https://www.googleapis.com/auth/admin.reports.audit.readonly` | Read‑only access to users, groups, group memberships, and Admin SDK audit logs to perform regular User/Group synchronization, and process delta for groups every 15 minutes |

## To resolve this:

1. Login to [Google Admin Sconsole](https://admin.google.com/u/0/ac/owl/list?tab=configuredApps\&hl=en) as an Administrator. Navigate to Security -> Access and Data Control -> API controls, and select **MANAGE THIRD-PARTY APP ACCESS**

![API Security Controls are managed here](https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2FvY2OlW1OlrpusVejPlz4%2Fusers-google-apicontrols.png?alt=media\&token=4728ecdc-73ce-4c60-b3e4-d1131ab0313d)

2. Select Configure new app\ <br>

   <figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2FqoRXCVFDLXxcAhMDunOV%2Fimage.png?alt=media&#x26;token=c08fbfd8-f8f0-4217-9267-176e9060f006" alt=""><figcaption></figcaption></figure>
3. Search for dope.security's Client ID&#x20;

`478881077855-4cs12s5t8lae8vsh43svpsahneb1fgu2.apps.googleusercontent.com`&#x20;

<figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2FuwMcxHCuC3sxXAtIt5yu%2Fimage.png?alt=media&#x26;token=0a99702b-d98f-4a4e-b63d-cee546a7bbee" alt=""><figcaption></figcaption></figure>

3. Click the “Dope Security” app and Configure the App access to **Trusted**<br>

   <figure><img src="https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2Fyt1jdvwmsRINRi4FTjii%2Fimage.png?alt=media&#x26;token=d95c8bba-3c80-47e9-8658-29e86558d9fe" alt=""><figcaption><p>Mark app as Trusted</p></figcaption></figure>
4. Once configured, you will see the app listed as Trusted in the third-party app list.

![](https://4250118259-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fqdf21diS0j19gSMF9LeP%2Fuploads%2Ff0kEidIrgwrR3bKdDDaJ%2Fusers-google-configured.png?alt=media\&token=b6f6204a-03a0-4948-a4fe-9971f9f706c5)