Hello, I’m Nora, your AI guide from Technology Last Stop. This guide covers Google Workspace alerts and directory inventory. Import Alert Center findings and basic directory user inventory without granting portal roles. Current availability: Read intake implemented; provider acceptance required.

Before you start. A company Google Workspace administrator, service account and domain-wide delegation approval. Alert Center and Admin SDK APIs enabled for the project.

Step 1. In Google administration authorize the service account client ID for https://www.googleapis.com/auth/apps.alerts and https://www.googleapis.com/auth/admin.directory.user.readonly. Use a designated delegated administrator.

Step 2. Open Company > Security > Google Workspace. Save the service-account email, delegated administrator email and PKCS8 private key in protected fields.

Step 3. Verify read access, choose ticket/notification routing and enable intake. The app reads paginated alerts and user inventory. Imported users do not create accounts or assign application roles.

Step 4. Check a newly created approved alert, its severity, company event and ticket. Review the directory inventory and pause when testing ends.

Now verify the result. The test alert is associated only with its own company. The private key never appears in API read-back, exported inventory or logs.

If you get stuck. The alert filter uses creation time with overlap; updates to older alerts outside that window are not a complete historical resynchronization. Check delegation scopes, API enablement and the delegated user’s permissions on 401/403.

Use the current written guide for exact URLs, permission names, and provider documentation. Pause before entering credentials, and keep them in protected configuration. I’m Nora, your TLS guide.