Google Drive
Connect a Google account so assistants can list, search, read, and (when you allow it) create files in that Drive. Google Drive is a per-member connection: each workspace member connects their own Google account. Workspace admins enable the feature; members authorize their own OAuth grants.
This is separate from files you upload into Gravity Rail. Drive stays in Google; assistants search it at request time. Nothing is copied into the workspace unless you ask an assistant to read a specific file and work with its contents.
Before You Start
You'll need:
- The Google Drive feature enabled on your workspace. If you don't see Google Drive in the App Connections directory, ask your Gravity Rail administrator to turn on the Drive feature.
- A Google account with access to the files you want assistants to find. You can connect more than one Google account if you work across several organizations.
- If the account is on Google Workspace, a domain admin must allow Gravity Rail first. Personal
@gmail.comaccounts do not need this. See Google Workspace Accounts.
Connecting Your Google Account
- Go to App Connections and open the Directory tab.
- Find Google Drive (Google category) and click Install.
- Click Connect — you'll be redirected to Google's authorization page.
- Sign in with the Google account whose Drive you want assistants to search.
- Review and approve the requested permissions (see Required Permissions below).
- You'll be redirected back to your workspace. The new connection appears on the Active tab under Platform Integrations.
Connecting Multiple Google Accounts
- On the Active tab, open the Google Drive connection.
- Click Add account and repeat the OAuth flow with the second account.
- Assistants see all connected accounts when listing available connections.
Connecting During a Chat
If the workspace has inline connect enabled and you don't yet have a Google Drive connection, an assistant may prompt you to connect from the chat. Click the Connect Google Drive button to launch the OAuth flow without leaving the conversation.
Required Permissions
Gravity Rail requests the following Google OAuth scopes when you connect:
| Scope | Why it's needed |
|---|---|
drive.readonly | List and search files the connected account can already open |
drive.file | Create Google Docs or text files the assistant makes on your behalf |
userinfo.email, userinfo.profile, openid | Identify which Google account is connected |
The assistant's tools follow the Drive ability's access mode in Gravity Rail. A read-only ability cannot create or overwrite Drive files.
What Assistants Can Do
Once your Google account is connected, assistants with the integration:google_drive ability can:
| Tool | What it does |
|---|---|
| List connections | Show which Google accounts you have connected |
| List Drive files | Search Drive by name or content, optionally filtered by file type |
| Read a file | Read the text of a Google Doc, spreadsheet (as CSV), or text file |
| Create a file | Create a Google Doc or plain-text file (read-write access mode only) |
| Reconnect account | Re-authorize a connected account if the token has expired |
Assistants can only see files the connected Google account can already open — including files shared with that account.
Managing Your Connection
Viewing Connected Accounts
Go to App Connections → Active tab and open Google Drive. Each row shows the connected Google email address and connection status.
Reconnecting an Expired Account
If your OAuth token expires or is revoked, the connection shows a Reauthorize Required badge:
- Open the Google Drive connection on the Active tab.
- Click Reauthorize next to the affected account.
- Complete the Google OAuth flow again.
Alternatively, ask an assistant to reconnect: "Reconnect my Google Drive account."
Removing an Account
- Open the Google Drive connection on the Active tab.
- Click the action menu next to the account you want to remove.
- Choose Disconnect.
To remove the integration entirely, choose Delete from the connection's action menu. This removes all connected Google accounts and their stored tokens.
Also revoke from Google. Removing the connection in Gravity Rail deletes our copy of the OAuth token, but Google keeps its own record of the grant. To fully revoke access, visit myaccount.google.com/permissions and remove the Gravity Rail app.
Troubleshooting
"This app is blocked" or admin_policy_enforced
The Google account is on a Workspace domain that blocks unverified third-party apps. Send Google Workspace Accounts to your Google Workspace admin and retry after they mark the Drive client as Trusted.
"Reauthorize Required" badge
Google has revoked or expired the access token. This happens when:
- The token hasn't been used for six months (Google's inactivity policy)
- You changed your Google account password
- You manually revoked access in Google's account settings
- An admin in your Google organization restricted third-party app access
Open the connection and click Reauthorize to re-run OAuth.
Assistant can't find a file
- Confirm the file is accessible to the Google account you connected.
- Try a more specific name or phrase in your prompt.
- A file shared with you in the last minute may not appear in Drive search yet.
"Google Drive not available" or missing from the Directory
The Drive feature is not enabled on your workspace. Ask your Gravity Rail administrator to enable it.
Related
- Google Workspace Accounts — Allow Drive on a company Google domain
- Google Sheets — Find and edit spreadsheets
- Files — Files stored in Gravity Rail
- App Connections — Overview of the integration hub
- Abilities — How assistant abilities and toolkit permissions work