---
title: Google Workspace: Setting a Service Account as Primary Admin in Ashby
slug: google-workspace-setting-a-service-account-as-primary-admin-in-ashby
docTags: 
createdAt: 2025-11-19T12:37:10.816Z
---

:::hint{type="info"}
This route can be used to limit Ashby’s access. For example, by default super admins in Google have full access to all calendars. If a service account is created that does not have super admin rights, Ashby would be limited to only see free/busy information on calendars (if this is set as the default visibility for non-Super Admins).
:::

As part of the Google Workspace integration setup, you will need to add your primary Google Workspace admin's email address into the `Primary Google Workspace Admin` field within your Google Workspace settings in Ashby. This guide will walk through how to create and add a service account in this field.

![](https://cdn.zappy.app/9f11129ce92553e2c510de16efb289ca.png)

### Setup Steps

1. Create a custom admin role
   To create a custom admin role, in Google Admin, head to Account, Admin Roles and then click `Create New Role`. Ensure that the OU Read and Users Read privileges have been granted to this role when creating it.
2. Create a new user for the integration
   From here, create a new user for the integration within Google Admin by heading to Directory, then Users and clicking `Add new user`. Ensure that the user is assigned the newly created admin role. Then log in as the new user and accept the terms.
3. Configure the integration in Ashby, below are the available setup routes
   [Google Workspace: Domain-wide Delegation](docId\:i_NrK4oNwVNZAqQlLUtnI) 
   [Google Workspace: Individual OAuth](docId\:dSYe_yUTQj1Fm4Z6GAmat) 
   [Google Workspace: Hybrid Access](docId\:NmyE1euDMQXjWTx2RQLfr) 
4. When setting up the Google Integration in Ashby, add the new user’s email address to the Primary Google Workspace Admin field within the Google Workspace integration settings.