Gmail

• A Google Workspace account with a Business Starter, Business Standard, Business Plus or Enterprise plan
• A Google Workspace user with Super Admin privileges ↗ and Owner permissions ↗ in the Google Cloud Platform (GCP) project used

Refer to Google Workspace integration permissions for information on which API permissions to enable.

The Gmail integration currently scans for the following findings, or security risks. Findings are grouped by category and then ordered by severity level.

To stay up-to-date with new CASB findings as they are added, bookmark this page or subscribe to its RSS feed.

Finding type	FindingTypeID	Severity	Description
Google Workspace: Domain SPF record allows any IP address	f28dcc8d-1f0c-4b5a-b254-4169095c16e5	High	A Google Workspace Domain SPF record allows any email to be sent from any IP address on your behalf.
Google Workspace: Domain SPF record not present	2e13e5dd-88ed-4d65-8d0a-d3fdff9ee7bb	Medium	An SPF record does not exist for a Google Workspace Domain.
Google Workspace: Domain DMARC record not present	ec39eabf-3536-4005-940b-22d815c628ec	Medium	A DMARC record does not exist for a Google Workspace Domain.
Google Workspace: Domain DMARC not enforced	8971666d-c049-436d-b4d1-6816a70650ef	Medium	A DMARC record for a Google Workspace Domain is not enforced.
Google Workspace: Domain DMARC not enforced for subdomains	fe485f42-b158-4187-85fe-79acdd92055b	Medium	A DMARC record for a Google Workspace Subdomain is not configured to quarantine or reject messages that fail authentication.
Google Workspace: Domain DMARC only partially enforced	b682c603-9bc6-485e-be8c-a6e58a989407	Medium	A DMARC record for a Google Workspace Domain is not configured to quarantine or reject messages that fail authentication.

Finding type	FindingTypeID	Severity	Description
Google Workspace: User delegates email access	66897c22-29a5-4f55-b39a-1bfcdd3c12c5	High	A user has delegated access to their inbox to another party. Delegates can read, send, and delete messages on the user’s behalf.