Search Google Docs, Sheets, Slides, and supported files in Drive. Members can connect their own accounts after an admin allows Google Drive, or an admin can configure a central service-account crawl.
Admin setup uses your organization's Settings → Sources page. Teammates connect from Integrations in the main sidebar. For workspace Search, use Search → Add source instead; Create & Invite is the workspace equivalent of Add source.
Choose your setup
| Method | Use it when | What teammates do |
|---|---|---|
| Member accounts | Each person should connect their own Drive access. No Google Workspace administrator setup is needed. | Connect their own Google Drive accounts after the source is created. |
| Service account | A Google Workspace administrator can configure delegation and directory access for a central crawl. | Sign in to Sim with matching verified email addresses; no personal Drive connection is needed for this source. |
A central crawl indexes only files the configured Crawl as account can access. Domain-wide delegation does not make this connector crawl every employee's Drive. Share the intended content with the indexing account, or use member accounts for each person's accessible files.
Connect member accounts
Allow Google Drive
An organization admin opens Settings → Sources and turns on Google Drive under Allowed in Sim Search. This allows personal connections; it does not create a source or connect anyone's account.
Connect your account
Open Integrations in the main sidebar and select Connect account beside Google Drive. Use the Google account matching your verified Sim email. The first personal connection can create a source with default filters. Teammates follow the same connection steps.
Adjust filters if needed
An admin opens Settings → Sources, selects Manage beside Google Drive, and opens the source's Settings tab. Leave Folders empty to include supported files each member can access, or narrow the source to folders. Account for browsing helps select folders; manual Folder IDs work without it. Browsing does not connect that account to Search.
Keep Sync documents with → Connected members unless a dedicated account should fetch content. Members still connect to establish access. If the dedicated account is a delegated service account, Crawl as selects the Google Workspace user whose files it fetches. Save the source settings when finished.
Set up a central service account
Open Settings → Sources and turn on Google Drive under Allowed in Sim Search. Select Set up (or Manage if sources already exist), then Add source. This opens central service-account setup. Teammates do not need a personal Drive connection for this source.
This requires a Google Workspace domain and a Workspace super administrator to authorize domain-wide delegation. Consumer Gmail accounts cannot use this path.
Prepare the service account
In Google Cloud Console, select your project and enable Google Drive API and Admin SDK API under APIs & Services → Library. Then open IAM & Admin → Service Accounts → Create service account, enter a name, and finish creation. Google Cloud project roles do not grant access to Workspace files; they are not required for this crawl.
Open the service account's Keys tab and choose Add key → Create new key → JSON, then select Create to download the key. Store it securely; you will add it to Sim next. See Google's key creation guide.
Authorize domain-wide delegation
In the service account's Details, expand Advanced settings and copy its numeric Client ID. Sign in to the Workspace Admin Console as a super administrator. Open Security → Access and data control → API controls → Manage Domain Wide Delegation → Add new.
Paste that Client ID into Client ID, then enter these exact scopes as a comma-separated list under OAuth scopes:
https://www.googleapis.com/auth/drive.readonly,https://www.googleapis.com/auth/admin.directory.group.readonly,https://www.googleapis.com/auth/admin.directory.domain.readonlySelect Authorize, then View details to confirm all three scopes were saved. If your organization requires multi-party approval, another super administrator must approve the request. Delegation changes can take up to 24 hours to propagate. See Google's Admin Console delegation guide.
These are Search's central crawl scopes. The general Google service account guide includes broader scopes for workflow actions; do not copy those into this Search setup.
Add the credential in Sim
Under Indexing account, choose the service-account connection action, or select an existing service account. Paste the JSON key into Add Google Service Account, give it a name, and add it. Sim returns you to the source form with that credential selected.
Choose the indexing identity
Set Crawl as to a Google Workspace administrator who can read groups, memberships, and domains, and can access the content you want indexed. Select folders if needed, then choose Connect & Sync. Sim validates Drive and Directory access before accepting the source.
Source options
| Option | Behavior |
|---|---|
| Folders / Folder IDs | Optional. Includes files in each selected folder and its accessible subfolders. A folder selection does not grant access. |
| File Type | All supported files by default, or only Google Docs, Sheets, Slides, or text formats. Plain text files only also includes CSV, HTML, Markdown, JSON, and XML. |
| Crawl as | Required for the central service account. In Member accounts, it optionally supplies the impersonated user when a dedicated service account fetches content. It has no effect on ordinary OAuth accounts. |
| Openly shared files | Applies only to central crawls; it has no effect in Member accounts. Keep out of search by default. You can include discoverable domain shares or discoverable public shares. Link-only sharing does not grant Search access; named user and group permissions still apply. |
| Metadata tags | Optional owner, file type, modification date, and starred metadata. In the add-source form, these and File Type are under More options. |
Sim exports Docs and Slides as text and Sheets as XLSX spreadsheets. Supported uploaded files use the knowledge-base document pipeline, including PDF and Office formats. Unsupported files and oversized exports cannot be indexed; Google limits Workspace exports to 10 MB. See Drive export formats and download limits.
Search schedules syncs hourly. Content, deletions, and permissions refresh in the background; results are not a live read from Drive. Open Settings → Sources, select Manage beside Google Drive, then open the source to inspect Documents, edit Settings, or review Sync history. Accounts on the provider page shows personal account connections where configured; it does not list the central service-account credential.
Troubleshooting
| Problem | Next step |
|---|---|
| Directory access failed | Check the delegated scopes and the Crawl as user's administrator privileges. A normal Google OAuth credential cannot supply this central Search path. |
| An existing central source uses a normal Google OAuth account | Open the source's Settings tab, select or add a delegated service account, and choose Change indexing account. If the source is Paused or Disabled, choose Resume after updating the account. |
| Missing files in a central crawl | Open them as the Crawl as user. Delegation does not grant that user access to all domain files. Check folder and file-type filters. |
| A teammate sees no results | Confirm their verified Sim email matches the Drive permission or group membership. For member accounts, finish their personal Drive connection too. |
| A public or shared-link file is missing | Check Openly shared files. Link-only sharing does not grant Search access. A named user or group permission can still make the file searchable. |
| Reconnect or credential error | Reauthorize the member account, or replace the service-account credential and verify delegation, as applicable. |
Self-hosted OAuth configuration
The deployment operator configures Google OAuth for member accounts and Account for browsing. This is separate from the central service account above.
- In Google Cloud Console, select your project and enable Google Drive API under APIs & Services → Library.
- Open Google Auth platform → Branding and configure the app name and contact details. Under Audience, choose Internal for your Google Workspace organization only, or External for other users, adding test users while testing. Review Data Access → Add or remove scopes using the current Sim scopes below. See Google's consent guidance.
- Open Google Auth platform → Clients → Create client, choose Web application, and add this URI under Authorized redirect URIs. Add it to the existing Google client if your instance already uses one.
https://<your-sim-domain>/api/auth/oauth2/callback/google-driveThis Google Cloud example uses one client for all three services. Replace https://sim.example.com with your Sim origin and add only the callbacks for services you enable.
Save the client ID and secret as GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET. Set NEXT_PUBLIC_APP_URL to the same Sim origin used in the callback, then restart Sim. See Integrations & OAuth.
The current Sim Drive OAuth connection uses these scopes:
openid
https://www.googleapis.com/auth/userinfo.email
https://www.googleapis.com/auth/userinfo.profile
https://www.googleapis.com/auth/drive
https://www.googleapis.com/auth/drive.fileGoogle's drive.readonly scope covers Search's file reads. Sim's existing OAuth connection also supports workflow actions and requires the broader scopes above; do not substitute read-only scopes for member OAuth. The central service account uses the separate read-only Drive and Directory scopes listed earlier. See Google's Drive scope descriptions.