Perform operations on bucket and object on Google Cloud Storage via the Workflow Automator.


Orchestration apps let you automate repeatable tasks and actions that span across a diverse set of systems and applications using workflows. The list of actions supported for this app include:

Bucket Management    

  1. Create Bucket

  2. Delete Bucket

  3. Get Bucket Details

  4. Get Bucket Labels

  5. Update Bucket Details

Bucket Access Control Management    

  1. Create Bucket Access Control

  2. Update Bucket Access Control

  3. Delete Bucket Access Control

Object Management    

  1. Copy Object

  2. Delete Object

  3. Attach Cloud Storage Object to Freshservice Ticket Note

  4. Get Object Details

  5. Upload Freshservice Attachments to Cloud Storage

Object Access Control Management    

  1. Create Object Access Control

  2. Update Object Access Control

  3. Delete Object Access Control

App Installation Parameters:

  1. Client Email 

  2. Private Key

  3. Private Key ID

  4. Email ID(The GSuite account email address)

The following two parameters are required for attaching documents to your Freshservice tickets note.

  1. Freshservice Domain - The domain of your Freshservice tenant. Example: yourcompany.freshservice.com

  2. Freshservice API Key - Login to your Freshservice tenant. Click on your profile icon ->"Profile Settings" on the right side pane, under "Your API Key" complete the captcha and copy your API key.


Installation Parameters Description:

All app installation parameters are present in the service account credentials (JSON) generated in Prerequisite(A).



A. Create a Service Account:

  1. Open the Service accounts page.

  1. If prompted, select a project, or create a new one.

  1. Click add Create service account.

  2. Under Service account details, fill in the "Name", "ID", and "Description" of the service account and click Create.

  1. Optional: Under Service account permissions, select the IAM roles to grant to the service account, then click Continue.

  2. Optional: Under Grant users access to this service account, add the users or groups that are allowed to use and manage the service account.

  3. Open the service account created, click on Edit->Add Key under "Keys", and select "Create New Key".

  1. Click on "Domain-Wide Delegation" and then select "Enable G Suite Domain-wide Delegation".  

Your new public/private key pair is generated and downloaded to your machine; it serves as the only copy of the private key. You are responsible for storing it securely. If you lose this key pair, you will need to generate a new one.

B. Enable API & Services:

  1. Navigate to https://console.developers.google.com/

  2. Click on Enable API & Services

  1. Search for Google Cloud Storage JSON API

  1. Enable Google Cloud Storage JSON API

C. Assign OAuth Scopes for Google API:

  1. Navigate to the Admin console and select Home > Security > API controls.

  1. Under Domain-wide delegation, click Manage Domain Wide Delegation.

  1. On the Manage domain-wide delegation page, click Add new.

  1. Enter the client ID of the service account or OAuth2 client ID of the app. Under OAuth Scope, add each scope that the application can access, as mentioned in Prerequisites(D) below.

  1. Click Authorize.

D. OAuth Scopes

  1. https://www.googleapis.com/auth/devstorage.full_control