Workspace Multi Tenant PoC
One service account. Every tenant. Security data only.
Workspace Multi Tenant PoC connects a backend to multiple Google Workspace™ domains via a single service account, with live AI tools for scope risk analysis and alert triage.
Workspace Multi Tenant PoC connects a centralized backend to multiple Google Workspace™ domains using domain wide delegation from a single service account. Once a domain administrator installs the app, it reads five specific categories of read only data: active security alerts from Alert Center™, admin audit and login events from the Admin Console™, the user directory including two step verification status, and Gmail™ configuration settings such as forwarding rules and delegates. It never reads the content of any email message.
The companion site below includes live functional tools built on GPT-4o: a scope risk analyzer that generates a real time risk assessment for any combination of the five requested scopes, an AI alert triage assistant that gives concrete first response steps for common Alert Center alert types, an AI security assistant for general questions, and a domain checker that performs a live MX record lookup to confirm whether a target domain runs on Google Workspace™.
All access is read only, and administrators can revoke access at any time from the Admin Console™. Full details are in the Privacy Policy for Workspace Multi Tenant PoC, linked here and from every page of this site.
Five modules, read only
Alert Center
Active security alerts, severity, and status.
Admin Reports
Login events and admin audit trail.
Admin Directory
User roster, org unit, suspension, 2SV status.
Gmail Settings
Forwarding, delegates, send as aliases. No message content.
Live tools on this site
Four tools built directly into this site that demonstrate how Workspace Multi Tenant PoC works, using real live requests rather than mock data.
AI security assistant
A GPT-4o powered chat box. Ask any question about the app's OAuth scopes, domain wide delegation, or how any of the five data modules work, and get a real answer generated on the spot.
Domain checker
Enter any domain name and this tool performs a live DNS lookup of its MX records to tell you whether that domain is actually running on Google Workspace, useful for confirming a domain is eligible before onboarding it.
Scope risk analyzer
Select any combination of the five requested OAuth scopes, and get a live, AI generated written risk assessment explaining what that specific combination of access would expose if compromised.
AI alert triage
Pick one of several common Alert Center alert types, and get a live, AI generated list of concrete first response steps a Workspace admin should take for that specific alert.
Ask the Workspace security assistant
Powered by GPT-4o. Ask anything about domain wide delegation, OAuth scopes, or the five modules above.
Check if a domain runs on Google Workspace
Enter a domain to look up its live MX records. Useful for confirming a tenant is eligible before onboarding.
Scope risk analyzer
Select any combination of the five scopes and get a live AI generated risk assessment.
AI alert triage
Pick an Alert Center alert type and get live AI generated first response steps.
Questions before installing
Check the support page for common questions, or reach out directly.
Visit support and FAQ