> ## Documentation Index
> Fetch the complete documentation index at: https://docs.livingsecurity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Workspace integratsiyasini sozlash

> Foydalanuvchi hayotiy sikli, tizimga kirish, MFA, ma'muriy va ma'lumotlarni himoya qilish faoliyatini kuzatish uchun Google Workspace'ni Living Security bilan ulang.

export const PublicIntegrationNextSteps = () => <>
    <hr />
    <h2>Tegishli resurslar</h2>
    <ul>
      <li>
        <a href="/uz/signals/data-sources">Integrations ma'lumotlari Human Risk Management signallariga qanday aylanishini bilib oling</a>
      </li>
      <li>
        <a href="https://www.livingsecurity.com/integrations">Living Security integratsiyalarini o'rganing</a>
      </li>
      <li>
        <a href="https://app.livingsecurity.ai/">Living Security Platform'ni oching</a>
      </li>
      <li>
        <a href="https://www.livingsecurity.com/request-demo/">Living Security demosini so'rang</a>
      </li>
    </ul>
  </>;

export const ConnectInPlatform = ({tile, children}) => <Step title="Living Security Platform'da hisob ma'lumotlarini kiriting">
    <p>
      Living Security'ga kirish huquqiga ega bo'lgan shaxs — dastur egasi yoki (agar taklif qilingan bo'lsa)
      tizim administratori tomonidan bajariladi (topshirilgan sozlash).
    </p>
    <ol>
      <li>
        <strong>Settings → Integrations → Catalog</strong> bo'limiga o'ting, <strong>{tile}</strong>{' '}
        kartasini toping va <strong>Connect</strong> tugmasini bosing.
      </li>
      <li>
        Quyidagi maydonlarni to'ldiring, so'ng <strong>Connect</strong> tugmasini bosing.
      </li>
    </ol>
    {children}
  </Step>;

export const SystemAdminBanner = ({system, recommendDelegated}) => <Note>
    <p>
      <strong>Ushbu qo‘llanma {system} administratoriga mo‘ljallangan.</strong> Unda {system} ichida API
      hisob ma’lumotlarini yaratish tartibi bayon etilgan; buning uchun {system} tizimiga administrator
      sifatida kirish huquqi talab etiladi, Living Security Platform’ga esa talab etilmaydi.
    </p>
    <p>
      Agar siz Living Security’da <strong>dastur egasi</strong> bo‘lsangiz va {system} tizimini
      boshqarmasangiz, ushbu sahifani uni boshqaradigan shaxsga yuboring. U A qismini bajaradi va hisob ma’lumotlarini sizga qaytaradi
      (yoki agar siz uni platformaga taklif qilgan bo‘lsangiz, ularni bevosita o‘zi kiritadi).
      {recommendDelegated && <>
          {' '}Sozlash jarayonida maxfiy kalit ma’lumotlari hosil bo‘lgani uchun, maxfiy kalit sizga qayta yuborilmasligi uchun{' '}
          <strong>delegated setup</strong> usulidan foydalanishni tavsiya etamiz.
        </>}
    </p>
  </Note>;

<SystemAdminBanner system="Google Workspace" recommendDelegated={true} />

## Ushbu integratsiya nimani taqdim etadi

Google Workspace foydalanuvchi hayotiy sikli, tizimga kirish, MFA, ma'muriy va ma'lumotlarni himoya qilish bo'yicha normallashtirilgan faoliyat ma'lumotlarini taqdim etishi mumkin. Ko'rib chiqilgan misollar:

* `account.compromised` — akkaunt buzilgan deb belgilangan
* `data.sensitive.downloaded` — maxfiy ma'lumotlarni yuklab olmoqda
* `auth.login.unusual` — g'ayrioddiy sharoitlardan tizimga kirmoqda

[Integratsiya ma'lumotlari qanday qilib Signals'ga aylanishi](/uz/signals/data-sources) haqida ma'lumot oling.

## Living Security uchun nimalar talab qilinadi

| Credential | Tavsif |
| - | - |
| **Service-account key** | Maxsus Google Cloud xizmat akkaunti uchun JSON kalit. |
| **Delegated administrator** | Xizmat akkaunti nomidan harakat qila oladigan Google Workspace administratorining elektron pochta manzili. |

Admin SDK API'larini yoqing va faqat ulanish o'qiydigan scope'larga ruxsat bering:

* `https://www.googleapis.com/auth/admin.reports.audit.readonly`
* `https://www.googleapis.com/auth/admin.directory.user.readonly`
* `https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly`

## Sozlash

<Steps>
  <Step title="Google Cloud xizmat akkauntini yarating">
    Maxsus xizmat akkauntini yarating, domen miqyosidagi delegatsiyani (domain-wide delegation) yoqing va uning JSON kalitini yuklab oling. Kalitni xavfsiz joyda saqlang.
  </Step>

  <Step title="Domen miqyosidagi delegatsiyaga ruxsat bering">
    Google Admin Console'da **Security → Access and data control → API controls → Manage Domain Wide Delegation** bo'limini oching. Xizmat akkauntining raqamli client ID'sini va yuqoridagi uchta faqat o'qish uchun mo'ljallangan scope'ni qo'shing.
  </Step>

  <Step title="Delegatsiya qilingan administratorni tanlang">
    Katalogni, rol tayinlashlarini va audit hisobotlarini o'qiy oladigan faol Workspace administratorini tanlang. Living Security bu identifikatordan faqat delegatsiya qilingan API o'qish so'rovlari uchun foydalanadi.
  </Step>

  <ConnectInPlatform tile="Google Workspace Admin">
    Xizmat akkaunti credential'ini so'ralganidek yuklang yoki joylashtiring va delegatsiya qilingan administratorning elektron pochta manzilini kiriting.
  </ConnectInPlatform>
</Steps>

## Tekshirish va nosozliklarni bartaraf etish

Ulanish katalogdagi bitta foydalanuvchini va so'nggi tizimga kirish faoliyatini o'qiy olishini tekshiring. Google ma'lumotlariga ko'ra, domen miqyosidagi yangi delegatsiya ruxsatlarining kuchga kirishi uchun biroz vaqt kerak bo'lishi mumkin.

<AccordionGroup>
  <Accordion title="unauthorized_client">
    Domen miqyosidagi delegatsiyada xizmat akkauntining elektron pochta manzili emas, balki raqamli client ID'si ishlatilganini hamda uchala scope ham aynan mos kelishini tasdiqlang.
  </Accordion>

  <Accordion title="Katalog ishlaydi, lekin rol tayinlashlari yo'q">
    Delegatsiya yozuviga `admin.directory.rolemanagement.readonly` ni qo'shing va delegatsiya qilingan administrator rol tayinlashlarini ko'ra olishini tasdiqlang.
  </Accordion>

  <Accordion title="Hisobotlar bo'sh">
    Admin Reports API yoqilganini va delegatsiya qilingan administrator Workspace tenanti uchun audit hisobotlariga kira olishini tasdiqlang.
  </Accordion>
</AccordionGroup>

Vendor tomonidagi batafsil ma'lumot uchun [Google'ning domen miqyosidagi delegatsiya bo'yicha qo'llanmasi](https://developers.google.com/identity/protocols/oauth2/service-account#delegatingauthority)ga qarang.

<PublicIntegrationNextSteps />


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.