> ## Documentation Index
> Fetch the complete documentation index at: https://docs.parable.work/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Workspace

> Sync data from Google Workspace (Calendar, Drive, etc.)

Sync data from Google Workspace (Calendar, Drive, etc.).

<Tabs>
  <Tab title="Overview">
    Connect Parable to Google Workspace for directory, Gmail, Calendar, Drive, Meet, and audit data using the Admin SDK and related APIs.

    #### Directory

    Users, groups, organizational units

    #### Audit & Reports

    Admin audit logs, usage reports, login activity

    > **Info:** Parable reads **Google Workspace** data (directory, Gmail, Calendar, Drive, Meet, and related APIs). You still use **Google Cloud Console** to create the service account, enable APIs, and download the JSON key — that split is normal for Workspace integrations.

    ## Data streams

    This Provider Plugin defines 26 data streams.

    | Stream                            | Description                                                                                                                                                                                                                                                                                                                                                 | Sync        |
    | --------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
    | `users`                           | Google Workspace users                                                                                                                                                                                                                                                                                                                                      | incremental |
    | `threads`                         | Gmail threads for users                                                                                                                                                                                                                                                                                                                                     | incremental |
    | `thread_messages`                 | Messages within Gmail threads                                                                                                                                                                                                                                                                                                                               | full        |
    | `messages`                        | Full Gmail message details                                                                                                                                                                                                                                                                                                                                  | full        |
    | `calendars`                       | User calendars                                                                                                                                                                                                                                                                                                                                              | full        |
    | `calendar_events`                 | Calendar events                                                                                                                                                                                                                                                                                                                                             | incremental |
    | `workspace_drive_activity`        | Per-user Drive activity via impersonated activity:query (CONNECT-663)                                                                                                                                                                                                                                                                                       | incremental |
    | `workspace_drive_documents_list`  | Google Docs documents list                                                                                                                                                                                                                                                                                                                                  | full        |
    | `workspace_drive_documents_files` | Google Docs document file details                                                                                                                                                                                                                                                                                                                           | full        |
    | `workspace_drive_sheets_list`     | Google Sheets spreadsheets list                                                                                                                                                                                                                                                                                                                             | full        |
    | `workspace_drive_sheets_files`    | Google Sheets spreadsheet file details                                                                                                                                                                                                                                                                                                                      | full        |
    | `conference_records`              | Google Meet conference records - lists all conferences                                                                                                                                                                                                                                                                                                      | incremental |
    | `participants`                    | Conference participants                                                                                                                                                                                                                                                                                                                                     | full        |
    | `participantsessions`             | Participant sessions                                                                                                                                                                                                                                                                                                                                        | full        |
    | `transcripts`                     | Conference transcripts                                                                                                                                                                                                                                                                                                                                      | full        |
    | `recordings`                      | Conference recordings                                                                                                                                                                                                                                                                                                                                       | full        |
    | `groups`                          | Google Workspace groups                                                                                                                                                                                                                                                                                                                                     | full        |
    | `group_members`                   | Members of a Google Workspace group                                                                                                                                                                                                                                                                                                                         | full        |
    | `org_units`                       | Organizational units                                                                                                                                                                                                                                                                                                                                        | full        |
    | `conference_record_detail`        | Full conference record details                                                                                                                                                                                                                                                                                                                              | full        |
    | `participant_detail`              | Full participant details                                                                                                                                                                                                                                                                                                                                    | full        |
    | `transcript_detail`               | Full transcript details                                                                                                                                                                                                                                                                                                                                     | full        |
    | `recording_detail`                | Full recording details                                                                                                                                                                                                                                                                                                                                      | full        |
    | `spaces`                          | Google Meet space details fetched per unique space from conference records                                                                                                                                                                                                                                                                                  | full        |
    | `chrome_activity`                 | All Chrome browser and Chrome OS audit events from Admin Reports API (applicationName=chrome, no eventName filter)                                                                                                                                                                                                                                          | incremental |
    | `gemini_activity`                 | Gemini in Workspace Apps usage events from Admin Reports API (applicationName=gemini\_in\_workspace\_apps). Each ai\_usage\_event carries the acting user, the Workspace app, and the Gemini action performed. This is the only source of per-user Gemini activity; the Gemini Generative Language API exposes no activity surface and no user attribution. | incremental |
  </Tab>

  <Tab title="Setup Guide">
    ### Service account

    #### What You'll Need

    | Credential              | What it is                                                                                  |
    | ----------------------- | ------------------------------------------------------------------------------------------- |
    | **Service Account Key** | JSON key file from Google Cloud — you'll enter individual fields from this file (see below) |
    | **Admin Email**         | Google Workspace super admin email for impersonation                                        |
    | **Domain**              | Your Google Workspace domain (e.g., `example.com`)                                          |

    > **Info:** The configuration form asks for individual fields from the service account JSON key file.
    > Open the downloaded JSON file and copy each value into the corresponding form field:
    > `type`, `project_id`, `private_key_id`, `private_key`, `client_email`, `client_id`,
    > `auth_uri`, `token_uri`, `auth_provider_x509_cert_url`, `client_x509_cert_url`, and `universe_domain`.

    > **Info:** **Setup access in Google Workspace.** These steps require **Google Workspace Super Admin**, or a colleague with equivalent permissions who can create credentials for you.
    >
    > If that is not you, ask your Google Workspace administrator.

    * **Google Cloud Console:** Create or select a GCP project, enable APIs, and create a service account — typically **Project Owner** or **Project Editor** on that project.
    * If your company uses a **Google Cloud organization** with policies that block new projects or service accounts, ask your **Google Cloud organization administrator** to complete or approve those steps.

    #### Step 1: Create Google Cloud Project

    1. Go to <a href="https://console.cloud.google.com/" target="_blank" rel="noopener noreferrer">Google Cloud Console</a>
    2. Click **Select a project** → **New Project**
    3. Name it: `Parable Integration`
    4. Click **Create**

    #### Step 2: Enable Required APIs

    1. Go to **APIs & Services** → **Library**
    2. Search for and enable each:

    | API                       | Purpose                                                        |
    | ------------------------- | -------------------------------------------------------------- |
    | Admin SDK API             | Directory, users, groups, org units                            |
    | Gmail API                 | Email thread and message metadata                              |
    | Google Calendar API       | Calendar events                                                |
    | Google Drive API          | Drive file index, Docs, Sheets content                         |
    | Google Drive Activity API | Drive activity feed                                            |
    | Google Meet REST API      | Meet conference records, participants, transcripts, recordings |
    | Google Docs API           | Google Doc content                                             |
    | Google Sheets API         | Google Sheet content                                           |

    #### Step 3: Create Service Account

    1. Go to **IAM & Admin** → **Service Accounts**
    2. Click **Create Service Account**
    3. Name: `parable-workspace-<your-domain>` (for example, `parable-workspace-example-com`)
    4. Click **Create and Continue**
    5. Skip role assignment → **Done**

    > **Tip:** If you connect multiple Google Workspace domains, create one service account per domain.
    > Domain-specific names make future key rotation and audit review simpler.

    #### Step 4: Generate Service Account Key

    1. Click on the newly created service account
    2. Go to **Keys** tab → **Add Key** → **Create new key**
    3. Select **JSON** format
    4. Click **Create** — key file downloads automatically

    > **Warning:** Store the JSON key file securely. It cannot be downloaded again!

    Rotate this key on your normal credential rotation cadence. Most teams rotate service
    account keys every 90 days or whenever an administrator with access leaves the company.
    After rotation, update the Parable Provider with the new JSON key fields before deleting
    the old key in Google Cloud.

    #### Step 5: Enable Domain-Wide Delegation and Note Client ID

    1. On the service account details page, go to the **Details** tab
    2. Expand **Advanced settings**
    3. Check **Enable Google Workspace Domain-wide Delegation** and click **Save**
    4. The **Client ID** (numeric, \~21 digits) will now appear in that section — copy it for the next step

    > **Info:** The Client ID is also available as the `client_id` field in the downloaded JSON key file.

    #### Step 6: Configure Domain-Wide Delegation

    1. Open <a href="https://admin.google.com" target="_blank" rel="noopener noreferrer">Google Admin Console</a>
    2. Go to **Security** → **Access and data control** → **API controls**
    3. Click **Manage Domain Wide Delegation**
    4. Click **Add new**
    5. Enter:

    | Field        | Value                                 |
    | ------------ | ------------------------------------- |
    | Client ID    | Service account Client ID from Step 5 |
    | OAuth Scopes | See scope list below                  |

    #### Step 7: Add Required Scopes

    Add these scopes as a comma-separated list. The exact set depends on which Google data
    categories you enable in Parable.

    | Data category         | OAuth scope                                                        |
    | --------------------- | ------------------------------------------------------------------ |
    | Directory users       | `https://www.googleapis.com/auth/admin.directory.user.readonly`    |
    | Directory groups      | `https://www.googleapis.com/auth/admin.directory.group.readonly`   |
    | Organizational units  | `https://www.googleapis.com/auth/admin.directory.orgunit.readonly` |
    | Gmail metadata        | `https://www.googleapis.com/auth/gmail.readonly`                   |
    | Calendar events       | `https://www.googleapis.com/auth/calendar.readonly`                |
    | Drive files           | `https://www.googleapis.com/auth/drive.readonly`                   |
    | Drive activity        | `https://www.googleapis.com/auth/drive.activity.readonly`          |
    | Meet records          | `https://www.googleapis.com/auth/meetings.space.readonly`          |
    | Chrome audit activity | `https://www.googleapis.com/auth/admin.reports.audit.readonly`     |

    The optional **chrome\_activity** tap ingests all Chrome application audit events from the
    Admin Reports API (login, device, DLP, Safe Browsing, content transfer, and related event
    types). It is **not enabled by default** — turn it on in your Provider configuration when
    you need Chrome browser or ChromeOS activity in Parable. Connection onboarding requests
    an explicit **90-day** backfill, split into 7-day API windows for this tap. If you enable
    the tap later, an incremental run without a saved watermark or explicit date range
    starts with **one day** of history. Request an explicit backfill for older activity.

    > **Info:** Parable no longer requires deprecated per-resource Google Meet scopes. Use
    > `https://www.googleapis.com/auth/meetings.space.readonly` for Meet data.

    Click **Authorize**

    #### Step 8: Enter values in the form

    Enter the values from your service account JSON key, plus **Admin email** and **Domain**, into the Provider form, then click **Save & test connection**.

    Use a Google API client library or OAuth Playground to test:

    ```python Python Example theme={null}
    from google.oauth2 import service_account
    from googleapiclient.discovery import build

    SCOPES = ['https://www.googleapis.com/auth/admin.directory.user.readonly']
    SERVICE_ACCOUNT_FILE = 'path/to/service-account-key.json'
    ADMIN_EMAIL = 'admin@yourcompany.com'

    credentials = service_account.Credentials.from_service_account_file(
        SERVICE_ACCOUNT_FILE, scopes=SCOPES)
    delegated_credentials = credentials.with_subject(ADMIN_EMAIL)

    service = build('admin', 'directory_v1', credentials=delegated_credentials)
    results = service.users().list(customer='my_customer', maxResults=5).execute()
    print(results.get('users', []))
    ```

    > **Success:** **Success!** If you received a `200 OK` response with valid data, your credentials are configured correctly. You can now configure this Provider in Parable.

    > **Tip:** Enter the service account JSON fields, **Admin email**, and **Domain** in the Provider form, then click **Save & test connection**.

    > **Tip:** **Rate Limits:** Google Workspace enforces rate limits of **varies by API; typically 1,500-2,400 queries/minute with per-user quotas**.
    >
    > Parable handles rate limiting automatically with exponential backoff, but initial syncs of large datasets may take longer due to these limits.
  </Tab>

  <Tab title="Permissions">
    <AccordionGroup>
      <Accordion id="provider-permission-tap-google-calendar-events-9df2c4e4f8de" title="Calendar Events" icon="calendar-check" iconType="sharp-duotone-solid">
        Developer identifier: `calendar_events`

        **Calendar Events.** Calendar events.

        * **Enables:** Attribute calendar events to their calendar, organizer, attendees, time interval, recurrence, and provider event state.
        * **Scope:** Reads the records selected by Google Workspace's `https://www.googleapis.com/calendar/v3/calendars/{id}/events` operation as a changelog stream using incremental synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. Event descriptions and conference or attachment metadata may be returned when visible, but attachment bytes are not fetched. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-calendar-events-anyonecanaddself-1b7e30b82679" title="Anyone Can Add Self" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.anyoneCanAddSelf`

            **Anyone Can Add Self.** Whether anyone can invite themselves to the event. It distinguishes the provider-defined anyone can add self state or classification for the calendar event.

            * **Enables:** Filter Calendar Events by whether anyone can invite themselves to the event in `calendar_events.anyoneCanAddSelf`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports anyone can invite themselves to the event as a boolean on each calendar event; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attachments-39746541453f" title="Attachments" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attachments`

            **Attachments.** File attachments for the event. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Associate each returned event attachment metadata entry in `calendar_events.attachments` with the parent calendar event; inventory the reference without assuming file, recording, or attachment bytes are present.
            * **Interpretation:** Google Workspace returns attachments as file, recording, or attachment metadata on each calendar event; the array does not imply that binary content was collected. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attachments-fileid-9e3bb41de6a3" title="File ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attachments.fileId`

            **File ID.** ID of the attached file. Read-only. For Google Drive files, this is the ID of the corresponding Drive resource. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Connect each event attachment in Calendar Events to the referenced file through `calendar_events.EventAttachment.fileId`; flag file ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports file ID as an identifier in its file namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attachments-fileurl-b8ff32ab3df8" title="File URL" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attachments.fileUrl`

            **File URL.** URL link to the attachment. It locates the provider resource or path associated with the event attachment.

            * **Enables:** Match repeated event attachment entries on file URL in `calendar_events.EventAttachment.fileUrl`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports file URL as a resource locator for each event attachment; access still depends on viewer permissions and the URL may expire or change. The connector explicitly marks this field as a transform deduplication key. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attachments-iconlink-ffe0012ee8fa" title="Icon Link" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attachments.iconLink`

            **Icon Link.** URL link to the attachment's icon. It locates the provider resource or path associated with the event attachment.

            * **Enables:** Associate each event attachment with the resource identified by icon link in `calendar_events.EventAttachment.iconLink`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports icon link as a resource locator for each event attachment; access still depends on viewer permissions and the URL may expire or change. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attachments-mimetype-5e98e359b8b3" title="MIME Type" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attachments.mimeType`

            **MIME Type.** Internet media type (MIME type) of the attachment. It identifies the file, document, recording, or attachment metadata associated with the event attachment.

            * **Enables:** Segment event attachment entries in Calendar Events by MIME type in `calendar_events.EventAttachment.mimeType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports MIME type as a label from its own taxonomy on each event attachment; preserve unknown labels rather than mapping them by assumption. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attachments-title-390f5f354d20" title="Title" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attachments.title`

            **Title.** Attachment title. It identifies the file, document, recording, or attachment metadata associated with the event attachment.

            * **Enables:** Label each event attachment with title from `calendar_events.EventAttachment.title`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports title as display text for each event attachment; names are mutable and are not stable identities. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-f19daba49154" title="Attendees" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees`

            **Attendees.** The attendees of the event. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute each returned event attendee in `calendar_events.attendees` to the parent calendar event; preserve whether the field represents an attendee, To, Cc, or Bcc relationship.
            * **Interpretation:** Google Workspace returns attendees as an array of event attendee entries on each calendar event; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-additionalguest-37647bcb9db3" title="Additional Guests" icon="stopwatch" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees.additionalGuests`

            **Additional Guests.** Number of additional guests the attendee has indicated they are bringing. It supplies the additional guests measure for the event attendee at the provider's declared unit and grain.

            * **Enables:** Measure additional guests through `calendar_events.EventAttendee.additionalGuests` for each event attendee and compare only values with the same unit and record grain.
            * **Interpretation:** Google Workspace reports additional guests as a measure on each event attendee; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-comment-cfc3a1aad282" title="Comment" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees.comment`

            **Comment.** The attendee's response comment. It defines the content surface available for this calendar event.

            * **Enables:** Locate event attendee records by comment in `calendar_events.EventAttendee.comment`; attribute each text match to its parent calendar event and, when present, its reported author.
            * **Interpretation:** Google Workspace supplies comment as text on each event attendee; referenced files or media are not implied unless explicitly represented.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-displayname-69942d1123c4" title="Display Name" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees.displayName`

            **Display Name.** The attendee's name, if available. It distinguishes the provider-defined display name state or classification for the event attendee.

            * **Enables:** Label each event attendee with display name from `calendar_events.EventAttendee.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each event attendee; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-email-d4f6fa670d23" title="Email" icon="comments" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees.email`

            **Email.** The attendee's email address. It supplies the provider-reported address or location facet for the event attendee, not a residency determination.

            * **Enables:** Attribute each event attendee to a person or account by the exact email in `calendar_events.EventAttendee.email`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports email as an address on each event attendee; aliases, casing, and unverified addresses can prevent a one-to-one person match.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-id-6b94a882fab7" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees.id`

            **ID.** The attendee's profile ID, if available. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Match repeated event attendee entries on ID in `calendar_events.EventAttendee.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its event attendee namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-optional-eaaf8a89ec18" title="Optional" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees.optional`

            **Optional.** Whether this is an optional attendee. It distinguishes the provider-defined optional state or classification for the event attendee.

            * **Enables:** Filter Calendar Events by whether this is an optional attendee in `calendar_events.EventAttendee.optional`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this is an optional attendee as a boolean on each event attendee; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-organizer-56b68a1a0005" title="Organizer" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees.organizer`

            **Organizer.** Whether the attendee is the organizer of the event. It distinguishes the provider-defined organizer state or classification for the event attendee.

            * **Enables:** Filter Calendar Events by whether the attendee is the organizer of the event in `calendar_events.EventAttendee.organizer`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the attendee is the organizer of the event as a boolean on each event attendee; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-resource-7d3ffb27610e" title="Resource" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees.resource`

            **Resource.** Whether the attendee is a resource (e.g., a room). It distinguishes the provider-defined resource state or classification for the event attendee.

            * **Enables:** Filter Calendar Events by whether the attendee is a resource (e.g., a room) in `calendar_events.EventAttendee.resource`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the attendee is a resource (e.g., a room) as a boolean on each event attendee; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-responsestatus-10ce94cb2d58" title="Response Status" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees.responseStatus`

            **Response Status.** The attendee's response status. It distinguishes the provider-defined response status state or classification for the event attendee.

            * **Enables:** Segment event attendee entries in Calendar Events by response status in `calendar_events.EventAttendee.responseStatus`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports response status as a label from its own taxonomy on each event attendee; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendees-self-4e76b23ba1d1" title="Self" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendees.self`

            **Self.** Whether this entry represents the calendar on which this event appears. It distinguishes the provider-defined self state or classification for the event attendee.

            * **Enables:** Filter Calendar Events by whether this entry represents the calendar on which this event appears in `calendar_events.EventAttendee.self`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this entry represents the calendar on which this event appears as a boolean on each event attendee; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-attendeesomitted-fa1459fd0b98" title="Attendees Omitted" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.attendeesOmitted`

            **Attendees Omitted.** Whether attendees may have been omitted from the event's representation. It distinguishes the provider-defined attendees omitted state or classification for the calendar event.

            * **Enables:** Filter Calendar Events by whether attendees may have been omitted from the event's representation in `calendar_events.attendeesOmitted`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports attendees may have been omitted from the event's representation as a boolean on each calendar event; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-calendar-id-4d14834c6ed2" title="Calendar ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.calendar_id`

            **Calendar ID.** Parent calendar reference copied into each calendar event because the child operation does not return that relationship. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Connect each calendar event in Calendar Events to the referenced calendar through `calendar_events.calendar_id`; flag calendar ID values that do not resolve in that provider namespace.
            * **Interpretation:** Parable copies calendar ID from the parent traversal record into each calendar event; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-colorid-b6ba3b419591" title="Color ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.colorId`

            **Color ID.** The color ID of the event, referencing the event color definitions. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Connect each calendar event in Calendar Events to the referenced color through `calendar_events.colorId`; flag color ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports color ID as an identifier in its color namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-67a696bb2223" title="Conference Data" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData`

            **Conference Data.** Conference-related information such as Google Meet details. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute conference data in `calendar_events.conferenceData` to the parent calendar event; identify parent records where that nested conference data object is absent.
            * **Interpretation:** Google Workspace reports conference data as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-conference-79be4e024d07" title="Conference ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.conferenceId`

            **Conference ID.** The ID of the conference. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Connect each conference data in Calendar Events to the referenced conference through `calendar_events.ConferenceData.conferenceId`; flag conference ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports conference ID as an identifier in its conference namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-conference-21a93c59e895" title="Conference Solution" icon="stopwatch" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.conferenceSolution`

            **Conference Solution.** The conference solution, such as Google Meet. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute conference solution in `calendar_events.ConferenceData.conferenceSolution` to the parent calendar event; identify parent records where that nested conference solution object is absent.
            * **Interpretation:** Google Workspace reports conference solution as a nested object on each conference data; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-conference-b910208b912f" title="Icon URI" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.conferenceSolution.iconUri`

            **Icon URI.** The user-visible icon for this solution. It locates the provider resource or path associated with the conference solution.

            * **Enables:** Associate each conference solution with the resource identified by icon URI in `calendar_events.ConferenceSolution.iconUri`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports icon URI as a resource locator for each conference solution; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-conference-55aa771d1cc9" title="Key" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.conferenceSolution.key`

            **Key.** The key which can uniquely identify the conference solution. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute key in `calendar_events.ConferenceSolution.key` to the parent calendar event; identify parent records where that nested key object is absent.
            * **Interpretation:** Google Workspace reports key as a nested object on each conference solution; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-conference-7b215b654745" title="Type" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.conferenceSolution.key.type`

            **Type.** The conference solution type, e.g., 'hangoutsMeet'. It distinguishes the provider-defined type state or classification for the conference solution key.

            * **Enables:** Segment conference solution key entries in Calendar Events by type in `calendar_events.ConferenceSolutionKey.type`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each conference solution key; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-conference-8ab99c6a3fcf" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.conferenceSolution.name`

            **Name.** The user-visible name of this solution, e.g., 'Google Meet'. It gives the conference solution a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each conference solution with name from `calendar_events.ConferenceSolution.name`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports name as display text for each conference solution; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-createrequ-2de833865701" title="Create Request" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.createRequest`

            **Create Request.** A request to generate a new conference and attach it to the event. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute create request in `calendar_events.ConferenceData.createRequest` to the parent calendar event; identify parent records where that nested create request object is absent.
            * **Interpretation:** Google Workspace reports create request as a nested object on each conference data; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-createrequ-11d5dae02a4b" title="Conference Solution Key" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.createRequest.conferenceSolutionKey`

            **Conference Solution Key.** The conference solution key type. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute conference solution key in `calendar_events.ConferenceCreateRequest.conferenceSolutionKey` to the parent calendar event; identify parent records where that nested conference solution key object is absent.
            * **Interpretation:** Google Workspace reports conference solution key as a nested object on each conference create request; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-createrequ-83d4441f3091" title="Request ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.createRequest.requestId`

            **Request ID.** The client-generated unique ID for this request. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Connect each conference create request in Calendar Events to the referenced request through `calendar_events.ConferenceCreateRequest.requestId`; flag request ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports request ID as an identifier in its request namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-createrequ-8595364b944c" title="Status" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.createRequest.status`

            **Status.** The status of the conference create request. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute status in `calendar_events.ConferenceCreateRequest.status` to the parent calendar event; identify parent records where that nested status object is absent.
            * **Interpretation:** Google Workspace reports status as a nested object on each conference create request; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-createrequ-cdb8a735fa15" title="Status Code" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.createRequest.status.statusCode`

            **Status Code.** The current status of the conference create request. It distinguishes the provider-defined status code state or classification for the conference request status.

            * **Enables:** Segment conference request status entries in Calendar Events by status code in `calendar_events.ConferenceRequestStatus.statusCode`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports status code as a label from its own taxonomy on each conference request status; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-entrypoint-7e91313a245c" title="Entry Points" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.entryPoints`

            **Entry Points.** Information about individual conference entry points. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Compare the exact Google Workspace-configured entry points set in `calendar_events.ConferenceData.entryPoints` for each conference data; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns entry points as an array of conference entry point entries on each conference data; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-entrypoint-4ab12c201be8" title="Access Code" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.entryPoints.accessCode`

            **Access Code.** The access code to access the conference. It supplies the sensitive provider access code needed to join the conference entry point, not a stable record identifier.

            * **Enables:** Reconcile `calendar_events.ConferenceEntryPoint.accessCode` with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
            * **Interpretation:** Google Workspace returns access code as meeting or conference access metadata on each conference entry point; it can rotate and does not identify the meeting by itself.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-entrypoint-e3ab59e7e086" title="Entry Point Type" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.entryPoints.entryPointType`

            **Entry Point Type.** The type of the conference entry point. It distinguishes the provider-defined entry point type state or classification for the conference entry point.

            * **Enables:** Segment conference entry point entries in Calendar Events by entry point type in `calendar_events.ConferenceEntryPoint.entryPointType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports entry point type as a label from its own taxonomy on each conference entry point; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-entrypoint-bc765c397c46" title="Label" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.entryPoints.label`

            **Label.** The label for the URI, such as a phone number. It locates the provider resource or path associated with the conference entry point.

            * **Enables:** Label each conference entry point with label from `calendar_events.ConferenceEntryPoint.label`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports label as display text for each conference entry point; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-entrypoint-176407d2d339" title="Meeting Code" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.entryPoints.meetingCode`

            **Meeting Code.** The meeting code to access the conference. It supplies the sensitive provider access code needed to join the conference entry point, not a stable record identifier.

            * **Enables:** Reconcile `calendar_events.ConferenceEntryPoint.meetingCode` with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
            * **Interpretation:** Google Workspace returns meeting code as meeting or conference access metadata on each conference entry point; it can rotate and does not identify the meeting by itself.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-entrypoint-fdab92967dc6" title="Passcode" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.entryPoints.passcode`

            **Passcode.** The passcode to access the conference. It supplies the sensitive provider access code needed to join the conference entry point, not a stable record identifier.

            * **Enables:** Reconcile `calendar_events.ConferenceEntryPoint.passcode` with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
            * **Interpretation:** Google Workspace returns passcode as meeting or conference access metadata on each conference entry point; it can rotate and does not identify the meeting by itself.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-entrypoint-0fbd32e01e38" title="Password" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.entryPoints.password`

            **Password.** The password to access the conference. It supplies the sensitive provider access code needed to join the conference entry point, not a stable record identifier.

            * **Enables:** Reconcile `calendar_events.ConferenceEntryPoint.password` with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
            * **Interpretation:** Google Workspace returns password as meeting or conference access metadata on each conference entry point; it can rotate and does not identify the meeting by itself.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-entrypoint-dcc49a9f6c48" title="Pin" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.entryPoints.pin`

            **Pin.** The PIN to access the conference. It supplies the sensitive provider access code needed to join the conference entry point, not a stable record identifier.

            * **Enables:** Reconcile `calendar_events.ConferenceEntryPoint.pin` with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
            * **Interpretation:** Google Workspace returns pin as meeting or conference access metadata on each conference entry point; it can rotate and does not identify the meeting by itself.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-entrypoint-344e09109cff" title="URI" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.entryPoints.uri`

            **URI.** The URI of the entry point. It locates the provider resource or path associated with the conference entry point.

            * **Enables:** Associate each conference entry point with the resource identified by URI in `calendar_events.ConferenceEntryPoint.uri`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports URI as a resource locator for each conference entry point; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-notes-2a287ff62ef9" title="Notes" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.notes`

            **Notes.** Additional notes to display to the user about the conference. It supplies the returned notes text needed to understand the conference data in context.

            * **Enables:** Search the returned notes text in `calendar_events.ConferenceData.notes` and attribute each match to its parent calendar event and reported author when available.
            * **Interpretation:** Google Workspace supplies notes as returned text on each conference data; truncation, formatting, and access boundaries can limit completeness.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-parameters-87a307425574" title="Parameters" icon="stopwatch" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.parameters`

            **Parameters.** Provider add-on parameters attached to the conference data. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute parameters in `calendar_events.ConferenceData.parameters` to the parent calendar event; identify parent records where that nested parameters object is absent.
            * **Interpretation:** Google Workspace reports parameters as a nested object on each conference data; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-parameters-339bc03bb481" title="Add On Parameters" icon="clock-rotate-left" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.parameters.addOnParameters`

            **Add On Parameters.** Parameters supplied by a conference add-on. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute add on parameters in `calendar_events.ConferenceParameters.addOnParameters` to the parent calendar event; identify parent records where that nested add on parameters object is absent.
            * **Interpretation:** Google Workspace reports add on parameters as a nested object on each conference parameter; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-parameters-98a57d0acb55" title="Parameters" icon="stopwatch" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.parameters.addOnParameters.parameters`

            **Parameters.** Conference add-on parameter values. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute parameters in `calendar_events.ConferenceAddOnParameters.parameters` to the parent calendar event; identify parent records where that nested parameters object is absent.
            * **Interpretation:** Google Workspace reports parameters as a nested object on each conference add on parameter; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-parameters-b49a4748c922" title="Meeting UUID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.parameters.addOnParameters.parameters.meetingUuid`

            **Meeting UUID.** Provider-specific meeting instance UUID, observed on Zoom add-on events. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Connect each conference add on parameter value in Calendar Events to the referenced meeting through `calendar_events.ConferenceAddOnParameterValues.meetingUuid`; flag meeting UUID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports meeting UUID as an identifier in its meeting namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-parameters-4ce6b294b7d8" title="Real Meeting ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.parameters.addOnParameters.parameters.realMeetingId`

            **Real Meeting ID.** Provider-specific meeting ID, observed on Zoom add-on events. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Connect each conference add on parameter value in Calendar Events to the referenced real meeting through `calendar_events.ConferenceAddOnParameterValues.realMeetingId`; flag real meeting ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports real meeting ID as an identifier in its real meeting namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-conferencedata-signature-9f013a8be7fd" title="Signature" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.conferenceData.signature`

            **Signature.** The signature of the conference data. It identifies the related provider object that gives the conference data its parent, owner, or container context.

            * **Enables:** Connect each conference data to the related signature in `calendar_events.ConferenceData.signature` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports signature as relationship context on each conference data; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-created-141ff0923f30" title="Created" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.created`

            **Created.** Creation time of the event (RFC3339). It anchors the calendar event on the provider's reported timeline.

            * **Enables:** Order Calendar Events by created in `calendar_events.created` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports created as a timestamp on each calendar event; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-creator-2b1b2e81438b" title="Creator" icon="stopwatch" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.creator`

            **Creator.** The creator of the event. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute creator in `calendar_events.creator` to the parent calendar event; identify parent records where that nested creator object is absent.
            * **Interpretation:** Google Workspace reports creator as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-creator-displayname-a4e4b7ef889d" title="Display Name" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.creator.displayName`

            **Display Name.** The creator's name, if available. It distinguishes the provider-defined display name state or classification for the event person.

            * **Enables:** Label each event person with display name from `calendar_events.EventPerson.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each event person; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-creator-email-a42276971083" title="Email" icon="comments" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.creator.email`

            **Email.** The creator's email address. It supplies the provider-reported address or location facet for the event person, not a residency determination.

            * **Enables:** Attribute each event person to a person or account by the exact email in `calendar_events.EventPerson.email`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports email as an address on each event person; aliases, casing, and unverified addresses can prevent a one-to-one person match.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-creator-id-2d1412df50ba" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.creator.id`

            **ID.** The creator's profile ID, if available. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Connect each event person in Calendar Events to the referenced event person through `calendar_events.EventPerson.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports ID as an identifier in its event person namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-creator-self-69091130203b" title="Self" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.creator.self`

            **Self.** Whether the creator corresponds to the calendar on which this event appears. It distinguishes the provider-defined self state or classification for the event person.

            * **Enables:** Filter Calendar Events by whether the creator corresponds to the calendar on which this event appears in `calendar_events.EventPerson.self`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the creator corresponds to the calendar on which this event appears as a boolean on each event person; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-description-7ec19af6e282" title="Description" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.description`

            **Description.** Description of the event, may contain HTML. It defines the content surface available for this calendar event.

            * **Enables:** Locate calendar event records by description in `calendar_events.description`; attribute each text match to its parent calendar event and, when present, its reported author.
            * **Interpretation:** Google Workspace supplies description as text on each calendar event; referenced files or media are not implied unless explicitly represented.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-end-2529bf05d4ee" title="End" icon="clock-rotate-left" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.end`

            **End.** The end time of the event. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute end in `calendar_events.end` to the parent calendar event; identify parent records where that nested end object is absent.
            * **Interpretation:** Google Workspace reports end as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-end-date-28f945dec844" title="Date" icon="clock-rotate-left" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.end.date`

            **Date.** The date, in YYYY-MM-DD format, if this is an all-day event. It anchors the calendar event on the provider's reported timeline.

            * **Enables:** Order Calendar Events by date in `calendar_events.EventDateTime.date` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports date as a calendar date on each event date time; its grain is one day and no time of day should be inferred.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-end-datetime-d0558a4cf534" title="Date Time" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.end.dateTime`

            **Date Time.** The time, as a combined date-time value (RFC3339). A time zone offset is required unless a time zone is explicitly specified in timeZone. It anchors the calendar event on the provider's reported timeline.

            * **Enables:** Order Calendar Events by date time in `calendar_events.EventDateTime.dateTime` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports date time as a timestamp on each event date time; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-end-timezone-5f6da76aceda" title="Time Zone" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.end.timeZone`

            **Time Zone.** The time zone in which the time is specified (IANA Time Zone Database name). It is needed to interpret companion dates and times for the event date time in the provider's intended zone.

            * **Enables:** Apply the zone in `calendar_events.EventDateTime.timeZone` when converting the calendar event's companion start, end, or scheduled timestamps; do not infer it from locale.
            * **Interpretation:** Google Workspace reports time zone as a timezone identifier for each event date time; supported IANA or provider-specific names and daylight-saving behavior must be preserved.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-endtimeunspecified-078bb883c41e" title="End Time Unspecified" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.endTimeUnspecified`

            **End Time Unspecified.** Whether the end time is actually unspecified. It distinguishes the provider-defined end time unspecified state or classification for the calendar event.

            * **Enables:** Filter Calendar Events by whether the end time is actually unspecified in `calendar_events.endTimeUnspecified`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the end time is actually unspecified as a boolean on each calendar event; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-etag-6afd61ffafeb" title="ETag" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.etag`

            **ETag.** ETag of the resource. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

            * **Enables:** Use `calendar_events.etag` for conditional provider reads and revision checks; pair the ETag with the calendar event ID rather than joining on it.
            * **Interpretation:** Google Workspace returns this ETag as an opaque revision token for each calendar event; it can change when the resource changes and is not a universal identifier.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-eventtype-4040c5fec979" title="Event Type" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.eventType`

            **Event Type.** Specific type of the event. It distinguishes the provider-defined event type state or classification for the calendar event.

            * **Enables:** Segment calendar event entries in Calendar Events by event type in `calendar_events.eventType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports event type as a label from its own taxonomy on each calendar event; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-extendedproperties-543442e8a766" title="Extended Properties" icon="stopwatch" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.extendedProperties`

            **Extended Properties.** Extended properties of the event. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute extended properties in `calendar_events.extendedProperties` to the parent calendar event; identify parent records where that nested extended properties object is absent.
            * **Interpretation:** Google Workspace reports extended properties as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-extendedproperties-privat-371a0527fdbb" title="Private" icon="clock-rotate-left" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.extendedProperties.private`

            **Private.** Properties that are private to the copy of the event that appears on this calendar. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute private in `calendar_events.EventExtendedProperties.private` to the parent calendar event; identify parent records where that nested private object is absent.
            * **Interpretation:** Google Workspace reports private as a nested object on each event extended property; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-extendedproperties-shared-4f1de0ac2afc" title="Shared" icon="clock-rotate-left" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.extendedProperties.shared`

            **Shared.** Properties that are shared between copies of the event on other attendees' calendars. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute shared in `calendar_events.EventExtendedProperties.shared` to the parent calendar event; identify parent records where that nested shared object is absent.
            * **Interpretation:** Google Workspace reports shared as a nested object on each event extended property; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-focustimeproperties-1bb0ad739af0" title="Focus Time Properties" icon="stopwatch" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.focusTimeProperties`

            **Focus Time Properties.** Focus-time payload, present when eventType is focusTime. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute focus time properties in `calendar_events.focusTimeProperties` to the parent calendar event; identify parent records where that nested focus time properties object is absent.
            * **Interpretation:** Google Workspace reports focus time properties as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-focustimeproperties-autod-d8f10c2f9d15" title="Auto Decline Mode" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.focusTimeProperties.autoDeclineMode`

            **Auto Decline Mode.** How meeting invitations are auto-declined during focus time. It distinguishes the provider-defined auto decline mode state or classification for the event focus time.

            * **Enables:** Segment event focus time entries in Calendar Events by auto decline mode in `calendar_events.EventFocusTime.autoDeclineMode`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports auto decline mode as a label from its own taxonomy on each event focus time; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-focustimeproperties-chats-c84b49a383a9" title="Chat Status" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.focusTimeProperties.chatStatus`

            **Chat Status.** Chat/presence status applied during focus time. It distinguishes the provider-defined chat status state or classification for the event focus time.

            * **Enables:** Segment event focus time entries in Calendar Events by chat status in `calendar_events.EventFocusTime.chatStatus`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports chat status as a label from its own taxonomy on each event focus time; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-focustimeproperties-decli-82445b9e0437" title="Decline Message" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.focusTimeProperties.declineMessage`

            **Decline Message.** Message sent when an invitation is auto-declined. It supplies the returned decline message text needed to understand the event focus time in context.

            * **Enables:** Search the returned decline message text in `calendar_events.EventFocusTime.declineMessage` and attribute each match to its parent calendar event and reported author when available.
            * **Interpretation:** Google Workspace supplies decline message as returned text on each event focus time; truncation, formatting, and access boundaries can limit completeness.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-gadget-e8f27ab377d2" title="Gadget" icon="stopwatch" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.gadget`

            **Gadget.** A gadget that extends this event (deprecated). It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute gadget in `calendar_events.gadget` to the parent calendar event; identify parent records where that nested gadget object is absent.
            * **Interpretation:** Google Workspace reports gadget as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-gadget-display-503988af4af8" title="Display" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.gadget.display`

            **Display.** The gadget's display mode. It distinguishes the provider-defined display state or classification for the event gadget.

            * **Enables:** Filter Calendar Events by the exact Google Workspace-defined display in `calendar_events.EventGadget.display` and preserve unknown values as distinct categories.
            * **Interpretation:** Google Workspace supplies display from its own taxonomy on each event gadget; preserve unknown and newly introduced labels.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-gadget-height-fcd8938887b3" title="Height" icon="calendar-days" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.gadget.height`

            **Height.** The gadget's height in pixels. It supplies the height measure for the event gadget at the provider's declared unit and grain.

            * **Enables:** Measure height through `calendar_events.EventGadget.height` for each event gadget and compare only values with the same unit and record grain.
            * **Interpretation:** Google Workspace reports height as a measure on each event gadget; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-gadget-iconlink-26a2b826857b" title="Icon Link" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.gadget.iconLink`

            **Icon Link.** The gadget's icon URL. It locates the provider resource or path associated with the event gadget.

            * **Enables:** Associate each event gadget with the resource identified by icon link in `calendar_events.EventGadget.iconLink`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports icon link as a resource locator for each event gadget; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-gadget-link-bc745505a536" title="Link" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.gadget.link`

            **Link.** The gadget's URL. It locates the provider resource or path associated with the event gadget.

            * **Enables:** Associate each event gadget with the resource identified by link in `calendar_events.EventGadget.link`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports link as a resource locator for each event gadget; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-gadget-preferences-e683f24f6ca4" title="Preferences" icon="clock-rotate-left" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.gadget.preferences`

            **Preferences.** Preferences for the gadget. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute preferences in `calendar_events.EventGadget.preferences` to the parent calendar event; identify parent records where that nested preferences object is absent.
            * **Interpretation:** Google Workspace reports preferences as a nested object on each event gadget; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-gadget-title-ebfe403d56d2" title="Title" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.gadget.title`

            **Title.** The gadget's title. It gives the event gadget a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each event gadget with title from `calendar_events.EventGadget.title`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports title as display text for each event gadget; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-gadget-type-9006f3d8c8f1" title="Type" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.gadget.type`

            **Type.** The gadget's type. It distinguishes the provider-defined type state or classification for the event gadget.

            * **Enables:** Segment event gadget entries in Calendar Events by type in `calendar_events.EventGadget.type`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each event gadget; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-gadget-width-adaaf231dddf" title="Width" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.gadget.width`

            **Width.** The gadget's width in pixels. It supplies the width measure for the event gadget at the provider's declared unit and grain.

            * **Enables:** Measure width through `calendar_events.EventGadget.width` for each event gadget and compare only values with the same unit and record grain.
            * **Interpretation:** Google Workspace reports width as a measure on each event gadget; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-guestscaninviteothers-f867ad3100cc" title="Guests Can Invite Others" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.guestsCanInviteOthers`

            **Guests Can Invite Others.** Whether attendees other than the organizer can invite others. It distinguishes the provider-defined guests can invite others state or classification for the calendar event.

            * **Enables:** Filter Calendar Events by whether attendees other than the organizer can invite others in `calendar_events.guestsCanInviteOthers`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports attendees other than the organizer can invite others as a boolean on each calendar event; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-guestscanmodify-90ba882b78e0" title="Guests Can Modify" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.guestsCanModify`

            **Guests Can Modify.** Whether attendees other than the organizer can modify the event. It distinguishes the provider-defined guests can modify state or classification for the calendar event.

            * **Enables:** Filter Calendar Events by whether attendees other than the organizer can modify the event in `calendar_events.guestsCanModify`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports attendees other than the organizer can modify the event as a boolean on each calendar event; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-guestscanseeotherguests-b2d139b64260" title="Guests Can See Other Guests" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.guestsCanSeeOtherGuests`

            **Guests Can See Other Guests.** Whether attendees other than the organizer can see who the event's attendees are. It distinguishes the provider-defined guests can see other guests state or classification for the calendar event.

            * **Enables:** Filter Calendar Events by whether attendees other than the organizer can see who the event's attendees are in `calendar_events.guestsCanSeeOtherGuests`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports attendees other than the organizer can see who the event's attendees are as a boolean on each calendar event; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-hangoutlink-0e264753d9ea" title="Hangout Link" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.hangoutLink`

            **Hangout Link.** URL for the Google Hangouts link attached to the event. It locates the provider resource or path associated with the calendar event.

            * **Enables:** Associate each calendar event with the resource identified by hangout link in `calendar_events.hangoutLink`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports hangout link as a resource locator for each calendar event; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-htmllink-b56da0d4d7b3" title="HTML Link" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.htmlLink`

            **HTML Link.** URL link to the event in Google Calendar. It locates the provider resource or path associated with the calendar event.

            * **Enables:** Associate each calendar event with the resource identified by html link in `calendar_events.htmlLink`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports html link as a resource locator for each calendar event; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-icaluid-a1da103dc9cc" title="I Cal UID" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.iCalUID`

            **I Cal UID.** Event unique identifier as defined in RFC5545, used to uniquely identify events across calendaring systems. It identifies the related provider object that gives the calendar event its parent, owner, or container context.

            * **Enables:** Connect each calendar event to the related i cal uid in `calendar_events.iCalUID` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports i cal uid as relationship context on each calendar event; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-id-9024f57a05e0" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.id`

            **ID.** Opaque identifier of the event. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Match repeated calendar event entries on ID in `calendar_events.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its calendar event namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-kind-4ad282f61313" title="Kind" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.kind`

            **Kind.** Type of the resource, always 'calendar#event'. It identifies the related provider object that gives the calendar event its parent, owner, or container context.

            * **Enables:** Segment calendar event entries in Calendar Events by kind in `calendar_events.kind`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports kind as a label from its own taxonomy on each calendar event; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-location-1dd7f50d258d" title="Location" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.location`

            **Location.** Geographic location of the event as free-form text. It supplies the provider-reported address or location facet for the calendar event, not a residency determination.

            * **Enables:** Group Calendar Events by location in `calendar_events.location` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Google Workspace reports location as a user, device, request, or resource location attribute on each calendar event; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-locked-8a4444c339d3" title="Locked" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.locked`

            **Locked.** Whether this is a locked event copy where no changes can be made. It distinguishes the provider-defined locked state or classification for the calendar event.

            * **Enables:** Filter Calendar Events by whether this is a locked event copy where no changes can be made in `calendar_events.locked`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this is a locked event copy where no changes can be made as a boolean on each calendar event; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-organizer-46294a138c26" title="Organizer" icon="calendar-days" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.organizer`

            **Organizer.** The organizer of the event. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute organizer in `calendar_events.organizer` to the parent calendar event; identify parent records where that nested organizer object is absent.
            * **Interpretation:** Google Workspace reports organizer as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-organizer-displayname-719b07aaf208" title="Display Name" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.organizer.displayName`

            **Display Name.** The organizer's name, if available. It distinguishes the provider-defined display name state or classification for the event organizer.

            * **Enables:** Label each event organizer with display name from `calendar_events.EventOrganizer.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each event organizer; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-organizer-email-3c99cfd69450" title="Email" icon="comments" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.organizer.email`

            **Email.** The organizer's email address. It supplies the provider-reported address or location facet for the event organizer, not a residency determination.

            * **Enables:** Attribute each event organizer to a person or account by the exact email in `calendar_events.EventOrganizer.email`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports email as an address on each event organizer; aliases, casing, and unverified addresses can prevent a one-to-one person match.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-organizer-id-db3e55b04e1e" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.organizer.id`

            **ID.** The organizer's profile ID, if available. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Connect each event organizer in Calendar Events to the referenced event organizer through `calendar_events.EventOrganizer.id`; flag ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports ID as an identifier in its event organizer namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-organizer-self-4836c402aa96" title="Self" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.organizer.self`

            **Self.** Whether the organizer corresponds to the calendar on which this event appears. It distinguishes the provider-defined self state or classification for the event organizer.

            * **Enables:** Filter Calendar Events by whether the organizer corresponds to the calendar on which this event appears in `calendar_events.EventOrganizer.self`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the organizer corresponds to the calendar on which this event appears as a boolean on each event organizer; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-originalstarttime-628a3b5996b9" title="Original Start Time" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.originalStartTime`

            **Original Start Time.** For an instance of a recurring event, the original start time of the instance in the recurrence. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute original start time in `calendar_events.originalStartTime` to the parent calendar event; identify parent records where that nested original start time object is absent.
            * **Interpretation:** Google Workspace reports original start time as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-outofofficeproperties-bf085703db0e" title="Out Of Office Properties" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.outOfOfficeProperties`

            **Out Of Office Properties.** Out-of-office payload, present when eventType is outOfOffice. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute out of office properties in `calendar_events.outOfOfficeProperties` to the parent calendar event; identify parent records where that nested out of office properties object is absent.
            * **Interpretation:** Google Workspace reports out of office properties as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-outofofficeproperties-aut-85b3b68d74df" title="Auto Decline Mode" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.outOfOfficeProperties.autoDeclineMode`

            **Auto Decline Mode.** How meeting invitations are auto-declined during the out-of-office period. It distinguishes the provider-defined auto decline mode state or classification for the event out of office.

            * **Enables:** Segment event out of office entries in Calendar Events by auto decline mode in `calendar_events.EventOutOfOffice.autoDeclineMode`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports auto decline mode as a label from its own taxonomy on each event out of office; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-outofofficeproperties-dec-44bb33fffd1b" title="Decline Message" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.outOfOfficeProperties.declineMessage`

            **Decline Message.** Message sent when an invitation is auto-declined. It supplies the returned decline message text needed to understand the event out of office in context.

            * **Enables:** Search the returned decline message text in `calendar_events.EventOutOfOffice.declineMessage` and attribute each match to its parent calendar event and reported author when available.
            * **Interpretation:** Google Workspace supplies decline message as returned text on each event out of office; truncation, formatting, and access boundaries can limit completeness.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-primaryemail-4175cb0c7b5e" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each calendar event because the child operation does not return that relationship. It identifies the related provider object that gives the calendar event its parent, owner, or container context.

            * **Enables:** Attribute each calendar event to a person or account by the exact primary email in `calendar_events.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each calendar event; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-privatecopy-d76937a19d64" title="Private Copy" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.privateCopy`

            **Private Copy.** Whether this is a private event copy where changes are not shared with other copies. It distinguishes the provider-defined private copy state or classification for the calendar event.

            * **Enables:** Filter Calendar Events by whether this is a private event copy where changes are not shared with other copies in `calendar_events.privateCopy`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this is a private event copy where changes are not shared with other copies as a boolean on each calendar event; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-recurrence-47f418f6e6ad" title="Recurrence" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.recurrence`

            **Recurrence.** List of RRULE, EXRULE, RDATE, and EXDATE lines for a recurring event. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Compare the exact Google Workspace-configured recurrence set in `calendar_events.recurrence` for each calendar event; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns recurrence as an array of recurrence value entries on each calendar event; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-recurringeventid-02d8dbadd69a" title="Recurring Event ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.recurringEventId`

            **Recurring Event ID.** For an instance of a recurring event, the ID of the recurring event to which this instance belongs. It provides the reference needed to connect the calendar event to the corresponding provider object.

            * **Enables:** Connect each calendar event in Calendar Events to the referenced recurring event through `calendar_events.recurringEventId`; flag recurring event ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports recurring event ID as an identifier in its recurring event namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-reminders-4cc76ad6b758" title="Reminders" icon="calendar-days" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.reminders`

            **Reminders.** Information about the event's reminders. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute reminders in `calendar_events.reminders` to the parent calendar event; identify parent records where that nested reminders object is absent.
            * **Interpretation:** Google Workspace reports reminders as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-reminders-overrides-69aafdd61dd3" title="Overrides" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.reminders.overrides`

            **Overrides.** If the event doesn't use the default reminders, this lists the reminders specific to the event. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Compare the exact Google Workspace-configured overrides set in `calendar_events.EventReminders.overrides` for each event reminder; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns overrides as an array of reminder override entries on each event reminder; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-reminders-overrides-metho-6b0a18f2c050" title="Method" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.reminders.overrides.method`

            **Method.** The method used by this reminder. It distinguishes the provider-defined method state or classification for the reminder override.

            * **Enables:** Segment reminder override entries in Calendar Events by method in `calendar_events.ReminderOverride.method`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports method as a label from its own taxonomy on each reminder override; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-reminders-overrides-minut-82e99cda7b2c" title="Minutes" icon="clock-rotate-left" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.reminders.overrides.minutes`

            **Minutes.** Number of minutes before the start of the event when the reminder should trigger. It supplies the minutes measure for the reminder override at the provider's declared unit and grain.

            * **Enables:** Measure minutes through `calendar_events.ReminderOverride.minutes` for each reminder override and compare only values with the same unit and record grain.
            * **Interpretation:** Google Workspace reports minutes as a measure on each reminder override; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-reminders-usedefault-7dfde29fd9b6" title="Use Default" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.reminders.useDefault`

            **Use Default.** Whether the default reminders of the calendar apply to the event. It distinguishes the provider-defined use default state or classification for the event reminder.

            * **Enables:** Filter Calendar Events by whether the default reminders of the calendar apply to the event in `calendar_events.EventReminders.useDefault`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the default reminders of the calendar apply to the event as a boolean on each event reminder; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-sequence-3827ba856d2d" title="Sequence" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.sequence`

            **Sequence.** iCalendar revision number for this event; needed to distinguish successive revisions without treating the field as an event count.

            * **Enables:** Order revisions of the same calendar event by `calendar_events.sequence` together with the event ID and updated timestamp.
            * **Interpretation:** Google Workspace reports an integer iCalendar revision counter. A higher value identifies a later revision of that event; it is not elapsed time or a business quantity.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-source-f106c4a1cc81" title="Source" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.source`

            **Source.** Source from which the event was created. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute source in `calendar_events.source` to the parent calendar event; identify parent records where that nested source object is absent.
            * **Interpretation:** Google Workspace reports source as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-source-title-3f08db84a7a9" title="Title" icon="inbox" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.source.title`

            **Title.** Title of the source, e.g., a title of a web page or an email subject. It supplies the returned title text needed to understand the event source in context.

            * **Enables:** Label each event source with title from `calendar_events.EventSource.title`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports title as display text for each event source; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-source-url-ad7a837fb1d9" title="URL" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.source.url`

            **URL.** URL of the source pointing to a resource. It locates the provider resource or path associated with the event source.

            * **Enables:** Associate each event source with the resource identified by URL in `calendar_events.EventSource.url`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports URL as a resource locator for each event source; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-start-31feb4b59ffd" title="Start" icon="calendar-days" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.start`

            **Start.** The start time of the event. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute start in `calendar_events.start` to the parent calendar event; identify parent records where that nested start object is absent.
            * **Interpretation:** Google Workspace reports start as a nested object on each calendar event; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-status-1524b47eef77" title="Status" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.status`

            **Status.** Status of the event. It distinguishes the provider-defined status state or classification for the calendar event.

            * **Enables:** Segment calendar event entries in Calendar Events by status in `calendar_events.status`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports status as a label from its own taxonomy on each calendar event; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-summary-fadb125d8b54" title="Summary" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.summary`

            **Summary.** Title of the event. It defines the content surface available for this calendar event.

            * **Enables:** Locate calendar event records by summary in `calendar_events.summary`; attribute each text match to its parent calendar event and, when present, its reported author.
            * **Interpretation:** Google Workspace supplies summary as text on each calendar event; referenced files or media are not implied unless explicitly represented. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-transparency-c67cf54cef4f" title="Transparency" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.transparency`

            **Transparency.** Whether the event blocks time on the calendar. It distinguishes the provider-defined transparency state or classification for the calendar event.

            * **Enables:** Segment calendar event entries in Calendar Events by transparency in `calendar_events.transparency`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports transparency as a label from its own taxonomy on each calendar event; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-updated-d5f8350afb55" title="Updated" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.updated`

            **Updated.** Last modification time of the event (RFC3339). It anchors the calendar event on the provider's reported timeline.

            * **Enables:** Order Calendar Events by updated in `calendar_events.updated` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports updated as a timestamp on each calendar event; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-visibility-f6343fbd46d3" title="Visibility" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.visibility`

            **Visibility.** Visibility of the event. It distinguishes the provider-defined visibility state or classification for the calendar event.

            * **Enables:** Segment calendar event entries in Calendar Events by visibility in `calendar_events.visibility`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports visibility as a label from its own taxonomy on each calendar event; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-workinglocationproperties-d7a5e8a4dd64" title="Working Location Properties" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.workingLocationProperties`

            **Working Location Properties.** Working-location payload, present when eventType is workingLocation. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute working location properties in `calendar_events.workingLocationProperties` to the parent calendar event; identify parent records where that nested working location properties object is absent.
            * **Interpretation:** Google Workspace reports working location properties as a nested object on each calendar event; optional children may be absent from a valid response. This nested location attribute does not establish where data is stored or processed and is not a residency signal.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-workinglocationproperties-134aba8336a6" title="Custom Location" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.workingLocationProperties.customLocation`

            **Custom Location.** Free-form custom working location, with a label. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute custom location in `calendar_events.EventWorkingLocation.customLocation` to the parent calendar event; identify parent records where that nested custom location object is absent.
            * **Interpretation:** Google Workspace reports custom location as a nested object on each event working location; optional children may be absent from a valid response. This nested location attribute does not establish where data is stored or processed and is not a residency signal.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-workinglocationproperties-de06d8e60381" title="Home Office" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.workingLocationProperties.homeOffice`

            **Home Office.** Present (empty) when the user is working from home. It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute home office in `calendar_events.EventWorkingLocation.homeOffice` to the parent calendar event; identify parent records where that nested home office object is absent.
            * **Interpretation:** Google Workspace reports home office as a nested object on each event working location; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-workinglocationproperties-bd300a0f4211" title="Office Location" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.workingLocationProperties.officeLocation`

            **Office Location.** Structured office location (buildingId, floorId, floorSectionId, deskId, label). It preserves the nested context needed to interpret the parent calendar event.

            * **Enables:** Attribute office location in `calendar_events.EventWorkingLocation.officeLocation` to the parent calendar event; identify parent records where that nested office location object is absent.
            * **Interpretation:** Google Workspace reports office location as a nested object on each event working location; optional children may be absent from a valid response. This nested location attribute does not establish where data is stored or processed and is not a residency signal.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendar-events-workinglocationproperties-9586faf32ceb" title="Type" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendar_events.workingLocationProperties.type`

            **Type.** Working-location type (homeOffice, officeLocation, or customLocation). It supplies the provider-reported address or location facet for the event working location, not a residency determination.

            * **Enables:** Segment event working location entries in Calendar Events by type in `calendar_events.EventWorkingLocation.type`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each event working location; preserve unknown labels rather than mapping them by assumption.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-calendars-c41e7877a1bb" title="Calendars" icon="calendar-check" iconType="sharp-duotone-solid">
        Developer identifier: `calendars`

        **Calendars.** User calendars.

        * **Enables:** Inventory calendars visible to each delegated user and compare access role, ownership, visibility, and synchronization state.
        * **Scope:** Reads the records selected by Google Workspace's `https://www.googleapis.com/calendar/v3/users/me/calendarList` operation as a snapshot stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. Removal is recognized from the provider's tombstone state rather than absence alone.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-calendars-accessrole-c4922b8de12b" title="Access Role" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.accessRole`

            **Access Role.** The effective access role that the authenticated user has on the calendar. It distinguishes the provider-defined access role state or classification for the calendar.

            * **Enables:** Segment calendar entries in Calendars by access role in `calendars.accessRole`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports access role as a label from its own taxonomy on each calendar; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-backgroundcolor-b1292682c75f" title="Background Color" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.backgroundColor`

            **Background Color.** The main color of the calendar in hexadecimal format (e.g., '#0088aa'). It identifies the related provider object that gives the calendar its parent, owner, or container context.

            * **Enables:** Connect each calendar to the related background color in `calendars.backgroundColor` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports background color as relationship context on each calendar; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-colorid-acce6c7f740c" title="Color ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.colorId`

            **Color ID.** The color ID of the calendar, referring to an entry in the calendar color definitions. It provides the reference needed to connect the calendar to the corresponding provider object.

            * **Enables:** Connect each calendar in Calendars to the referenced color through `calendars.colorId`; flag color ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports color ID as an identifier in its color namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-conferenceproperties-317d59ca88c7" title="Conference Properties" icon="stopwatch" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.conferenceProperties`

            **Conference Properties.** Conferencing properties for this calendar. It preserves the nested context needed to interpret the parent calendar.

            * **Enables:** Attribute conference properties in `calendars.conferenceProperties` to the parent calendar; identify parent records where that nested conference properties object is absent.
            * **Interpretation:** Google Workspace reports conference properties as a nested object on each calendar; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-conferenceproperties-allowedcon-3b0c1f1d9216" title="Allowed Conference Solution Types" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.conferenceProperties.allowedConferenceSolutionTypes`

            **Allowed Conference Solution Types.** The types of conference solutions that are supported for this calendar. It preserves the nested context needed to interpret the parent calendar.

            * **Enables:** Compare the exact Google Workspace-configured allowed conference solution types set in `calendars.CalendarConferenceProperties.allowedConferenceSolutionTypes` for each calendar conference property; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns allowed conference solution types as an array of allowed conference solution type value entries on each calendar conference property; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-defaultreminders-be2261c60329" title="Default Reminders" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.defaultReminders`

            **Default Reminders.** The default reminders that the authenticated user has for this calendar. It preserves the nested context needed to interpret the parent calendar.

            * **Enables:** Compare the exact Google Workspace-configured default reminders set in `calendars.defaultReminders` for each calendar; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns default reminders as an array of calendar reminder entries on each calendar; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-defaultreminders-method-11ac06486878" title="Method" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.defaultReminders.method`

            **Method.** The method used by this reminder (email or popup). It distinguishes the provider-defined method state or classification for the calendar reminder.

            * **Enables:** Match repeated calendar reminder entries on method in `calendars.CalendarReminder.method`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports method as a label from its own taxonomy on each calendar reminder; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-defaultreminders-minutes-e61461a7ab12" title="Minutes" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.defaultReminders.minutes`

            **Minutes.** Number of minutes before the start of the event when the reminder should trigger. It supplies the minutes measure for the calendar reminder at the provider's declared unit and grain.

            * **Enables:** Match repeated calendar reminder entries on minutes in `calendars.CalendarReminder.minutes`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports minutes as minutes on each calendar reminder; compare only records with the same unit and aggregation grain. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-deleted-93ba4ee71ee1" title="Deleted" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.deleted`

            **Deleted.** Whether this calendar list entry has been removed from the calendar list. It distinguishes the provider-defined deleted state or classification for the calendar.

            * **Enables:** Filter Calendars by whether this calendar list entry has been removed from the calendar list in `calendars.deleted`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this calendar list entry has been removed from the calendar list as a boolean on each calendar; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-description-d02307919d2a" title="Description" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.description`

            **Description.** Description of the calendar. It defines the content surface available for this calendar.

            * **Enables:** Locate calendar records by description in `calendars.description`; attribute each text match to its parent calendar and, when present, its reported author.
            * **Interpretation:** Google Workspace supplies description as text on each calendar; referenced files or media are not implied unless explicitly represented.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-etag-e8c43323ff10" title="ETag" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.etag`

            **ETag.** ETag of the resource. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

            * **Enables:** Use `calendars.etag` for conditional provider reads and revision checks; pair the ETag with the calendar ID rather than joining on it.
            * **Interpretation:** Google Workspace returns this ETag as an opaque revision token for each calendar; it can change when the resource changes and is not a universal identifier.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-foregroundcolor-6a4a194bece7" title="Foreground Color" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.foregroundColor`

            **Foreground Color.** The foreground color of the calendar in hexadecimal format (e.g., '#ffffff'). It identifies the related provider object that gives the calendar its parent, owner, or container context.

            * **Enables:** Connect each calendar to the related foreground color in `calendars.foregroundColor` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports foreground color as relationship context on each calendar; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-hidden-51edc241e3ff" title="Hidden" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.hidden`

            **Hidden.** Whether the calendar has been hidden from the list. It distinguishes the provider-defined hidden state or classification for the calendar.

            * **Enables:** Filter Calendars by whether the calendar has been hidden from the list in `calendars.hidden`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the calendar has been hidden from the list as a boolean on each calendar; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-id-91013e3ca7ae" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.id`

            **ID.** Unique identifier for the calendar. Usually an email address, but holiday/sports group calendars may include characters (e.g. #) that are not valid in Contact.Email. It provides the reference needed to connect the calendar to the corresponding provider object.

            * **Enables:** Match repeated calendar entries on ID in `calendars.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its calendar namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-kind-874a8c07d88b" title="Kind" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.kind`

            **Kind.** Type of the resource, always 'calendar#calendarListEntry'. It identifies the related provider object that gives the calendar its parent, owner, or container context.

            * **Enables:** Segment calendar entries in Calendars by kind in `calendars.kind`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports kind as a label from its own taxonomy on each calendar; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-location-add7e28c65b6" title="Location" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.location`

            **Location.** Geographic location of the calendar as free-form text. It supplies the provider-reported address or location facet for the calendar, not a residency determination.

            * **Enables:** Group Calendars by location in `calendars.location` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Google Workspace reports location as a user, device, request, or resource location attribute on each calendar; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-notificationsettings-4904681037f7" title="Notification Settings" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.notificationSettings`

            **Notification Settings.** The notifications that the authenticated user is receiving for this calendar. It preserves the nested context needed to interpret the parent calendar.

            * **Enables:** Attribute notification settings in `calendars.notificationSettings` to the parent calendar; identify parent records where that nested notification settings object is absent.
            * **Interpretation:** Google Workspace reports notification settings as a nested object on each calendar; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-notificationsettings-notificati-bace19787f22" title="Notifications" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.notificationSettings.notifications`

            **Notifications.** The list of notifications set for this calendar. It preserves the nested context needed to interpret the parent calendar.

            * **Enables:** Compare the exact Google Workspace-configured notifications set in `calendars.CalendarNotificationSettings.notifications` for each calendar notification setting; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns notifications as an array of calendar notification entries on each calendar notification setting; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-notificationsettings-notificati-c2d3ab911306" title="Method" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.notificationSettings.notifications.method`

            **Method.** The method used to deliver the notification. It distinguishes the provider-defined method state or classification for the calendar notification.

            * **Enables:** Match repeated calendar notification entries on method in `calendars.CalendarNotification.method`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports method as a label from its own taxonomy on each calendar notification; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-notificationsettings-notificati-d2fb575d430e" title="Type" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.notificationSettings.notifications.type`

            **Type.** The type of notification. It distinguishes the provider-defined type state or classification for the calendar notification.

            * **Enables:** Match repeated calendar notification entries on type in `calendars.CalendarNotification.type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each calendar notification; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-primary-14762e75baaf" title="Primary" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.primary`

            **Primary.** Whether the calendar is the primary calendar of the authenticated user. It distinguishes the provider-defined primary state or classification for the calendar.

            * **Enables:** Filter Calendars by whether the calendar is the primary calendar of the authenticated user in `calendars.primary`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the calendar is the primary calendar of the authenticated user as a boolean on each calendar; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-primaryemail-7c3750d468ce" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each calendar because the child operation does not return that relationship. It identifies the related provider object that gives the calendar its parent, owner, or container context.

            * **Enables:** Attribute each calendar to a person or account by the exact primary email in `calendars.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each calendar; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-selected-f07430e591c1" title="Selected" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.selected`

            **Selected.** Whether the calendar content shows up in the calendar UI. It distinguishes the provider-defined selected state or classification for the calendar.

            * **Enables:** Filter Calendars by whether the calendar content shows up in the calendar ui in `calendars.selected`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the calendar content shows up in the calendar ui as a boolean on each calendar; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-summary-cc4d5eed310a" title="Summary" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.summary`

            **Summary.** Title of the calendar. It defines the content surface available for this calendar.

            * **Enables:** Locate calendar records by summary in `calendars.summary`; attribute each text match to its parent calendar and, when present, its reported author.
            * **Interpretation:** Google Workspace supplies summary as text on each calendar; referenced files or media are not implied unless explicitly represented. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-summaryoverride-b10b328e8a5e" title="Summary Override" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.summaryOverride`

            **Summary Override.** The summary that the authenticated user has set for this calendar, overriding the calendar's default summary. It defines the content surface available for this calendar.

            * **Enables:** Locate calendar records by summary override in `calendars.summaryOverride`; attribute each text match to its parent calendar and, when present, its reported author.
            * **Interpretation:** Google Workspace supplies summary override as text on each calendar; referenced files or media are not implied unless explicitly represented. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.
          </Accordion>

          <Accordion id="provider-permission-field-google-calendars-timezone-4b0a2be06b99" title="Time Zone" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `calendars.timeZone`

            **Time Zone.** The time zone of the calendar (IANA timezone identifier). It is needed to interpret companion dates and times for the calendar in the provider's intended zone.

            * **Enables:** Apply the zone in `calendars.timeZone` when converting the calendar's companion start, end, or scheduled timestamps; do not infer it from locale.
            * **Interpretation:** Google Workspace reports time zone as a timezone identifier for each calendar; supported IANA or provider-specific names and daylight-saving behavior must be preserved.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-chrome-activity-9f0e25e3e30a" title="Chrome Activity" icon="chart-line" iconType="sharp-duotone-solid">
        Developer identifier: `chrome_activity`

        **Chrome Activity.** All Chrome browser and Chrome OS audit events from Admin Reports API (applicationName=chrome, no eventName filter).

        * **Enables:** Trace Chrome and ChromeOS administrator-report events to the acting user, event parameters, application, customer, and occurrence time.
        * **Scope:** Reads the records selected by Google Workspace's `/admin/reports/v1/activity/users/all/applications/chrome` operation as an event stream using incremental synchronization. This stream is opt-in. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-chrome-activity-synthetic-primary-key-d5503cc6ab67" title="Synthetic Primary Key" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity._synthetic_primary_key`

            **Synthetic Primary Key.** Synthetic primary key computed by the ingestor from ID.time, ID.uniqueQualifier, ID.applicationName, ID.customerId (sha1). It provides the reference needed to connect the chrome activity to the corresponding provider object.

            * **Enables:** Match repeated chrome activity entries on synthetic primary key in `chrome_activity._synthetic_primary_key`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports synthetic primary key as an identifier in its synthetic primary namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-actor-13dd50b6c34d" title="Actor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.actor`

            **Actor.** The structured actor details attached to each chrome activity in Chrome Activity. It preserves the nested context needed to interpret the parent chrome activity.

            * **Enables:** Attribute actor in `chrome_activity.actor` to the parent chrome activity; identify parent records where that nested actor object is absent.
            * **Interpretation:** Google Workspace reports actor as a nested object on each chrome activity; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-actor-callertype-fd6eb7a76a0f" title="Caller Type" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.actor.callerType`

            **Caller Type.** Type of actor (USER, KEY, etc.). It distinguishes the provider-defined caller type state or classification for the Google Workspace reports activity actor.

            * **Enables:** Segment Google Workspace reports activity actor entries in Chrome Activity by caller type in `chrome_activity.GoogleWorkspaceReportsActivityActor.callerType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports caller type as a label from its own taxonomy on each Google Workspace reports activity actor; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-actor-email-a14e2311afa0" title="Email" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.actor.email`

            **Email.** Primary email of the actor. It supplies the email profile facet used to reconcile or attribute the Google Workspace reports activity actor.

            * **Enables:** Attribute each Google Workspace reports activity actor to a person or account by the exact email in `chrome_activity.GoogleWorkspaceReportsActivityActor.email`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports email as an address on each Google Workspace reports activity actor; aliases, casing, and unverified addresses can prevent a one-to-one person match.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-actor-key-4d10369155ae" title="Key" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.actor.key`

            **Key.** Consumer key when callerType is KEY. It provides the reference needed to connect the chrome activity to the corresponding provider object.

            * **Enables:** Connect each Google Workspace reports activity actor in Chrome Activity to the referenced Google Workspace reports activity actor through `chrome_activity.GoogleWorkspaceReportsActivityActor.key`; flag key values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports key as an identifier in its Google Workspace reports activity actor namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-actor-profileid-a4645f17b138" title="Profile ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.actor.profileId`

            **Profile ID.** Google Workspace profile ID of the actor. It provides the reference needed to connect the chrome activity to the corresponding provider object.

            * **Enables:** Connect each Google Workspace reports activity actor in Chrome Activity to the referenced profile through `chrome_activity.GoogleWorkspaceReportsActivityActor.profileId`; flag profile ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports profile ID as an identifier in its profile namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-events-f1c8c9b1b103" title="Events" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.events`

            **Events.** Events included in this activity record. It preserves the nested context needed to interpret the parent chrome activity.

            * **Enables:** Compare the exact Google Workspace-configured events set in `chrome_activity.events` for each chrome activity; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns events as an array of Google Workspace reports activity event entries on each chrome activity; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-events-name-cac8861fea39" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.events.name`

            **Name.** Event name (e.g. CHROME\_OS\_LOGIN\_FAILURE\_EVENT). It gives the Google Workspace reports activity event a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated Google Workspace reports activity event entries on name in `chrome_activity.GoogleWorkspaceReportsActivityEvent.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each Google Workspace reports activity event; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-events-parameters-948e58d625da" title="Parameters" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.events.parameters`

            **Parameters.** Event-specific parameters. It preserves the nested context needed to interpret the parent chrome activity.

            * **Enables:** Compare the exact Google Workspace-configured parameters set in `chrome_activity.GoogleWorkspaceReportsActivityEvent.parameters` for each Google Workspace reports activity event; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns parameters as an array of Google Workspace reports activity parameter entries on each Google Workspace reports activity event; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-events-parameters-boolval-4088e7465104" title="Bool Value" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.events.parameters.boolValue`

            **Bool Value.** Boolean value of the parameter when present. It distinguishes the provider-defined bool value state or classification for the Google Workspace reports activity parameter.

            * **Enables:** Filter Chrome Activity by whether boolean value of the parameter when present in `chrome_activity.GoogleWorkspaceReportsActivityParameter.boolValue`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports boolean value of the parameter when present as a boolean on each Google Workspace reports activity parameter; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-events-parameters-intvalu-9a31685162f9" title="Int Value" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.events.parameters.intValue`

            **Int Value.** Integer value of the parameter when present. It must be interpreted with the enclosing provider field name, type, or custom schema for the Google Workspace reports activity parameter.

            * **Enables:** Interpret `chrome_activity.GoogleWorkspaceReportsActivityParameter.intValue` with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
            * **Interpretation:** Google Workspace reports int value under the enclosing custom or typed field contract on each Google Workspace reports activity parameter; compare it only with values from the same provider key and type.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-events-parameters-multiva-5b204eabee1f" title="Multi Value" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.events.parameters.multiValue`

            **Multi Value.** Multiple string values when present. It preserves the nested context needed to interpret the parent chrome activity.

            * **Enables:** Compare the exact Google Workspace-configured multi value set in `chrome_activity.GoogleWorkspaceReportsActivityParameter.multiValue` for each Google Workspace reports activity parameter; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns multi value as an array of multi value value entries on each Google Workspace reports activity parameter; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-events-parameters-name-932380ff5f46" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.events.parameters.name`

            **Name.** Parameter name (event-specific, e.g. DEVICE\_NAME). It gives the Google Workspace reports activity parameter a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated Google Workspace reports activity parameter entries on name in `chrome_activity.GoogleWorkspaceReportsActivityParameter.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each Google Workspace reports activity parameter; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-events-parameters-value-9c8521734d80" title="Value" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.events.parameters.value`

            **Value.** String value of the parameter. It must be interpreted with the enclosing provider field name, type, or custom schema for the Google Workspace reports activity parameter.

            * **Enables:** Interpret `chrome_activity.GoogleWorkspaceReportsActivityParameter.value` with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
            * **Interpretation:** Google Workspace reports value under the enclosing custom or typed field contract on each Google Workspace reports activity parameter; compare it only with values from the same provider key and type.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-events-type-70252896c0aa" title="Type" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.events.type`

            **Type.** Event category (e.g. CHROME\_OS\_LOGIN\_LOGOUT\_TYPE). It distinguishes the provider-defined type state or classification for the Google Workspace reports activity event.

            * **Enables:** Segment Google Workspace reports activity event entries in Chrome Activity by type in `chrome_activity.GoogleWorkspaceReportsActivityEvent.type`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each Google Workspace reports activity event; preserve unknown labels rather than mapping them by assumption. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-id-0c9042cbea9c" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.id`

            **ID.** The structured ID details attached to each chrome activity in Chrome Activity. It preserves the nested context needed to interpret the parent chrome activity.

            * **Enables:** Attribute ID in `chrome_activity.id` to the parent chrome activity; identify parent records where that nested ID object is absent.
            * **Interpretation:** Google Workspace reports ID as a nested object on each chrome activity; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-id-applicationname-1bd144ccf278" title="Application Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.id.applicationName`

            **Application Name.** Application name for the activity (chrome). It gives the Google Workspace reports activity ID a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each Google Workspace reports activity ID with application name from `chrome_activity.GoogleWorkspaceReportsActivityId.applicationName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports application name as display text for each Google Workspace reports activity ID; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-id-customerid-becc6b2eb152" title="Customer ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.id.customerId`

            **Customer ID.** Google Workspace customer ID. It provides the reference needed to connect the chrome activity to the corresponding provider object.

            * **Enables:** Connect each Google Workspace reports activity ID in Chrome Activity to the referenced customer through `chrome_activity.GoogleWorkspaceReportsActivityId.customerId`; flag customer ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports customer ID as an identifier in its customer namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-id-time-e551534691c9" title="Time" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.id.time`

            **Time.** Time of occurrence of the activity (RFC 3339). It anchors the chrome activity on the provider's reported timeline.

            * **Enables:** Order Chrome Activity by time in `chrome_activity.GoogleWorkspaceReportsActivityId.time` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports time as a timestamp on each Google Workspace reports activity ID; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing. The schema designates this field as the event timestamp.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-id-uniquequalifier-ed5e48c916a5" title="Unique Qualifier" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.id.uniqueQualifier`

            **Unique Qualifier.** Unique qualifier when multiple events share the same time. It identifies the related provider object that gives the Google Workspace reports activity ID its parent, owner, or container context.

            * **Enables:** Connect each Google Workspace reports activity ID to the related unique qualifier in `chrome_activity.GoogleWorkspaceReportsActivityId.uniqueQualifier` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports unique qualifier as relationship context on each Google Workspace reports activity ID; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-ipaddress-e25c5b0ef355" title="IP Address" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.ipAddress`

            **IP Address.** IP address associated with the activity. It supplies the provider-reported address or location facet for the chrome activity, not a residency determination.

            * **Enables:** Correlate chrome activity records that report the same network address in `chrome_activity.ipAddress` during an authorized investigation; account for shared, proxied, or translated addresses.
            * **Interpretation:** Google Workspace reports this as an IP network address on each chrome activity. It is not verified geolocation, does not identify a person by itself, and does not establish data residency.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-kind-371e9e8275e1" title="Kind" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.kind`

            **Kind.** API resource kind (admin#reports#activity). It distinguishes the provider-defined kind state or classification for the chrome activity.

            * **Enables:** Segment chrome activity entries in Chrome Activity by kind in `chrome_activity.kind`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports kind as a label from its own taxonomy on each chrome activity; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-chrome-activity-ownerdomain-f424fb18ad5f" title="Owner Domain" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `chrome_activity.ownerDomain`

            **Owner Domain.** Domain affected by the activity. It identifies the related provider object that gives the chrome activity its parent, owner, or container context.

            * **Enables:** Connect each chrome activity to the related owner domain in `chrome_activity.ownerDomain` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports owner domain as relationship context on each chrome activity; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-conference-record-detail-b68eb3a314d0" title="Conference Record Detail" icon="video" iconType="sharp-duotone-solid">
        Developer identifier: `conference_record_detail`

        **Conference Record Detail.** Full conference record details.

        * **Enables:** Confirm a conference record's meeting space and exact start and end boundaries before relating detailed child resources.
        * **Scope:** Reads the records selected by Google Workspace's `https://meet.googleapis.com/v2/{name}` operation as a snapshot stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-conference-record-detail-endtime-421167aae692" title="End Time" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `conference_record_detail.endTime`

            **End Time.** Timestamp (RFC3339) when the conference ended. Combined with startTime to calculate meeting duration for time-spend reports. May be absent if the conference is still ongoing. It anchors the conference record detail on the provider's reported timeline.

            * **Enables:** Filter Conference Record Detail by end time in `conference_record_detail.endTime`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Google Workspace reports end time as a timestamp on each conference record detail; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-record-detail-expiretime-64b3762dc5f4" title="Expire Time" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `conference_record_detail.expireTime`

            **Expire Time.** Timestamp (RFC3339) after which the conference record resource may be deleted by the system. Indicates data retention window for historical meeting analysis. It anchors the conference record detail on the provider's reported timeline.

            * **Enables:** Order Conference Record Detail by expire time in `conference_record_detail.expireTime` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports expire time as a timestamp on each conference record detail; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-record-detail-name-22cbe595f69b" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `conference_record_detail.name`

            **Name.** Resource name of the conference record (e.g., conferenceRecords/abc123). Serves as the primary key for linking participants, recordings, and transcripts to a specific meeting. It gives the conference record detail a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated conference record detail entries on name in `conference_record_detail.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each conference record detail; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-record-detail-primaryemail-39e415bdda52" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `conference_record_detail.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each conference record detail because the child operation does not return that relationship. It identifies the related provider object that gives the conference record detail its parent, owner, or container context.

            * **Enables:** Attribute each conference record detail to a person or account by the exact primary email in `conference_record_detail.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each conference record detail; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-record-detail-space-51d3846df5d5" title="Space" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `conference_record_detail.space`

            **Space.** Resource name of the Meet space where this conference occurred (e.g., spaces/abc123). Links conference records to reusable meeting spaces for recurring meeting analysis. It identifies the related provider object that gives the conference record detail its parent, owner, or container context.

            * **Enables:** Connect each conference record detail to the related space in `conference_record_detail.space` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports space as relationship context on each conference record detail; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-record-detail-starttime-32c8c5654c0c" title="Start Time" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `conference_record_detail.startTime`

            **Start Time.** Timestamp (RFC3339) when the conference started. Enables time-spend analysis of meeting duration and scheduling patterns. It anchors the conference record detail on the provider's reported timeline.

            * **Enables:** Filter Conference Record Detail by start time in `conference_record_detail.startTime`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Google Workspace reports start time as a timestamp on each conference record detail; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing. The schema designates this field as the event timestamp.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-conference-records-d0e3c3b09b98" title="Conference Records" icon="phone" iconType="sharp-duotone-solid">
        Developer identifier: `conference_records`

        **Conference Records.** Google Meet conference records - lists all conferences.

        * **Enables:** Reconcile Google Meet conference records to their meeting space, start and end times, and child participant, transcript, and recording resources.
        * **Scope:** Reads the records selected by Google Workspace's `https://meet.googleapis.com/v2/conferenceRecords` operation as an event stream using incremental synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-conference-records-endtime-47ccf1a10850" title="End Time" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `conference_records.endTime`

            **End Time.** Timestamp (RFC3339) when the conference ended. Combined with startTime to calculate meeting duration for time-spend reports. May be absent if the conference is still ongoing. It anchors the conference record on the provider's reported timeline.

            * **Enables:** Filter Conference Records by end time in `conference_records.endTime`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Google Workspace reports end time as a timestamp on each conference record; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-records-expiretime-77b2a23f0a44" title="Expire Time" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `conference_records.expireTime`

            **Expire Time.** Timestamp (RFC3339) after which the conference record resource may be deleted by the system. Indicates data retention window for historical meeting analysis. It anchors the conference record on the provider's reported timeline.

            * **Enables:** Order Conference Records by expire time in `conference_records.expireTime` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports expire time as a timestamp on each conference record; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-records-name-92c0d288c269" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `conference_records.name`

            **Name.** Resource name of the conference record (e.g., conferenceRecords/abc123). Serves as the primary key for linking participants, recordings, and transcripts to a specific meeting. It gives the conference record a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated conference record entries on name in `conference_records.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each conference record; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-records-organizer-email-9b5d9792a43e" title="Organizer Email" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `conference_records.organizer_email`

            **Organizer Email.** Parent organizer email reference copied into each conference record because the child operation does not return that relationship. It identifies the related provider object that gives the conference record its parent, owner, or container context.

            * **Enables:** Attribute each conference record to a person or account by the exact organizer email in `conference_records.organizer_email`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies organizer email from the parent traversal record into each conference record; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-records-primaryemail-ae7c28ea488f" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `conference_records.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each conference record because the child operation does not return that relationship. It identifies the related provider object that gives the conference record its parent, owner, or container context.

            * **Enables:** Attribute each conference record to a person or account by the exact primary email in `conference_records.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each conference record; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-records-space-63a9d2584f11" title="Space" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `conference_records.space`

            **Space.** Resource name of the Meet space where this conference occurred (e.g., spaces/abc123). Links conference records to reusable meeting spaces for recurring meeting analysis. It identifies the related provider object that gives the conference record its parent, owner, or container context.

            * **Enables:** Connect each conference record to the related space in `conference_records.space` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports space as relationship context on each conference record; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-conference-records-starttime-de761de061fd" title="Start Time" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `conference_records.startTime`

            **Start Time.** Timestamp (RFC3339) when the conference started. Enables time-spend analysis of meeting duration and scheduling patterns. It anchors the conference record on the provider's reported timeline.

            * **Enables:** Filter Conference Records by start time in `conference_records.startTime`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Google Workspace reports start time as a timestamp on each conference record; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing. The schema designates this field as the event timestamp.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-gemini-activity-34797636d3b7" title="Gemini Activity" icon="chart-column" iconType="sharp-duotone-solid">
        Developer identifier: `gemini_activity`

        **Gemini Activity.** Gemini in Workspace Apps usage events from Admin Reports API (applicationName=gemini\_in\_workspace\_apps). Each ai\_usage\_event carries the acting user, the Workspace app, and the Gemini action performed. This is the only source of per-user Gemini activity; the Gemini Generative Language API exposes no activity surface and no user attribution.

        * **Enables:** Attribute Google-reported Gemini actions in Workspace apps to the acting user, application, and event time.
        * **Scope:** Reads the records selected by Google Workspace's `/admin/reports/v1/activity/users/all/applications/gemini_in_workspace_apps` operation as an event stream using incremental synchronization. This stream is opt-in. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. Google supplies the action classifications; the stream does not contain prompts, responses, or an independent Parable assessment of the activity. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-gemini-activity-synthetic-primary-key-030b1915c18b" title="Synthetic Primary Key" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity._synthetic_primary_key`

            **Synthetic Primary Key.** Synthetic primary key computed by the ingestor from ID.time, ID.uniqueQualifier, ID.applicationName, ID.customerId (sha1). It provides the reference needed to connect the gemini activity to the corresponding provider object.

            * **Enables:** Match repeated gemini activity entries on synthetic primary key in `gemini_activity._synthetic_primary_key`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports synthetic primary key as an identifier in its synthetic primary namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-actor-8a786147385a" title="Actor" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.actor`

            **Actor.** The structured actor details attached to each gemini activity in Gemini Activity. It preserves the nested context needed to interpret the parent gemini activity.

            * **Enables:** Attribute actor in `gemini_activity.actor` to the parent gemini activity; identify parent records where that nested actor object is absent.
            * **Interpretation:** Google Workspace reports actor as a nested object on each gemini activity; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-actor-callertype-911dc948d1ac" title="Caller Type" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.actor.callerType`

            **Caller Type.** Type of actor (USER, KEY, etc.). It distinguishes the provider-defined caller type state or classification for the Google Workspace reports activity actor.

            * **Enables:** Segment Google Workspace reports activity actor entries in Gemini Activity by caller type in `gemini_activity.GoogleWorkspaceReportsActivityActor.callerType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports caller type as a label from its own taxonomy on each Google Workspace reports activity actor; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-actor-email-b7a4144593e2" title="Email" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.actor.email`

            **Email.** Primary email of the actor. It supplies the email profile facet used to reconcile or attribute the Google Workspace reports activity actor.

            * **Enables:** Attribute each Google Workspace reports activity actor to a person or account by the exact email in `gemini_activity.GoogleWorkspaceReportsActivityActor.email`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports email as an address on each Google Workspace reports activity actor; aliases, casing, and unverified addresses can prevent a one-to-one person match.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-actor-key-10553bda79b7" title="Key" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.actor.key`

            **Key.** Consumer key when callerType is KEY. It provides the reference needed to connect the gemini activity to the corresponding provider object.

            * **Enables:** Connect each Google Workspace reports activity actor in Gemini Activity to the referenced Google Workspace reports activity actor through `gemini_activity.GoogleWorkspaceReportsActivityActor.key`; flag key values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports key as an identifier in its Google Workspace reports activity actor namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-actor-profileid-66f9daa3feef" title="Profile ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.actor.profileId`

            **Profile ID.** Google Workspace profile ID of the actor. It provides the reference needed to connect the gemini activity to the corresponding provider object.

            * **Enables:** Connect each Google Workspace reports activity actor in Gemini Activity to the referenced profile through `gemini_activity.GoogleWorkspaceReportsActivityActor.profileId`; flag profile ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports profile ID as an identifier in its profile namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-events-1889cba50bf4" title="Events" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.events`

            **Events.** Events included in this activity record. It preserves the nested context needed to interpret the parent gemini activity.

            * **Enables:** Compare the exact Google Workspace-configured events set in `gemini_activity.events` for each gemini activity; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns events as an array of Google Workspace reports activity event entries on each gemini activity; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-events-name-7e78d61664e4" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.events.name`

            **Name.** Event name (e.g. feature\_utilization). It gives the Google Workspace reports activity event a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated Google Workspace reports activity event entries on name in `gemini_activity.GoogleWorkspaceReportsActivityEvent.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each Google Workspace reports activity event; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-events-parameters-7c2c5028ad43" title="Parameters" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.events.parameters`

            **Parameters.** Event-specific parameters. It preserves the nested context needed to interpret the parent gemini activity.

            * **Enables:** Compare the exact Google Workspace-configured parameters set in `gemini_activity.GoogleWorkspaceReportsActivityEvent.parameters` for each Google Workspace reports activity event; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns parameters as an array of Google Workspace reports activity parameter entries on each Google Workspace reports activity event; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-events-parameters-boolval-e300ac1efea9" title="Bool Value" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.events.parameters.boolValue`

            **Bool Value.** Boolean value of the parameter when present. It distinguishes the provider-defined bool value state or classification for the Google Workspace reports activity parameter.

            * **Enables:** Filter Gemini Activity by whether boolean value of the parameter when present in `gemini_activity.GoogleWorkspaceReportsActivityParameter.boolValue`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports boolean value of the parameter when present as a boolean on each Google Workspace reports activity parameter; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-events-parameters-intvalu-ac1e3cab814e" title="Int Value" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.events.parameters.intValue`

            **Int Value.** Integer value of the parameter when present. It must be interpreted with the enclosing provider field name, type, or custom schema for the Google Workspace reports activity parameter.

            * **Enables:** Interpret `gemini_activity.GoogleWorkspaceReportsActivityParameter.intValue` with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
            * **Interpretation:** Google Workspace reports int value under the enclosing custom or typed field contract on each Google Workspace reports activity parameter; compare it only with values from the same provider key and type.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-events-parameters-multiva-b75c577d9cbe" title="Multi Value" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.events.parameters.multiValue`

            **Multi Value.** Multiple string values when present. It preserves the nested context needed to interpret the parent gemini activity.

            * **Enables:** Compare the exact Google Workspace-configured multi value set in `gemini_activity.GoogleWorkspaceReportsActivityParameter.multiValue` for each Google Workspace reports activity parameter; preserve provider labels and unknown entries.
            * **Interpretation:** Google Workspace returns multi value as an array of multi value value entries on each Google Workspace reports activity parameter; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-events-parameters-name-429bf9af7b75" title="Name" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.events.parameters.name`

            **Name.** Parameter name (action, app\_name, event\_category, feature\_source). It gives the Google Workspace reports activity parameter a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated Google Workspace reports activity parameter entries on name in `gemini_activity.GoogleWorkspaceReportsActivityParameter.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each Google Workspace reports activity parameter; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-events-parameters-value-37e045bfe059" title="Value" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.events.parameters.value`

            **Value.** String value of the parameter. It must be interpreted with the enclosing provider field name, type, or custom schema for the Google Workspace reports activity parameter.

            * **Enables:** Interpret `gemini_activity.GoogleWorkspaceReportsActivityParameter.value` with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
            * **Interpretation:** Google Workspace reports value under the enclosing custom or typed field contract on each Google Workspace reports activity parameter; compare it only with values from the same provider key and type.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-events-type-b4504f2016e7" title="Type" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.events.type`

            **Type.** Event category (ai\_usage\_event for Gemini utilization events). It distinguishes the provider-defined type state or classification for the Google Workspace reports activity event.

            * **Enables:** Segment Google Workspace reports activity event entries in Gemini Activity by type in `gemini_activity.GoogleWorkspaceReportsActivityEvent.type`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each Google Workspace reports activity event; preserve unknown labels rather than mapping them by assumption. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-id-d36bb7d34a5e" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.id`

            **ID.** The structured ID details attached to each gemini activity in Gemini Activity. It preserves the nested context needed to interpret the parent gemini activity.

            * **Enables:** Attribute ID in `gemini_activity.id` to the parent gemini activity; identify parent records where that nested ID object is absent.
            * **Interpretation:** Google Workspace reports ID as a nested object on each gemini activity; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-id-applicationname-83d11e776c0c" title="Application Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.id.applicationName`

            **Application Name.** Application name for the activity (gemini\_in\_workspace\_apps). It gives the Google Workspace reports activity ID a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each Google Workspace reports activity ID with application name from `gemini_activity.GoogleWorkspaceReportsActivityId.applicationName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports application name as display text for each Google Workspace reports activity ID; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-id-customerid-3872c215a7f1" title="Customer ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.id.customerId`

            **Customer ID.** Google Workspace customer ID. It provides the reference needed to connect the gemini activity to the corresponding provider object.

            * **Enables:** Connect each Google Workspace reports activity ID in Gemini Activity to the referenced customer through `gemini_activity.GoogleWorkspaceReportsActivityId.customerId`; flag customer ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports customer ID as an identifier in its customer namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-id-time-55ce09f339c2" title="Time" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.id.time`

            **Time.** Time of occurrence of the activity (RFC 3339). It anchors the gemini activity on the provider's reported timeline.

            * **Enables:** Order Gemini Activity by time in `gemini_activity.GoogleWorkspaceReportsActivityId.time` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports time as a timestamp on each Google Workspace reports activity ID; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing. The schema designates this field as the event timestamp.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-id-uniquequalifier-8850cfa9f0c5" title="Unique Qualifier" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.id.uniqueQualifier`

            **Unique Qualifier.** Unique qualifier when multiple events share the same time. It identifies the related provider object that gives the Google Workspace reports activity ID its parent, owner, or container context.

            * **Enables:** Connect each Google Workspace reports activity ID to the related unique qualifier in `gemini_activity.GoogleWorkspaceReportsActivityId.uniqueQualifier` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports unique qualifier as relationship context on each Google Workspace reports activity ID; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-ipaddress-893478e27549" title="IP Address" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.ipAddress`

            **IP Address.** IP address associated with the activity. It supplies the provider-reported address or location facet for the gemini activity, not a residency determination.

            * **Enables:** Correlate gemini activity records that report the same network address in `gemini_activity.ipAddress` during an authorized investigation; account for shared, proxied, or translated addresses.
            * **Interpretation:** Google Workspace reports this as an IP network address on each gemini activity. It is not verified geolocation, does not identify a person by itself, and does not establish data residency.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-kind-b4999743ff66" title="Kind" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.kind`

            **Kind.** API resource kind (admin#reports#activity). It distinguishes the provider-defined kind state or classification for the gemini activity.

            * **Enables:** Segment gemini activity entries in Gemini Activity by kind in `gemini_activity.kind`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports kind as a label from its own taxonomy on each gemini activity; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-gemini-activity-ownerdomain-5859cb458dcc" title="Owner Domain" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `gemini_activity.ownerDomain`

            **Owner Domain.** Domain affected by the activity. It identifies the related provider object that gives the gemini activity its parent, owner, or container context.

            * **Enables:** Connect each gemini activity to the related owner domain in `gemini_activity.ownerDomain` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports owner domain as relationship context on each gemini activity; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-group-members-339d08eaffe9" title="Group Members" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `group_members`

        **Group Members.** Members of a Google Workspace group.

        * **Enables:** Match each Google group to its returned users, groups, or external members and their provider role and status.
        * **Scope:** Reads the records selected by Google Workspace's `/admin/directory/v1/groups/{id}/members` operation as a snapshot stream using full synchronization. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-group-members-delivery-settings-00421f1bcc67" title="Delivery Settings" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `group_members.delivery_settings`

            **Delivery Settings.** Delivery settings for the member's notifications. Possible values: ALL\_MAIL, DAILY, DIGEST, DISABLED, NONE. It distinguishes the provider-defined delivery settings state or classification for the group member.

            * **Enables:** Segment group member entries in Group Members by delivery settings in `group_members.delivery_settings`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports delivery settings as a label from its own taxonomy on each group member; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-group-members-email-2cb3d002c450" title="Email" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `group_members.email`

            **Email.** The member's email address. If the member is a user, this is the user's primary email; if a group, the group's email address. It supplies the provider-reported address or location facet for the group member, not a residency determination.

            * **Enables:** Attribute each group member to a person or account by the exact email in `group_members.email`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports email as an address on each group member; aliases, casing, and unverified addresses can prevent a one-to-one person match. A connector directive maps this field to a person's email identity.
          </Accordion>

          <Accordion id="provider-permission-field-google-group-members-etag-606a810e176f" title="ETag" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `group_members.etag`

            **ETag.** ETag of the resource for caching and conditional requests. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

            * **Enables:** Use `group_members.etag` for conditional provider reads and revision checks; pair the ETag with the group member ID rather than joining on it.
            * **Interpretation:** Google Workspace returns this ETag as an opaque revision token for each group member; it can change when the resource changes and is not a universal identifier.
          </Accordion>

          <Accordion id="provider-permission-field-google-group-members-id-387f070052eb" title="ID" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `group_members.id`

            **ID.** The unique ID of the group member. If the member is a user, this is the user's unique ID; if a group, the group's unique ID. It provides the reference needed to connect the group member to the corresponding provider object.

            * **Enables:** Match repeated group member entries on ID in `group_members.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its group member namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key. A connector directive maps this field to account identity.
          </Accordion>

          <Accordion id="provider-permission-field-google-group-members-kind-903cc0c8fd67" title="Kind" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `group_members.kind`

            **Kind.** The type of the API resource. For group members, this is 'admin#directory#member'. It locates the provider resource or path associated with the group member.

            * **Enables:** Segment group member entries in Group Members by kind in `group_members.kind`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports kind as a label from its own taxonomy on each group member; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-group-members-role-f77ba046b814" title="Role" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `group_members.role`

            **Role.** The member's role in the group. Possible values: OWNER, MANAGER, MEMBER. It distinguishes the provider-defined role state or classification for the group member.

            * **Enables:** Segment group member entries in Group Members by role in `group_members.role`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports role as a label from its own taxonomy on each group member; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-group-members-status-8aebd8616b92" title="Status" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `group_members.status`

            **Status.** The status of the member. Possible values: ACTIVE, SUSPENDED, UNKNOWN. It distinguishes the provider-defined status state or classification for the group member.

            * **Enables:** Segment group member entries in Group Members by status in `group_members.status`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports status as a label from its own taxonomy on each group member; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-group-members-type-9120375da32f" title="Type" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `group_members.type`

            **Type.** The type of group member. Possible values: USER, GROUP, CUSTOMER. It distinguishes the provider-defined type state or classification for the group member.

            * **Enables:** Segment group member entries in Group Members by type in `group_members.type`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each group member; preserve unknown labels rather than mapping them by assumption.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-groups-29f7f2b2b477" title="Groups" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `groups`

        **Groups.** Google Workspace groups.

        * **Enables:** Inventory Google Workspace groups by email, aliases, name, description, and administrative settings before member traversal.
        * **Scope:** Reads the records selected by Google Workspace's `/admin/directory/v1/groups` operation as a snapshot stream using full synchronization. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-groups-admincreated-ad2dc3d71c00" title="Admin Created" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `groups.adminCreated`

            **Admin Created.** Whether the group was created by an admin. Distinguishes admin-managed groups from user-created ones. It distinguishes the provider-defined admin created state or classification for the group.

            * **Enables:** Filter Groups by whether the group was created by an admin in `groups.adminCreated`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the group was created by an admin as a boolean on each group; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-groups-aliases-8ca85891497a" title="Aliases" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `groups.aliases`

            **Aliases.** List of alias email addresses for the group. It preserves the nested context needed to interpret the parent group.

            * **Enables:** Reconcile each returned aliase in `groups.aliases` with the parent group's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns aliases as an array of aliase entries on each group; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-groups-description-63fef2c1cc88" title="Description" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `groups.description`

            **Description.** Description of the group's purpose. It defines the content surface available for this group.

            * **Enables:** Locate group records by description in `groups.description`; attribute each text match to its parent group and, when present, its reported author.
            * **Interpretation:** Google Workspace supplies description as text on each group; referenced files or media are not implied unless explicitly represented.
          </Accordion>

          <Accordion id="provider-permission-field-google-groups-directmemberscount-4fa366bad41a" title="Direct Members Count" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `groups.directMembersCount`

            **Direct Members Count.** Number of direct members in the group. Returned as a string by the API. It supplies the direct members count measure for the group at the provider's declared unit and grain.

            * **Enables:** Measure direct members count through `groups.directMembersCount` for each group and compare only values with the same unit and record grain.
            * **Interpretation:** Google Workspace reports direct members count as a measure on each group; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-google-groups-email-be93a26ebf2d" title="Email" icon="comments" iconType="sharp-duotone-solid">
            Developer identifier: `groups.email`

            **Email.** Email address of the group. It supplies the provider-reported address or location facet for the group, not a residency determination.

            * **Enables:** Attribute each group to a person or account by the exact email in `groups.email`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports email as an address on each group; aliases, casing, and unverified addresses can prevent a one-to-one person match.
          </Accordion>

          <Accordion id="provider-permission-field-google-groups-etag-5b1d42ee34ef" title="ETag" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `groups.etag`

            **ETag.** ETag of the resource for caching and conditional requests. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

            * **Enables:** Use `groups.etag` for conditional provider reads and revision checks; pair the ETag with the group ID rather than joining on it.
            * **Interpretation:** Google Workspace returns this ETag as an opaque revision token for each group; it can change when the resource changes and is not a universal identifier.
          </Accordion>

          <Accordion id="provider-permission-field-google-groups-id-87c2cdbd75e6" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `groups.id`

            **ID.** Unique identifier for the group. Used as the primary key. It provides the reference needed to connect the group to the corresponding provider object.

            * **Enables:** Match repeated group entries on ID in `groups.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its group namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-groups-kind-bbc2f3c73487" title="Kind" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `groups.kind`

            **Kind.** The type of the API resource. For groups, this is admin#directory#group. It locates the provider resource or path associated with the group.

            * **Enables:** Segment group entries in Groups by kind in `groups.kind`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports kind as a label from its own taxonomy on each group; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-groups-name-3d62dfa5f5d7" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `groups.name`

            **Name.** Display name of the group. It gives the group a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each group with name from `groups.name`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports name as display text for each group; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-groups-noneditablealiases-03d03eb9733c" title="Non Editable Aliases" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `groups.nonEditableAliases`

            **Non Editable Aliases.** List of non-editable alias email addresses for the group, typically auto-generated by the system. It preserves the nested context needed to interpret the parent group.

            * **Enables:** Reconcile each returned non editable aliase in `groups.nonEditableAliases` with the parent group's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns non editable aliases as an array of non editable aliase entries on each group; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-messages-list-0080262d518c" title="Messages List" icon="comments" iconType="sharp-duotone-solid">
        Developer identifier: `messages_list`

        **Messages List.** Gmail message identifiers used to enumerate messages.get work.

        * **Enables:** Enumerate Gmail message and thread identifiers that drive the subsequent message-detail fetch.
        * **Scope:** Reads the records selected by Google Workspace's `https://gmail.googleapis.com/gmail/v1/users/{primaryEmail}/messages` operation as an event stream using incremental synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. This enumeration returns message and thread IDs only; it contains no headers, snippets, bodies, or attachment bytes. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-messages-list-id-7aad8e6c2f2c" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `messages_list.id`

            **ID.** The provider-reported ID for each message reference in message reference. It provides the reference needed to connect the message reference to the corresponding provider object.

            * **Enables:** Match repeated message reference entries on ID in `messages_list.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its message reference namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-messages-list-primaryemail-7567f6508836" title="Primary Email" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `messages_list.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each message reference because the child operation does not return that relationship. It supplies the primary email profile facet used to reconcile or attribute the messages list.

            * **Enables:** Attribute each message reference to a person or account by the exact primary email in `messages_list.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each message reference; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-messages-list-threadid-956109a6fbea" title="Thread ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `messages_list.threadId`

            **Thread ID.** The provider-reported thread ID for each message reference in message reference. It provides the reference needed to connect the message reference to the corresponding provider object.

            * **Enables:** Connect each message reference in message reference to the referenced thread through `messages_list.threadId`; flag thread ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports thread ID as an identifier in its thread namespace; it is not a universal identity outside Google Workspace.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-org-units-613db9f9da52" title="Org Units" icon="sitemap" iconType="sharp-duotone-solid">
        Developer identifier: `org_units`

        **Org Units.** Organizational units.

        * **Enables:** Reconstruct the Google Workspace organizational-unit hierarchy by parent path and preserve each unit's policy inheritance state.
        * **Scope:** Reads the records selected by Google Workspace's `/admin/directory/v1/customer/my_customer/orgunits` operation as a snapshot stream using full synchronization. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. A later complete read can treat a previously seen record that is absent as removed.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-org-units-blockinheritance-e556c48852e5" title="Block Inheritance" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `org_units.blockInheritance`

            **Block Inheritance.** Determines if sub-organizational units can inherit the settings of the parent organization. This field is deprecated but may still appear in responses. It distinguishes the provider-defined block inheritance state or classification for the org unit.

            * **Enables:** Filter Org Units by whether determines if sub-organizational units can inherit the settings of the parent organization in `org_units.blockInheritance`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports determines if sub-organizational units can inherit the settings of the parent organization as a boolean on each org unit; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-org-units-description-df16f1209070" title="Description" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `org_units.description`

            **Description.** Description of the organizational unit, providing context for its purpose. It defines the content surface available for this org unit.

            * **Enables:** Locate org unit records by description in `org_units.description`; attribute each text match to its parent org unit and, when present, its reported author.
            * **Interpretation:** Google Workspace supplies description as text on each org unit; referenced files or media are not implied unless explicitly represented.
          </Accordion>

          <Accordion id="provider-permission-field-google-org-units-etag-03fd691f51a9" title="ETag" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `org_units.etag`

            **ETag.** ETag of the resource for caching and conditional requests. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

            * **Enables:** Use `org_units.etag` for conditional provider reads and revision checks; pair the ETag with the org unit ID rather than joining on it.
            * **Interpretation:** Google Workspace returns this ETag as an opaque revision token for each org unit; it can change when the resource changes and is not a universal identifier.
          </Accordion>

          <Accordion id="provider-permission-field-google-org-units-kind-c48b563fc260" title="Kind" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `org_units.kind`

            **Kind.** The type of the API resource. For org units, this is 'admin#directory#orgUnit'. It supplies the kind boundary, band, or unit needed to interpret the companion measure.

            * **Enables:** Segment org unit entries in Org Units by kind in `org_units.kind`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports kind as a label from its own taxonomy on each org unit; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-org-units-name-64c41f6e71e6" title="Name" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `org_units.name`

            **Name.** Name of the organizational unit. It supplies the name boundary, band, or unit needed to interpret the companion measure.

            * **Enables:** Label each org unit with name from `org_units.name`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports name as display text for each org unit; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-org-units-orgunitid-850b68cc3926" title="Org Unit ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `org_units.orgUnitId`

            **Org Unit ID.** Unique identifier for the organizational unit. This is the immutable ID assigned by Google. It provides the reference needed to connect the org unit to the corresponding provider object.

            * **Enables:** Match repeated org unit entries on org unit ID in `org_units.orgUnitId`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports org unit ID as an identifier in its org unit namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-org-units-orgunitpath-b17f8eb4508c" title="Org Unit Path" icon="code-commit" iconType="sharp-duotone-solid">
            Developer identifier: `org_units.orgUnitPath`

            **Org Unit Path.** Full path of the organizational unit within the hierarchy (e.g., '/Engineering/Backend'). It supplies the org unit path boundary, band, or unit needed to interpret the companion measure.

            * **Enables:** Interpret `org_units.orgUnitPath` with its companion minimum, maximum, interval, or unit before comparing the org unit path across like-for-like records.
            * **Interpretation:** Google Workspace reports org unit path as a boundary, band, interval, or unit on each org unit; it is meaningful only with its companion measure and provider scale.
          </Accordion>

          <Accordion id="provider-permission-field-google-org-units-parentorgunitid-89f72034c645" title="Parent Org Unit ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `org_units.parentOrgUnitId`

            **Parent Org Unit ID.** The unique ID of the parent organizational unit. Used for building the org unit tree structure. It provides the reference needed to connect the org unit to the corresponding provider object.

            * **Enables:** Connect each org unit in Org Units to the referenced parent org unit through `org_units.parentOrgUnitId`; flag parent org unit ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports parent org unit ID as an identifier in its parent org unit namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-org-units-parentorgunitpath-93986f3ef86a" title="Parent Org Unit Path" icon="code-merge" iconType="sharp-duotone-solid">
            Developer identifier: `org_units.parentOrgUnitPath`

            **Parent Org Unit Path.** Path of the parent organizational unit (e.g., '/Engineering'). Root org units have '/' as parent. It supplies the parent org unit path boundary, band, or unit needed to interpret the companion measure.

            * **Enables:** Interpret `org_units.parentOrgUnitPath` with its companion minimum, maximum, interval, or unit before comparing the parent org unit path across like-for-like records.
            * **Interpretation:** Google Workspace reports parent org unit path as a boundary, band, interval, or unit on each org unit; it is meaningful only with its companion measure and provider scale.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-participant-detail-f17c4d7e11f3" title="Participant Detail" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `participant_detail`

        **Participant Detail.** Full participant details.

        * **Enables:** Resolve a participant resource to its conference and provider-reported signed-in, anonymous, or phone identity.
        * **Scope:** Reads the records selected by Google Workspace's `https://meet.googleapis.com/v2/{name}` operation as a snapshot stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-participant-detail-anonymoususer-d0171b585359" title="Anonymous User" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.anonymousUser`

            **Anonymous User.** Anonymous user information, present when the participant joined without signing in. It preserves the nested context needed to interpret the parent participant detail.

            * **Enables:** Attribute anonymous user in `participant_detail.anonymousUser` to the parent participant detail; identify parent records where that nested anonymous user object is absent.
            * **Interpretation:** Google Workspace reports anonymous user as a nested object on each participant detail; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-participant-detail-anonymoususer-displayn-4b4ebe57c575" title="Display Name" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.anonymousUser.displayName`

            **Display Name.** The display name provided by the anonymous user when joining the meeting. It distinguishes the provider-defined display name state or classification for the anonymous user.

            * **Enables:** Label each anonymous user with display name from `participant_detail.AnonymousUser.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each anonymous user; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-participant-detail-earlieststarttime-8efc39967a70" title="Earliest Start Time" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.earliestStartTime`

            **Earliest Start Time.** The earliest time the participant joined the conference across all participant sessions. It anchors the participant detail on the provider's reported timeline.

            * **Enables:** Filter Participant Detail by earliest start time in `participant_detail.earliestStartTime`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Google Workspace reports earliest start time as a timestamp on each participant detail; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-participant-detail-latestendtime-008dff2ff191" title="Latest End Time" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.latestEndTime`

            **Latest End Time.** The latest time the participant left the conference across all participant sessions. Unset if the participant is still in the meeting. It anchors the participant detail on the provider's reported timeline.

            * **Enables:** Filter Participant Detail by latest end time in `participant_detail.latestEndTime`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Google Workspace reports latest end time as a timestamp on each participant detail; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-participant-detail-name-5b070d336a9c" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.name`

            **Name.** Resource name of the participant, in the format conferenceRecords/*/participants/*. It gives the participant detail a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated participant detail entries on name in `participant_detail.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each participant detail; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-participant-detail-phoneuser-23be99330963" title="Phone User" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.phoneUser`

            **Phone User.** Phone user information, present when the participant joined via phone dial-in. It preserves the nested context needed to interpret the parent participant detail.

            * **Enables:** Attribute phone user in `participant_detail.phoneUser` to the parent participant detail; identify parent records where that nested phone user object is absent.
            * **Interpretation:** Google Workspace reports phone user as a nested object on each participant detail; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-participant-detail-phoneuser-displayname-7b5052c9079a" title="Display Name" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.phoneUser.displayName`

            **Display Name.** The display name or partial phone number shown for the phone dial-in participant. It distinguishes the provider-defined display name state or classification for the phone user.

            * **Enables:** Label each phone user with display name from `participant_detail.PhoneUser.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each phone user; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-participant-detail-primaryemail-447ac22b1c2f" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each participant detail because the child operation does not return that relationship. It identifies the related provider object that gives the participant detail its parent, owner, or container context.

            * **Enables:** Attribute each participant detail to a person or account by the exact primary email in `participant_detail.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each participant detail; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-participant-detail-signedinuser-7debfb40bc76" title="Signedin User" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.signedinUser`

            **Signedin User.** Signed-in user information, present when the participant is an authenticated Google user. It preserves the nested context needed to interpret the parent participant detail.

            * **Enables:** Attribute signedin user in `participant_detail.signedinUser` to the parent participant detail; identify parent records where that nested signedin user object is absent.
            * **Interpretation:** Google Workspace reports signedin user as a nested object on each participant detail; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-participant-detail-signedinuser-displayna-9c17e57496b1" title="Display Name" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.signedinUser.displayName`

            **Display Name.** The display name of the signed-in user at the time they joined the meeting. It distinguishes the provider-defined display name state or classification for the signed in user.

            * **Enables:** Label each signed in user with display name from `participant_detail.SignedInUser.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each signed in user; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-participant-detail-signedinuser-user-25f03411bafd" title="User" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `participant_detail.signedinUser.user`

            **User.** Resource name of the signed-in Google user, in the format users/user. Unique identifier for cross-system identity resolution. It identifies the related provider object that gives the signed in user its parent, owner, or container context.

            * **Enables:** Connect each signed in user to the related user in `participant_detail.SignedInUser.user` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports user as relationship context on each signed in user; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-participants-8b986d4c21bb" title="Participants" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `participants`

        **Participants.** Conference participants.

        * **Enables:** Match each Google Meet participant resource to its conference and provider-reported user or anonymous identity.
        * **Scope:** Reads the records selected by Google Workspace's `https://meet.googleapis.com/v2/{name}/participants` operation as a snapshot stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-participants-anonymoususer-fa09bd80bc16" title="Anonymous User" icon="code-branch" iconType="sharp-duotone-solid">
            Developer identifier: `participants.anonymousUser`

            **Anonymous User.** Information about the participant if they joined anonymously without signing in. It preserves the nested context needed to interpret the parent participant.

            * **Enables:** Attribute anonymous user in `participants.anonymousUser` to the parent participant; identify parent records where that nested anonymous user object is absent.
            * **Interpretation:** Google Workspace reports anonymous user as a nested object on each participant; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-anonymoususer-displayname-910606c1fa6a" title="Display Name" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `participants.anonymousUser.displayName`

            **Display Name.** Display name of the anonymous participant as self-reported when joining the meeting. It distinguishes the provider-defined display name state or classification for the anonymous user.

            * **Enables:** Label each anonymous user with display name from `participants.AnonymousUser.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each anonymous user; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-conferencerecordname-236dad762ea0" title="Conference Record Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `participants.conferenceRecordName`

            **Conference Record Name.** Parent conference record name reference copied into each participant because the child operation does not return that relationship. It gives the participant a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each participant with conference record name from `participants.conferenceRecordName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Parable copies conference record name from the parent traversal record into each participant; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-earlieststarttime-d73c5255c724" title="Earliest Start Time" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `participants.earliestStartTime`

            **Earliest Start Time.** Earliest time the participant joined the meeting (RFC3339 UTC). Tracks when participants joined for time spend and meeting punctuality analysis. It anchors the participant on the provider's reported timeline.

            * **Enables:** Filter Participants by earliest start time in `participants.earliestStartTime`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Google Workspace reports earliest start time as a timestamp on each participant; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-latestendtime-bd0dbc5ee6ea" title="Latest End Time" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `participants.latestEndTime`

            **Latest End Time.** Latest time the participant left the meeting (RFC3339 UTC). Tracks when participants left for meeting duration and engagement analysis. It anchors the participant on the provider's reported timeline.

            * **Enables:** Filter Participants by latest end time in `participants.latestEndTime`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Google Workspace reports latest end time as a timestamp on each participant; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-name-bb23efeff13a" title="Name" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `participants.name`

            **Name.** Resource name of the participant (e.g., conferenceRecords/abc/participants/123). Unique identifier for cross-referencing participant sessions and attendance tracking. It identifies the related provider object that gives the participant its parent, owner, or container context.

            * **Enables:** Match repeated participant entries on name in `participants.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each participant; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-phoneuser-9ae821d6bf7b" title="Phone User" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `participants.phoneUser`

            **Phone User.** Information about the participant if they joined via phone (PSTN dial-in). It preserves the nested context needed to interpret the parent participant.

            * **Enables:** Attribute phone user in `participants.phoneUser` to the parent participant; identify parent records where that nested phone user object is absent.
            * **Interpretation:** Google Workspace reports phone user as a nested object on each participant; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-phoneuser-displayname-b55266a32894" title="Display Name" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `participants.phoneUser.displayName`

            **Display Name.** Display name of the phone participant, typically derived from the phone number or caller ID. It distinguishes the provider-defined display name state or classification for the phone user.

            * **Enables:** Label each phone user with display name from `participants.PhoneUser.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each phone user; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-primaryemail-a9f7e0eac21b" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `participants.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each participant because the child operation does not return that relationship. It identifies the related provider object that gives the participant its parent, owner, or container context.

            * **Enables:** Attribute each participant to a person or account by the exact primary email in `participants.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each participant; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-signedinuser-695b8008bf50" title="Signedin User" icon="chart-column" iconType="sharp-duotone-solid">
            Developer identifier: `participants.signedinUser`

            **Signedin User.** Information about the participant if they were signed in with a Google account. It preserves the nested context needed to interpret the parent participant.

            * **Enables:** Attribute signedin user in `participants.signedinUser` to the parent participant; identify parent records where that nested signedin user object is absent.
            * **Interpretation:** Google Workspace reports signedin user as a nested object on each participant; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-signedinuser-displayname-a9ae4cd3a871" title="Display Name" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `participants.signedinUser.displayName`

            **Display Name.** Display name of the signed-in participant as shown in the meeting. It distinguishes the provider-defined display name state or classification for the signed in user.

            * **Enables:** Label each signed in user with display name from `participants.SignedInUser.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each signed in user; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-participants-signedinuser-user-88ad9777932c" title="User" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `participants.signedinUser.user`

            **User.** The authenticated user resource name (e.g., users/123456789). Links meeting attendance to specific Google Workspace users for activity analysis. It identifies the related provider object that gives the signed in user its parent, owner, or container context.

            * **Enables:** Connect each signed in user to the related user in `participants.SignedInUser.user` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports user as relationship context on each signed in user; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-participantsessions-b26850a87f5e" title="Participantsessions" icon="address-book" iconType="sharp-duotone-solid">
        Developer identifier: `participantsessions`

        **Participantsessions.** Participant sessions.

        * **Enables:** Measure each participant's join and leave intervals within the parent Google Meet conference.
        * **Scope:** Reads the records selected by Google Workspace's `https://meet.googleapis.com/v2/{name}/participantSessions` operation as a snapshot stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-participantsessions-conferencerecordname-8b71ff134d83" title="Conference Record Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `participantsessions.conferenceRecordName`

            **Conference Record Name.** Parent conference record name reference copied into each participantsession because the child operation does not return that relationship. It gives the participantsession a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each participantsession with conference record name from `participantsessions.conferenceRecordName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Parable copies conference record name from the parent traversal record into each participantsession; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-participantsessions-endtime-3d60c43b131c" title="End Time" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `participantsessions.endTime`

            **End Time.** Timestamp (RFC3339) when this participant session ended (i.e., when the participant left the meeting for this session). Null or absent if the session is still active. It anchors the participantsession on the provider's reported timeline.

            * **Enables:** Filter Participantsessions by end time in `participantsessions.endTime`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Google Workspace reports end time as a timestamp on each participantsession; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-participantsessions-name-e4a895ca0361" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `participantsessions.name`

            **Name.** Resource name of the participant session, in the format conferenceRecords/conferenceRecord/participants/participant/participantSessions/participantSession. Used as the primary key for granular session-level meeting participation tracking. It gives the participantsession a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated participantsession entries on name in `participantsessions.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each participantsession; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-participantsessions-primaryemail-a4b67b32f14d" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `participantsessions.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each participantsession because the child operation does not return that relationship. It identifies the related provider object that gives the participantsession its parent, owner, or container context.

            * **Enables:** Attribute each participantsession to a person or account by the exact primary email in `participantsessions.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each participantsession; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-participantsessions-starttime-cea385f7327b" title="Start Time" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `participantsessions.startTime`

            **Start Time.** Timestamp (RFC3339) when this participant session started (i.e., when the participant joined the meeting for this session). It anchors the participantsession on the provider's reported timeline.

            * **Enables:** Filter Participantsessions by start time in `participantsessions.startTime`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Google Workspace reports start time as a timestamp on each participantsession; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-recording-detail-07ad8d31dd24" title="Recording Detail" icon="video" iconType="sharp-duotone-solid">
        Developer identifier: `recording_detail`

        **Recording Detail.** Full recording details.

        * **Enables:** Attribute recording metadata to the corresponding conference and Drive destination.
        * **Scope:** Reads the records selected by Google Workspace's `https://meet.googleapis.com/v2/{name}` operation as a snapshot stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The detail record contains recording metadata and destinations, not the recording bytes. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-recording-detail-drivedestination-19188e9a5ecc" title="Drive Destination" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `recording_detail.driveDestination`

            **Drive Destination.** Output only. The Google Drive destination where the recording file is saved. Only set when state is FILE\_GENERATED. It preserves the nested context needed to interpret the parent recording detail.

            * **Enables:** Attribute drive destination in `recording_detail.driveDestination` to the parent recording detail; identify parent records where that nested drive destination object is absent.
            * **Interpretation:** Google Workspace reports drive destination as a nested object on each recording detail; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-recording-detail-drivedestination-exportu-68aee9183d8c" title="Export URI" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `recording_detail.driveDestination.exportUri`

            **Export URI.** URL to export/download the recording file from Google Drive. It locates the provider resource or path associated with the drive destination.

            * **Enables:** Associate each drive destination with the resource identified by export URI in `recording_detail.DriveDestination.exportUri`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports export URI as a resource locator for each drive destination; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-recording-detail-drivedestination-file-0f2982a96bd4" title="File" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `recording_detail.driveDestination.file`

            **File.** Resource name of the Drive file where the recording is stored, in the format files/\*. Can be used with the Google Drive API to access the recording file. It identifies the file, document, recording, or attachment metadata associated with the drive destination.

            * **Enables:** Associate the file in `recording_detail.DriveDestination.file` with its parent recording detail; inventory the artifact reference without assuming binary content is present.
            * **Interpretation:** Google Workspace reports file as file, document, recording, or attachment metadata on each drive destination; binary bytes are not implied.
          </Accordion>

          <Accordion id="provider-permission-field-google-recording-detail-endtime-c474f7ca3c33" title="End Time" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `recording_detail.endTime`

            **End Time.** Timestamp when the recording ended, in RFC 3339 UTC format. Only set when the recording has ended. It anchors the recording detail on the provider's reported timeline.

            * **Enables:** Filter Recording Detail by end time in `recording_detail.endTime`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Google Workspace reports end time as a timestamp on each recording detail; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-recording-detail-name-c57dbf9bc85b" title="Name" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `recording_detail.name`

            **Name.** Resource name of the recording, in the format conferenceRecords/*/recordings/*. Serves as the unique identifier for this recording. It identifies the related provider object that gives the recording detail its parent, owner, or container context.

            * **Enables:** Match repeated recording detail entries on name in `recording_detail.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each recording detail; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-recording-detail-primaryemail-a3b727a2b529" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `recording_detail.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each recording detail because the child operation does not return that relationship. It identifies the related provider object that gives the recording detail its parent, owner, or container context.

            * **Enables:** Attribute each recording detail to a person or account by the exact primary email in `recording_detail.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each recording detail; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-recording-detail-starttime-b9cc753e7a63" title="Start Time" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `recording_detail.startTime`

            **Start Time.** Timestamp when the recording started, in RFC 3339 UTC format. It anchors the recording detail on the provider's reported timeline.

            * **Enables:** Filter Recording Detail by start time in `recording_detail.startTime`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Google Workspace reports start time as a timestamp on each recording detail; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-recording-detail-state-08fa1fdc0801" title="State" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `recording_detail.state`

            **State.** Current state of the recording. Possible values: STARTED (recording in progress), ENDED (recording stopped but file not yet generated), FILE\_GENERATED (recording file is available). It distinguishes the provider-defined state state or classification for the recording detail.

            * **Enables:** Segment recording detail entries in Recording Detail by state in `recording_detail.state`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports state as a label from its own taxonomy on each recording detail; preserve unknown labels rather than mapping them by assumption.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-recordings-39c18bd20159" title="Recordings" icon="phone" iconType="sharp-duotone-solid">
        Developer identifier: `recordings`

        **Recordings.** Conference recordings.

        * **Enables:** Inventory recording-resource metadata associated with Google Meet conferences.
        * **Scope:** Reads the records selected by Google Workspace's `https://meet.googleapis.com/v2/{name}/recordings` operation as a snapshot stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. These are recording resource records, not audio or video bytes. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-recordings-conferencerecordname-a37245c067c5" title="Conference Record Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `recordings.conferenceRecordName`

            **Conference Record Name.** Parent conference record name reference copied into each recording because the child operation does not return that relationship. It gives the recording a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each recording with conference record name from `recordings.conferenceRecordName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Parable copies conference record name from the parent traversal record into each recording; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-recordings-drivedestination-e9e7d4ccdb10" title="Drive Destination" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `recordings.driveDestination`

            **Drive Destination.** Output only. The Google Drive destination where the recording file is saved. It preserves the nested context needed to interpret the parent recording.

            * **Enables:** Attribute drive destination in `recordings.driveDestination` to the parent recording; identify parent records where that nested drive destination object is absent.
            * **Interpretation:** Google Workspace reports drive destination as a nested object on each recording; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-recordings-drivedestination-exporturi-cead3b4576c3" title="Export URI" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `recordings.driveDestination.exportUri`

            **Export URI.** Output only. Link to access the recording file in Google Drive. It locates the provider resource or path associated with the drive destination.

            * **Enables:** Associate each drive destination with the resource identified by export URI in `recordings.DriveDestination.exportUri`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports export URI as a resource locator for each drive destination; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-recordings-drivedestination-file-c3a2a4a20273" title="File" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `recordings.driveDestination.file`

            **File.** Output only. The Drive file resource name where the recording is stored, in the format files/fileId. It identifies the file, document, recording, or attachment metadata associated with the drive destination.

            * **Enables:** Associate the file in `recordings.DriveDestination.file` with its parent recording; inventory the artifact reference without assuming binary content is present.
            * **Interpretation:** Google Workspace reports file as file, document, recording, or attachment metadata on each drive destination; binary bytes are not implied.
          </Accordion>

          <Accordion id="provider-permission-field-google-recordings-endtime-6ea3f6c12a90" title="End Time" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `recordings.endTime`

            **End Time.** Timestamp when the recording ended, in RFC3339 UTC format. It anchors the recording on the provider's reported timeline.

            * **Enables:** Filter Recordings by end time in `recordings.endTime`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Google Workspace reports end time as a timestamp on each recording; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-recordings-name-b72b3bbee387" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `recordings.name`

            **Name.** Resource name of the recording, in the format conferenceRecords/*/recordings/*. It gives the recording a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated recording entries on name in `recordings.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each recording; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-recordings-primaryemail-23e030779fdb" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `recordings.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each recording because the child operation does not return that relationship. It identifies the related provider object that gives the recording its parent, owner, or container context.

            * **Enables:** Attribute each recording to a person or account by the exact primary email in `recordings.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each recording; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-recordings-starttime-400c854fc122" title="Start Time" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `recordings.startTime`

            **Start Time.** Timestamp when the recording started, in RFC3339 UTC format. It anchors the recording on the provider's reported timeline.

            * **Enables:** Filter Recordings by start time in `recordings.startTime`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Google Workspace reports start time as a timestamp on each recording; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-recordings-state-5daf0f36cb26" title="State" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `recordings.state`

            **State.** State of the recording (e.g., STARTED, ENDED, FILE\_GENERATED). It distinguishes the provider-defined state state or classification for the recording.

            * **Enables:** Segment recording entries in Recordings by state in `recordings.state`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports state as a label from its own taxonomy on each recording; preserve unknown labels rather than mapping them by assumption.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-spaces-ebbf92ac00ea" title="Spaces" icon="phone" iconType="sharp-duotone-solid">
        Developer identifier: `spaces`

        **Spaces.** Google Meet space details fetched per unique space from conference records.

        * **Enables:** Match each unique Google Meet space referenced by conference records to its meeting code, configuration, and active-conference state.
        * **Scope:** Reads the records selected by Google Workspace's `https://meet.googleapis.com/v2/{space}` operation as a snapshot stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-spaces-activeconference-f114ef50a6dd" title="Active Conference" icon="circle-exclamation" iconType="sharp-duotone-solid">
            Developer identifier: `spaces.activeConference`

            **Active Conference.** Information about the currently active conference in this space, if any. It preserves the nested context needed to interpret the parent space.

            * **Enables:** Attribute active conference in `spaces.activeConference` to the parent space; identify parent records where that nested active conference object is absent.
            * **Interpretation:** Google Workspace reports active conference as a nested object on each space; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-spaces-activeconference-conferencerecord-1d8357d28023" title="Conference Record" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `spaces.activeConference.conferenceRecord`

            **Conference Record.** Resource name of the active conference record (e.g., conferenceRecords/abc123). Links to the conference\_records tap for detailed meeting data. It identifies the related provider object that gives the active conference its parent, owner, or container context.

            * **Enables:** Connect each active conference to the related conference record in `spaces.ActiveConference.conferenceRecord` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports conference record as relationship context on each active conference; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-spaces-config-99334c204a03" title="Config" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `spaces.config`

            **Config.** Configuration settings for the meeting space, including access controls. It preserves the nested context needed to interpret the parent space.

            * **Enables:** Attribute config in `spaces.config` to the parent space; identify parent records where that nested config object is absent.
            * **Interpretation:** Google Workspace reports config as a nested object on each space; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-spaces-config-accesstype-4280978ab199" title="Access Type" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `spaces.config.accessType`

            **Access Type.** Access type controlling who can join the meeting space. It distinguishes the provider-defined access type state or classification for the space config.

            * **Enables:** Segment space config entries in Spaces by access type in `spaces.SpaceConfig.accessType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports access type as a label from its own taxonomy on each space config; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-spaces-config-entrypointaccess-1b1517cf20b9" title="Entry Point Access" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `spaces.config.entryPointAccess`

            **Entry Point Access.** Entry point access controlling which apps can be used to join. It distinguishes the provider-defined entry point access state or classification for the space config.

            * **Enables:** Segment space config entries in Spaces by entry point access in `spaces.SpaceConfig.entryPointAccess`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports entry point access as a label from its own taxonomy on each space config; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-spaces-meetingcode-0307965cc956" title="Meeting Code" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `spaces.meetingCode`

            **Meeting Code.** Human-readable code used to join the meeting, typically a short alphanumeric string. It supplies the sensitive provider access code needed to join the space, not a stable record identifier.

            * **Enables:** Reconcile `spaces.meetingCode` with the same conference entry point or meeting instructions when validating join access; handle it as sensitive access metadata.
            * **Interpretation:** Google Workspace returns meeting code as meeting or conference access metadata on each space; it can rotate and does not identify the meeting by itself.
          </Accordion>

          <Accordion id="provider-permission-field-google-spaces-meetinguri-7f2171e37df3" title="Meeting URI" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `spaces.meetingUri`

            **Meeting URI.** URI used to join the meeting space, typically a meet.google.com link. It locates the provider resource or path associated with the space.

            * **Enables:** Associate each space with the resource identified by meeting URI in `spaces.meetingUri`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports meeting URI as a resource locator for each space; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-spaces-name-56d8a4cbfa1d" title="Name" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `spaces.name`

            **Name.** Resource name of the space (e.g., spaces/abc123). Serves as the unique identifier for this meeting space. It identifies the related provider object that gives the space its parent, owner, or container context.

            * **Enables:** Match repeated space entries on name in `spaces.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each space; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-spaces-primaryemail-1f45103d3b59" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `spaces.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each space because the child operation does not return that relationship. It identifies the related provider object that gives the space its parent, owner, or container context.

            * **Enables:** Attribute each space to a person or account by the exact primary email in `spaces.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each space; the child Google Workspace operation does not return it.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-thread-messages-e989b1043823" title="Thread Messages" icon="comment-dots" iconType="sharp-duotone-solid">
        Developer identifier: `thread_messages`

        **Thread Messages.** Projected Gmail message details fetched for each enumerated message.

        * **Enables:** Attribute projected Gmail headers, labels, snippets, MIME metadata, and timestamps to each message and mailbox.
        * **Scope:** Reads the records selected by Google Workspace's `https://gmail.googleapis.com/gmail/v1/users/{primaryEmail}/messages/{id}` operation as an event stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The projection includes selected headers, labels, snippets, and MIME-part metadata, but excludes MIME body data, raw RFC email, and attachment bytes. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-thread-messages-historyid-9bedad142362" title="History ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.historyId`

            **History ID.** The ID of the last history record that modified this message, for Gmail history API correlation. It provides the reference needed to connect the thread message to the corresponding provider object.

            * **Enables:** Connect each thread message in Thread Messages to the referenced history through `thread_messages.historyId`; flag history ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports history ID as an identifier in its history namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-id-d71f287ab922" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.id`

            **ID.** Unique identifier for the Gmail message. Used as the primary key for cross-referencing Gmail messages with other activity data. It provides the reference needed to connect the thread message to the corresponding provider object.

            * **Enables:** Match repeated thread message entries on ID in `thread_messages.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its thread message namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-internaldate-b2a1a105a55a" title="Internal Date" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.internalDate`

            **Internal Date.** Gmail internalDate: milliseconds since Unix epoch as a decimal string (not ISO-8601). It anchors the thread message on the provider's reported timeline.

            * **Enables:** Order Thread Messages by internal date in `thread_messages.internalDate` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports internal date in milliseconds since the Unix epoch on each thread message; it is not ISO-8601 and must be converted with that explicit unit. A connector directive uses this field to order records for latest-state or incremental processing. The schema designates this field as the event timestamp.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-labelids-8614869c65b7" title="Label IDs" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.labelIds`

            **Label IDs.** List of label IDs applied to this message (e.g., INBOX, SENT, UNREAD, SPAM, CATEGORY\_\*). Drives direction and category classification downstream. It preserves the nested context needed to interpret the parent thread message.

            * **Enables:** Connect the parent thread message to every referenced label ID value in `thread_messages.labelIds`; identify provider IDs that do not resolve to the expected related object.
            * **Interpretation:** Google Workspace returns label IDs as an array of label ID value entries on each thread message; missing, empty, and permission-redacted arrays are not equivalent. Google Workspace generated or classified this result; it may be incomplete and is not a Parable-authored judgment.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-db4936b24b19" title="Payload" icon="envelope" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload`

            **Payload.** The parsed MIME structure of the message: recursive part tree with per-part headers, MIME types, attachment filenames, and body sizes. Body data is excluded by the fields projection. It preserves the nested context needed to interpret the parent thread message.

            * **Enables:** Attribute payload in `thread_messages.payload` to the parent thread message; identify parent records where that nested payload object is absent.
            * **Interpretation:** Google Workspace reports payload as a nested object on each thread message; optional children may be absent from a valid response. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-body-7931694090fc" title="Body" icon="comments" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload.body`

            **Body.** The message part body metadata for this part (size and attachment ID; body data is not fetched). It preserves the nested context needed to interpret the parent thread message.

            * **Enables:** Attribute body in `thread_messages.GmailMessagePart.body` to the parent thread message; identify parent records where that nested body object is absent.
            * **Interpretation:** Google Workspace reports body as a nested object on each gmail message part; optional children may be absent from a valid response. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-body-attachmentid-bb5127e0d4cf" title="Attachment ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload.body.attachmentId`

            **Attachment ID.** The ID of the attachment if this body represents an attachment. Present only on attachment parts. It provides the reference needed to connect the thread message to the corresponding provider object.

            * **Enables:** Connect each gmail message part body in Thread Messages to the referenced attachment through `thread_messages.GmailMessagePartBody.attachmentId`; flag attachment ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports attachment ID as an identifier in its attachment namespace; it is not a universal identity outside Google Workspace. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-body-size-1f5d70414edb" title="Size" icon="envelope" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload.body.size`

            **Size.** Number of bytes for the message part data (encoding notwithstanding). It supplies the size measure for the gmail message part body at the provider's declared unit and grain.

            * **Enables:** Measure size through `thread_messages.GmailMessagePartBody.size` for each gmail message part body and compare only values with the same unit and record grain.
            * **Interpretation:** Google Workspace reports size as a measure on each gmail message part body; compare only records with the same unit and aggregation grain. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-filename-ca7860989557" title="Filename" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload.filename`

            **Filename.** The filename of the attachment. Empty string for non-attachment parts. It identifies the file, document, recording, or attachment metadata associated with the gmail message part.

            * **Enables:** Associate the filename in `thread_messages.GmailMessagePart.filename` with its parent thread message; inventory the artifact reference without assuming binary content is present.
            * **Interpretation:** Google Workspace reports filename as file, document, recording, or attachment metadata on each gmail message part; binary bytes are not implied. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes. This field is metadata or a reference for the file or attachment; it does not by itself include binary content.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-headers-73b2779a5de8" title="Headers" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload.headers`

            **Headers.** List of headers on this message part. For the top-level payload, includes standard RFC 2822 headers such as From, To, Subject, Date. It preserves the nested context needed to interpret the parent thread message.

            * **Enables:** Search the returned headers content in `thread_messages.GmailMessagePart.headers` while preserving element order and attribution to the parent thread message.
            * **Interpretation:** Google Workspace returns headers as ordered content or provider-generated content metadata on each gmail message part; truncation, omission, and inaccessible source media can limit completeness. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-headers-name-19e81c5276c8" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload.headers.name`

            **Name.** The name of the header (e.g., From, To, Subject, Date, Content-Type, Message-ID). It supplies the returned name text needed to understand the gmail message part header in context.

            * **Enables:** Match repeated gmail message part header entries on name in `thread_messages.GmailMessagePartHeader.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each gmail message part header; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-headers-value-5a3005825797" title="Value" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload.headers.value`

            **Value.** The value of the header. It must be interpreted with the enclosing provider field name, type, or custom schema for the gmail message part header.

            * **Enables:** Interpret `thread_messages.GmailMessagePartHeader.value` with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
            * **Interpretation:** Google Workspace reports value under the enclosing custom or typed field contract on each gmail message part header; compare it only with values from the same provider key and type. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-mimetype-c284d5ab48c6" title="MIME Type" icon="envelope" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload.mimeType`

            **MIME Type.** The MIME type of the message part (e.g., text/plain, text/html, multipart/alternative). It supplies the returned MIME type text needed to understand the gmail message part in context.

            * **Enables:** Segment gmail message part entries in Thread Messages by MIME type in `thread_messages.GmailMessagePart.mimeType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports MIME type as a label from its own taxonomy on each gmail message part; preserve unknown labels rather than mapping them by assumption. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-partid-4f2eb2cc1afb" title="Part ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload.partId`

            **Part ID.** The immutable ID of the message part. It provides the reference needed to connect the thread message to the corresponding provider object.

            * **Enables:** Match repeated gmail message part entries on part ID in `thread_messages.GmailMessagePart.partId`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports part ID as an identifier in its part namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-payload-parts-fd73803f8c09" title="Parts" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.payload.parts`

            **Parts.** Child MIME message parts for multipart content. The fields projection requests up to two nested levels below the payload root. It preserves the nested context needed to interpret the parent thread message.

            * **Enables:** Search the returned parts content in `thread_messages.GmailMessagePart.parts` while preserving element order and attribution to the parent thread message.
            * **Interpretation:** Google Workspace returns parts as ordered content or provider-generated content metadata on each gmail message part; truncation, omission, and inaccessible source media can limit completeness. The configured Gmail projection includes selected headers, MIME structure, body sizes, and attachment identifiers, but excludes body data, raw RFC email, and attachment bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-primaryemail-1bbd14ba7ea8" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each thread message because the child operation does not return that relationship. It identifies the related provider object that gives the thread message its parent, owner, or container context.

            * **Enables:** Attribute each thread message to a person or account by the exact primary email in `thread_messages.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each thread message; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-snippet-6f7f0734ec24" title="Snippet" icon="circle-info" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.snippet`

            **Snippet.** Short plain-text snippet of the message content. The only message-content excerpt ingested; full body data is never fetched. It defines the content surface available for this thread message.

            * **Enables:** Locate thread message records whose snippet in `thread_messages.snippet` contains the search term; open the Google Workspace record when the excerpt lacks needed context.
            * **Interpretation:** This is an excerpt supplied by the provider, not the complete body or an attachment.
          </Accordion>

          <Accordion id="provider-permission-field-google-thread-messages-threadid-9caaa64b83ee" title="Thread ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `thread_messages.threadId`

            **Thread ID.** ID of the thread this message belongs to. Links messages into conversation threads for conversation-thread grouping. It provides the reference needed to connect the thread message to the corresponding provider object.

            * **Enables:** Connect each thread message in Thread Messages to the referenced thread through `thread_messages.threadId`; flag thread ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports thread ID as an identifier in its thread namespace; it is not a universal identity outside Google Workspace.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-threads-ca22af26f29a" title="Threads" icon="comments" iconType="sharp-duotone-solid">
        Developer identifier: `threads`

        **Threads.** Gmail threads for users.

        * **Enables:** Enumerate Gmail conversation threads by mailbox and correlate their identifiers, history markers, and latest-message snippets.
        * **Scope:** Reads the records selected by Google Workspace's `https://gmail.googleapis.com/gmail/v1/users/{primaryEmail}/threads` operation as an event stream using incremental synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The current projection returns thread IDs, history IDs, and the latest-message snippet only; it does not return messages, MIME bodies, raw RFC email, or attachment bytes. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-threads-historyid-f579c20d21fd" title="History ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `threads.historyId`

            **History ID.** History ID for incremental sync tracking via Gmail history API. It provides the reference needed to connect the thread to the corresponding provider object.

            * **Enables:** Connect each thread in Threads to the referenced history through `threads.historyId`; flag history ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports history ID as an identifier in its history namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-threads-id-d5ae95c71f56" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `threads.id`

            **ID.** Unique identifier for the thread. It provides the reference needed to connect the thread to the corresponding provider object.

            * **Enables:** Match repeated thread entries on ID in `threads.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its thread namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-threads-primaryemail-cc98b32960cf" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `threads.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each thread because the child operation does not return that relationship. It identifies the related provider object that gives the thread its parent, owner, or container context.

            * **Enables:** Attribute each thread to a person or account by the exact primary email in `threads.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each thread; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-threads-snippet-cffed669ca77" title="Snippet" icon="circle-info" iconType="sharp-duotone-solid">
            Developer identifier: `threads.snippet`

            **Snippet.** Short snippet of the most recent message in the thread. It defines the content surface available for this thread.

            * **Enables:** Locate thread records whose snippet in `threads.snippet` contains the search term; open the Google Workspace record when the excerpt lacks needed context.
            * **Interpretation:** This is an excerpt supplied by the provider, not the complete body or an attachment.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-transcript-detail-7225a5798509" title="Transcript Detail" icon="video" iconType="sharp-duotone-solid">
        Developer identifier: `transcript_detail`

        **Transcript Detail.** Full transcript details.

        * **Enables:** Attribute transcript entries and speaker references to the corresponding Google Meet conference.
        * **Scope:** Reads the records selected by Google Workspace's `https://meet.googleapis.com/v2/{name}` operation as a snapshot stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-transcript-detail-docsdestination-43bdc62add84" title="Docs Destination" icon="headset" iconType="sharp-duotone-solid">
            Developer identifier: `transcript_detail.docsDestination`

            **Docs Destination.** Google Google Google Google Docs destination where the transcript content is exported. It preserves the nested context needed to interpret the parent transcript detail.

            * **Enables:** Attribute Google Google Google Docs destination in `transcript_detail.docsDestination` to the parent transcript detail; identify parent records where that nested Google Google Google Docs destination object is absent.
            * **Interpretation:** Google Workspace reports Google Google Google Docs destination as a nested object on each transcript detail; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcript-detail-docsdestination-documen-0f2f84608e6d" title="Document" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `transcript_detail.docsDestination.document`

            **Document.** Resource name of the Google Docs document where the transcript is stored, in the format documents/documentId. It identifies the file, document, recording, or attachment metadata associated with the docs destination.

            * **Enables:** Associate the document in `transcript_detail.DocsDestination.document` with its parent transcript detail; inventory the artifact reference without assuming binary content is present.
            * **Interpretation:** Google Workspace reports document as file, document, recording, or attachment metadata on each docs destination; binary bytes are not implied.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcript-detail-docsdestination-exportu-94b9e4bc871e" title="Export URI" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `transcript_detail.docsDestination.exportUri`

            **Export URI.** URI for the Google Docs transcript file, providing a direct link to the exported document. It locates the provider resource or path associated with the docs destination.

            * **Enables:** Associate each Google Google Google Docs destination with the resource identified by export URI in `transcript_detail.DocsDestination.exportUri`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports export URI as a resource locator for each Google Google Google Docs destination; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcript-detail-endtime-15d84ccd9cb7" title="End Time" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `transcript_detail.endTime`

            **End Time.** Timestamp when transcription ended for this conference record. It anchors the transcript detail on the provider's reported timeline.

            * **Enables:** Filter Transcript Detail by end time in `transcript_detail.endTime`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Google Workspace reports end time as a timestamp on each transcript detail; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcript-detail-name-9dcea7af0106" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `transcript_detail.name`

            **Name.** Resource name of the transcript, in the format conferenceRecords/*/transcripts/*. Serves as the primary key for this transcript resource. It gives the transcript detail a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated transcript detail entries on name in `transcript_detail.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each transcript detail; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcript-detail-primaryemail-ba89e5668d4f" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `transcript_detail.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each transcript detail because the child operation does not return that relationship. It identifies the related provider object that gives the transcript detail its parent, owner, or container context.

            * **Enables:** Attribute each transcript detail to a person or account by the exact primary email in `transcript_detail.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each transcript detail; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcript-detail-starttime-d68b44f9cdcc" title="Start Time" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `transcript_detail.startTime`

            **Start Time.** Timestamp when transcription started for this conference record. It anchors the transcript detail on the provider's reported timeline.

            * **Enables:** Filter Transcript Detail by start time in `transcript_detail.startTime`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Google Workspace reports start time as a timestamp on each transcript detail; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcript-detail-state-9a332813120c" title="State" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `transcript_detail.state`

            **State.** State of the transcript indicating its lifecycle stage. Possible values include STARTED, ENDED, and FILE\_GENERATED. It distinguishes the provider-defined state state or classification for the transcript detail.

            * **Enables:** Segment transcript detail entries in Transcript Detail by state in `transcript_detail.state`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports state as a label from its own taxonomy on each transcript detail; preserve unknown labels rather than mapping them by assumption.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-transcripts-48ff74f7b696" title="Transcripts" icon="headset" iconType="sharp-duotone-solid">
        Developer identifier: `transcripts`

        **Transcripts.** Conference transcripts.

        * **Enables:** Inventory transcript resources associated with Google Meet conference records before fetching their details.
        * **Scope:** Reads the records selected by Google Workspace's `https://meet.googleapis.com/v2/{name}/transcripts` operation as a snapshot stream using full synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. These are transcript resource records, not transcript text or meeting audio. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-transcripts-conferencerecordname-7527bcbccbd7" title="Conference Record Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `transcripts.conferenceRecordName`

            **Conference Record Name.** Parent conference record name reference copied into each transcript because the child operation does not return that relationship. It gives the transcript a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each transcript with conference record name from `transcripts.conferenceRecordName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Parable copies conference record name from the parent traversal record into each transcript; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcripts-docsdestination-6218857dc047" title="Docs Destination" icon="headset" iconType="sharp-duotone-solid">
            Developer identifier: `transcripts.docsDestination`

            **Docs Destination.** The Google Google Google Google Docs destination where the transcript content is exported. It preserves the nested context needed to interpret the parent transcript.

            * **Enables:** Attribute Google Google Google Docs destination in `transcripts.docsDestination` to the parent transcript; identify parent records where that nested Google Google Google Docs destination object is absent.
            * **Interpretation:** Google Workspace reports Google Google Google Docs destination as a nested object on each transcript; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcripts-docsdestination-document-133a49ef3355" title="Document" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `transcripts.docsDestination.document`

            **Document.** The resource name of the Google Docs document where the transcript is stored, in the format documents/documentId. It identifies the related provider object that gives the docs destination its parent, owner, or container context.

            * **Enables:** Connect each docs destination to the related document in `transcripts.DocsDestination.document` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports document as relationship context on each docs destination; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcripts-docsdestination-exporturi-a502523474a9" title="Export URI" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `transcripts.docsDestination.exportUri`

            **Export URI.** The URI for the Google Docs document where the transcript content can be accessed. It locates the provider resource or path associated with the docs destination.

            * **Enables:** Associate each Google Google Google Docs destination with the resource identified by export URI in `transcripts.DocsDestination.exportUri`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports export URI as a resource locator for each Google Google Google Docs destination; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcripts-endtime-f57f319ee4cf" title="End Time" icon="phone" iconType="sharp-duotone-solid">
            Developer identifier: `transcripts.endTime`

            **End Time.** Timestamp when the transcript ended, in RFC3339 UTC format. Used to calculate transcript duration. It anchors the transcript on the provider's reported timeline.

            * **Enables:** Filter Transcripts by end time in `transcripts.endTime`; pair that boundary with the corresponding start before measuring elapsed time.
            * **Interpretation:** Google Workspace reports end time as a timestamp on each transcript; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcripts-name-a61be90df946" title="Name" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `transcripts.name`

            **Name.** Resource name of the transcript, in the format conferenceRecords/*/transcripts/*. Serves as the unique identifier for this transcript resource. It identifies the related provider object that gives the transcript its parent, owner, or container context.

            * **Enables:** Match repeated transcript entries on name in `transcripts.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each transcript; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcripts-primaryemail-6e3be344cdf6" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `transcripts.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each transcript because the child operation does not return that relationship. It identifies the related provider object that gives the transcript its parent, owner, or container context.

            * **Enables:** Attribute each transcript to a person or account by the exact primary email in `transcripts.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each transcript; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcripts-starttime-13c27b81b53a" title="Start Time" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `transcripts.startTime`

            **Start Time.** Timestamp when the transcript started being generated, in RFC3339 UTC format. It anchors the transcript on the provider's reported timeline.

            * **Enables:** Filter Transcripts by start time in `transcripts.startTime`; pair that boundary with the corresponding end before measuring elapsed time.
            * **Interpretation:** Google Workspace reports start time as a timestamp on each transcript; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-transcripts-state-603014bab4de" title="State" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `transcripts.state`

            **State.** State of the transcript indicating its lifecycle stage. Possible values include STARTED, ENDED, and FILE\_GENERATED. It distinguishes the provider-defined state state or classification for the transcript.

            * **Enables:** Segment transcript entries in Transcripts by state in `transcripts.state`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports state as a label from its own taxonomy on each transcript; preserve unknown labels rather than mapping them by assumption.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-users-ebde85253787" title="Users" icon="address-book" iconType="sharp-duotone-solid">
        Developer identifier: `users`

        **Users.** Google Workspace users.

        * **Enables:** Reconcile Google Workspace accounts to primary email, aliases, organization, suspension state, and administrator or delegation settings.
        * **Scope:** Reads the records selected by Google Workspace's `/admin/directory/v1/users` operation as a snapshot stream using incremental synchronization. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream does not include records the credential, parent traversal, configured filters, or provider API omits. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-users-addresses-7d2422bdf4b9" title="Addresses" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses`

            **Addresses.** List of addresses for the user. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned user address in `users.addresses` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns addresses as an array of user address entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-country-64201fe2124d" title="Country" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.country`

            **Country.** Country name. It supplies the provider-reported address or location facet for the user address, not a residency determination.

            * **Enables:** Group Users by country in `users.UserAddress.country` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Google Workspace reports country as a user, device, request, or resource location attribute on each user address; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-countrycode-cb59de9a59f7" title="Country Code" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.countryCode`

            **Country Code.** ISO 3166-1 alpha-2 country code. It supplies the provider-reported address or location facet for the user address, not a residency determination.

            * **Enables:** Group Users by country code in `users.UserAddress.countryCode` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Google Workspace reports country code as a user, device, request, or resource location attribute on each user address; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-customtype-94b5a6e4e5a4" title="Custom Type" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.customType`

            **Custom Type.** Custom type label if type is 'custom'. It must be interpreted with the enclosing provider field name, type, or custom schema for the user address.

            * **Enables:** Segment user address entries in Users by custom type in `users.UserAddress.customType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports custom type as a label from its own taxonomy on each user address; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-extendedaddress-54694835334a" title="Extended Address" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.extendedAddress`

            **Extended Address.** Extended address (e.g., apartment number). It supplies the provider-reported address or location facet for the user address, not a residency determination.

            * **Enables:** Group Users by the exact extended address in `users.UserAddress.extendedAddress` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Google Workspace reports extended address as an address or location facet on each user address; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-formatted-d1743e745856" title="Formatted" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.formatted`

            **Formatted.** Full formatted address string. It supplies the provider-reported address or location facet for the user address, not a residency determination.

            * **Enables:** Match repeated user address entries on formatted in `users.UserAddress.formatted`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports formatted on each user address; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-locality-05874eb3e036" title="Locality" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.locality`

            **Locality.** City or town. It supplies the provider-reported address or location facet for the user address, not a residency determination.

            * **Enables:** Group Users by locality in `users.UserAddress.locality` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Google Workspace reports locality as a user, device, request, or resource location attribute on each user address; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-pobox-3b7865ec338b" title="Po Box" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.poBox`

            **Po Box.** Post office box. It supplies the provider-reported address or location facet for the user address, not a residency determination.

            * **Enables:** Group Users by the exact po box in `users.UserAddress.poBox` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Google Workspace reports po box as an address or location facet on each user address; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-postalcode-05b7fd295906" title="Postal Code" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.postalCode`

            **Postal Code.** Postal/ZIP code. It supplies the provider-reported address or location facet for the user address, not a residency determination.

            * **Enables:** Group Users by the exact postal code in `users.UserAddress.postalCode` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Google Workspace reports postal code as an address or location facet on each user address; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-primary-1edd47318949" title="Primary" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.primary`

            **Primary.** Whether this is the user's primary address. It distinguishes the provider-defined primary state or classification for the user address.

            * **Enables:** Filter Users by whether this is the user's primary address in `users.UserAddress.primary`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this is the user's primary address as a boolean on each user address; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-region-204517818b8a" title="Region" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.region`

            **Region.** State or province. It supplies the provider-reported address or location facet for the user address, not a residency determination.

            * **Enables:** Group Users by region in `users.UserAddress.region` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Google Workspace reports region as a user, device, request, or resource location attribute on each user address; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-sourceisstructured-de17de3ca40a" title="Source Is Structured" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.sourceIsStructured`

            **Source Is Structured.** Whether the address was entered in structured or unstructured format. It distinguishes the provider-defined source is structured state or classification for the user address.

            * **Enables:** Filter Users by whether the address was entered in structured or unstructured format in `users.UserAddress.sourceIsStructured`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the address was entered in structured or unstructured format as a boolean on each user address; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-streetaddress-655bcdc27481" title="Street Address" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.streetAddress`

            **Street Address.** Street address. It supplies the provider-reported address or location facet for the user address, not a residency determination.

            * **Enables:** Group Users by the exact street address in `users.UserAddress.streetAddress` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Google Workspace reports street address as an address or location facet on each user address; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-addresses-type-1d8c69f954a4" title="Type" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.addresses.type`

            **Type.** The type of address (custom, home, other, work). It supplies the provider-reported address or location facet for the user address, not a residency determination.

            * **Enables:** Match repeated user address entries on type in `users.UserAddress.type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user address; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-agreedtoterms-8f1186faa663" title="Agreed To Terms" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `users.agreedToTerms`

            **Agreed To Terms.** Whether the user has agreed to the Terms of Service. It distinguishes the provider-defined agreed to terms state or classification for the user.

            * **Enables:** Filter Users by whether the user has agreed to the terms of service in `users.agreedToTerms`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the user has agreed to the terms of service as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-aliases-3d5d572edee5" title="Aliases" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `users.aliases`

            **Aliases.** List of the user's alias email addresses. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned aliase value in `users.aliases` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns aliases as an array of aliase value entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-archived-202c107b70e6" title="Archived" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `users.archived`

            **Archived.** Whether the user account is archived. It distinguishes the provider-defined archived state or classification for the user.

            * **Enables:** Filter Users by whether the user account is archived in `users.archived`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the user account is archived as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-changepasswordatnextlogin-ca5bbd5e78e0" title="Change Password At Next Login" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.changePasswordAtNextLogin`

            **Change Password At Next Login.** Whether the user must change their password at next login. It supplies the sensitive provider access code needed to join the user, not a stable record identifier.

            * **Enables:** Filter Users by whether the user must change their password at next login in `users.changePasswordAtNextLogin`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the user must change their password at next login as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-creationtime-9dd6885bc530" title="Creation Time" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `users.creationTime`

            **Creation Time.** When the user account was created (ISO 8601). It anchors the user on the provider's reported timeline.

            * **Enables:** Order Users by creation time in `users.creationTime` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports creation time as a timestamp on each user; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-customerid-d3c546613b46" title="Customer ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.customerId`

            **Customer ID.** The unique ID of the customer's Google Workspace account. It provides the reference needed to connect the user to the corresponding provider object.

            * **Enables:** Connect each user in Users to the referenced customer through `users.customerId`; flag customer ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports customer ID as an identifier in its customer namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-customschemas-7e814a00e3ea" title="Custom Schemas" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.customSchemas`

            **Custom Schemas.** Custom schema fields defined by the Workspace admin. Keys are schema names, values are objects of field name to value. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Attribute custom schemas in `users.customSchemas` to the parent user; identify parent records where that nested custom schemas object is absent.
            * **Interpretation:** Google Workspace reports custom schemas as a nested object on each user; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-deletiontime-8a01e2d358c6" title="Deletion Time" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.deletionTime`

            **Deletion Time.** When the user account was deleted, if applicable (ISO 8601). It anchors the user on the provider's reported timeline.

            * **Enables:** Order Users by deletion time in `users.deletionTime` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports deletion time as a timestamp on each user; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-emails-810e6ee148f8" title="Emails" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `users.emails`

            **Emails.** List of email addresses for the user including aliases. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned user email in `users.emails` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns emails as an array of user email entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-emails-address-2c71e5955bff" title="Address" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `users.emails.address`

            **Address.** The email address. It supplies the provider-reported address or location facet for the user email, not a residency determination.

            * **Enables:** Match repeated user email entries on address in `users.UserEmail.address`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports address as an address on each user email; aliases, casing, and unverified addresses can prevent a one-to-one person match. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-emails-customtype-53773a649cfe" title="Custom Type" icon="comments" iconType="sharp-duotone-solid">
            Developer identifier: `users.emails.customType`

            **Custom Type.** Custom type label if type is 'custom'. It must be interpreted with the enclosing provider field name, type, or custom schema for the user email.

            * **Enables:** Segment user email entries in Users by custom type in `users.UserEmail.customType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports custom type as a label from its own taxonomy on each user email; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-emails-primary-126613861a52" title="Primary" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.emails.primary`

            **Primary.** Whether this is the user's primary email address. It distinguishes the provider-defined primary state or classification for the user email.

            * **Enables:** Filter Users by whether this is the user's primary email address in `users.UserEmail.primary`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this is the user's primary email address as a boolean on each user email; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-emails-type-c3675c3ba80e" title="Type" icon="envelope" iconType="sharp-duotone-solid">
            Developer identifier: `users.emails.type`

            **Type.** The type of email (custom, home, other, work). It distinguishes the provider-defined type state or classification for the user email.

            * **Enables:** Segment user email entries in Users by type in `users.UserEmail.type`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user email; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-etag-8f524bd02be6" title="ETag" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `users.etag`

            **ETag.** ETag of the resource for caching and conditional requests. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

            * **Enables:** Use `users.etag` for conditional provider reads and revision checks; pair the ETag with the user ID rather than joining on it.
            * **Interpretation:** Google Workspace returns this ETag as an opaque revision token for each user; it can change when the resource changes and is not a universal identifier.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-externalids-63fe26e90569" title="External IDs" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.externalIds`

            **External IDs.** List of external ID values for the user (employee ID, etc.). It preserves the nested context needed to interpret the parent user.

            * **Enables:** Connect the parent user to every referenced user external ID in `users.externalIds`; identify provider IDs that do not resolve to the expected related object.
            * **Interpretation:** Google Workspace returns external IDs as an array of user external ID entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-externalids-customtype-7e810464ee52" title="Custom Type" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `users.externalIds.customType`

            **Custom Type.** Custom type label if type is 'custom'. It must be interpreted with the enclosing provider field name, type, or custom schema for the user external ID.

            * **Enables:** Segment user external ID entries in Users by custom type in `users.UserExternalId.customType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports custom type as a label from its own taxonomy on each user external ID; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-externalids-type-62441eaca03f" title="Type" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.externalIds.type`

            **Type.** The type of external ID (account, custom, customer, login\_id, network, organization). It distinguishes the provider-defined type state or classification for the user external ID.

            * **Enables:** Match repeated user external ID entries on type in `users.UserExternalId.type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user external ID; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-externalids-value-a10f22ef00c1" title="Value" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `users.externalIds.value`

            **Value.** The value of the external ID. It must be interpreted with the enclosing provider field name, type, or custom schema for the user external ID.

            * **Enables:** Match repeated user external ID entries on value in `users.UserExternalId.value`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports value on each user external ID; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-gender-dede992b9e91" title="Gender" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `users.gender`

            **Gender.** Gender information for the user. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Attribute gender in `users.gender` to the parent user; identify parent records where that nested gender object is absent.
            * **Interpretation:** Google Workspace reports gender as a nested object on each user; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-gender-addressmeas-fa693dcd464c" title="Address Me As" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `users.gender.addressMeAs`

            **Address Me As.** How the user prefers to be addressed. It supplies the provider-reported address or location facet for the user gender, not a residency determination.

            * **Enables:** Group Users by the exact address me as in `users.UserGender.addressMeAs` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Google Workspace reports address me as as an address or location facet on each user gender; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-gender-customgender-a4d6e02902c9" title="Custom Gender" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.gender.customGender`

            **Custom Gender.** Custom gender string if type is 'other'. It supplies the custom gender profile facet used to reconcile or attribute the user gender.

            * **Enables:** Reconcile the user's custom gender in `users.UserGender.customGender` with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
            * **Interpretation:** Google Workspace reports custom gender as a mutable profile or directory attribute on each user gender; it may be absent, shared, or non-unique.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-gender-type-f4d505aba35a" title="Type" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `users.gender.type`

            **Type.** Gender type (female, male, other, unknown). It distinguishes the provider-defined type state or classification for the user gender.

            * **Enables:** Segment user gender entries in Users by type in `users.UserGender.type`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user gender; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-hashfunction-c1d19413a775" title="Hash Function" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.hashFunction`

            **Hash Function.** Hash function used to store the password (MD5, SHA-1, crypt). The current read stream does not collect or emit this write-only credential field.

            * **Enables:** Confirm that `users.hashFunction` is absent from the configured read response; no join, filter, attribution, or measurement may rely on it.
            * **Interpretation:** Google Workspace documents this field for credential writes, but the configured read operation does not return or collect it.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-id-2b8cfb3d084a" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `users.id`

            **ID.** Unique immutable ID of the user. It provides the reference needed to connect the user to the corresponding provider object.

            * **Enables:** Match repeated user entries on ID in `users.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its user namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key. A connector directive maps this field to account identity.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-ims-47b7972cd6e2" title="Ims" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `users.ims`

            **Ims.** Instant messenger accounts for the user. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned user im in `users.ims` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns ims as an array of user im entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-ims-customprotocol-225e2289b0ee" title="Custom Protocol" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.ims.customProtocol`

            **Custom Protocol.** Custom protocol label if protocol is 'custom\_protocol'. It must be interpreted with the enclosing provider field name, type, or custom schema for the user im.

            * **Enables:** Interpret `users.UserIm.customProtocol` with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
            * **Interpretation:** Google Workspace reports custom protocol under the enclosing custom or typed field contract on each user im; compare it only with values from the same provider key and type.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-ims-customtype-d39ea98b9604" title="Custom Type" icon="circle-exclamation" iconType="sharp-duotone-solid">
            Developer identifier: `users.ims.customType`

            **Custom Type.** Custom type label if type is 'custom'. It must be interpreted with the enclosing provider field name, type, or custom schema for the user im.

            * **Enables:** Segment user im entries in Users by custom type in `users.UserIm.customType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports custom type as a label from its own taxonomy on each user im; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-ims-im-d964f6985e3c" title="Im" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.ims.im`

            **Im.** The IM network handle/ID. It supplies the im profile facet used to reconcile or attribute the user im.

            * **Enables:** Match repeated user im entries on im in `users.UserIm.im`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports im on each user im; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-ims-primary-d778f29f2946" title="Primary" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.ims.primary`

            **Primary.** Whether this is the user's primary IM. It distinguishes the provider-defined primary state or classification for the user im.

            * **Enables:** Filter Users by whether this is the user's primary im in `users.UserIm.primary`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this is the user's primary im as a boolean on each user im; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-ims-protocol-10247211eb02" title="Protocol" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `users.ims.protocol`

            **Protocol.** The IM protocol (aim, custom\_protocol, gtalk, icq, jabber, msn, net\_meeting, qq, skype, yahoo). It must be interpreted with the enclosing provider field name, type, or custom schema for the user im.

            * **Enables:** Interpret `users.UserIm.protocol` with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
            * **Interpretation:** Google Workspace reports protocol under the enclosing custom or typed field contract on each user im; compare it only with values from the same provider key and type.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-ims-type-0c50c3f4cb85" title="Type" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.ims.type`

            **Type.** The type of IM account (custom, home, other, work). It distinguishes the provider-defined type state or classification for the user im.

            * **Enables:** Match repeated user im entries on type in `users.UserIm.type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user im; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-includeinglobaladdresslist-cec9db91dc31" title="Include In Global Address List" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `users.includeInGlobalAddressList`

            **Include In Global Address List.** Whether the user's profile is visible in the Global Address List. It distinguishes the provider-defined include in global address list state or classification for the user.

            * **Enables:** Filter Users by whether the user's profile is visible in the global address list in `users.includeInGlobalAddressList`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the user's profile is visible in the global address list as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-ipwhitelisted-6fb779995e3b" title="IP Whitelisted" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `users.ipWhitelisted`

            **IP Whitelisted.** Whether the user's IP address is whitelisted. It distinguishes the provider-defined IP whitelisted state or classification for the user.

            * **Enables:** Filter Users by whether the user's IP address is whitelisted in `users.ipWhitelisted`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the user's IP address is whitelisted as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-isadmin-eb3760bab123" title="Is Admin" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `users.isAdmin`

            **Is Admin.** Whether the user has super admin privileges. It distinguishes the provider-defined is admin state or classification for the user.

            * **Enables:** Filter Users by whether the user has super admin privileges in `users.isAdmin`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the user has super admin privileges as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-isdelegatedadmin-6348abead517" title="Is Delegated Admin" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `users.isDelegatedAdmin`

            **Is Delegated Admin.** Whether the user is a delegated admin. It distinguishes the provider-defined is delegated admin state or classification for the user.

            * **Enables:** Filter Users by whether the user is a delegated admin in `users.isDelegatedAdmin`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the user is a delegated admin as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-isenforcedin2sv-66308dfbfb79" title="Is Enforced In2 Sv" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.isEnforcedIn2Sv`

            **Is Enforced In2 Sv.** Whether 2-step verification is enforced for the user. It distinguishes the provider-defined is enforced in2 sv state or classification for the user.

            * **Enables:** Filter Users by whether 2-step verification is enforced for the user in `users.isEnforcedIn2Sv`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports 2-step verification is enforced for the user as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-isenrolledin2sv-0825480f4fa7" title="Is Enrolled In2 Sv" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `users.isEnrolledIn2Sv`

            **Is Enrolled In2 Sv.** Whether the user is enrolled in 2-step verification. It distinguishes the provider-defined is enrolled in2 sv state or classification for the user.

            * **Enables:** Filter Users by whether the user is enrolled in 2-step verification in `users.isEnrolledIn2Sv`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the user is enrolled in 2-step verification as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-ismailboxsetup-5922d76b3803" title="Is Mailbox Setup" icon="envelope" iconType="sharp-duotone-solid">
            Developer identifier: `users.isMailboxSetup`

            **Is Mailbox Setup.** Whether the user's Google mailbox has been created. It distinguishes the provider-defined is mailbox setup state or classification for the user.

            * **Enables:** Filter Users by whether the user's google mailbox has been created in `users.isMailboxSetup`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the user's google mailbox has been created as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-keywords-acf8862f0bab" title="Keywords" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `users.keywords`

            **Keywords.** Keywords associated with the user. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned user keyword in `users.keywords` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns keywords as an array of user keyword entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-keywords-customtype-3a9a78fe989c" title="Custom Type" icon="circle-exclamation" iconType="sharp-duotone-solid">
            Developer identifier: `users.keywords.customType`

            **Custom Type.** Custom type label if type is 'custom'. It must be interpreted with the enclosing provider field name, type, or custom schema for the user keyword.

            * **Enables:** Segment user keyword entries in Users by custom type in `users.UserKeyword.customType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports custom type as a label from its own taxonomy on each user keyword; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-keywords-type-754bd22ecfe0" title="Type" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.keywords.type`

            **Type.** The type of keyword (custom, mission, occupation, outlook). It distinguishes the provider-defined type state or classification for the user keyword.

            * **Enables:** Match repeated user keyword entries on type in `users.UserKeyword.type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user keyword; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-keywords-value-891b8b1cc89f" title="Value" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `users.keywords.value`

            **Value.** The keyword value. It must be interpreted with the enclosing provider field name, type, or custom schema for the user keyword.

            * **Enables:** Match repeated user keyword entries on value in `users.UserKeyword.value`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports value on each user keyword; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-kind-7d10663779ed" title="Kind" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `users.kind`

            **Kind.** The type of the API resource, e.g. admin#directory#user. It locates the provider resource or path associated with the user.

            * **Enables:** Segment user entries in Users by kind in `users.kind`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports kind as a label from its own taxonomy on each user; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-languages-e3d2a3667ffd" title="Languages" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `users.languages`

            **Languages.** Languages the user speaks. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned user language in `users.languages` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns languages as an array of user language entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-languages-customlanguage-f8428a0f8e8d" title="Custom Language" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.languages.customLanguage`

            **Custom Language.** Custom language name if not a standard code. It supplies the custom language profile facet used to reconcile or attribute the user language.

            * **Enables:** Reconcile the user's custom language in `users.UserLanguage.customLanguage` with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
            * **Interpretation:** Google Workspace reports custom language as a mutable profile or directory attribute on each user language; it may be absent, shared, or non-unique.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-languages-languagecode-305de0873fe0" title="Language Code" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `users.languages.languageCode`

            **Language Code.** ISO 639 language code (e.g., en, fr). It supplies the language code profile facet used to reconcile or attribute the user language.

            * **Enables:** Match repeated user language entries on language code in `users.UserLanguage.languageCode`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports language code on each user language; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-languages-preference-3dca11294bc8" title="Preference" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `users.languages.preference`

            **Preference.** Whether this is a preferred language (preferred or not\_preferred). It distinguishes the provider-defined preference state or classification for the user language.

            * **Enables:** Filter Users by the exact Google Workspace-defined preference in `users.UserLanguage.preference` and preserve unknown values as distinct categories.
            * **Interpretation:** Google Workspace supplies preference from its own taxonomy on each user language; preserve unknown and newly introduced labels.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-lastlogintime-d0febc96fec7" title="Last Login Time" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `users.lastLoginTime`

            **Last Login Time.** When the user last logged in (ISO 8601). It anchors the user on the provider's reported timeline.

            * **Enables:** Order Users by last login time in `users.lastLoginTime` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports last login time as a timestamp on each user; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-locations-7e3c2cf8d308" title="Locations" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `users.locations`

            **Locations.** Physical locations associated with the user (building, floor, desk). It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned user location in `users.locations` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns locations as an array of user location entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-locations-area-603dddd1d8a4" title="Area" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.locations.area`

            **Area.** Textual location (usually city and state). It supplies the provider-reported address or location facet for the user location, not a residency determination.

            * **Enables:** Group Users by the exact area in `users.UserLocation.area` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Google Workspace reports area as an address or location facet on each user location; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-locations-buildingid-2d1e92b78b3b" title="Building ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.locations.buildingId`

            **Building ID.** Building identifier. It provides the reference needed to connect the user to the corresponding provider object.

            * **Enables:** Match repeated user location entries on building ID in `users.UserLocation.buildingId`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports building ID as an identifier in its building namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-locations-customtype-bbec7ab8cd21" title="Custom Type" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.locations.customType`

            **Custom Type.** Custom type label if type is 'custom'. It must be interpreted with the enclosing provider field name, type, or custom schema for the user location.

            * **Enables:** Segment user location entries in Users by custom type in `users.UserLocation.customType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports custom type as a label from its own taxonomy on each user location; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-locations-deskcode-35bddddce80e" title="Desk Code" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.locations.deskCode`

            **Desk Code.** Desk location/number. It supplies the provider-reported address or location facet for the user location, not a residency determination.

            * **Enables:** Group Users by the exact desk code in `users.UserLocation.deskCode` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Google Workspace reports desk code as an address or location facet on each user location; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-locations-floorname-3ff09ba8b183" title="Floor Name" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `users.locations.floorName`

            **Floor Name.** Floor name/number. It supplies the provider-reported address or location facet for the user location, not a residency determination.

            * **Enables:** Label each user location with floor name from `users.UserLocation.floorName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports floor name as display text for each user location; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-locations-floorsection-4d0fa726986b" title="Floor Section" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.locations.floorSection`

            **Floor Section.** Floor section (e.g., wing, zone). It supplies the provider-reported address or location facet for the user location, not a residency determination.

            * **Enables:** Group Users by the exact floor section in `users.UserLocation.floorSection` while keeping that address or location separate from geolocation and residency claims.
            * **Interpretation:** Google Workspace reports floor section as an address or location facet on each user location; it does not establish verified geolocation or data residency.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-locations-type-c3284cfcd8ee" title="Type" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.locations.type`

            **Type.** The type of location (custom, default, desk). It supplies the provider-reported address or location facet for the user location, not a residency determination.

            * **Enables:** Match repeated user location entries on type in `users.UserLocation.type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user location; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-name-bff7c9c379e3" title="Name" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `users.name`

            **Name.** User's name object containing givenName, familyName, fullName. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Attribute name in `users.name` to the parent user; identify parent records where that nested name object is absent.
            * **Interpretation:** Google Workspace reports name as a nested object on each user; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-name-displayname-0feb9f95195e" title="Display Name" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.name.displayName`

            **Display Name.** Display name for the user. It distinguishes the provider-defined display name state or classification for the user name.

            * **Enables:** Label each user name with display name from `users.UserName.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each user name; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-name-familyname-48138ded9cca" title="Family Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.name.familyName`

            **Family Name.** The user's last/family name. It gives the user name a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each user name with family name from `users.UserName.familyName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports family name as display text for each user name; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-name-fullname-3f3f249840bd" title="Full Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.name.fullName`

            **Full Name.** The user's full name formed by concatenating first and last name. It gives the user name a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each user name with full name from `users.UserName.fullName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports full name as display text for each user name; names are mutable and are not stable identities. A connector directive maps this field to a person's display name.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-name-givenname-dc3b1a6de619" title="Given Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.name.givenName`

            **Given Name.** The user's first/given name. It gives the user name a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each user name with given name from `users.UserName.givenName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports given name as display text for each user name; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-noneditablealiases-7c37418cb266" title="Non Editable Aliases" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `users.nonEditableAliases`

            **Non Editable Aliases.** List of non-editable alias email addresses (typically outside the primary domain). It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned non editable aliase value in `users.nonEditableAliases` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns non editable aliases as an array of non editable aliase value entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-notes-6620f9655cf3" title="Notes" icon="terminal" iconType="sharp-duotone-solid">
            Developer identifier: `users.notes`

            **Notes.** Notes about the user. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Attribute notes in `users.notes` to the parent user; identify parent records where that nested notes object is absent.
            * **Interpretation:** Google Workspace reports notes as a nested object on each user; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-c266764fcb95" title="Organizations" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations`

            **Organizations.** User's organization details (title, department, cost center, etc.). It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned user organization in `users.organizations` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns organizations as an array of user organization entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-costcenter-5248873a08ee" title="Cost Center" icon="calculator" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.costCenter`

            **Cost Center.** Cost center of the user's organization. It supplies the cost center measure for the user organization at the provider's declared unit and grain.

            * **Enables:** Measure cost center through `users.UserOrganization.costCenter` for each user organization and compare only values with the same unit and record grain.
            * **Interpretation:** Google Workspace reports cost center as a measure on each user organization; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-customtype-ecb38c927de1" title="Custom Type" icon="circle-exclamation" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.customType`

            **Custom Type.** Custom type label if type is custom. It must be interpreted with the enclosing provider field name, type, or custom schema for the user organization.

            * **Enables:** Segment user organization entries in Users by custom type in `users.UserOrganization.customType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports custom type as a label from its own taxonomy on each user organization; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-department-c16385243b43" title="Department" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.department`

            **Department.** Department within the organization. It supplies the department profile facet used to reconcile or attribute the user organization.

            * **Enables:** Reconcile the user's department in `users.UserOrganization.department` with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
            * **Interpretation:** Google Workspace reports department as a mutable profile or directory attribute on each user organization; it may be absent, shared, or non-unique.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-description-3ea059980247" title="Description" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.description`

            **Description.** Description of the organization. It defines the content surface available for this user.

            * **Enables:** Locate user organization records by description in `users.UserOrganization.description`; attribute each text match to its parent user and, when present, its reported author.
            * **Interpretation:** Google Workspace supplies description as text on each user organization; referenced files or media are not implied unless explicitly represented.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-domain-0e637ca698a0" title="Domain" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.domain`

            **Domain.** The domain the organization is associated with. It supplies the domain profile facet used to reconcile or attribute the user organization.

            * **Enables:** Reconcile the user's domain in `users.UserOrganization.domain` with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
            * **Interpretation:** Google Workspace reports domain as a mutable profile or directory attribute on each user organization; it may be absent, shared, or non-unique.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-fulltimeequivalent-592ea6c1d739" title="Full Time Equivalent" icon="calendar-days" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.fullTimeEquivalent`

            **Full Time Equivalent.** Full-time equivalent millipercent (100000 = 100%). It supplies the full time equivalent measure for the user organization at the provider's declared unit and grain.

            * **Enables:** Measure full time equivalent through `users.UserOrganization.fullTimeEquivalent` for each user organization and compare only values with the same unit and record grain.
            * **Interpretation:** Google Workspace reports full time equivalent as a measure on each user organization; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-location-deb4271139fe" title="Location" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.location`

            **Location.** Physical location of the organization. It supplies the provider-reported address or location facet for the user organization, not a residency determination.

            * **Enables:** Group Users by location in `users.UserOrganization.location` without treating that user, device, or request attribute as a data-residency signal.
            * **Interpretation:** Google Workspace reports location as a user, device, request, or resource location attribute on each user organization; it does not establish where data is stored or processed.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-name-9971a35c764f" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.name`

            **Name.** Name of the organization. It gives the user organization a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Match repeated user organization entries on name in `users.UserOrganization.name`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports name as display text for each user organization; names are mutable and are not stable identities. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-primary-6577ce0d8213" title="Primary" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.primary`

            **Primary.** Whether this is the user's primary organization. It distinguishes the provider-defined primary state or classification for the user organization.

            * **Enables:** Filter Users by whether this is the user's primary organization in `users.UserOrganization.primary`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this is the user's primary organization as a boolean on each user organization; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-symbol-3aef9102c5b5" title="Symbol" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.symbol`

            **Symbol.** Text string symbol of the organization (e.g., stock ticker). It supplies the returned symbol text needed to understand the user organization in context.

            * **Enables:** Search the returned symbol text in `users.UserOrganization.symbol` and attribute each match to its parent user and reported author when available.
            * **Interpretation:** Google Workspace supplies symbol as returned text on each user organization; truncation, formatting, and access boundaries can limit completeness.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-title-97a994deb359" title="Title" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.title`

            **Title.** The user's title within the organization. It gives the user organization a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each user organization with title from `users.UserOrganization.title`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports title as display text for each user organization; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-organizations-type-4c8d30a387d7" title="Type" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.organizations.type`

            **Type.** The type of organization (domain\_only, school, unknown, work). It distinguishes the provider-defined type state or classification for the user organization.

            * **Enables:** Match repeated user organization entries on type in `users.UserOrganization.type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user organization; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-orgunitpath-250dac108c64" title="Org Unit Path" icon="code-commit" iconType="sharp-duotone-solid">
            Developer identifier: `users.orgUnitPath`

            **Org Unit Path.** Organizational unit path the user belongs to (e.g. /). It supplies the org unit path boundary, band, or unit needed to interpret the companion measure.

            * **Enables:** Interpret `users.orgUnitPath` with its companion minimum, maximum, interval, or unit before comparing the org unit path across like-for-like records.
            * **Interpretation:** Google Workspace reports org unit path as a boundary, band, interval, or unit on each user; it is meaningful only with its companion measure and provider scale.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-password-517ae09bfa5b" title="Password" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `users.password`

            **Password.** User's password (only present in create/update requests, never in responses). The current read stream does not collect or emit this write-only credential field.

            * **Enables:** Confirm that `users.password` is absent from the configured read response; no join, filter, attribution, or measurement may rely on it.
            * **Interpretation:** Google Workspace documents this field for credential writes, but the configured read operation does not return or collect it.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-phones-b8cb41479f0b" title="Phones" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.phones`

            **Phones.** List of phone numbers for the user. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned user phone in `users.phones` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns phones as an array of user phone entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-phones-customtype-611eef2f10f6" title="Custom Type" icon="video" iconType="sharp-duotone-solid">
            Developer identifier: `users.phones.customType`

            **Custom Type.** Custom type label if type is 'custom'. It must be interpreted with the enclosing provider field name, type, or custom schema for the user phone.

            * **Enables:** Segment user phone entries in Users by custom type in `users.UserPhone.customType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports custom type as a label from its own taxonomy on each user phone; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-phones-primary-a08ce5d52b83" title="Primary" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.phones.primary`

            **Primary.** Whether this is the user's primary phone number. It distinguishes the provider-defined primary state or classification for the user phone.

            * **Enables:** Filter Users by whether this is the user's primary phone number in `users.UserPhone.primary`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this is the user's primary phone number as a boolean on each user phone; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-phones-type-cd7d09a2a2cb" title="Type" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.phones.type`

            **Type.** The type of phone number (assistant, callback, car, company\_main, custom, grand\_central, home, home\_fax, isdn, main, mobile, other, other\_fax, pager, radio, telex, tty\_tdd, work, work\_fax, work\_mobile, work\_pager). It distinguishes the provider-defined type state or classification for the user phone.

            * **Enables:** Match repeated user phone entries on type in `users.UserPhone.type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user phone; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-phones-value-59a4a98ae9ff" title="Value" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `users.phones.value`

            **Value.** The phone number. It must be interpreted with the enclosing provider field name, type, or custom schema for the user phone.

            * **Enables:** Match repeated user phone entries on value in `users.UserPhone.value`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports value on each user phone; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-83910859dcb5" title="Posix Accounts" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts`

            **Posix Accounts.** POSIX account information for the user. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned user posix account in `users.posixAccounts` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns posix accounts as an array of user posix account entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-accountid-a5ae921c2ba0" title="Account ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts.accountId`

            **Account ID.** A POSIX account field identifier. It provides the reference needed to connect the user to the corresponding provider object.

            * **Enables:** Connect each user posix account in Users to the referenced account through `users.UserPosixAccount.accountId`; flag account ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports account ID as an identifier in its account namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-gecos-df1547433c20" title="Gecos" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts.gecos`

            **Gecos.** The GECOS field. It supplies the gecos profile facet used to reconcile or attribute the user posix account.

            * **Enables:** Reconcile the user's gecos in `users.UserPosixAccount.gecos` with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
            * **Interpretation:** Google Workspace reports gecos as a mutable profile or directory attribute on each user posix account; it may be absent, shared, or non-unique.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-gid-5f670c218a54" title="Gid" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts.gid`

            **Gid.** The POSIX group ID. It identifies the related provider object that gives the user posix account its parent, owner, or container context.

            * **Enables:** Connect each user posix account to the related gid in `users.UserPosixAccount.gid` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports gid as relationship context on each user posix account; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-homedirectory-cff61b4c8f42" title="Home Directory" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts.homeDirectory`

            **Home Directory.** The home directory path. It locates the provider resource or path associated with the user posix account.

            * **Enables:** Resolve the user's provider resource or path through `users.UserPosixAccount.homeDirectory`; verify access separately and do not infer that linked content was ingested.
            * **Interpretation:** Google Workspace returns home directory as a resource locator or path for each user posix account; access can expire or depend on viewer permissions, and linked content is not implied.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-operatingsystemtype-28301bb36b1a" title="Operating System Type" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts.operatingSystemType`

            **Operating System Type.** The operating system type (linux, unspecified, windows). It distinguishes the provider-defined operating system type state or classification for the user posix account.

            * **Enables:** Segment user posix account entries in Users by operating system type in `users.UserPosixAccount.operatingSystemType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports operating system type as a label from its own taxonomy on each user posix account; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-primary-a97102ad2c2e" title="Primary" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts.primary`

            **Primary.** Whether this is the primary POSIX account. It distinguishes the provider-defined primary state or classification for the user posix account.

            * **Enables:** Filter Users by whether this is the primary posix account in `users.UserPosixAccount.primary`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this is the primary posix account as a boolean on each user posix account; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-shell-4f91414260e4" title="Shell" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts.shell`

            **Shell.** The login shell path. It locates the provider resource or path associated with the user posix account.

            * **Enables:** Resolve the user's provider resource or path through `users.UserPosixAccount.shell`; verify access separately and do not infer that linked content was ingested.
            * **Interpretation:** Google Workspace returns shell as a resource locator or path for each user posix account; access can expire or depend on viewer permissions, and linked content is not implied.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-systemid-89b119fc4544" title="System ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts.systemId`

            **System ID.** System identifier for which this account applies. It provides the reference needed to connect the user to the corresponding provider object.

            * **Enables:** Match repeated user posix account entries on system ID in `users.UserPosixAccount.systemId`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports system ID as an identifier in its system namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-uid-5cd1e7c27f15" title="Uid" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts.uid`

            **Uid.** The POSIX user ID. It identifies the related provider object that gives the user posix account its parent, owner, or container context.

            * **Enables:** Connect each user posix account to the related uid in `users.UserPosixAccount.uid` and verify that the referenced provider object resolves in the expected parent or container.
            * **Interpretation:** Google Workspace reports uid as relationship context on each user posix account; resolve it in the named provider namespace rather than by display text alone.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-posixaccounts-username-615816300e2d" title="User Name" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `users.posixAccounts.username`

            **User Name.** The POSIX username. It gives the user posix account a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each user posix account with user name from `users.UserPosixAccount.username`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports user name as display text for each user posix account; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-primaryemail-11ae5661571a" title="Primary Email" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.primaryEmail`

            **Primary Email.** Primary email address of the user. It supplies the provider-reported address or location facet for the user, not a residency determination.

            * **Enables:** Attribute each user to a person or account by the exact primary email in `users.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports primary email as an address on each user; aliases, casing, and unverified addresses can prevent a one-to-one person match. A connector directive maps this field to a person's email identity.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-recoveryemail-c003273224b0" title="Recovery Email" icon="comments" iconType="sharp-duotone-solid">
            Developer identifier: `users.recoveryEmail`

            **Recovery Email.** Recovery email address for the user. It supplies the provider-reported address or location facet for the user, not a residency determination.

            * **Enables:** Attribute each user to a person or account by the exact recovery email in `users.recoveryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports recovery email as an address on each user; aliases, casing, and unverified addresses can prevent a one-to-one person match.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-recoveryphone-2cfb5afc94e4" title="Recovery Phone" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.recoveryPhone`

            **Recovery Phone.** Recovery phone number for the user in E.164 format. It supplies the recovery phone profile facet used to reconcile or attribute the user.

            * **Enables:** Reconcile the user's recovery phone in `users.recoveryPhone` with its provider profile or directory identity; confirm ambiguous matches with the stable provider ID.
            * **Interpretation:** Google Workspace reports recovery phone as a mutable profile or directory attribute on each user; it may be absent, shared, or non-unique.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-relations-7ef084961fa4" title="Relations" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.relations`

            **Relations.** User's relationships (e.g., manager, assistant). It preserves the nested context needed to interpret the parent user.

            * **Enables:** Reconcile each returned user relation in `users.relations` with the parent user's provider profile; preserve distinct aliases, contact points, and organization attributes.
            * **Interpretation:** Google Workspace returns relations as an array of user relation entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-relations-customtype-3858251ef892" title="Custom Type" icon="circle-exclamation" iconType="sharp-duotone-solid">
            Developer identifier: `users.relations.customType`

            **Custom Type.** Custom type label if type is 'custom'. It must be interpreted with the enclosing provider field name, type, or custom schema for the user relation.

            * **Enables:** Segment user relation entries in Users by custom type in `users.UserRelation.customType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports custom type as a label from its own taxonomy on each user relation; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-relations-type-2282c9af9337" title="Type" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `users.relations.type`

            **Type.** The type of relation (admin\_assistant, assistant, brother, child, custom, domestic\_partner, dotted\_line\_manager, exec\_assistant, father, friend, manager, mother, parent, partner, referred\_by, relative, sister, spouse). It identifies the related provider object that gives the user relation its parent, owner, or container context.

            * **Enables:** Match repeated user relation entries on type in `users.UserRelation.type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user relation; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-relations-value-9b5de40d0c8d" title="Value" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `users.relations.value`

            **Value.** The related person's identifier (typically email). It identifies the related provider object that gives the user relation its parent, owner, or container context.

            * **Enables:** Match repeated user relation entries on value in `users.UserRelation.value`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports value on each user relation; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-sshpublickeys-cce38a9262b3" title="SSH Public Keys" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.sshPublicKeys`

            **SSH Public Keys.** SSH public keys for the user. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Connect the parent user to every referenced user ssh public key in `users.sshPublicKeys`; identify provider IDs that do not resolve to the expected related object.
            * **Interpretation:** Google Workspace returns ssh public keys as an array of user ssh public key entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-sshpublickeys-expirationtimeusec-a9e905df6ca5" title="Expiration Time Usec" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.sshPublicKeys.expirationTimeUsec`

            **Expiration Time Usec.** Expiration time of the SSH key in microseconds since epoch. It is needed to place the user ssh public key on the provider timeline at the field's stated precision.

            * **Enables:** Order Users by the provider-reported instant in `users.UserSshPublicKey.expirationTimeUsec` and isolate records inside the same time window and precision.
            * **Interpretation:** Google Workspace reports expiration time usec as a time value for each user ssh public key; format, timezone, precision, and absolute-versus-relative meaning follow this field's contract.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-sshpublickeys-fingerprint-0301c3698852" title="Fingerprint" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.sshPublicKeys.fingerprint`

            **Fingerprint.** The SHA-256 fingerprint of the SSH public key. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

            * **Enables:** Match repeated user ssh public key entries on fingerprint in `users.UserSshPublicKey.fingerprint`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports fingerprint on each user ssh public key; missing and empty values can have different meanings. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-sshpublickeys-key-5fce5984ff18" title="Key" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.sshPublicKeys.key`

            **Key.** The SSH public key value. It provides the reference needed to connect the user to the corresponding provider object.

            * **Enables:** Connect each user ssh public key in Users to the referenced user ssh public key through `users.UserSshPublicKey.key`; flag key values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports key as an identifier in its user ssh public key namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-suspended-58d5b631a6bd" title="Suspended" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `users.suspended`

            **Suspended.** Whether the user account is suspended. It distinguishes the provider-defined suspended state or classification for the user.

            * **Enables:** Filter Users by whether the user account is suspended in `users.suspended`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the user account is suspended as a boolean on each user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-suspensionreason-c363d34a4dcd" title="Suspension Reason" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `users.suspensionReason`

            **Suspension Reason.** The reason the user account was suspended, if applicable. It supplies the returned suspension reason text needed to understand the user in context.

            * **Enables:** Search the returned suspension reason text in `users.suspensionReason` and attribute each match to its parent user and reported author when available.
            * **Interpretation:** Google Workspace supplies suspension reason as returned text on each user; truncation, formatting, and access boundaries can limit completeness.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-thumbnailphotoetag-f115843fc122" title="Thumbnail Photo ETag" icon="badge-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.thumbnailPhotoEtag`

            **Thumbnail Photo ETag.** ETag of the user's profile photo. It is needed for conditional reads and provider-version checks, not as a stable business identifier.

            * **Enables:** Use `users.thumbnailPhotoEtag` for conditional provider reads and revision checks; pair the ETag with the user ID rather than joining on it.
            * **Interpretation:** Google Workspace returns this ETag as an opaque revision token for each user; it can change when the resource changes and is not a universal identifier.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-thumbnailphotourl-0ded7bd40566" title="Thumbnail Photo URL" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `users.thumbnailPhotoUrl`

            **Thumbnail Photo URL.** URL of the user's profile photo thumbnail. It locates the provider resource or path associated with the user.

            * **Enables:** Associate each user with the resource identified by thumbnail photo URL in `users.thumbnailPhotoUrl`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports thumbnail photo URL as a resource locator for each user; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-websites-35995abc1e8a" title="Websites" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `users.websites`

            **Websites.** Websites associated with the user. It preserves the nested context needed to interpret the parent user.

            * **Enables:** Associate every returned user website in `users.websites` with the parent user; use the provider locator for reference without inferring that linked content was collected.
            * **Interpretation:** Google Workspace returns websites as an array of user website entries on each user; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-websites-customtype-d5cc1ee462e6" title="Custom Type" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `users.websites.customType`

            **Custom Type.** Custom type label if type is 'custom'. It must be interpreted with the enclosing provider field name, type, or custom schema for the user website.

            * **Enables:** Segment user website entries in Users by custom type in `users.UserWebsite.customType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports custom type as a label from its own taxonomy on each user website; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-websites-primary-5f1f651ef486" title="Primary" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.websites.primary`

            **Primary.** Whether this is the user's primary website. It distinguishes the provider-defined primary state or classification for the user website.

            * **Enables:** Filter Users by whether this is the user's primary website in `users.UserWebsite.primary`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this is the user's primary website as a boolean on each user website; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-websites-type-9b08cad6cc1c" title="Type" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `users.websites.type`

            **Type.** The type of website (app\_install\_page, blog, custom, ftp, home, home\_page, other, profile, reservations, resume, work). It distinguishes the provider-defined type state or classification for the user website.

            * **Enables:** Match repeated user website entries on type in `users.UserWebsite.type`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each user website; preserve unknown labels rather than mapping them by assumption. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-users-websites-value-c6766ecf1439" title="Value" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `users.websites.value`

            **Value.** The URL of the website. It locates the provider resource or path associated with the user website.

            * **Enables:** Match repeated user website entries on value in `users.UserWebsite.value`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports value as a resource locator for each user website; access still depends on viewer permissions and the URL may expire or change. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-workspace-drive-activity-b13f991fd99d" title="Workspace Drive Activity" icon="chart-column" iconType="sharp-duotone-solid">
        Developer identifier: `workspace_drive_activity`

        **Workspace Drive Activity.** Google Workspace workspace drive activity records.

        * **Enables:** Trace provider-reported Drive actions to an actor, target resource, action detail, and event time.
        * **Scope:** Reads the records selected by Google Workspace's `https://driveactivity.googleapis.com/v2/activity:query` operation as an event stream using incremental synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. Drive change details are action metadata and diffs, not the body of the changed file. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-workspace-drive-activity-actors-e3eaa03f6b36" title="Actors" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.actors`

            **Actors.** Actors involved in the activity. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Match every returned Google Workspace drive activity actor in `workspace_drive_activity.actors` to the parent workspace drive activity; use the element's provider identity or role to reconcile membership and attribution.
            * **Interpretation:** Google Workspace returns actors as an array of Google Workspace drive activity actor entries on each workspace drive activity; missing, empty, and permission-redacted arrays are not equivalent. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-actors-user-c82cd0117627" title="User" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.actors.user`

            **User.** User actor details. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute user in `workspace_drive_activity.GoogleWorkspaceDriveActivityActor.user` to the parent workspace drive activity; identify parent records where that nested user object is absent.
            * **Interpretation:** Google Workspace reports user as a nested object on each Google Workspace drive activity actor; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-actors-user-know-fff6666244ec" title="Known User" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.actors.user.knownUser`

            **Known User.** Known Google user. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute known user in `workspace_drive_activity.GoogleWorkspaceDriveActivityUser.knownUser` to the parent workspace drive activity; identify parent records where that nested known user object is absent.
            * **Interpretation:** Google Workspace reports known user as a nested object on each Google Workspace drive activity user; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-actors-user-know-8632ef59cad9" title="Email" icon="comments" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.actors.user.knownUser.email`

            **Email.** Known user's email address when returned by the API. It supplies the provider-reported address or location facet for the Google Workspace drive activity known user, not a residency determination.

            * **Enables:** Attribute each Google Workspace drive activity known user to a person or account by the exact email in `workspace_drive_activity.GoogleWorkspaceDriveActivityKnownUser.email`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports email as an address on each Google Workspace drive activity known user; aliases, casing, and unverified addresses can prevent a one-to-one person match. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-actors-user-know-7f57fdfebdc7" title="Is Current User" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.actors.user.knownUser.isCurrentUser`

            **Is Current User.** Whether this actor is the authenticated user. It distinguishes the provider-defined is current user state or classification for the Google Workspace drive activity known user.

            * **Enables:** Filter Workspace Drive Activity by whether this actor is the authenticated user in `workspace_drive_activity.GoogleWorkspaceDriveActivityKnownUser.isCurrentUser`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this actor is the authenticated user as a boolean on each Google Workspace drive activity known user; a missing field is unknown, not false. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-actors-user-know-0bfede8e5344" title="Person Name" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.actors.user.knownUser.personName`

            **Person Name.** People API resource name for the user. It gives the Google Workspace drive activity known user a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each Google Workspace drive activity known user with person name from `workspace_drive_activity.GoogleWorkspaceDriveActivityKnownUser.personName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports person name as display text for each Google Workspace drive activity known user; names are mutable and are not stable identities. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-id-89ebf2a96960" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.id`

            **ID.** Parable synthetic primary key (sha256). Stable across per-user vantage fan-out when the underlying activity payload matches. It provides the reference needed to connect the workspace drive activity to the corresponding provider object.

            * **Enables:** Match repeated workspace drive activity entries on ID in `workspace_drive_activity.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its workspace drive activity namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-c1ca586959cb" title="Primary Action Detail" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail`

            **Primary Action Detail.** The primary action represented by this activity. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute primary action detail in `workspace_drive_activity.primaryActionDetail` to the parent workspace drive activity; identify parent records where that nested primary action detail object is absent.
            * **Interpretation:** Google Workspace reports primary action detail as a nested object on each workspace drive activity; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-8a423d0e008d" title="Comment" icon="code-merge" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail.comment`

            **Comment.** Comment action details. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute comment in `workspace_drive_activity.GoogleWorkspaceDriveActivityActionDetail.comment` to the parent workspace drive activity; identify parent records where that nested comment object is absent.
            * **Interpretation:** Google Workspace reports comment as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-2f27d42ad709" title="Create" icon="code-merge" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail.create`

            **Create.** Create action details. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute create in `workspace_drive_activity.GoogleWorkspaceDriveActivityActionDetail.create` to the parent workspace drive activity; identify parent records where that nested create object is absent.
            * **Interpretation:** Google Workspace reports create as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-bda7656d038d" title="Delete" icon="code-merge" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail.delete`

            **Delete.** Delete action details. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute delete in `workspace_drive_activity.GoogleWorkspaceDriveActivityActionDetail.delete` to the parent workspace drive activity; identify parent records where that nested delete object is absent.
            * **Interpretation:** Google Workspace reports delete as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-9698c225d638" title="Type" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail.delete.type`

            **Type.** Delete type, such as TRASH or PERMANENT\_DELETE. It distinguishes the provider-defined type state or classification for the Google Workspace drive activity delete.

            * **Enables:** Segment Google Workspace drive activity delete entries in Workspace Drive Activity by type in `workspace_drive_activity.GoogleWorkspaceDriveActivityDelete.type`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports type as a label from its own taxonomy on each Google Workspace drive activity delete; preserve unknown labels rather than mapping them by assumption. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-4cea2d5ae8fa" title="Edit" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail.edit`

            **Edit.** Edit action details. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute edit in `workspace_drive_activity.GoogleWorkspaceDriveActivityActionDetail.edit` to the parent workspace drive activity; identify parent records where that nested edit object is absent.
            * **Interpretation:** Google Workspace reports edit as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-fce030e7d642" title="Move" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail.move`

            **Move.** Move action details. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute move in `workspace_drive_activity.GoogleWorkspaceDriveActivityActionDetail.move` to the parent workspace drive activity; identify parent records where that nested move object is absent.
            * **Interpretation:** Google Workspace reports move as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-45257b6887bb" title="Permission Change" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail.permissionChange`

            **Permission Change.** Permission-change action details. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute permission change in `workspace_drive_activity.GoogleWorkspaceDriveActivityActionDetail.permissionChange` to the parent workspace drive activity; identify parent records where that nested permission change object is absent.
            * **Interpretation:** Google Workspace reports permission change as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-062a1c7ac90a" title="Rename" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail.rename`

            **Rename.** Rename action details. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute rename in `workspace_drive_activity.GoogleWorkspaceDriveActivityActionDetail.rename` to the parent workspace drive activity; identify parent records where that nested rename object is absent.
            * **Interpretation:** Google Workspace reports rename as a nested object on each Google Workspace drive activity action detail; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-c6c511dbd515" title="New Title" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail.rename.newTitle`

            **New Title.** New title. It gives the Google Workspace drive activity rename a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each Google Workspace drive activity rename with new title from `workspace_drive_activity.GoogleWorkspaceDriveActivityRename.newTitle`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports new title as display text for each Google Workspace drive activity rename; names are mutable and are not stable identities. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryactiondet-8c90f15c74ce" title="Old Title" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryActionDetail.rename.oldTitle`

            **Old Title.** Previous title. It gives the Google Workspace drive activity rename a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each Google Workspace drive activity rename with old title from `workspace_drive_activity.GoogleWorkspaceDriveActivityRename.oldTitle`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports old title as display text for each Google Workspace drive activity rename; names are mutable and are not stable identities. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-primaryemail-51268517f9b5" title="Primary Email" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each workspace drive activity because the child operation does not return that relationship. It supplies the primary email profile facet used to reconcile or attribute the workspace drive activity.

            * **Enables:** Attribute each workspace drive activity to a person or account by the exact primary email in `workspace_drive_activity.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each workspace drive activity; the child Google Workspace operation does not return it. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-targets-e63939b5b0af" title="Targets" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.targets`

            **Targets.** Targets affected by the activity. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute every returned Google Workspace drive activity target in `workspace_drive_activity.targets` to its parent workspace drive activity; keep each relationship distinct and distinguish an absent array from an explicitly empty one.
            * **Interpretation:** Google Workspace returns targets as an array of Google Workspace drive activity target entries on each workspace drive activity; missing, empty, and permission-redacted arrays are not equivalent. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-targets-driveite-819cc05ca82b" title="Drive Item" icon="terminal" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.targets.driveItem`

            **Drive Item.** Drive item target. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute drive item in `workspace_drive_activity.GoogleWorkspaceDriveActivityTarget.driveItem` to the parent workspace drive activity; identify parent records where that nested drive item object is absent.
            * **Interpretation:** Google Workspace reports drive item as a nested object on each Google Workspace drive activity target; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-targets-driveite-65fb655b037d" title="MIME Type" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.targets.driveItem.mimeType`

            **MIME Type.** Drive item MIME type. It identifies the file, document, recording, or attachment metadata associated with the Google Workspace drive activity drive item.

            * **Enables:** Segment Google Workspace drive activity drive item entries in Workspace Drive Activity by MIME type in `workspace_drive_activity.GoogleWorkspaceDriveActivityDriveItem.mimeType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports MIME type as a label from its own taxonomy on each Google Workspace drive activity drive item; preserve unknown labels rather than mapping them by assumption. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-targets-driveite-25c5d39e3bf9" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.targets.driveItem.name`

            **Name.** Drive item resource name. It gives the Google Workspace drive activity drive item a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each Google Workspace drive activity drive item with name from `workspace_drive_activity.GoogleWorkspaceDriveActivityDriveItem.name`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports name as display text for each Google Workspace drive activity drive item; names are mutable and are not stable identities. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-targets-driveite-1b5ae966262d" title="Owner" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.targets.driveItem.owner`

            **Owner.** Drive item owner. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute owner in `workspace_drive_activity.GoogleWorkspaceDriveActivityDriveItem.owner` to the parent workspace drive activity; identify parent records where that nested owner object is absent.
            * **Interpretation:** Google Workspace reports owner as a nested object on each Google Workspace drive activity drive item; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-targets-driveite-110e4eea6b37" title="User" icon="unlock" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.targets.driveItem.owner.user`

            **User.** Owner user details. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute user in `workspace_drive_activity.GoogleWorkspaceDriveActivityOwner.user` to the parent workspace drive activity; identify parent records where that nested user object is absent.
            * **Interpretation:** Google Workspace reports user as a nested object on each Google Workspace drive activity owner; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-targets-driveite-a2cc8f88b245" title="Title" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.targets.driveItem.title`

            **Title.** Drive item display title. It gives the Google Workspace drive activity drive item a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each Google Workspace drive activity drive item with title from `workspace_drive_activity.GoogleWorkspaceDriveActivityDriveItem.title`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports title as display text for each Google Workspace drive activity drive item; names are mutable and are not stable identities. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-targets-filecomm-836743b0f222" title="File Comment" icon="terminal" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.targets.fileComment`

            **File Comment.** File comment target. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute file comment in `workspace_drive_activity.GoogleWorkspaceDriveActivityTarget.fileComment` to the parent workspace drive activity; identify parent records where that nested file comment object is absent.
            * **Interpretation:** Google Workspace reports file comment as a nested object on each Google Workspace drive activity target; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-targets-filecomm-09c9585aa531" title="Legacy Comment ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.targets.fileComment.legacyCommentId`

            **Legacy Comment ID.** Legacy comment identifier. It provides the reference needed to connect the workspace drive activity to the corresponding provider object.

            * **Enables:** Connect each Google Workspace drive activity file comment in Workspace Drive Activity to the referenced legacy comment through `workspace_drive_activity.GoogleWorkspaceDriveActivityFileComment.legacyCommentId`; flag legacy comment ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports legacy comment ID as an identifier in its legacy comment namespace; it is not a universal identity outside Google Workspace. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-timerange-f6309309d43d" title="Time Range" icon="calendar-clock" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.timeRange`

            **Time Range.** Time range (startTime/endTime) for activities aggregated over a window instead of a single timestamp. It preserves the nested context needed to interpret the parent workspace drive activity.

            * **Enables:** Attribute time range in `workspace_drive_activity.timeRange` to the parent workspace drive activity; identify parent records where that nested time range object is absent.
            * **Interpretation:** Google Workspace reports time range as a nested object on each workspace drive activity; optional children may be absent from a valid response. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-activity-timestamp-f5909fbaacf5" title="Timestamp" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_activity.timestamp`

            **Timestamp.** Activity event timestamp. It anchors the workspace drive activity on the provider's reported timeline.

            * **Enables:** Order Workspace Drive Activity by timestamp in `workspace_drive_activity.timestamp` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports timestamp as a timestamp on each workspace drive activity; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing. The schema designates this field as the event timestamp. This stream describes Drive action and change metadata; it does not include the affected file's body or bytes.
          </Accordion>
        </AccordionGroup>
      </Accordion>

      <Accordion id="provider-permission-tap-google-workspace-drive-files-6df5e52b2c75" title="Workspace Drive Files" icon="people-group" iconType="sharp-duotone-solid">
        Developer identifier: `workspace_drive_files`

        **Workspace Drive Files.** Google Docs and Sheets metadata with a current modifiedTime inside the ingestion window.

        * **Enables:** Inventory Google Docs and Sheets metadata changed in the requested window and attribute each file to its owners.
        * **Scope:** Reads the records selected by Google Workspace's `https://www.googleapis.com/drive/v3/files` operation as a changelog stream using incremental synchronization. Each request runs in the parent user's delegated mailbox context. Visibility is limited to the delegated users and OAuth scopes granted to the Google service account. The stream contains Docs and Sheets file metadata, not document text, spreadsheet cell contents, or file bytes. This stream supplies no reliable deletion signal.

        <AccordionGroup>
          <Accordion id="provider-permission-field-google-workspace-drive-files-createdtime-c4f66a14a9e5" title="Created Time" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.createdTime`

            **Created Time.** Time the file was created (RFC 3339). It anchors the workspace drive file on the provider's reported timeline.

            * **Enables:** Order Workspace Drive Files by created time in `workspace_drive_files.createdTime` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports created time as a timestamp on each workspace drive file; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-driveid-291ac55da652" title="Drive ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.driveId`

            **Drive ID.** ID of the shared drive the file resides in. Only populated for items in shared drives. It provides the reference needed to connect the workspace drive file to the corresponding provider object.

            * **Enables:** Connect each workspace drive file in Workspace Drive Files to the referenced drive through `workspace_drive_files.driveId`; flag drive ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports drive ID as an identifier in its drive namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-id-d1d003df44b1" title="ID" icon="address-book" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.id`

            **ID.** Unique identifier for the file. It provides the reference needed to connect the workspace drive file to the corresponding provider object.

            * **Enables:** Match repeated workspace drive file entries on ID in `workspace_drive_files.id`; collapse only entries that share this declared transform key.
            * **Interpretation:** Google Workspace reports ID as an identifier in its workspace drive file namespace; it is not a universal identity outside Google Workspace. The connector explicitly marks this field as a transform deduplication key.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-lastmodifyinguser-32f12cefb821" title="Last Modifying User" icon="brackets-curly" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.lastModifyingUser`

            **Last Modifying User.** The last user to modify the file. It preserves the nested context needed to interpret the parent workspace drive file.

            * **Enables:** Attribute last modifying user in `workspace_drive_files.lastModifyingUser` to the parent workspace drive file; identify parent records where that nested last modifying user object is absent.
            * **Interpretation:** Google Workspace reports last modifying user as a nested object on each workspace drive file; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-lastmodifyinguser-d-f44057663616" title="Display Name" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.lastModifyingUser.displayName`

            **Display Name.** A plain text displayable name for this user. It distinguishes the provider-defined display name state or classification for the drive user.

            * **Enables:** Label each drive user with display name from `workspace_drive_files.DriveUser.displayName`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports display name as display text for each drive user; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-lastmodifyinguser-e-d1a99ce57784" title="Email Address" icon="inbox" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.lastModifyingUser.emailAddress`

            **Email Address.** The email address of the user. It supplies the provider-reported address or location facet for the drive user, not a residency determination.

            * **Enables:** Attribute each drive user to a person or account by the exact email address in `workspace_drive_files.DriveUser.emailAddress`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Google Workspace reports email address as an address on each drive user; aliases, casing, and unverified addresses can prevent a one-to-one person match.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-lastmodifyinguser-k-002be00a4488" title="Kind" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.lastModifyingUser.kind`

            **Kind.** Identifies what kind of resource this is (e.g., drive#user). It distinguishes the provider-defined kind state or classification for the drive user.

            * **Enables:** Segment drive user entries in Workspace Drive Files by kind in `workspace_drive_files.DriveUser.kind`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports kind as a label from its own taxonomy on each drive user; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-lastmodifyinguser-m-e68b3b790dc2" title="Me" icon="globe" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.lastModifyingUser.me`

            **Me.** Whether this user is the requesting user. It distinguishes the provider-defined me state or classification for the drive user.

            * **Enables:** Filter Workspace Drive Files by whether this user is the requesting user in `workspace_drive_files.DriveUser.me`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports this user is the requesting user as a boolean on each drive user; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-lastmodifyinguser-p-6f91855041f2" title="Permission ID" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.lastModifyingUser.permissionId`

            **Permission ID.** The user's ID as visible in Permission resources. It provides the reference needed to connect the workspace drive file to the corresponding provider object.

            * **Enables:** Connect each drive user in Workspace Drive Files to the referenced permission through `workspace_drive_files.DriveUser.permissionId`; flag permission ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports permission ID as an identifier in its permission namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-lastmodifyinguser-p-455a15a95bff" title="Photo Link" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.lastModifyingUser.photoLink`

            **Photo Link.** A link to the user's profile photo, if available. It locates the provider resource or path associated with the drive user.

            * **Enables:** Associate each drive user with the resource identified by photo link in `workspace_drive_files.DriveUser.photoLink`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports photo link as a resource locator for each drive user; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-mimetype-a8b277cf35be" title="MIME Type" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.mimeType`

            **MIME Type.** MIME type of the file (e.g., application/vnd.google-apps.document, application/vnd.google-apps.folder). It identifies the file, document, recording, or attachment metadata associated with the workspace drive file.

            * **Enables:** Segment workspace drive file entries in Workspace Drive Files by MIME type in `workspace_drive_files.mimeType`; compare counts only within the same Google Workspace taxonomy.
            * **Interpretation:** Google Workspace reports MIME type as a label from its own taxonomy on each workspace drive file; preserve unknown labels rather than mapping them by assumption.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-modifiedbymetime-013f1148300b" title="Modified By Me Time" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.modifiedByMeTime`

            **Modified By Me Time.** Last time the file was modified by the authenticated user (RFC 3339). It anchors the workspace drive file on the provider's reported timeline.

            * **Enables:** Order Workspace Drive Files by modified by me time in `workspace_drive_files.modifiedByMeTime` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports modified by me time as a timestamp on each workspace drive file; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-modifiedtime-08a373689e98" title="Modified Time" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.modifiedTime`

            **Modified Time.** Last time the file was modified by anyone (RFC 3339). It anchors the workspace drive file on the provider's reported timeline.

            * **Enables:** Order Workspace Drive Files by modified time in `workspace_drive_files.modifiedTime` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports modified time as a timestamp on each workspace drive file; timezone and precision follow this API field, and absence is not an inferred event time. A connector directive uses this field to order records for latest-state or incremental processing.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-name-bf01db199e7b" title="Name" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.name`

            **Name.** Name of the file. It gives the workspace drive file a human-readable provider label while its identifier remains the stable reference.

            * **Enables:** Label each workspace drive file with name from `workspace_drive_files.name`; distinguish records that share that display name but have different Google Workspace identifiers.
            * **Interpretation:** Google Workspace reports name as display text for each workspace drive file; names are mutable and are not stable identities.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-owners-484e0ee9c628" title="Owners" icon="passport" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.owners`

            **Owners.** List of file owners. It preserves the nested context needed to interpret the parent workspace drive file.

            * **Enables:** Match every returned drive user in `workspace_drive_files.owners` to the parent workspace drive file; use the element's provider identity or role to reconcile membership and attribution.
            * **Interpretation:** Google Workspace returns owners as an array of drive user entries on each workspace drive file; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-parents-d20e59509065" title="Parents" icon="lock" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.parents`

            **Parents.** IDs of the parent folders containing this file. It preserves the nested context needed to interpret the parent workspace drive file.

            * **Enables:** Connect the parent workspace drive file to every referenced parent value in `workspace_drive_files.parents`; identify provider IDs that do not resolve to the expected related object.
            * **Interpretation:** Google Workspace returns parents as an array of parent value entries on each workspace drive file; missing, empty, and permission-redacted arrays are not equivalent.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-primaryemail-118ea9c5dc26" title="Primary Email" icon="shield-check" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.primaryEmail`

            **Primary Email.** Parent primary email reference copied into each workspace drive file because the child operation does not return that relationship. It identifies the related provider object that gives the workspace drive file its parent, owner, or container context.

            * **Enables:** Attribute each workspace drive file to a person or account by the exact primary email in `workspace_drive_files.primaryEmail`; identify addresses that do not match the Google Workspace directory.
            * **Interpretation:** Parable copies primary email from the parent traversal record into each workspace drive file; the child Google Workspace operation does not return it.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-shared-601169de5501" title="Shared" icon="earth-americas" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.shared`

            **Shared.** Whether the file has been shared with other users. It distinguishes the provider-defined shared state or classification for the workspace drive file.

            * **Enables:** Filter Workspace Drive Files by whether the file has been shared with other users in `workspace_drive_files.shared`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the file has been shared with other users as a boolean on each workspace drive file; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-sharinguser-e54677ffe060" title="Sharing User" icon="code-commit" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.sharingUser`

            **Sharing User.** The user who shared the file with the requesting user, if applicable. It preserves the nested context needed to interpret the parent workspace drive file.

            * **Enables:** Attribute sharing user in `workspace_drive_files.sharingUser` to the parent workspace drive file; identify parent records where that nested sharing user object is absent.
            * **Interpretation:** Google Workspace reports sharing user as a nested object on each workspace drive file; optional children may be absent from a valid response.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-size-5359c0470410" title="Size" icon="chart-pie" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.size`

            **Size.** Size of the file content in bytes. Only populated for files with binary content in Drive. It supplies the size measure for the workspace drive file at the provider's declared unit and grain.

            * **Enables:** Measure size through `workspace_drive_files.size` for each workspace drive file and compare only values with the same unit and record grain.
            * **Interpretation:** Google Workspace reports size as a measure on each workspace drive file; compare only records with the same unit and aggregation grain.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-teamdriveid-74968512f49c" title="Team Drive ID" icon="id-card" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.teamDriveId`

            **Team Drive ID.** Deprecated. ID of the Team Drive the file resides in. Use driveId instead. It provides the reference needed to connect the workspace drive file to the corresponding provider object.

            * **Enables:** Connect each workspace drive file in Workspace Drive Files to the referenced team drive through `workspace_drive_files.teamDriveId`; flag team drive ID values that do not resolve in that provider namespace.
            * **Interpretation:** Google Workspace reports team drive ID as an identifier in its team drive namespace; it is not a universal identity outside Google Workspace.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-trashed-046a81a9fc87" title="Trashed" icon="location-crosshairs" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.trashed`

            **Trashed.** Whether the file has been trashed, either explicitly or from a trashed parent folder. It distinguishes the provider-defined trashed state or classification for the workspace drive file.

            * **Enables:** Filter Workspace Drive Files by whether the file has been trashed, either explicitly or from a trashed parent folder in `workspace_drive_files.trashed`; count true, false, and missing results separately.
            * **Interpretation:** Google Workspace reports the file has been trashed, either explicitly or from a trashed parent folder as a boolean on each workspace drive file; a missing field is unknown, not false.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-trashedtime-f445e05d61a7" title="Trashed Time" icon="map-location-dot" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.trashedTime`

            **Trashed Time.** The time that the item was trashed (RFC 3339). Only populated for items in shared drives. It anchors the workspace drive file on the provider's reported timeline.

            * **Enables:** Order Workspace Drive Files by trashed time in `workspace_drive_files.trashedTime` and isolate records inside an exact provider reporting window.
            * **Interpretation:** Google Workspace reports trashed time as a timestamp on each workspace drive file; timezone and precision follow this API field, and absence is not an inferred event time.
          </Accordion>

          <Accordion id="provider-permission-field-google-workspace-drive-files-webviewlink-0e5095762e7e" title="Web View Link" icon="user-shield" iconType="sharp-duotone-solid">
            Developer identifier: `workspace_drive_files.webViewLink`

            **Web View Link.** A link for opening the file in a relevant Google editor or viewer in a browser. It locates the provider resource or path associated with the workspace drive file.

            * **Enables:** Associate each workspace drive file with the resource identified by web view link in `workspace_drive_files.webViewLink`; verify the link resolves to the expected Google Workspace object.
            * **Interpretation:** Google Workspace reports web view link as a resource locator for each workspace drive file; access still depends on viewer permissions and the URL may expire or change.
          </Accordion>
        </AccordionGroup>
      </Accordion>
    </AccordionGroup>
  </Tab>

  <Tab title="Troubleshooting">
    | Error                                            | Meaning            | Solution                         |
    | ------------------------------------------------ | ------------------ | -------------------------------- |
    | `403 Not Authorized to access this resource/api` | Missing delegation | Configure domain-wide delegation |
    | `400 Invalid Input`                              | Wrong admin email  | Use a valid super admin email    |
    | `401 Invalid Credentials`                        | Bad key or expired | Regenerate service account key   |
    | `429 Rate Limit Exceeded`                        | Too many requests  | Implement exponential backoff    |

    #### Common Issues

    #### "Domain-wide delegation not configured"

    Ensure the Client ID (numeric) is added to Domain-wide Delegation in Admin Console, not the service account email.

    #### "User not found" when impersonating

    The admin email used for impersonation must be a valid super admin in the Google Workspace domain.

    **[Admin SDK](https://developers.google.com/admin-sdk)** — Google Admin SDK documentation

    **[Domain-Wide Delegation](https://developers.google.com/identity/protocols/oauth2/service-account#delegatingauthority)** — Delegation setup guide
  </Tab>
</Tabs>