Configure allowed data sources

The discoveryengine.managed.allowedDataSources managed organization policy constraint, also known as Restrict allowed data sources for data connectors, lets you control which external data sources (such as Jira, Box, or Confluence) are permitted when adding a data store in Gemini Enterprise.

Before you begin

  • Ensure you have the Organization Policy Administrator role (roles/orgpolicy.policyAdmin).

  • Understand the policy enforcement dependencies and interactions. See Overview of managed policy constraints.

Configure the constraint

To configure the allowed data sources, follow these steps:

  1. In the Google Cloud console, go to the Organization Policies page.

    Go to Organization Policies

  2. In the project selector, choose the organization or project where you want to change policy enforcement.

  3. In the Filter field, enter discoveryengine.managed.allowedDataSources or Restrict allowed data sources for data connectors.

  4. Click the policy name to open its details.

  5. Click Manage Policy.

  6. Select Override parent's policy.

  7. Set Enforcement to On.

  8. Edit the allowedDataSources parameter:

    1. Click edit next to allowedDataSources.
    2. Set Value Type to User-defined.
    3. Add values, such as jira, box, or custom_mcp. For a complete list, see Supported Data Sources.

  9. Optional: To enforce this policy on specific projects not in VPCSC, update the enforcedProjects parameter and add the project names in the format projects/<project_name>/.

  10. Click Set Policy.

Supported data sources

The following table lists the supported dataSource values that you can add to the allowedDataSources parameter. You must use the values exactly as they appear in the Value for allowedDataSources column.

Data source Value for `allowedDataSources`
Apollo GraphOS MCP Tools apollo_graphos
Blockscout blockscout
Box box
Clinical Trials clinicaltrials
Confluence Cloud confluence
Confluence Data Center confluence_server
Crypto crypto
Custom MCP Server custom_mcp
Docusign docusign
Dropbox dropbox
Excalidraw excalidraw
GitHub github
GitLab gitlab
GoDaddy godaddy
Granted granted
HubSpot hubspot
Hugging Face huggingface
Invideo invideo
Jira Cloud jira
Jira Data Center jira_server
Kiwi kiwi
Lastminute lastminute
Linear linear
Mermaid Chart mermaid_chart
Microsoft Entra ID azure_active_directory
Microsoft Learn microsoft_learn
Microsoft Outlook outlook
Microsoft Teams teams
Monday monday
NetApp Volumes gcnv
Notion notion
OneDrive onedrive
Open Targets open_targets
Salesforce salesforce
ServiceNow servicenow
SharePoint sharepoint
Shopify shopify
Trivago trivago
Zendesk zendesk

Verify the policy change

Verify the policy by attempting to create a data store. If the configuration is correct, you can create the data store without an Operation denied by org policy error related to discoveryengine.managed.allowedDataSources.

What's next