Note: This documentation set is for the Standard, Plus, Pay-as-you-go, and Frontline editions of Gemini Enterprise. For the Business edition documentation, see the Gemini Enterprise - Business edition Help Center.

Set up a Google Chat data store

This page describes how to create a data store and connect Google Chat to Gemini Enterprise.

Before you begin

Sign in to the Google Cloud console using the same account associated with the Google Workspace instance you intend to connect. Gemini Enterprise uses your Google Workspace customer ID to connect to Google Chat. Personal Google Accounts (consumer accounts ending in @gmail.com) don't have a customer ID and aren't supported.
To enforce data source access control and secure data in Gemini Enterprise, ensure that you have configured your identity provider.
Enable smart features: In your Google Workspace account, turn on both Smart features in Google Workspace and Smart features in other Google products. For details, see Turn Google Workspace smart features on or off.
Allowlist the OAuth app (Administrators only): The Google Chat data store uses a Google-managed OAuth app to access your data. If your organization restricts OAuth app access, your Google Workspace administrator must add this app to your organization's allowlist. For details, see Allowlist the Google-managed OAuth app.

Create the Google Chat data store

To create the Google Chat data store, perform the following steps:

In the Google Cloud console, go to the Gemini Enterprise page.

Gemini Enterprise
Select or create a Google Cloud project.
In the navigation menu, click Data stores.
Click + Create data store.
In the Source, search for Google Chat, and click Select.

Note: Administrator filters (message recency and direct-message exclusion) are no longer supported for new Google Chat data stores. Data stores that were created before this change continue to work with their existing filters. To manage filters on those legacy data stores, see Add filters to a Google Chat data store.
In the Actions section, choose the actions from the list to enable them for the Google Chat connector.

Note: If you skip adding actions in this step, you can add them later. For more information, see Add actions.

To manage the list of actions, see Manage actions.
Click Continue.
In the Configuration section:
1. From the Multi-region list, select the location for your data connector.
2. In the Data connector name field, enter a name for your connector.
3. If you selected us or eu as the location, configure the Encryption settings:
  - Select Google-managed encryption key or Cloud KMS key.
  - If you selected Cloud KMS key:
    - In the Key management type list, select the appropriate type.
    - In the Cloud KMS key list, select the key.
  For more information, see Customer-managed encryption keys.
Optional: In the Sensitive Data Protection policy section, attach an existing Sensitive Data Protection policy to inspect and de-identify data that Gemini Enterprise retrieves through this data store. If your organization doesn't require a Sensitive Data Protection policy, you can skip this step.
Click Create. Gemini Enterprise creates your data store and displays your data stores on the Data Stores page.

On the Data Stores page, click your data store name to see the status. When the data store state changes from Creating to Active, the Google Chat connector is ready to be used.

After creating the data store, connect the data store you just created to an existing app or create a new app and connect it to the new app, and authorize Gemini Enterprise to access Google Chat before executing any queries.

Query Execution

This section describes how Gemini Enterprise manages your query and the privacy implications of using the federated data store.

After you authorize Google Chat and send a search query to Gemini Enterprise:

Gemini Enterprise sends your search query directly to the Google Chat API.
Gemini Enterprise blends the results with those from other connected data sources and displays a comprehensive search result.

Error messages and troubleshooting

The following table describes common error messages that you might encounter when you work with the Google Chat connector, which includes possible HTTP error codes and suggested troubleshooting steps.

Error code	Error message	Description	Troubleshooting
403 (Permission Denied)	Search by using service account credentials isn't supported for Google Workspace data stores.	The engine being searched has Google Workspace data stores, and the credentials passed are of a service account. Search by using service account credentials on Google Workspace data stores isn't supported.	Call search using user credentials, or remove Google Workspace data stores from the engine.
403 (Permission Denied)	Consumer accounts aren't supported for Google Workspace data stores.	Search is called using a consumer account (@gmail.com) credential, which isn't supported for Google Workspace data stores.	Remove Google Workspace data stores from the engine or use a managed Google Account.
403 (Permission Denied)	Customer ID mismatch for data store	Search is only allowed for users who belong to the same organization as Google Workspace data stores.	Remove Google Workspace data stores from the engine or contact support if the user and Google Workspace data stores are meant to be in different organizations.
403 (Permission Denied)	Workspace access for Agent Space disabled by organization administrator.	A Google Workspace administrator has disabled access to Google Workspace data for Gemini Enterprise.	Contact your Google Workspace administrator to enable access.

What's next

To provide a user interface for querying your Google Chat data, create an app and connect it to the Google Chat data store.
To preview how your search results appear after your app is set up, see Get search results.