You ask Gemini to “find emails with client X from last week” or “read the spec doc in Drive” — it replies “I cannot find that email” or “I don’t have access to your Drive”. This “appears integrated but actually can’t read data” failure is almost always Workspace integration toggles, admin policy, or wrong active account. Gemini’s Workspace access has three layers: integration toggle → user OAuth → current active account. Any layer off, it breaks.
To make Gemini actually read Gmail / Drive, verify each layer.
Common causes
By frequency:
1. Settings → Apps integrations not all on (most common)
Even when Workspace enables Gemini at the domain level, the user-side Settings still has per-app toggles:
gemini.google.com → Settings → Apps
- Gmail (default OFF)
- Calendar (default OFF)
- Drive (default OFF)
- Tasks (default OFF)
- Maps, YouTube, others
Most users only enable one or two; others stay off.
How to judge: how many toggles in Settings → Apps are OFF?
2. Workspace admin disabled access
IT globally blocks Gemini from Gmail / Drive (data exfil prevention):
- Settings → Apps doesn’t show these options
- Or shows them grayed out
How to judge:
- Personal Google account can enable these integrations; work account can’t = this
- Confirm with IT
3. Wrong active account
Signed into personal Gmail in Gemini, but the Drive doc is in your Workspace account — identities don’t match.
How to judge:
- Top-right avatar in Gemini shows one account
- mail.google.com shows another
- They must be identical
4. OAuth scope expired
Refresh tokens expire after a year of inactivity; old accounts need re-grant.
How to judge: worked previously, unused for months, now “no access”.
5. Cross-domain Drive document
Doc is in another Workspace domain (client shared it with you); Gemini only reads your own domain’s Drive by default.
How to judge:
- Doc URL is at docs.google.com/document/d/… but its owning domain isn’t yours
- You can see it in Drive but Gemini can’t read it
6. Insufficient document permission
You’re Viewer-only on the doc; Gemini in some cases needs Editor.
7. Workspace policy restricts certain content classifications
Some IT setups disallow Gemini reading documents tagged as “confidential”.
Shortest path to fix
Step 1: Toggle every Settings → Apps integration ON
gemini.google.com → avatar → Settings → Apps
Turn ON:
- Gmail
- Calendar
- Drive
- Docs
- Tasks
- Keep
- Maps
- YouTube
After enabling, prompt Gemini: “Can you access my Gmail right now?” — check response.
Step 2: Verify active account
Top-right avatar in gemini.google.com → email shown
Open mail.google.com in a new tab → top-right avatar → email
Must match exactly
Mismatched:
gemini.google.com → avatar → switch to target account
Reopen Gmail / Drive tabs
Step 3: Re-authorize OAuth scopes
1. myaccount.google.com/permissions
2. Find "Gemini" / "Google AI" → remove access
3. Return to gemini.google.com, ask it to access Gmail
4. On new OAuth consent, **check every scope**
5. Complete 2FA cleanly
Step 4: Workspace — talk to IT
Work account Apps options grayed / missing:
- Contact IT
- Admin Console → Apps → Additional Google services → Gemini app for Workspace
- Enable “Allow Gemini to access user data” + specific services (Gmail / Drive / Calendar)
- Wait ~30 min
Step 5: Explicitly name the workspace account
For account-identity confusion:
Prompt: "Use my workspace account [you@company.com] to access these emails: ..."
Explicit naming tells Gemini which identity to use.
Step 6: Cross-domain doc — manual paste
If the doc is in client’s Workspace:
- Open the doc (you can see it in Drive)
- Select all + copy
- Paste into Gemini chat
- Or download as PDF and upload
Step 7: API / AI Studio for direct integration
API users: combine Workspace API + Gemini API:
# Gmail API
from googleapiclient.discovery import build
service = build('gmail', 'v1', credentials=creds)
messages = service.users().messages().list(userId='me', q='from:client').execute()
# Pass content to Gemini
from google import genai
client = genai.Client()
client.models.generate_content(
model="gemini-2.5-pro",
contents=[messages_content, "Summarize these emails"]
)
Bypasses Web UI integration limits.
Step 8: Dual-profile isolation
Heavy on both work + personal Google:
Chrome → create two profiles:
- Profile A: work account only, work Workspace only
- Profile B: personal account only
Don’t switch accounts inside one profile — scope tokens get confused.
Prevention
- Use separate Chrome profiles for work Gemini vs personal Gmail
- Enable all 8 Settings → Apps integrations at once, not on-demand
- Review Gemini OAuth scopes monthly at myaccount.google.com/permissions
- For cross-domain Drive docs, copy to your own domain before processing
- For heavy automation against Gmail / Drive, use the API — not Web UI integrations
Related
Tags: #Gemini #Google #Troubleshooting