> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neoagent.io/llms.txt
> Use this file to discover all available pages before exploring further.

# WOSP API

> Work your customers' Google Workspace through your WOSP: users, groups, Gmail, licences, devices, Drive and security

The common use is a Google Workspace ticket: offboard a leaver, give a manager access to a mailbox, reset a password, or check an account that looks compromised. The agent does it through your WOSP in the tenant mapped to the ticket's company, and notes each step on the ticket.

> [!NOTE]
>
> Automatically enabled when you configure WOSP permissions in your agent workflow.

## What It Does

* Find users and suspend, restore, archive, delete or sign them out, set a new password, add aliases, and change their org unit and profile
* Create groups, add and remove members, and change group settings
* Set out of office, forwarding, IMAP and POP, mailbox delegates and send-as addresses, and remove Gmail filters
* Read licences and seats, and assign or remove a licence
* Read devices and Chrome browsers, and disable, approve or block a device
* Read storage and shared drives, add and remove members, and move a user's Drive files to another user
* Read alerts, WOSP's audit findings, admin roles, third-party apps and audit reports, and revoke an app's access
* Read each tenant's last collection, run collection again, and start onboarding a new customer

## Permission Groups

| Group | Access levels | Covers |
| - | - | - |
| Users | Disabled, Read Only, Read/Write | Users, their status, passwords, aliases, org unit and profile |
| Groups | Disabled, Read Only, Read/Write | Groups, members, settings and aliases |
| Gmail Settings and Delegation | Disabled, Read Only, Read/Write | Out of office, forwarding, IMAP and POP, delegates, send-as and filters |
| Licenses | Disabled, Read Only, Read/Write | Licence assignments and seats |
| Devices and Browsers | Disabled, Read Only, Read/Write | ChromeOS and mobile devices, Chrome browsers, device actions |
| Shared Drives and Drive Transfer | Disabled, Read Only, Read/Write | Storage, shared drives and their members, Drive labels, data transfer |
| Org Units, Domains and Calendar Resources | Disabled, Read Only, Read/Write | Org units, domains, buildings and meeting rooms |
| Admin Roles | Disabled, Read Only, Read/Write | Admin roles and who holds them |
| Alerts, Audit Findings and Third-Party Apps | Disabled, Read Only, Read/Write | Google Workspace alerts, WOSP's findings, SAML profiles, OAuth apps |
| Reports and Activity | Disabled, Read Only | Audit reports, Gmail, Drive, Chat and Classroom activity, insights |
| Chat Spaces and Classroom | Disabled, Read Only, Read/Write | Chat spaces and members, Classroom courses |
| Tenants and Data Collection | Disabled, Read Only, Read/Write | WOSP's tenants and their collection |
| WOSP Settings and Onboarding | Disabled, Read Only, Read/Write | WOSP's health, settings and sign-in setup, onboarding a new customer |

Neo always asks a technician before it renames, updates or deletes a tenant or hides it from the API, wipes, powerwashes or deprovisions a device, replaces a user's Gmail settings, edits a building or calendar resource, or changes WOSP's sign-in or Google OAuth setup, whatever the group's approval setting. It never reads or sends a Google service-account key, never creates or revokes WOSP API keys, and never changes WOSP's own settings, which a WOSP admin changes in WOSP. On a ticket, the agent works only on the WOSP tenant mapped to the ticket's company.

## Setup

See [Connecting WOSP to Neo](https://docs.neoagent.io/integrations/wosp/connecting-to-neo.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.