| Available for | Roles | Super Admin, Admin, Team Member, Limited Team Member, Interviewer |
| Permissions | • N/A | |
| Packages | Lever Basic, LeverTRM, LeverTRM for Enterprise |
In addition to single-sign-on (SSO), Lever's integration with Google Workspace connects Lever with the tools you need to streamline collaboration, enhance communication, and boost efficiency within your hiring workflow. To learn more on the permissions and scopes detailed below, refer to the following Google resources:
Google OAuth documentation
Google API scopes documentation
Permissions required by role
Please note, Lever will never access your data without your permission. You can always check what Lever has access to on Google’s account permissions page. In order to use Lever's integration with Google, users will be asked to grant Lever access to certain Google account permissions. These permissions may vary depending on the role. For more information on role based access, refer to our role permission breakdown help article.
Interviewers
Lever only needs to read a user's email address and basic identifying information in order to sign in. Lever does not need access to their Gmail or calendar of interviewers. Lever still has the ability to add events to an interviewer's Google calendar.
Super Admins, Admins, Team Member, and Limited Team Members
Lever will ask for permission to access Gmail and calendar for users assigned to these roles. To review or enable permissions for your account, navigate to Settings > My account:
Access will only be utilized when Lever requires it, such as when:
- Scheduling interviews
- Sending email to candidates from their own email account
- Snoozing candidates (creates a calendar notification)
Contacts permissions
These permissions correspond to the 'Contacts' checkbox. Your contacts may include the names, phone numbers, addresses, and other info about the people you know.
While checking this box technically gives Lever these permissions, there aren’t currently any features in the product that use this information. Lever users can leave this box unchecked if they want, and it will have no impact on the functionality of the email/calendar integration.
Calendar permissions
These permissions correspond to the 'calendar' checkbox. This will be used when scheduling and rescheduling interviews in Lever.
This permission allows Lever to see calendar resources tied to the domain of the user’s email address. For example, this lets Lever read the names of shared calendars a user can access so they can see them in the 'Add to calendar' dropdown when scheduling.
This technically gives Lever permission to manage calendar settings. Lever uses this to view individuals' Google Calendar settings such as 'Access permissions for events' and 'Share with specific people or groups.' This lets us see how to display calendar information in Lever, for example, which shared calendars to display in the 'Add to calendar' drop-down and how much event information a user should see in the 'view availability' finder.
Your calendars and other calendars you access may contain info like daily schedules, personal contacts, and private appointments.
While these are very broad permissions, Lever uses them to:
- Create and update calendar events generated via the interview scheduling workflow.
- Allow users to view the same calendars and events that they can see in Google Calendar in Lever. For example, if a user already has access to a colleague's calendar and can view their events, they’ll also be able to view other peoples' events, and the names of those events on the availability finder.
Email permissions
These permissions correspond to the 'Email' checkbox. Lever uses this to sync emails between Lever and Gmail so your team can maintain record of candidate correspondence using the communication tools your organization has selected.
Read
Lever uses the 'read' email permission for email syncing. When a user sends an email to a candidate using Lever, there are some Lever-specific pieces of data that are added to the email headers. Lever is using the 'read' permission to read the headers of emails in a user’s inbox and sent folder, and look for messages with those Lever-specific pieces of data to sync back to the appropriate candidates in Lever. If Lever reads an email’s header and does not find the Lever-specific data, that email is not synced and not visible within Lever. The emails that Lever reads and syncs automatically are responses to emails created in Lever.
It’s also possible for a user to run a task to manually sync emails from a specific candidate. Rather than reading email headers for Lever-specific pieces of data, this task searches the user’s inbox for emails to/from the email address on the candidate profile and syncs any emails that come up to the candidate’s profile. For more information, refer to our help article on syncing emails from Gmail.
|
|
While Lever reads all email headers to identify emails that should be synced, we do not read or sync the content or message of unrelated emails. If your organization has any concerns with the read permission requested, then please refer to our help article on Lever's limited email sync configuration. |
Compose/Send
Lever requests the 'compose' and 'send' email permissions to take full advantage of the Gmail integration. When a user composes an email in Lever, they’re writing it as if they’re using their Gmail user account, and sending the email actually sends it from that user’s Gmail account, so it appears in the Gmail 'Sent' folder as well. This permission is just used by Lever to allow users to voluntarily compose and send emails to candidates. We don’t use any part of this permission to send emails on behalf of users without them taking an action to prompt sending an email.
Delete
The 'delete' email permission is managed entirely within Lever. Despite the fact that this permission includes the ability to 'permanently delete all your email from Gmail' we do not actually delete things from users' inboxes or sent folders.