The exact list appears once this provider is configured on this deployment. Whatever it turns out to be, a connection starts read only and a write waits for you.

What connecting takes

1. 1

   Sign in at Google and pick the account whose mail and files you want answerable.

2. 2

   Approve read access. Kenward asks for read on Gmail and Drive, plus permission to draft, and nothing else.

3. 3

   Nothing from this source is copied into Kenward. Its actions are still there when you ask for them.

This source is in the catalog, which is what a workspace can be granted, not what works today.