Genesys Cloud - Main

 View Only

Sign Up

Expand all | Collapse all

Google Data Action Integration

  • 1.  Google Data Action Integration

    Posted 09-11-2025 08:22

    Dear colleagues,

    In our Organization we use Google Functions for some checks and automations. We invoke them via Data Actions. The full mechanism worked fine till the moment Google migrated to Gen 2 Cloud Run and a new Organizational policy was implemented in our Google environment. In the past we invoked the Functions unauthenticated, but now IAM authentication is mandatory. The old Functions are running, but I cannot invoke a newly created from Genesys.

    Does anybody have an advice about this issue?

    Best regards,

    Borislav


    #API/Integrations

    ------------------------------
    Borislav Taskov
    ------------------------------


  • 2.  RE: Google Data Action Integration

    Posted 09-11-2025 13:37

    Hello Borislav, 

    I think I might have an idea about whats going on. 

    For the IAM permissions do you have a custom role in Google Cloud platform with the following permissions:

    • cloudfunctions.functions.call
    • cloudfunctions.function.invoke

    You also need to assign the service account to each function you want to execute through the Data Actions. 

    You may need to update the data actions integration as well. Here are the steps:

    • Add a new integration in Genesys Cloud for the service account
    • use the private ket file details in the integration credentials
    • if you're using multiple APIs across different service accounts, create separate integrations for each. 

    You may also want to double check the custom action is also configured correctly. Heres how:

    • Update your Data action config to include the proper authentication details
    • ensure your request URL template is properly configured for the function calls
    • verify that your functions are still returning a JSON response. 

    Cheers, 



    ------------------------------
    Cameron
    Online Community Manager/Moderator
    ------------------------------



  • 3.  RE: Google Data Action Integration

    Posted 09-11-2025 14:44

    Hi Cameron,

    Thank you very much for your reply!

    I need some clarification before testing you solution:

    1. Do we really need a Custom Role? The Service Account I use has already these permissions via other standard roles.
    2. I use only one Service Account for all Google Functions. For the old,ones, which work and for the new ones, which I cannot invoke. You suggest a new Integration to be created, right? I suppose I can use the same Service Account.

    Best regards,

    Borislav



    ------------------------------
    Borislav Taskov
    ------------------------------



  • 4.  RE: Google Data Action Integration

    Posted 09-15-2025 09:36

    Hi again,

    I would like to mention one thing more. In Google Cloud Shell I can run the Function. I generate ID Token for the Service Account I use and with this token I can run the Function. So the Service Account itself is OK. I make a new Integration in Genesys also (I used the same Service Account) and configured the Function with this new Integration., but at the end it didn`t work. 

    Best regards,

    Borislav



    ------------------------------
    Borislav Taskov
    ------------------------------



  • 5.  RE: Google Data Action Integration

    Posted 09-19-2025 13:15

    It looks like my Data Action don`t send any Authorization header in the request to Cloud Run Service at all. Should I configure something in the "Advanced" configuration of Integration, or somethingadditional in the Data Action itself?

    BR,

    Borislav



    ------------------------------
    Borislav Taskov
    ------------------------------



  • 6.  RE: Google Data Action Integration

    Posted 09-19-2025 13:55

    Hello Borislav, 

    Sorry for the delay in response. But to answer your question for your data action to include authorization headers when making requests I believe you need to configure this the request config of your Data action. 

    You can do this by:

    • going to the data action configuration
    • In the request template section you can add custom headers
    • In this section you can add the authorization header that is required. 
    • You can use the "Advanced" tab to configure complex header values or use variables. 

    Hope this helps!



    ------------------------------
    Cameron
    Online Community Manager/Moderator
    ------------------------------



  • 7.  RE: Google Data Action Integration

    Posted 09-20-2025 01:50

    Hi Cameron,

    Thank you very much for suggestion! I tried already to add Authorization in the Data Action, but it didn`t work. I tried to find description of the whole mechanism of Cloud Run Service invokation from Genesys Data Action in Genesys documentation, but I didn`t succeed. I need more information for further troubleshooting. What I got from AI as description is following:

    Genesys Cloud, upon needing to authenticate with your Cloud Run service, takes the private_key (also found in the service account JSON file) and the private_key_id from the service account key you uploaded.

    It uses this private key to cryptographically sign a JSON Web Token (JWT) . This initial JWT contains claims such as the service account's email and the intended audience (which will be your Cloud Run service's URL).

    Genesys Cloud then makes an API call to the Google OAuth 2.0 Token Endpoint, which is specified by the "token_uri": "https://oauth2.googleapis.com/token" in your JSON file. It sends the signed JWT (created in the previous step) to this endpoint, using a specific grant type (e.g., urn:ietf:params:oauth:grant-type:jwt-bearer ).

    Google's authentication servers at the token_uri receive the signed JWT. They use the public key associated with your service account (verifiable via the X.509 certificate URLs like auth_provider_x509_cert_url and client_x509_cert_url ) to verify the signature of the JWT . If the signature is valid and the claims in the JWT are correct, Google's servers then generate and return the actual ID Token to Genesys Cloud.

    Genesys Cloud uses this ID Token to authorize your request to the Cloud Run Service.

    If this is a correct description of mechanism, I have to find, where exactly it is broken in my case. Because at the end I don`t receive anything as Authorization in Google.

    Or maybe you can send a better description and some other suggestions.

    I really need help.

    Best regards,

    Borislav



    ------------------------------
    Borislav Taskov
    ------------------------------



  • 8.  RE: Google Data Action Integration

    Posted 09-23-2025 07:41

    Hi again,

    What I see in Google Cloud, when I test the Data Action is, that http request reaches the endpoint in Google, but doesn`t have any Authorization header.

    Best reards,

    Borislav



    ------------------------------
    Borislav Taskov
    ------------------------------



  • 9.  RE: Google Data Action Integration

    Posted 09-23-2025 12:24

    Hello Borislav, 

    Hmm this is interesting. I would try and post this in the developer community as well as I am out of ideas on what could be happening. 



    ------------------------------
    Cameron
    Online Community Manager/Moderator
    ------------------------------



  • 10.  RE: Google Data Action Integration

    Posted 09-26-2025 07:12

    Hi Cameron,

    Do you have any news for me?

    Best regards,

    Borislav



    ------------------------------
    Borislav Taskov
    ------------------------------



  • 11.  RE: Google Data Action Integration

    Posted 10-01-2025 08:12

    Hello Borislav, 

    Apologies, in my last post I recommended taking this question to the developer community as they will have more knowledge about developing google data actions. As I am out of ideas and I don't think this requires a support case, yet. 



    ------------------------------
    Cameron
    Online Community Manager/Moderator
    ------------------------------



  • 12.  RE: Google Data Action Integration
    Best Answer

    Posted 10-03-2025 12:02

    We confirmed that Google data actions currently do not work with 2nd Gen functions. We are currently researching what will be required to support them.



    ------------------------------
    --Jason
    ------------------------------