> For the complete documentation index, see [llms.txt](https://docs.material.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/1-connect-and-sync.md).

# 1: Connect & Sync

{% hint style="info" %}
Material automatically syncs new subdomains added to your Google Workspace or Microsoft 365 organization. No action is required in Material when you add a subdomain.
{% endhint %}

## Connect Your First Email Tenant

To begin, connect your first email tenant so Material can begin detecting and creating issues.

{% @arcade/embed url="<https://app.arcade.software/share/Eqk1j6ezvasXFh2fRKii>" flowId="Eqk1j6ezvasXFh2fRKii" %}

<details>

<summary>Connect to Google Workspace</summary>

1. Log in to Material with the Super Admin account we created for you when we set up your trial.
2. Next, invite a new account to enroll the new tenant. This account needs to already have a [Google Workspace Super Admin](https://support.google.com/a/answer/2405986) role, and will become the first account in the new tenant.\
   \
   **Invite a new account**
3. From the workspace, click **Explorer.**

   <div align="left"><figure><img src="https://3411262179-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FksjM8NywYRSHu1IlfxdP%2Fuploads%2FMkC9oVnOSDdPL6cKc45H%2Fimage.png?alt=media&#x26;token=a13f7032-569a-4172-b4df-1e74d06a679f" alt="workspace explorer accounts" width="112"><figcaption></figcaption></figure></div>
4. Click **Accounts**.
5. On the top right, click **Enroll Accounts**.
6. From the drop-down, choose **Invite Account**.
7. From the drop-down, choose [Super Admin or Tenant Enroller](/administration/admin-roles.md).
8. Select Google, then enter the email address for the [Google Workspace Super Admin account](https://support.google.com/a/answer/2405986) you're inviting.
9. Click **Get Invite Link**.

   <div align="left"><figure><img src="https://content.gitbook.com/content/ksjM8NywYRSHu1IlfxdP/blobs/yF1V73Xa1QC0NbzL6bcY/image.png" alt="" width="188"><figcaption></figcaption></figure></div>
10. Copy the **invite link**, then share it with the Google Workspace Super Admin account associated with the email address entered above. (This can be you if you invited another one of your accounts.) No email invite is sent. If you need to resend the invite link, follow steps 1–8 again and send a new link.

    \
    **The new Google Workspace Super Admin account performs the remaining steps below:**
11. Open an incognito browser window to avoid session conflicts.
12. Log in as the new Super Admin/Tenant Enroller via the invite link you sent (or received) in step 8 above.
13. From the left navigation, expand **Explorer**, then click **Accounts.**
14. On the top right, click **Enroll** **Accounts.**
15. Click **Enroll Google Workspace Tenant.**
16. The steps to complete enrollment, including links to the Google Workspace destinations, appear. Follow those steps to complete the connection **using the same new account you just used to log in to Material.**

    <div align="left"><figure><img src="https://content.gitbook.com/content/ksjM8NywYRSHu1IlfxdP/blobs/soxVjgWxKVKxZYPHO20V/image.png" alt="" width="375"><figcaption><p>Instructions in app</p></figcaption></figure></div>

{% hint style="warning" %}
Next Steps

* In some cases it can take up to 30 minutes for your email tenant to reflect the changes and give Material access.
* If you have additional email tenants to connect to Material, repeat the steps above for each one.
* User accounts will sync shortly and appear in Material in the Explorer. They will also be visible as a new domain in the Global drop-down.
  * Admin roles are **not** inherited from the email provider. After your enrollment is complete, the next section will help you assign admin roles.
    {% endhint %}

</details>

<details>

<summary>Connect to Microsoft 365</summary>

1. Log in to Material with a Super Admin account.
2. Next, invite a new account to enroll the new tenant. This account needs to already have the [Microsoft 365 Global Administrator](https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide) role, and will become the first account in the new tenant:

**Invite a new account**

1. From the workspace, click **Explorer.**

   <div align="left"><figure><img src="https://3411262179-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FksjM8NywYRSHu1IlfxdP%2Fuploads%2FMkC9oVnOSDdPL6cKc45H%2Fimage.png?alt=media&#x26;token=a13f7032-569a-4172-b4df-1e74d06a679f" alt="" width="112"><figcaption></figcaption></figure></div>
2. Click **Accounts**.
3. On the top right, click **Enroll Accounts**.
4. From the drop-down, choose **Invite Account**.
5. From the drop-down, choose [Super Admin or Tenant Enroller](/administration/admin-roles.md).
6. Select Microsoft, then enter the email address for the [Microsoft 365 Global Administrator](https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide) account you're inviting.
   1. Click **Get Invite Link**.

      <div align="left"><figure><img src="https://3411262179-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FksjM8NywYRSHu1IlfxdP%2Fuploads%2F2Nch7n6eyULhGlwEiX6A%2Fimage.png?alt=media&#x26;token=d87fa201-0a9d-429a-a22b-dc1781e3eb6d" alt="" width="375"><figcaption></figcaption></figure></div>
   2. Copy the **invite link**, then share it with the Microsoft 365 Global Administrator account associated with the email address entered above. (This can be you if you invited another one of your accounts.) No email invite is sent. If you need to resend the invite link, follow steps 1–6 again and send a new link.

**The new Microsoft 365 Global Administrator account performs the remaining steps below:**

1. Open an incognito browser window to avoid session conflicts.
2. Log in as the new Super Admin/Tenant Enroller via the invite link you sent (or received) in step 6 above.
3. From the left navigation, expand **Explorer**, then click **Accounts.**
4. On the top right, click **Enroll** **Accounts.**
5. Click **Enroll Microsoft 365 Tenant.**
6. The steps to complete enrollment appear. Follow those steps to complete the connection **using the same new account you just used to log in to Material.**

{% hint style="warning" %}
**Next Steps**

* In some cases it can take up to 30 minutes for your email tenant to reflect the changes and give Material access.
* If you have additional email tenants to connect to Material, repeat the steps above for each one.
* User accounts will sync shortly and appear in Material in the Explorer. They will also be visible as a new domain in the Global drop-down.
  * Admin roles are **not** inherited from the email provider.
    {% endhint %}

</details>

{% hint style="info" %}
Tenants on the same shared instance will have the same Material URLs. The account (Google or Microsoft) you are logged in as determines the tenant you can access.
{% endhint %}

{% hint style="warning" %}
To unenroll or remove a tenant, contact support.
{% endhint %}

***

{% @arcade/embed url="<https://app.arcade.software/share/NXFHOfYdGQWzKH9lZRY7>" flowId="NXFHOfYdGQWzKH9lZRY7" %}

## Default Account Settings

After you've connected an email tenant, you need to enable a few things to allow Material to sync messages and files from an account's mailbox.

From the top toolbar, click **Settings >** **Default Account Settings**.

### Syncing

1. Toggle Email Sync to **On**.

   <figure><img src="https://3411262179-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FksjM8NywYRSHu1IlfxdP%2Fuploads%2FvwxRYJeBCWruQuG8ZNL4%2Fimage.png?alt=media&#x26;token=6e2d75d9-0c1d-4d04-a092-be36efef6349" alt="" width="230"><figcaption></figcaption></figure>

{% hint style="warning" %}
Once toggled on, Material begins syncing email messages and populating your Material dashboards. This process can take up to a few days depending on the number of accounts processed.
{% endhint %}

2. Toggle File Sync to **On**.

   <figure><img src="https://3411262179-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FksjM8NywYRSHu1IlfxdP%2Fuploads%2FUSBxnzCvWbKmEEU2QTaH%2Fimage.png?alt=media&#x26;token=3c06439c-29a9-4ab9-991a-1c926da34a30" alt="" width="291"><figcaption></figcaption></figure>

{% hint style="warning" %}
Once toggled on, Material begins syncing files from Google Drive and populating your Material dashboards. This process can take up to a few days depending on the number of accounts processed.
{% endhint %}

{% hint style="danger" %}
You'll see remediation settings following **Syncing** in Material. Don't touch these just yet, we'll review those in [6: Enable Email Security](/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation.md).
{% endhint %}

***

## Google Drive Security Settings

For Google Workspace tenants:

1. From the top toolbar, confirm you're on a Google Tenant. (If you only have one tenant synced, you'll only see Global).

   <figure><img src="https://3411262179-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FksjM8NywYRSHu1IlfxdP%2Fuploads%2FkE3RmFauiI1juo3RAP4S%2Fimage.png?alt=media&#x26;token=6219a4c2-d129-444c-8b4a-e62427929bfd" alt="" width="290"><figcaption></figcaption></figure>
2. From the left navigation, expand **Google Drive Security**, then click **Settings**.
3. Toggle **Connect to Google Drive** to **On**.

   <figure><img src="https://3411262179-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FksjM8NywYRSHu1IlfxdP%2Fuploads%2Fti4EZOb8WjwrlWYDOcjw%2Fimage.png?alt=media&#x26;token=fef566ef-dc90-4b07-8505-653d25e6a689" alt="" width="375"><figcaption></figcaption></figure>

<details>

<summary>How to enable or disable syncing for an individual account or group:</summary>

1. From the workspace, click **Explorer.**
2. Click **Accounts** or **Groups**.
3. Open an account or group, then click the **Settings** tab.
4. Under **Syncing**, select **Override** for the setting you want to change, then toggle the option and save.

   <figure><img src="https://3411262179-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FksjM8NywYRSHu1IlfxdP%2Fuploads%2FKnfqmmNE0AjxVH1gvoMI%2Fimage.png?alt=media&#x26;token=fc012558-ffa8-48f4-9a9d-64d525cd0022" alt="" width="375"><figcaption></figcaption></figure>

{% hint style="info" %}
To bulk update settings, select multiple accounts/groups, then from the bottom toolbar, click **Edit Settings**: ![](https://3411262179-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FksjM8NywYRSHu1IlfxdP%2Fuploads%2FdXxfiYSAP01etwrEir81%2Fimage.png?alt=media\&token=852906b1-72a7-48b3-8fb0-837ee87e2e8f)
{% endhint %}

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.material.security/getting-started/deployment-guides/your-first-30-days/1-connect-and-sync.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.