diff --git a/openbot/docs/plugins/google-drive.md b/openbot/docs/plugins/google-drive.md index 7f635c84..b4d0aad0 100644 --- a/openbot/docs/plugins/google-drive.md +++ b/openbot/docs/plugins/google-drive.md @@ -92,10 +92,14 @@ expires. ### Disconnecting -**Not built yet.** Until it is, revoke it in Google's own third-party access settings -([myaccount.google.com/connections](https://myaccount.google.com/connections)), which stops this -deployment reading anything immediately. The page says the same thing rather than offering a control -that would report access withdrawn when it had not been. +On the connector's page under **Connections**, open **Connected** and choose **Disconnect**. It +disconnects only the signed-in person's own account, the same way Gmail and Google Calendar do (see +[Disconnecting](google-workspace.md#disconnecting)). It asks Google to revoke the refresh token, then +revokes the stored credential and removes the connection. + +- If Google cannot be reached, nothing changes and the page asks you to try again. +- If Google refuses, access still ends in this deployment, and the page tells you to finish at + [myaccount.google.com/connections](https://myaccount.google.com/connections). ## Troubleshooting diff --git a/openbot/docs/plugins/google-workspace.md b/openbot/docs/plugins/google-workspace.md index 36ba2cdf..9ed8d18f 100644 --- a/openbot/docs/plugins/google-workspace.md +++ b/openbot/docs/plugins/google-workspace.md @@ -140,9 +140,15 @@ so revoking access at Google takes effect on the next call. ### Disconnecting -**Not built yet.** Until it is, revoke access in Google's own third-party access settings -([myaccount.google.com/connections](https://myaccount.google.com/connections)), which stops this -deployment reading mail or the calendar immediately. +On `/connections/google-workspace`, open **Connected** and choose **Disconnect**. It disconnects only the +signed-in person's own account. It asks Google to revoke the refresh token, then revokes the stored +credential and removes the connection in one transaction, and writes an audit event. + +- If Google cannot be reached, nothing changes and the page asks you to try again, so access is never + reported withdrawn when it was not. +- If Google refuses the revocation, access still ends in this deployment, and the page tells you to + finish at Google's own third-party access settings + ([myaccount.google.com/connections](https://myaccount.google.com/connections)). ## Trying it without a Google account