How do I authorize the Google Service Account?

Article #:

Product

Castle

#

Connect for Chromebooks

Glamis onwards

Summary

You must authorize the Google Service Account you created in the Google APIConsole.

Note: You do this in the Google Admin Console.

Solution

Note: Disclaimer: The following instructions are correct at the time of writing. Google feature names and links may change over time.

1. Go to https://admin.google.com and log in as an admin user.
2. Click Security.
3. Click API reference.
4. Select Enable API access.
5. Click Save.

6. Click Show more > Advanced Settings.
7. From the Authentication section, select Manage API client access.

8. In the Authorized API clients > Client Name field, enter the Client ID for the Google Service Account created in How do I create a Google Service Account?
9. Under One or More API Scopes, enter the following:

https://www.googleapis.com/auth/admin.directory.group.readonly,https://www.googleapis.com/auth/admin.directory.orgunit.readonly,https://www.googleapis.com/auth/admin.directory.user.readonly

Tip: Copy and paste the whole line above without re-formatting it.

10. Click Authorize.

Google will display the scopes as:

Note: Do not add View groups on your domain, View organization units on your domain, or View users on your domain to the API scopes you are adding. As these are Google API scopes, the Google Admin console sorts them for you as in the image above. For more information about Google API scopes, go to https://developers.google.com/identity/protocols/googlescopes.

 

What's Left To Do?

 

Attribution:

Last updated:

Author:

Contributions by:

23rd November 2016

Tanja Ehrhardt

Samantha Nair

 

 

Copyright © 2000-2016 Smoothwall All rights reserved.