How do I authorize the Google Service Account?

Article #: Product Castle
# Connect for Chromebooks Glamis onwards


You must authorize the Google Service Account you created in the Google APIConsole.

Note: You do this in the Google Admin Console.


Note: Disclaimer: The following instructions are correct at the time of writing. Google feature names and links may change over time.

  1. Go to and log in as an admin user.
  2. Click Security.
  3. Click API reference.
  4. Select Enable API access.
  5. Click Save.
  6. Click Show more > Advanced Settings.
  7. From the Authentication section, select Manage API client access.
  8. In the Authorized API clients > Client Name field, enter the Client ID for the Google Service Account created in How do I create a Google Service Account?
  9. Under One or More API Scopes, enter the following:

    Tip: Copy and paste the whole line above without re-formatting it.

  10. Click Authorize.
    Google will display the scopes as:

Note: Do not add View groups on your domain, View organization units on your domain, or View users on your domain to the API scopes you are adding. As these are Google API scopes, the Google Admin console sorts them for you as in the image above. For more information about Google API scopes, go to

What's Left To Do?


Last updated: Author: Contributions by:
23rd November 2016 Tanja Ehrhardt Samantha Nair