Note: Check the API Keys asset section of IT Glue for existing credentials before continuing with the following guide.
READ THE NOTE ABOVE BEFORE PROCEEDING.
- Creating a project in Google APIs Console
- Enabling the Admin SDK API and creating a service account
- Generating a key file and enabling domain-wide delegation
- Navigate to https://console.developers.google.com/ - NOTE: Make sure to sign in as the client's GSuite admin
- If prompted, agree to the terms and conditions, and click Agree and Continue
- At the very to left, just next to where it says "Google Cloud Platform", click the Project menu → New Project
- Give the project a name (Wizarrd), select the appropriate organization ("No organization" is fine), and click Create
- Click the hamburger menu at the top-left, then click APIs & Services → Dashboard
- Click the + Enable APIs and Services button at the very top of the screen
- In the search bar, search for Admin SDK API
- Select Admin SDK API and click Enable
- Navigate to the hamburger menu → IAM & Admin → Service Accounts
- Click the + Create Service Account button at the very top of the screen
- Name it wizarrd and click Create & Continue
- Give the service account the Owner role and click Continue, then click Done
Once the steps are completed, you should see a screen like so:
- For the newly created service account, under the Actions column, click the three dots → Manage keys
- Click Add Key → Create new key
- For the key type, select JSON and click Create
Keep this .json file handy for configuring Wizarrd later on
- Navigate back to the service account by clicking Service Accounts on the left-hand side
- Copy the OAuth 2 Client ID
- In a new tab, navigate to Google Admin console: https://admin.google.com
- Navigate to the hamburger menu → Security → Access and data control → API controls
- Under the Domain wide delegation section, click Manage Domain Wide Delegation
- Click Add new
- Paste in the Client ID from step 5, and for OAuth scopes, use the following:
https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.group
→ Click Authorize
Once all three steps above are completed, you can then move on to the API configuration: Google Workspace