Authorizing Service Account Key

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  1. Log in to Google Admin Console as a User with the Super Admin role.
  2. Click on Security.
  3. Click on Access and Data Control > API Controls.
  4. Click on MANAGE DOMAIN WIDE DELEGATION.
  5. Click Add New.
  6. Configure the Client ID:
    1. Open the JSON file that was downloaded when you created the Service Account Key.
    2. Copy the value of the client_id field (without the enclosing quotes).
    3. Paste the value into the Client ID field in the browser.
  7. Enter the scopes you want to grant access to, separated by commas, in the OAuth scopes field.

    The typical scopes you will need are:

    • https://www.googleapis.com/auth/admin.directory.user.readonly
    • https://www.googleapis.com/auth/admin.directory.user
    • https://www.googleapis.com/auth/admin.datatransfer
    • https://www.googleapis.com/auth/admin.directory.group
    • https://www.googleapis.com/auth/admin.directory.orgunit
    • https://www.googleapis.com/auth/admin.directory.userschema

    A list of available scopes is available at: https://developers.google.com/identity/protocols/googlescopes

  8. Click Authorize.

Additional scopes may be added later by repeating the Client ID and OAuth scopes configuration steps.