Chromebook Onboarding - Part 2 - Google Apps for Education Admin Console

Part 1 now completed, we can move on to the Google Admin console to set up some API controls and delegation. Please continue to part 2 below:

Part 2

I. Login to your G Suite Admin Console 

(https://admin.google.com)

As best practice: 

Please ensure you have all your organizational units set up accordingly.

We recommend having all your students and devices placed in their respective OU's eg. Top level OU > Students OU> Grade etc.

 (See https://support.google.com/a/answer/182537 for details on how to set up an organizational unit)

II. In the G Suite Admin console from the home or left-hand menu please navigate to Security > Access and data control from the drop-down list select "API Controls"

III. Then scroll to the bottom and click on "Manage Domain-Wide delegation"

IV. In the API clients list please click "Add new"

V. Paste the Client ID that you had copied from Part 1 of the onboarding guide in the client id field. 

Copy and paste the following scopes into the OAuth scopes field (remember to copy the entire string below)

API Scopes for Device and User sync

https://www.googleapis.com/auth/admin.directory.device.chromeos.readonly,https://www.googleapis.com/auth/admin.directory.orgunit.readonly,https://www.googleapis.com/auth/admin.directory.user.readonly,https://www.googleapis.com/auth/admin.directory.device.chromeos,https://www.googleapis.com/auth/admin.directory.device.mobile.action

Please Note: The below API Scopes should only be added if you are using Mobile Guardian Classroom Management Tools for Teachers.

Additional API Scopes for Roster sync

https://www.googleapis.com/auth/classroom.rosters.readonly, https://www.googleapis.com/auth/classroom.courses.readonly, https://www.googleapis.com/auth/classroom.profile.emails, https://www.googleapis.com/auth/classroom.profile.photos

Once you have entered the above-mentioned info in the screen shown below please click "Authorise"

You should now see the following page with your API client in the list.

VI. If you have added the roster sync scopes please remember to enable the Classroom API in the google developer console.

Log in as a Super Admin user at https://console.cloud.google.com.

Make sure you have selected the project that was created in Part 1 eg. MG Chromebooks and search for "Classroom" in the search input field and select "Google Classroom API" and click enable.

Great job on completing Part 2, now on to Part 3 - Halfway there - keep it up!

Back to the Top

We hope you found this useful.

Thanks for reading :)