Part 2: Configuring the Google Admin Console

With Part 1 completed, you can now move on to the Google Admin Console to set up API controls and delegation. Follow the steps below to continue:

Google Apps for Education Admin Console

Login to Google Workspace Admin Console:

• Visit Google Workspace Admin Console.

Navigate to API Controls:

• In the Google Workspace Admin console, go to Security > Access and data control.
• From the drop-down list, select API Controls.

Manage Domain-Wide Delegation:

• Scroll to the bottom and click on Manage Domain-Wide Delegation.

• Add New API Client:
  • In the API clients list, click Add New.

• Paste the Client ID from Part 1 of the onboarding guide in the Client ID field.
• Copy and paste the following scopes into the OAuth scopes field (ensure to copy the entire string below):
  • API Scopes for Device and User Sync:

https://www.googleapis.com/auth/admin.directory.device.chromeos.readonly,https://www.googleapis.com/auth/admin.directory.orgunit.readonly,https://www.googleapis.com/auth/admin.directory.user.readonly,https://www.googleapis.com/auth/admin.directory.device.chromeos,https://www.googleapis.com/auth/admin.directory.device.mobile.action

• Additional API Scopes for Roster Sync:

https://www.googleapis.com/auth/classroom.rosters.readonly, https://www.googleapis.com/auth/classroom.courses.readonly, https://www.googleapis.com/auth/classroom.profile.emails, https://www.googleapis.com/auth/classroom.profile.photos

• Once entered, click Authorise.

• Verify API Client:
  • You should now see the API client in the list.

• Enable Classroom API (if applicable):
  • If you added the roster sync scopes, enable the Classroom API in the Google Developer Console.
  • Log in as a Super Admin user at Google Cloud Console.
  • Select the project created in Part 1.
  • Search for "Classroom" in the search field, select Google Classroom API, and click Enable.

Great job on completing Part 2! 

Now move on to Part 3. You're halfway there - keep it up!