Skip to main content

ChromeOS Onboarding | Part 2 - Google Apps for Business Admin Console

KB-Business-ChromeOS.png

To configure your Google Workspace Admin Console for API controls and domain-wide delegation, follow the steps below:

Part 2: Google Workspace Admin Console Setup

  1. Log in to the Google Workspace Admin Console: 

Organisational Units Setup (Best Practice):

  • Ensure all your organisational units (OUs) are structured according to your company's hierarchy.
  • Place all employees and devices in their respective OUs (e.g., Top-level OU > Employees OU > Department/Branch).
  • Refer to Google's documentation for details on setting up organisational units.

  1. Navigate to API Controls: 

    • In the Google Workspace Admin console menu, go to Security > Access and data control > API Controls.

  1. Manage Domain-Wide Delegation: 

    • Scroll to the bottom of the page and click Manage Domain-Wide Delegation.

  1. Add New API Client:

    • In the API clients section, click Add New.
    • Paste the Client ID saved from Part 1 into the Client ID field.
  1. Copy and paste the following scopes into the OAuth Scopes field (ensure you copy the entire string):
https://www.googleapis.com/auth/admin.directory.device.chromeos.readonly, https://www.googleapis.com/auth/admin.directory.orgunit.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/admin.directory.device.chromeos, https://www.googleapis.com/auth/admin.directory.device.mobile.action
  • Click Authorise.

  1. Verify API Client: 

    • Confirm that your newly added API client and its authorised scopes appear in the Domain-Wide Delegation list.