G-Suite API Scopes Update

As part of our Data Privacy Initiative at Mobile Guardian, we have made important changes to scale down the required scopes necessary when integrating your G-suite configuration with Us.

As part of this initiative, we have reduced the number of write scopes required when adding the G-suite configuration to Mobile Guardian. The only remaining write scopes are for the device action to disable or enable a device.

We request that you replace the existing API scopes on the Google Admin console with the new API scopes provided in this document. 

Important Note:  When these improvements are released you will need to ensure you have updated the API Scopes before your next planned Sync, otherwise your experience with Mobile Guardian could be negatively affected. The next Mobile Guardian release is scheduled for end of February.

Follow the steps to replace your existing scopes.

1. Log into your Google Admin console.

2. Navigate to Security > Access and data control > API Controls > Domain-wide delegation > Manage Domain Wide Delegation

3. On the Domain-wide delegation screen search for the Mobile Guardian API Client and Click edit.

4. Remove all current scopes and replace with the following:

API Scopes for Device and User sync

https://www.googleapis.com/auth/admin.directory.device.chromeos.readonly, https://www.googleapis.com/auth/admin.directory.orgunit.readonly, https://www.googleapis.com/auth/admin.directory.user.readonly, https://www.googleapis.com/auth/admin.directory.device.chromeos, https://www.googleapis.com/auth/admin.directory.device.mobile.action

Please Note: The below API Scopes should only be added if you are using Mobile Guardian Classroom Management Tools for Teachers.

Additional API Scopes for Roster sync

https://www.googleapis.com/auth/classroom.rosters.readonly, https://www.googleapis.com/auth/classroom.courses.readonly, https://www.googleapis.com/auth/classroom.profile.emails, https://www.googleapis.com/auth/classroom.profile.photos

Once you have entered the above-mentioned info in the screen shown below please click Authorise.

To Summarise:

Who does this impact: School / District using G-suite integration for syncing across users, devices and classes. 

What will it impact: Syncing and actions related to disabling and re-enabling a device.

What do you need to do:Replace existing API scopes with new scopes.