Google Admin Console

​

Creating a Google Admin Console connection

• OAuth
• Service Account

​

Using OAuth

​

Creating your connection

1. In the Blink platform, navigate to the Connections page > Add connection. A New Connection dialog box opens displaying icons of external service providers available.
2. Select the Google Admin Console icon. A dialog box with name of the connection and connection methods appear.
3. (Optional) Edit the name of the connection. At a later stage you cannot edit the name.
4. Click Google Admin Console to authenticate using OAuth.
5. Sign in using your credentials.

​

Using Service Account

• A Credentials
• A Delegated User
• A Google Oauth 2.0 Scopes

• Google Admin Console API

​

Creating your connection

1. In the Google Cloud console, go to the Create service account page.
2. Enter a name in the Service account name field.
   • (optional) Edit the service account ID.
   • (optional) If you want to grant the service account access to the project, or to grant users access to this service account, click on Create and continue.
3. Click Done to finish creating the service account.

​

Create a service account key

1. In the Google Cloud console, go to the service account page.
2. Select the service account that you want to create a key for.
3. Click the Keys tab.
4. From the dropdown menu, select Add key > Create new key.

5. Select JSON as the key type and click Create.
6. Copy the key.

​

Enable service account delegation in your Google Workspace

1. In the Google Admin console, go to the API controls page and then click on Manage domain wide delegation.

2. Add a new client to your workspace. In Client ID, use the client ID from the downloaded JSON service account from the previous step.

3. Add the following scopes:
   Copy

   Ask AI

   https://www.googleapis.com/auth/admin.directory.user,
   https://www.googleapis.com/auth/admin.directory.user.security,
   https://www.googleapis.com/auth/admin.directory.group,
   https://www.googleapis.com/auth/admin.directory.group.member,
   https://www.googleapis.com/auth/admin.directory.rolemanagement,
   https://www.googleapis.com/auth/admin.datatransfer,
   https://www.googleapis.com/auth/admin.reports.audit.readonly,
   https://www.googleapis.com/auth/apps.licensing,
   https://www.googleapis.com/auth/apps.alerts,
   https://www.googleapis.com/auth/admin.directory.orgunit.readonly
   

   Note #1You can adjust the scopes according to your requirements.
   Note #2It usually takes a few minutes for impersonation access to be granted after the client ID was added.

​

Creating your connection

1. In the Blink platform, navigate to the Connections page > Add connection.
2. Select the Google Admin Console icon. A dialog box with name of the connection and connection methods appear.
3. (Optional) Edit the name of the connection. At a later stage you cannot edit the name.
4. Select Service Account as the method to create the connection.
5. Fill in the parameters:
   • Paste the JSON key into the Credentials field.
   • Specify the email address of the Delegated User for which Blink will use for access. Many actions contain a Delegated User Override parameter which lets you perform specific operations on behalf of a different user. When this parameter is not specified, it will default to the one provided in the connection.
   The delegated user has to be a user in the same domain. For the list of the available users, navigate to the users tab.
   • A comma-separatedlist of Scopes you want this connection to request. This list should not exceed the scopes you added in your domain-wide delegation.
     
6. (Optional) Click Test Connection to test it.
7. Click Create connection. The new connection appears on the Connections page.

​

Interactive Tutorial Guides