Unleash Group Creation

Purpose

Setting up domain-wide delegation allows the Unleash service account to access your company’s groups list. This will enable you to use these groups in Unleash. The user can easily remove this connection if they wish.

Prerequisites

The person configuring the domain-wide delegation must be an administrator of the relevant Google Workspace organization.

Setup

1. Go to https://admin.google.com/ac/owl/domainwidedelegation and sign in if needed. If you are already signed in and have multiple organizations/domains, ensure you are signed into the correct account for the intended domain.

2. At the top of the API Clients table, click Add new.

3. In the dialog that opens, under Client ID, provide the value 101066985626398460460 .

4. In the same dialog, under OAuth scopes add the following scopes (comma-delimited list follows).

openid
profile
email
<https://www.googleapis.com/auth/admin.directory.user.readonly> 
<https://www.googleapis.com/auth/admin.directory.group.readonly> 
<https://www.googleapis.com/auth/admin.directory.domain.readonly>

For your convenience, the same list of scopes formatted with commas is below.

openid,profile,email,<https://www.googleapis.com/auth/admin.directory.user.readonly,https://www.googleapis.com/auth/admin.directory.group.readonly,https://www.googleapis.com/auth/admin.directory.domain.readonly> 

5. Click the Authorize button.

6. Please notify your Unleash contact that this process has been completed so that we can validate that the setup is successful and configure your requested link provisioning automation.