- Print
- DarkLight
Purpose
Setting up domain-wide delegation allows the Unleash service account to access your company’s groups list. This will enable you to use these groups in Unleash. The user can easily remove this connection if they wish.
Prerequisites
The person configuring the domain-wide delegation must be an administrator of the relevant Google Workspace organization.
Setup
Go to https://admin.google.com/ac/owl/domainwidedelegation and sign in if needed. If you are already signed in and have multiple organizations/domains, ensure you are signed into the correct account for the intended domain.
At the top of the API Clients table, click Add new.
In the dialog that opens, under Client ID, provide the value
101066985626398460460
.In the same dialog, under OAuth scopes add the following scopes (comma-delimited list follows).
openid
profile
email
<https://www.googleapis.com/auth/admin.directory.user.readonly>
<https://www.googleapis.com/auth/admin.directory.group.readonly>
<https://www.googleapis.com/auth/admin.directory.domain.readonly>
For your convenience, the same list of scopes formatted with commas is below.
openid,profile,email,<https://www.googleapis.com/auth/admin.directory.user.readonly,https://www.googleapis.com/auth/admin.directory.group.readonly,https://www.googleapis.com/auth/admin.directory.domain.readonly>
Click the Authorize button.
Please notify your Unleash contact that this process has been completed so that we can validate that the setup is successful and configure your requested link provisioning automation.