Google Directory

1

Service Account Email

Email address of the Service Account.

2

Private Key File

The private_key.json file associated with the Service Account.

3

Customer Id

The unique ID for the customer's Google Workspace account. In case of a multi-domain account, to fetch all users for a customer, use this field instead of domain.

4

Domain Name

The domain name. Use this field to get users from only one domain. To return all domains for a customer account, use the customer query parameter instead.

You must provide either the customer or the domain parameter.

5

Workspace Admin Email

The email address of the user for which the application is requesting delegated access.

Domain-wide Delegation

The service account must have domain wide delegation.

• From your Google Workspace domain's Admin console, go to Main menu > Security > Access and data control > API Controls.

• In the Domain wide delegation pane, select Manage Domain Wide Delegation.

• Click Add new.

• In the Client ID field, enter the service account's Client ID. You can find your service account's client ID in the Service accounts page.

• In the OAuth scopes (comma-delimited) field, enter the list of scopes that your application should be granted access to. For example, if your application needs domain-wide full access to the Google Drive API and the Google Calendar API, enter: https://www.googleapis.com/auth/drive, https://www.googleapis.com/auth/calendar.

Please perform a connection test to ensure there is a valid connection to the host. When the discovery operation is finalized, you will be able to see the details on the Assets page.