# Google Directory

{% stepper %}
{% step %}

### Service Account Email

Email address of the Service Account.
{% endstep %}

{% step %}

### Private Key File

The private\_key.json file associated with the Service Account.
{% endstep %}

{% step %}

### Customer Id

The unique ID for the customer's Google Workspace account. In case of a multi-domain account, to fetch all users for a customer, use this field instead of domain.
{% endstep %}

{% step %}

### Domain Name

The domain name. Use this field to get users from only one domain. To return all domains for a customer account, use the customer query parameter instead.

{% hint style="info" %}
You must provide either the customer or the domain parameter.
{% endhint %}
{% endstep %}

{% step %}

### Workspace Admin Email

The email address of the user for which the application is requesting delegated access.

{% hint style="info" %}
Domain-wide Delegation

The service account must have domain wide delegation.

* From your Google Workspace domain's Admin console, go to Main menu > Security > Access and data control > API Controls.
* In the Domain wide delegation pane, select Manage Domain Wide Delegation.
* Click Add new.
* In the Client ID field, enter the service account's Client ID. You can find your service account's client ID in the Service accounts page.
* In the OAuth scopes (comma-delimited) field, enter the list of scopes that your application should be granted access to. For example, if your application needs domain-wide full access to the Google Drive API and the Google Calendar API, enter: <https://www.googleapis.com/auth/drive>, <https://www.googleapis.com/auth/calendar>.
  {% endhint %}
  {% endstep %}
  {% endstepper %}

{% hint style="warning" %}
Please perform a connection test to ensure there is a valid connection to the host.\
When the discovery operation is finalized, you will be able to see the details on the Assets page.
{% endhint %}