Grant Service Account API Access

Google Administrator requires Google Workspace account with Super Admin Role to grant the service account with API access.

The account with Super Admin role only needs to perform this one time configuration for the Google Workspace account to be added to FortiCWP.

1. Log into Google Admin with the Google Workspace account with Super Admin role.
2. Go to Security > API Controls, scroll down and click Manage Domain wide Delegation.



3. Click Add new to authorize the registered client to access your user data.



4. In the Client ID field, enter the Client ID saved from Configure Service Account. Your Client ID must be a string of numbers.



5. In the OAuth scopes field, enter:

"https://www.googleapis.com/auth/admin.directory.user,https://www.googleapis.com/auth/admin.reports.audit.readonly".