Authorize GSMME for your account

Before you use G Suite Migration for Microsoft® Exchange (GSMME), authorize it for your account. The steps vary, depending on whether or not you’re migrating from a G Suite account.

Step 1: Create a service account 

Complete the steps in Create a service account.

Step 2: Enable API access

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Securityand thenAPI reference.

    To see Security on the Home page, you might have to click More controls at the bottom.

  3. Check the Enable API access box and click Save changes

Step 3: Authorize your Client ID in the Admin console

The instructions depend on what type of account you're migrating from.

I'm not migrating from a G Suite account
  1. On the Security page of the Admin console, click Advanced settings.

    You might need to click Show more to see Advanced settings.

  2. In the Authentication section, click Manage API client access
  3. In the Client Name field, enter your service account's Client ID.

    For details on how to create the Client ID, see Create a service account.

  4. In the One or More API scopes field, copy and paste the following comma-separated list of scopes:

    https://www.google.com/m8/feeds/,
    https://www.googleapis.com/auth/admin.directory.group.readonly,
    https://www.googleapis.com/auth/admin.directory.user,
    https://www.googleapis.com/auth/apps.groups.migration,
    https://www.googleapis.com/auth/calendar,
    https://www.googleapis.com/auth/gmail.insert,
    https://www.googleapis.com/auth/gmail.labels

  5. Click Authorize
  6. Next to the Client ID name you entered, make sure all of the scopes appear with a description. If they don't, in the One or More API Scopes field, enter the scopes again correctly and click Authorize.
  7. When all of the scopes are entered correctly, go back to the Admin console and click Save.
I'm migrating from a G Suite account

Depending on whether or not your G Suite source and destination domains match one another, you might skip the first of the 2 sets of steps below. If your source and destination domains:

  • Differ from one another–Authorize GSMME on both of your domains. (Follow all of the steps below.) 
  • Match each other–Only authorize GSMME on your destination domain. (Go straight to the second set of steps.)

Authorize GSMME on your source domain

  1. Sign in as an administrator on your source domain. 
  2. On the Security page of the Admin console, click Advanced settings.

    You might need to click Show more to see Advanced settings.

  3. In the Authentication section, click Manage API client access
  4. In the Client Name field, enter your service account's Client ID.

    For details on how to create the Client ID, see Create a service account.

  5. In the One or More API scopes field, copy and paste the scope: https://www.googleapis.com/auth/gmail.imap_admin
  6. Click Authorize
  7. Go back to the Admin console and click Save.
  8. Next, complete the steps below. 

Authorize GSMME on your destination domain

  1. Sign in as an administrator on your destination domain. 
  2. On the Security page of the Admin console, click Advanced settings.

    You might need to click Show more to see Advanced settings.

  3. In the Authentication section, click Manage API client access
  4. In the Client Name field, enter your service account's Client ID.

    For details on how to create the Client ID, see Create a service account.

  5. In the One or More API scopes field, copy and paste the following comma-separated list of scopes:

    https://www.google.com/m8/feeds/,
    https://www.googleapis.com/auth/admin.directory.group.readonly,
    https://www.googleapis.com/auth/admin.directory.user,
    https://www.googleapis.com/auth/apps.groups.migration,
    https://www.googleapis.com/auth/calendar,
    https://www.googleapis.com/auth/gmail.insert,
    https://www.googleapis.com/auth/gmail.labels,
    https://www.googleapis.com/auth/gmail.imap_admin

  6. Click Authorize
  7. Next to the Client ID name you entered, make sure all of the scopes appear with a description. If they don't, in the One or More API Scopes field, enter the scopes again correctly and click Authorize.
  8. When all of the scopes are entered correctly, go back to the Admin console and click Save.

Next step 

Set up your migration. For details, see how to migrate data with GSMME.

Was this article helpful?
How can we improve it?