To prepare your Google domain for Google Cloud Directory Sync (GCDS), you need to enable authentication for the domain with an OAuth token and allow API access.
Set up your authorization settings
GCDS generates an OAuth token in Configuration Manager and uses it to connect to and synchronize with your Google domain. Authorization of GCDS is associated with the administrator credentials used in step 3 below. If the administrator leaves your organization, you won't be able to authorize GCDS. We recommend that you create a separate super administrator account to use with GCDS to avoid this problem.
- Open Configuration Manager and click the Google Domain Configuration page.
- Click Authorize Now to set up your authorization settings and create a verification code.
- Click Sign In to open a browser window and sign in to your Google domain with your super administrator username and password.
- Copy the token that's displayed.
- In the Verification Code field, enter the token and click Validate.
Turn on API access
Make sure that you have turned on API access in the Google Admin console. For details, see Enable API access.
GCDS uses APIs to upload data and make requests to your Google domain. Some of the APIs that GCDS uses are:
- Calendar Resource API—Creates, deletes, and updates calendar resources for the domain.
- Directory API—Manages Chrome devices, groups, group aliases, members, organizational units, users, and user aliases.
- Shared Contacts API—Creates, deletes, and updates shared contact information for external contacts.