Enable API access and authorize your client ID

Next, enable API access and authorize your service account’s client ID.

  1. In your Google Admin console, click Security and then API reference.
  2. Check the Enable API access box and click Save
  3. Click Advanced settings.

    You might need to click Show more to see Advanced settings.

  4. In the Authentication section, click Manage API client access.
  5. In the Client Name field, enter your service account's client ID.

    You can find the client ID in the JSON file you downloaded when you created the G Suite service account. Alternatively, you can find the client ID in the Google Cloud Platform Console. Under the Domain wide delegation column, click View Client ID.

  6. In the One or More API scopes field, copy and paste the following comma-separated list of scopes:

    https://www.googleapis.com/auth/admin.directory.user,
    https://www.googleapis.com/auth/admin.directory.customer.readonly,
    https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly,
    https://www.googleapis.com/auth/userinfo.email,
    https://www.googleapis.com/auth/migrate.deployment.interop

  7. Click Authorize.

Note: It might take some time for the authorization process to complete. 

Next step

Download the installers