Overview
This guide will walk you through the steps generate your Super Admin client credentials within Google Workspace and input them into Merge. Note that partnership is not required for the Google Workspace integration to work.
Instructions
Step 1: Creating a Service Account
If your application runs on Google App Engine, a service account gets set up automatically when you create your project. You may skip to Step 2.
If your application doesn't run on Google App Engine or Google Compute Engine, you must obtain these credentials in the Google API Console. See the instructions below.
1. Create your Service Account through Google Cloud: Under IAM & Admin, go to Service Accounts -> select a recent project / Select project or Create Project
2. If within the chosen project, select Create service account and populate the necessary fields
3. Select Create new key
4. Ensure it has a key type JSON. On Create, this will automatically download the generated key to your local machine.
To access all user files (including private files) in Google Drive, please ensure your account has the Super Admin role enabled in Google Admin.
Step 2: Set your role as a Super Admin user
1. In Google Admin console, select Account -> Admin roles and for the Super Admin role, select Assign Admin
2. If you haven't been assigned as a Super Admin already, select Assign user
3. Add the user(s) that you'd like to allow Super Admin access
Step 3: Delegate domain-wide authority to a service account
1. In Google Admin, under Access and data control, select API controls and under Domain wide delegation, select Manage Domain Wide Delegation
2. If it doesn't exist already, click the Add new to add access to your service account
3. Enable domain-wide access by providing the the service account's Client ID and the following scope: https://www.googleapis.com/auth/drive,https://www.googleapis.com/auth/drive.readonly, https://www.googleapis.com/auth/admin.directory.group.readonly