Skip to content
English
Create Ticket
  • There are no suggestions because the search field is empty.

How do I grant more scopes for my Google Admin Console connection?

To grant more scopes to your Google Admin Console connection, 

Step 1: Sign in to Google Cloud Console using an admin account. 
 
Step 2: Select the Google Cloud project where your OAuth app was created. 
 


Step 3: Go to APIs & Services check if all the below APIs are enabled. 

  1. # API to enable Service name Why it is required
    1 Admin SDK API admin.googleapis.com Required for users, groups, organizational units, domains, roles, calendar resources, ChromeOS devices, mobile devices, user schemas, audit reports, and Chrome printers.
    2 Chrome Policy API chromepolicy.googleapis.com Required for ChromeOS and Chrome browser policy backup.
    3 Chrome Management API chromemanagement.googleapis.com Required for Chrome app details and Chrome management information.
    4 Drive Labels API drivelabels.googleapis.com Required for Google Drive admin labels metadata.
    5 Groups Settings API groupssettings.googleapis.com Required for Google Groups settings.
    6 Enterprise License Manager API licensing.googleapis.com Required for Google Workspace license information.
    7 Access Context Manager API `` Required for Context Aware Access information.
    8 Cloud Resource Manager API `` Required for Cloud Resource Manager information.
    9 Identity and Access Management (IAM) API `` Required for Identity and Access Management (IAM) information.
    10 Cloud Identity-Aware Proxy API `` Required for Cloud Identity-Aware Proxy information.
    11 Cloud Identity API

    cloudidentity.googleapis.com

    		  

    To enable, Cloud Identity API, Sometimes, it is not found in the API marketplace, hence go to the link mentioned below and select you project and click on 'Enable'.
    Link - https://console.cloud.google.com/apis/library/cloudidentity.googleapis.com?project=YOUR_PROJECT_ID


 
 
Step 4: Go to API & Services -> Credentials


 

 
Step 5: Select the Client ID you want to update 



 
Step 6: Select the Data Access tab on the left panel and click Add or remove scopes. 
 



Step 6: Add the required Google Admin Console scopes (ensure all are selected), then click Update. 

Add these scope URLs: 

  • https://www.googleapis.com/auth/admin.directory.user
  • https://www.googleapis.com/auth/admin.directory.user.security
  • https://www.googleapis.com/auth/admin.directory.group
  • https://www.googleapis.com/auth/admin.directory.orgunit
  • https://www.googleapis.com/auth/admin.directory.domain
  • https://www.googleapis.com/auth/admin.directory.rolemanagement
  • https://www.googleapis.com/auth/admin.directory.resource.calendar
  • https://www.googleapis.com/auth/admin.directory.device.chromeos
  • https://www.googleapis.com/auth/admin.directory.device.mobile
  • https://www.googleapis.com/auth/admin.directory.device.mobile.action
  • https://www.googleapis.com/auth/admin.directory.userschema
  • https://www.googleapis.com/auth/admin.reports.audit.readonly
  • https://www.googleapis.com/auth/chrome.management.policy
  • https://www.googleapis.com/auth/admin.chrome.printers
  • https://www.googleapis.com/auth/cloud-identity.userinvitations
  • https://www.googleapis.com/auth/cloud-identity.groups
  • https://www.googleapis.com/auth/cloud-identity.inboundsso
  • https://www.googleapis.com/auth/cloud-identity.policies
  • https://www.googleapis.com/auth/drive.admin.labels
  • https://www.googleapis.com/auth/cloud-platform
  • https://www.googleapis.com/auth/apps.groups.settings
  • https://www.googleapis.com/auth/apps.licensing
  • https://www.googleapis.com/auth/chrome.management.appdetails.readonly 


 

Step 7: Click Save and continue until the consent screen changes are saved. 

Step 8: Get the client ID & client secret to re-authorize the application in SysCloud app.

If you do not have the client secret, please create a new secret by going to API & Services > Credentials. Choose the credential you used to authorize SysCloud connection and click on 'Add secret' to create a new secret.

Step 9: Log in to SysCloud and go to Settings -> Cloud connection center.


Step 10: Locate your Google Admin Console connection and click Edit (pencil icon) or open the connection details.

 

Step 11: Click Refresh Credentials and paste the new Client ID and Client Secret, then click Authorize in Google Admin Console .



Step 12: Return to the backup status page and confirm the backup resumes in the next backup cycle.

If you have any question, please create a support ticket.