Delegating Domain-Wide Authority in Google Workspace

Learn how to connect Google Workspace to Couchdrop with a Client ID and domain-wide delegation

Overview

Google Workspace requires domain-wide delegation before Couchdrop can access Google Drive using the service account created for your connection.

You configure domain-wide delegation in the Google Admin Console using the Client ID generated by Couchdrop and the required Google OAuth scopes.

How to delegate domain-wide authority

Before you start

To configure domain-wide delegation, you will need:

• Access to a Google Workspace Administrator account
• Access to the Google Admin Console
• The Client ID generated by Couchdrop when configuring your Google Workspace connection

1

Open API controls

Log in to the Google Admin Console for your Google Workspace domain.

Select Security. If Security is not visible, select Show more from the navigation menu.

Select Access and data control, then API controls.

2

Add Couchdrop as an API client

Under Domain-wide delegation, select Manage Domain Wide Delegation.

In API clients, select Add new.

Paste the Client ID generated by Couchdrop into the Client ID field.

3

Add the required OAuth scopes

In the OAuth scopes (comma-delimited) field, enter the following scopes:

https://www.googleapis.com/auth/drive,
https://www.googleapis.com/auth/drive.file,
https://www.googleapis.com/auth/admin.directory.user,
https://www.googleapis.com/auth/admin.directory.user.readonly,
https://www.googleapis.com/auth/admin.directory.user.security

Select Authorize to grant the requested permissions.

4

Verify the connection in Couchdrop

Return to the Google Workspace connection in Couchdrop and test the connection.

A successful connection confirms that domain-wide delegation has been configured correctly.

For more information about domain-wide delegation, see Google's Control API access with domain-wide delegation.