- Enable to Google Admin SDK
- Create a Google Service Account
- Create an API Key
- Add the Client ID with OAuth scopes
- Add the integration in the Tier4 portal
1. Enable to the Google Admin SDK
The Tier4 integration uses the Google Admin SDK API to connect to your Google Workspace. Before you configure the connection, you must enable the Google Admin SDK API. To enable the Google Admin SDK API:- Go to the Google Cloud console at https://console.cloud.google.com/ and log in with a Super Admin account.
- From the console menu, select APIs & Services > Library.
- In the search box, search for
admin sdk. - From the search results, select Admin SDK API.
- Click Enable.
- From the APIs & Services menu, select Library.
- In the search box, search for
alert center api. - From the search results, select Alert Center API.
- Click Enable
2. Create a Google Service Account
For Tier4 to authenticate to your Google Workspace environment, you must create a Google Service Account. To create a Google Service Account:- Go to the Google Cloud console at https://console.cloud.google.com/ and log in with a Super Admin account.
- From the console menu, select IAM & Admin > Service Accounts.
- Click Create Service Account
- Enter a Name and Description for the account. Click Create and Continue.
- From the Permissions section, assign the Service Account Token Creator role. Click Done.
- From the Email column, select the account.
- From the Service Account Details page, click the new account.
- Copy the Oauth2 Client ID to use later in these instructions.
3. Create an API Key
For Tier4 to authenticate to your Google Workspace environment, you must also create an API key. To create an API key:- Go to the Google Cloud console at https://console.cloud.google.com/ and log in with a Super Admin account.
- From the console menu, select IAM & Admin > Service Accounts.
- Next to the service account you created, click the ellipsis.
- Select Manage Keys.
- In the Keys tab, from the Add Key menu, select Create New Key.
- Select JSON.
- Click Create. Your computer downloads the private key JSON file. Keep this file in a secure location in your local environment.
- Click Close.
4. Add the Client ID with OAuth Scopes
To add the client ID with OAuth Scopes:- Go to the Google Admin console at https://admin.google.com/ac/home and log in with a Super Admin account.
- From the console menu, select Security > Access and Data Control > API Controls > Manage Domain-wide Delegation.
- Click Add New.
- Enter the Oauth2 Client ID you copied from the Create a Google Service Account section.
- Enter the OAuth Scope for the connector:
https://www.googleapis.com/auth/apps.alerts - Click Authorize.
5. Add the integration in the Tier4 portal
To add the integration:- Navigate to the Integrations page from the navigation bar.
- Click Connect on the Google Alert Center integration box.
- Enter the Google Admin Email*. You must use a Super Admin user email for this step. Do not use the service account email you created.
- In the JSON File Content text box, copy and paste the contents of the JSON file you saved in the Create an API Key step.
- Click Continue to create the integration.