Project Creation, Enable API Access in Google Cloud Console
& Add Scopes at Domain Level

---

Go to the cloud platform https://console.developers.google.com/ and Sign in with any G Suite Admin ID.

---

---

After successful sign in, home screen comes up. Go to IAM & Admin >> Create a Project to initiate project creation.

---

---

Then Enter the project name and click on Create button to generate new project.

---

---

After successful creation, navigate to API and Services > Credentials:

---

---

Now click on Create Credentials > Service Account Key:

---

---

Now, in Service account details section, enter Service Account Name & Click on CREATE AND CONTINUE button.

---

---

Now, grant service account permissions (optional) for that click on the Select a role option. Choose Project >> Owner from drop down. After that click on Continue and then Done button.

---

---

Next, click on Edit button under the Actions.

---

---

Service account details screen would be displayed, then click on Keys tab in same page. After that click on Add key >> Create new key and Select an option P12 from key type and click on Create button:

---

---

After successful creation, Private Key will be downloaded in your computer (Save this file securely as it will require for migration). A message will prompt, “Private Key saved to your computer” click on Close:

---

---

Now, go to the Details tab under the Service Accounts window. Here, you will see the Client / Unique ID. Copy this ID as you will need this ID afterwards.

---

---

Now go to Menu > APIs and Services > Library. Now open and Enable each library as given below:

1. Admin SDK API
2. Google Drive API
3. Gmail API
4. Google Calendar API
5. Google People API

---

Open and Enable each library as given below:

---

Enable Google Drive API

Enable Gmail API

---

Enable Google Calendar API

---

Enable Google People API

---

---

Go to Google Admin Console at: https://admin.google.com/ and sign in with admin account:

---

---

After successful login, Google Admin console comes up. Click on Security > Access and Data Control > API Controls:

---

---

API Controls screen would be displayed, then click on MANAGE DOMAIN WIDE-DELEGATION in Domain-wide delegation:

---

---

Domain-wide delegation screen would be displayed, then click on “Add new” button:

---

---

"Add a new client ID" screen would be displayed, then enter earlier created Client ID (Prefer Step 10 from project creation steps) in “Client ID / Unique ID” field and add below given permissions in “OAuth Scopes(comma-delimited)” fields and click on Authorize button:

---

G Suite as a Source:

Users
https://www.googleapis.com/auth/admin.directory.user.readonly,
https://www.googleapis.com/auth/admin.directory.userschema.readonly,
https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly,

Drive
https://www.googleapis.com/auth/drive.readonly,
https://www.googleapis.com/auth/drive.metadata.readonly,

Emails
https://www.googleapis.com/auth/gmail.readonly,
https://www.googleapis.com/auth/gmail.labels,

Calendar
https://www.googleapis.com/auth/calendar.readonly,
https://www.googleapis.com/auth/calendar.events.readonly,
https://www.googleapis.com/auth/calendar.settings.readonly,

Contact
https://www.google.com/m8/feeds

---

G Suite as a Destination:

Users
https://www.googleapis.com/auth/admin.directory.user.readonly,
https://www.googleapis.com/auth/admin.directory.userschema.readonly,
https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly,

Drive
https://www.googleapis.com/auth/drive,

Emails
https://www.googleapis.com/auth/gmail.insert,
https://www.googleapis.com/auth/gmail.labels,

Calendar
https://www.googleapis.com/auth/calendar,
https://www.googleapis.com/auth/calendar.events,

Contact
https://www.google.com/m8/feeds

---

---

After successful authorization, above entered details will be added and shown in list as given below:

---