Skip to main content
  • Setup
  • Reference

What You'll Need

CredentialDescription
Service Account KeyJSON key file from Google Cloud
Admin EmailGoogle Workspace admin to impersonate
Customer IDYour Workspace customer identifier

​
Overview

Connect to Google Workspace Admin SDK for comprehensive directory and audit access.

Directory

Users, groups, organizational units

Audit & Reports

Admin audit logs, usage reports, login activity

​
Prerequisites

Administrator access required. You need privileges in to complete this setup.If you don’t have admin access, contact your administrator to:
  • Create the API credentials on your behalf, OR
  • Grant you temporary admin access to complete the setup
  • Super Admin privileges in Google Workspace
  • Access to Google Cloud Console for your organization
  • Permission to enable APIs and create service accounts

​
Setup Guide

1

Create Google Cloud Project

  1. Go to Google Cloud Console
  2. Click Select a project → New Project
  3. Name it: Parable Integration
  4. Click Create
2

Enable Required APIs

  1. Go to APIs & Services → Library
  2. Search for and enable each:
APIPurpose
Admin SDK APIDirectory, users, groups
Google Drive APIDrive activity (optional)
Gmail APIEmail metadata (optional)
Calendar APICalendar data (optional)
3

Create Service Account

  1. Go to IAM & Admin → Service Accounts
  2. Click Create Service Account
  3. Name: parable-integration
  4. Click Create and Continue
  5. Skip role assignment → Done
4

Generate Service Account Key

  1. Click on the newly created service account
  2. Go to Keys tab → Add Key → Create new key
  3. Select JSON format
  4. Click Create — key file downloads automatically
Store the JSON key file securely. It cannot be downloaded again!
5

Note Client ID

  1. On the service account details page
  2. Under Advanced settings, expand Domain-wide Delegation
  3. Copy the Client ID (numeric, ~21 digits)
6

Configure Domain-Wide Delegation

  1. Open Google Admin Console
  2. Go to Security → Access and data control → API controls
  3. Click Manage Domain Wide Delegation
  4. Click Add new
  5. Enter:
FieldValue
Client IDService account Client ID from Step 5
OAuth ScopesSee scope list below
7

Add Required Scopes

Add these scopes (comma-separated):
https://www.googleapis.com/auth/admin.directory.user.readonly,
https://www.googleapis.com/auth/admin.directory.group.readonly,
https://www.googleapis.com/auth/admin.directory.orgunit.readonly,
https://www.googleapis.com/auth/admin.reports.audit.readonly,
https://www.googleapis.com/auth/admin.reports.usage.readonly
Click Authorize
8

Get Customer ID

  1. In Google Admin Console
  2. Go to Account → Account settings
  3. Copy your Customer ID (starts with C)