Skip to main content

What You'll Need

CredentialDescription
Service Account KeyJSON key file from Google Cloud — you’ll enter individual fields from this file (see below)
Admin EmailGoogle Workspace super admin email for impersonation
DomainYour Google Workspace domain (e.g., example.com)
The configuration form asks for individual fields from the service account JSON key file. Open the downloaded JSON file and copy each value into the corresponding form field: type, project_id, private_key_id, private_key, client_email, client_id, auth_uri, token_uri, auth_provider_x509_cert_url, client_x509_cert_url, and universe_domain.

​
Overview

Connect to Google Workspace Admin SDK for comprehensive directory and audit access.

Directory

Users, groups, organizational units

Audit & Reports

Admin audit logs, usage reports, login activity

​
Prerequisites

Administrator access required. You need privileges in to complete this setup.If you don’t have admin access, contact your administrator to:
  • Create the API credentials on your behalf, OR
  • Grant you temporary admin access to complete the setup
  • Super Admin privileges in Google Workspace
  • Access to Google Cloud Console for your organization
  • Permission to enable APIs and create service accounts

​
Setup Guide

1

Create Google Cloud Project

  1. Go to Google Cloud Console
  2. Click Select a project → New Project
  3. Name it: Parable Integration
  4. Click Create
2

Enable Required APIs

  1. Go to APIs & Services → Library
  2. Search for and enable each:
APIPurpose
Admin SDK APIDirectory, users, groups
Google Drive APIDrive activity (optional)
Gmail APIEmail metadata (optional)
Calendar APICalendar data (optional)
3

Create Service Account

  1. Go to IAM & Admin → Service Accounts
  2. Click Create Service Account
  3. Name: parable-integration
  4. Click Create and Continue
  5. Skip role assignment → Done
4

Generate Service Account Key

  1. Click on the newly created service account
  2. Go to Keys tab → Add Key → Create new key
  3. Select JSON format
  4. Click Create — key file downloads automatically
Store the JSON key file securely. It cannot be downloaded again!
5

Note Client ID for Delegation

  1. On the service account details page
  2. Under Advanced settings, expand Domain-wide Delegation
  3. Copy the Client ID (numeric, ~21 digits) — you’ll need this for the next step
6

Configure Domain-Wide Delegation

  1. Open Google Admin Console
  2. Go to Security → Access and data control → API controls
  3. Click Manage Domain Wide Delegation
  4. Click Add new
  5. Enter:
FieldValue
Client IDService account Client ID from Step 5
OAuth ScopesSee scope list below
7

Add Required Scopes

Add these scopes (comma-separated):
https://www.googleapis.com/auth/admin.directory.user.readonly,
https://www.googleapis.com/auth/admin.directory.group.readonly,
https://www.googleapis.com/auth/admin.directory.orgunit.readonly,
https://www.googleapis.com/auth/admin.reports.audit.readonly,
https://www.googleapis.com/auth/admin.reports.usage.readonly
Click Authorize