How to create a G-Suite Service Account key for Zivver Chrome Extension

How to create a G-Suite Service Account key for Zivver Chrome Extension

A G-Suite Service Account key is required to work with the Zivver Chrome Extension. The service account key is stored encrypted, to protect it against unauthorized access.

Step 1: Create a project

  1. Go to the Google Cloud Platform Console and sign in as a super administrator. If this is your first time signing in to the console, agree to the Terms of Service.
  2. Click IAM & admin > Manage resources.You might have to click Menu first.
  3. At the top of the screen, click Create Project.
  4. Enter a project name and click Create.

Step 2: Turn on the Gmail API for the service account

  1. Make sure your new project is selected in the projects list at the top of the screen.
  2. Click APIs & Services > Library. You might have to click Menu first.
  3. Search for Gmail API,
  4. Click the Gmail API card
  5. Click Enable.

Step 3: Create the service account

  1. Click APIs & Services > Credentials. You might have to click Menu first.
  2. Click Create Credentials and select Service Account.
  3. In the Service account name field, enter the following name: Zivver
  4. Click Create.
  5. Skip Service Account Permissions. Click Continue.
  6. Click Create Key.
  7. Make sure the key type is set to JSON and click Create.
    A message that the service account’s private key JSON file was downloaded to your computer is displayed. Make a note of the name and location of this file. You’ll need to insert the content of this file later in your Zivver Organisation Settings.
  8. Click Close > Done.
  9. On the Credentials page, under Service Accounts, click the email address of the service account you just created.
  10. Click Show Domain-Wide Delegation.
  11. Check the Enable G Suite Domain-wide Delegation box.
  12. Copy or write down the Client ID, we need this ID in step 4.
  13. Click Save.

Step 4: Set API permissions for the service account

  1. Go to the Google Admin Console and sign in as a super administrator.
  2. Go to Security > API Controls. You might have to click Menu first.
  3. Under Domain-wide delegation, click Manage domain-wide delegation.
  4. On the Manage domain-wide delegation page, click Add new.
  5. Enter the Client ID of the service account you got in step 3.13
  6. Under OAuth Scope, add the following scope: https://www.googleapis.com/auth/gmail.insert
  7. Click Authorize. If you get an error, the client ID might not exist or there might be a duplicate service account or unsupported scope.

Step 5: Configure Service Account key in Zivver

  1. Go to the Zivver Organisation Settings and sign in as a Zivver administrator.
  2. Go to External Services (hidden)
  3. Under G-Suite Service Account Key, insert the content of the JSON file you generated in step 3.8.
  4. Click Save.
  5. If the card for Users without access is shown on the page, click Grant Access so all users can be authenticated with the Service Account key.

Was this article helpful?

thumb_up thumb_down