To use Zivver on Gmail, complete these steps in the sequenced specified. The following instructions will guide you on how to install the Zivver Chrome Extension for Google Workspace as Google Super Admin so that users can send and receive Zivver messages from Gmail.

Installation and configuration of the Zivver Chrome Extension

The setup of the Zivver extension on Google Chrome consists of two steps. Make sure to complete both of these steps to be able to use Zivver on Gmail.

1. Install the Zivver Chrome Extension
2. Create a service account for Zivver Chrome Extension

Before you begin make sure that you have these technical requirements in place:

• Super Admin rights on the Google Cloud Platform Console and Google Admin Console.
• Zivver administrator rights.
  

Install the Zivver Chrome Extension

Procedure

1. Log in with your admin credentials in your organization’s Google workspace Google Admin Console.
   
2. (Optional) You can make the Zivver extension available only for a specific group of users instead of your full organization. For example, only a specific team or a pilot group. If you want to do that, first create a new organizational unit (OU) and assign the relevant users to that OU.

1. From the navigation menu on the left, go to Devices > Chrome > Apps & Extensions > Users & Browsers.
   
   

2. Select the OU that you want to assign the extension to.
   
   

3. Hover over the + icon at the right bottom of the screen and select Add Chrome app or extension by ID.
   
   

4. Enter the ID of the Zivver extension: kckcdkheokdjcdgdfmpkgppflhdbmmhl . Then, click Save.
   
   

Now Zivver shows as an app in the list of installed apps and extensions.

1. Change the installation policy.
   Use the dropdown in the right menu to Force install.
   
   

2. Click SAVE in the top right corner.
   
   

What to do next
Continue with Create a Service Account for the Zivver Chrome Extension. This is a critical step for the extension to function.

Create a service account for the Zivver Chrome Extension

After the installation of the Zivver Chrome Extension, you can create a service account to grant access for your users. You must have a Google Workspace Account to work with the Zivver Chrome Extension.

Modify Google Cloud policy

Before a Google Service account key can be created, this must first be allowed. Follow the steps below to make this possible.

1. Go to the Google Cloud Platform Console and log in with your Super Admin account.

2. From the top left corner, next to the Google Cloud logo, select your organization from the dropdown list.
   
   

3. Go to shield_person IAM and admin.
   
   

4. Click person_add GRANT ACCESS.
   
   

5. Add your Super Admin account in the New principal field.
   
   

6. Under Assign roles select the Organisation Administrator and Organisation Policy Administrator roles.
   
   

7. Click SAVE and wait a few minutes (± 3 minutes) to be sure that IAM have been properly propagated.

8. Go to article Organization Policies.
   
   

9. Filter on iam.disableServiceAccountKeyCreation.
   
   

10. Select the policy iam.disableServiceAccountKeyCreation.

11. Click edit MANAGE POLICY.
    
    

12. Scroll down to Rules, and expand the Enforced rule.

13. Change Enforcement to Off.
    
    

14. Click DONE.
    
    

15. Click SET POLICY.
    
    

Create a project

Technical requirements

• Super Admin rights on the Google Cloud Platform Console and Google Admin Console.
• Zivver administrator rights.

Procedure

1. Go to the Google Cloud Platform Console and sign in.

2. Click your organization’s name at the top of the screen.
   
   

3. In the pop-up that appears, click NEW PROJECT.
   
   

4. Give the project a name that fits its purpose.
   The fields Organization and Location must contain the name of your organization.
   Example: Zivver

5. Click CREATE.
   You created a project. Now you see the project dashboard.

Enable Gmail API for the project

Procedure 1. Select this project in the dropdown adjacent to the Google Cloud icon.

1. On the left panel, go to API’s & Services> Library.
   
   

2. Enter gmail api in the API Library search bar. Then, select it from the list. The procedure redirects you to the Gmail API landing page.

3. Click ENABLE.
   
   

You now enabled the Gmail API for your project.

Create the service account

1. Go to Credentials and click + CREATE CREDENTIALS.

2. In the dropdown menu choose Service Account.
   
   

3. Give the service account a descriptive name.
   Example: Zivver

4. Click DONE.
   The service account will appear at the bottom of the screen with an email address that ends with gserviceaccount.com

5. Click on the mail address for the service account.
   
   

6. Go to the KEYS tab. Then, click ADD KEY.

7. Select Create new key.
   
   

A popup shows up to select the key type.

1. Choose JSON type and click CREATE.
   
   
   

You get a prompt to save the private key in a JSON file.

After you create the service account, you create a key to gain access to this service account and your Gmail environment. You need the key only once unless you accidentally remove the key in Zivver. The key is stored in a JSON file. Then, Zivver stores that file encrypted. But neither Google nor Zivver let you download the file again. Thus, store the file in a secure location where only the authorized persons can access it.

1. Still on the Service account details page, click Advanced Settings.

2. Copy the Client ID.
   
   

What to do next
Use the Client ID for the next section.

Connect the service account to the Google workspace environment

Before you begin
You copied the client ID to the clipboard of your operating system. Please refer to Create the service account.

Procedure
1. Go to the Google Admin Console

1. Click Security > Access and data control > API controls.

2. Click MANAGE DOMAIN-WIDE DELEGATION.
   
   

3. Click Add new.

4. At Client ID, copy the client ID that you copied.

5. At OAuth scopes (comma-delimited), write this:
   https://www.googleapis.com/auth/gmail.insert

6. Click AUTHORIZE.
   You now set API permissions for the service account.
   
   Troubleshooting
   

   If an error occurs, the client ID might be incorrect, there is a duplicate service account, or the scope is unsupported.

   Configure the service account key in Zivver

   
   Procedure

7. Go to the External Services page in the Zivver WebApp.
   Use that link, because the external services page is hidden in the left side pane of the Zivver admin panel

8. Open the JSON file from the service account section in a text editor on your computer.

9. Paste the full content of the file in the text box at Google Workspace Service Account Key.

10. Click Save.
    The text box then disappears for security reasons. You now see only Update/Delete buttons. Do not use these buttons, unless, for example, you migrate to a different Google environment.

11. If you see the card for Users without access on the page, click Grant Access.
    
    

Then, all the users can authenticate with the Service Account key.

Your Zivver Chrome Extension (when deployed) is now ready to use.

Grant access to the Zivver Chrome Extension

About this task
If you created a user without the Zivver Synctool, you must grant them access to the Zivver Chrome Extension on the External Services page. Users without access see this message in the Zivver pane in Gmail:
Zivver is not set up correctly, speak to your administrator

Procedure

1. Go to the External Services page.
2. Click GRANT ACCESS under Users without access.
   

After a page refresh, the users can use the Zivver Chrome Extension.