.png){kind=logo}
Set up Admin Tasks on your domain
How to Grant Domain-Wide Delegation
- Open your Admin console.
- Navigate to Security > Access and data control > API Controls > Domain-wide Delegation.
- Click "Add new" and enter the provided details:
| Folgo Service Account Client ID (App Engine default service account) |
| 105237525871085396919 |
| OAuth scopes |
| https://www.googleapis.com/auth/drive.addons.metadata.readonly,https://www.googleapis.com/auth/drive,https://www.googleapis.com/auth/script.external_request,https://www.googleapis.com/auth/userinfo.email,https://www.googleapis.com/auth/userinfo.profile,https://www.googleapis.com/auth/spreadsheets,https://www.googleapis.com/auth/gmail.send,https://www.googleapis.com/auth/script.scriptapp,https://www.googleapis.com/auth/script.locale,https://www.googleapis.com/auth/drive.activity.readonly |
- Click Authorize.
Granting 'Groups Reader' Admin Role
- Open your Admin console.
- Navigate to Account > Admin roles.
Select the system role “Groups Reader”
Click “Assign service accounts”
- Provide the Folgo Service Account email:
| folderstructuremanagement@appspot.gserviceaccount.com |
Authorizing Group for Admin Tasks in Folgo
Once domain-wide delegation has been set up, create a Google Group of users authorized to perform admin tasks (Users do not need to be Google Workspace administrators to perform admin tasks in Folgo).
If you want to authorize specific users to impersonate only a specific subset of other users, that can also be achieved using Google Groups (available soon).
- Create a new Google Group on your domain for users who should perform Admin Tasks with Folgo.
- Add the relevant users in this group (you will remain in control of this group and can remove or add members at any time).
- Share with support@folgo.app or your current contact in the Folgo team the email address of the Google Group you have created.
- The Folgo team will send you a confirmation once your Google Group has been correctly registered in Folgo. At that point, all group members will have access to the "Admin tasks" button in Folgo.
