​
✅ Step 1: Create a Google Cloud Project

💳 Note: Google requires you to set up a billing account to use projects. If you don’t have one, you’ll need to create it before proceeding. This ConfigView integration does not incur any cost in Google Cloud. If you already have a billing account, simply choose your Organization and Location during project creation.

  1. Go to: https://console.cloud.google.com/
  2. Click the project dropdown (top-left) > New Project
  3. Recommended Project Name:    configview-integration
  4. Choose your Organization and Location
  5. Click Create
  6. Select the project from the dropdown

​
✅ Step 2: Enable Required APIs

In the configview-integration project:

  1. Go to: https://console.cloud.google.com/apis Click Enable API’s and services.
  2. Enable the following APIs by searching for them and clicking on the links below:

​
✅ Step 3: Create a Service Account and JSON Key

  1. Visit: Service Accounts
  2. Click + CREATE SERVICE ACCOUNT
  3. Name it:    configview-sa Note: The Service Account ID generated will also need to match this name.
  4. Click Create and Continue
  5. (Optional) Skip assigning roles
  6. Click Done
  7. Open the service account > Click Keys > click Add Key > Create new key > choose Json > click Create.
  8. Go back to Details > Click Advanced Settings.
  9. Set product name to: ConfigView App
  10. Enable G Suite Domain-wide Delegation.
  11. Click Save.

​
✅ Step 4: Rename JSON Key

  1. A key file was downloaded in the previous step.
  2. 🔁 Rename the file to:    google_admin.json    This is required for ConfigView to authenticate with Google Workspace.

​
✅ Step 5: Authorize Domain-Wide Delegation in Google Admin

  1. Go to the service account Details tab in Google Cloud Console.
  2. Click Advanced Settings.
  3. Copy the Client ID: This will be a long string of numbers.
  4. Click the link: “View Google Workspace admin console” to open the Google Admin console in a new tab.
  5. In the Google Admin console, navigate to:

   * Security > Access and Data Control > API Controls 6. Scroll to Domain-wide Delegation > click Manage Domain-Wide Delegation 7. Click Add New 8. Paste the Client ID you copied earlier. 9. Paste the following scopes: 10.You can select and paste the scopes

http://sites.google.com/feeds,
https://mail.google.com/,
https://www.googleapis.com/auth/admin.directory.group.member.readonly,
https://www.googleapis.com/auth/admin.directory.group.readonly,
https://www.googleapis.com/auth/admin.directory.user.readonly,
https://www.googleapis.com/auth/analytics.readonly,
https://www.googleapis.com/auth/apps.alerts,
https://www.googleapis.com/auth/apps.groups.settings,
https://www.googleapis.com/auth/calendar,
https://www.googleapis.com/auth/cloud-identity,
https://www.googleapis.com/auth/cloud-platform,
https://www.googleapis.com/auth/contacts,
https://www.googleapis.com/auth/contacts.other.readonly,
https://www.googleapis.com/auth/datastudio,
https://www.googleapis.com/auth/directory.readonly,
https://www.googleapis.com/auth/documents,
https://www.googleapis.com/auth/drive,
https://www.googleapis.com/auth/drive.activity,
https://www.googleapis.com/auth/drive.admin.labels,
https://www.googleapis.com/auth/drive.labels,
https://www.googleapis.com/auth/gmail.modify,
https://www.googleapis.com/auth/gmail.readonly,
https://www.googleapis.com/auth/gmail.settings.basic,
https://www.googleapis.com/auth/gmail.settings.sharing,
https://www.googleapis.com/auth/keep,
https://www.googleapis.com/auth/meetings.space.created,
https://www.googleapis.com/auth/spreadsheets,
https://www.googleapis.com/auth/tasks,
https://www.googleapis.com/auth/userinfo.profile

11.Click Authorize

​
✅ Step 6: Upload Credentials to ConfigView

  1. Visit: https://configview-dashboard-frontend.vercel.app/admin/external
  2. Upload the renamed google_admin.json file
  3. Go to https://configview-dashboard-frontend.vercel.app/admin/secret/ and add the admin email (The Google Workspace superadmin email you used to add the project scopes)
  4. You’re done!

🗑️ Note: You should delete the JSON file from your computer after upload to avoid security risk.