Skip to content

google.md

Latest commit

 

History

History
77 lines (45 loc) · 2.73 KB

google.md

File metadata and controls

77 lines (45 loc) · 2.73 KB

Configuring G Suite

By default Dispatch ships with several G Suite plugins (Docs, Groups, Drive, etc.,). This page documents the available configuration for these plugins and the permissions required to enable them.

GOOGLE_DOMAIN

Base domain for which this Google Cloud Platform (GCP) service account resides.

GOOGLE_DEVELOPER_KEY [secret: True]

This is used by the Google API Discovery Service and prevents rate limiting.

GOOGLE_SERVICE_ACCOUNT_CLIENT_EMAIL

Client email for the Google Cloud Platform (GCP) service account.

GOOGLE_SERVICE_ACCOUNT_CLIENT_ID

Client ID for the Google Cloud Platform (GCP) service account.

GOOGLE_SERVICE_ACCOUNT_DELEGATED_ACCOUNT

Account to delegate to from the Google Cloud Platform (GCP) service account.

GOOGLE_SERVICE_ACCOUNT_PRIVATE_KEY [secret: True]

Private key (PEM format) for the Google Cloud Platform (GCP) service account.

GOOGLE_ACCOUNT_PRIVATE_KEY_ID

Private key ID for the Google Cloud Platform (GCP) service account.

GOOGLE_ACCOUNT_PROJECT_ID

Project ID for the Google Cloud Platform (GCP) service account.

GOOGLE_USER_OVERRIDE [default: None]

Used for development to funnel all emails to a specific user.

Enable Required APIs

This is meant to provide guidance on enabling Dispatch's G Suite plugins, your organization may differ slightly.

Navigate to the Google Cloud Platform (GCP) console.

Create a new service account (APIs & Services > Credentials > Create Credentials > Service Account).

Once created, download the JSON based key and use it's values to populate the above configuration values:

  • project_id -> GOOGLE_ACCOUNT_PROJECT_ID
  • private_key_id -> GOOGLE_SERVICE_PRIVATE_KEY_ID
  • private_key -> GOOGLE_SERVICE_PRIVATE_KEY
  • client_email -> GOOGLE_SERVICE_ACCOUNT_CLIENT_EMAIL
  • client_id -> GOOGLE_SERVICE_ACCOUNT_CLIENT_ID

Create a Developer API key (APIs & Services > Credentials > Create Credentials > API Key), and set the value of GOOGLE_DEVELOPER_KEY.

Enable the following APIs (APIs and Services > Library):

  • Google Drive API
  • Google Docs API
  • Gmail API
  • Admin SDK

Finally, map the client_id of the created service with the required OAuth2 scopes.

Navigate to admin home (Security > Advanced Settings > Manage API Client Access), and add the following scopes:

https://www.googleapis.com/auth/document
https://www.googleapis.com/auth/drive
https://mail.google.com/
https://www.googleapis.com/auth/admin.directory.group
https://www.googleapis.com/auth/apps.groups.settings