Enable API Access to the Service Account (Older GSuite UI)
-
Go back to the Service Account view and select your service account. Highlight the Unique ID for your service account and copy it to your buffer.
-
Log into https://admin.google.com on the Home view, click on Security then on the security view click on Advanced Settings.
-
-
Click on Manage API client access.
-
Paste in your UniqueID obtained for your service account into the Client Name field. Then add access to the required APIs using this string (copy and paste this exactly into the One or More API Scopes field. Note: do not use the “Copy Link Address” option):
https://www.googleapis.com/auth/admin.directory.device.mobile,https://www.googleapis.com/auth/admin.directory.device.chromeos
-
Then click the Authorize button.
-
The “View and manage your Chrome OS devices’ metadata” and “View and manage your mobile devices’ metadata” should be listed as the 2 APIs that are accessible using the service account ID.
Proceed to Configure FortiNAC.