AvePoint Knowledge Center
Request article
Contact support
Request article
Contact support
English

Home > Manage App Profiles > Create Custom Apps > Consent to Custom Apps > Consent to a Custom Google App

Export to PDF

Consent to a Custom Google App

When you consent to a custom Google app, complete the following settings:

  1. App profile name – Enter a name for the profile.

  2. Admin account – Enter the name of the Admin account that has the required privileges/roles. Refer to the table below for the required privileges/roles that vary with different features. For additional details, refer to the Manage Admin Roles and Privileges section below.

ServiceFunction/ModuleAdmin account permissions
Cloud Backup for Google WorkspaceUser services protection (including Gmail, Drive, Calendar, Contacts, and Chat)Admin API privileges: Users > Read
Cloud Backup for Google WorkspaceShared drives protectionAdmin console privileges: Drive and Docs > Settings
Cloud Backup for Google WorkspaceGoogle Vault protectionAdmin console privileges:Google Vault >View All MattersGoogle Vault >Manage ExportsGoogle Vault > Manage Holds
Cloud Backup for Google WorkspaceGoogle Classroom protectionSuper Admin
Cloud Backup for Google WorkspaceGoogle Directory protectionAdmin console privileges: Security Center > This user has full administrative rights for Security Center > Audit and Investigation > ViewAdmin API privileges:Groups > Create, Read, and UpdateUsers > Create, Read, and Update Custom Attributes
FlyGmail migrationAdmin API privileges:Users > ReadGroups > ReadAdmin console privileges:Calendar > All Settings > Buildings and Resources > Room InsightsReportsMake changes to events permission to the calendar, or assign the Super Admin role to the Admin account. See more details in the Fly user guide.
FlyGoogle Drive migrationAdmin console privileges:Users > ReadDrive and Docs > SettingsReportsContent manager of shared drives See more details in the Fly user guide.
InsightsAll features for Google WorkspaceSuper Admin
OpusAll features for Google WorkspaceSuper Admin, or the following privileges assigned to a custom role: Admin API privileges: Users > ReadDomain ManagementAdmin console privileges:Drive and Docs > SettingsReportsData Classification > Manage Labels

  1. Google service account – Enter the service account email address.

    *Note: You can get the email address from the client_email value in the downloaded private key file. For details, refer to Create a Service Account.

    The client_email value in the private key file.

  2. Private key – Enter the private key.

    *Note: Make sure the private key starts with -----BEGIN PRIVATE KEY----- prefix and ends with the \n-----END PRIVATE KEY-----\n suffix.

Manage Admin Roles and Privileges

Refer to the instructions below to manage roles and privileges for an Admin account:

*Note: The user must have the Super Admin role to manage roles and privileges.

  1. Go to the Google .

  2. Click Manage in the Users section.

  3. Click the user you want to assign the roles. The user details page appears.

  4. In the Admin roles and privileges section, click the Expand (Button: Expand) button.

  5. If you want to assign a pre-built role such as Super Admin or User Management Admin to the account, toggle the switch to Assigned in the Assigned state column.

    Assigning roles to an Admin account.

  6. Click SAVE.

  7. If you want to create a custom role with required privileges, click CREATE CUSTOM ROLE.

  8. Click Create new role.

    ![Clicking "Create new role".](/en/aos/manage-app-profiles/create-custom-apps/consent-to-custom-apps/images/image100.png "Clicking "Create new role".")

  9. The Create role page appears. Enter a role name and click CONTINUE.

    ![The "Create role" page.](/en/aos/manage-app-profiles/create-custom-apps/consent-to-custom-apps/images/image101.png "The "Create role" page.")

  10. In the Select Privileges section, select required privileges by referring to the Admin account table above.

  11. Click CONTINUE.

  12. Click CREATE ROLE. The custom role is successfully created.

  13. You can assign the custom role to the Admin account.