AvePoint Docs
Graph API
My support tickets
Graph API
My support tickets
English

Home > Google > Configure Custom Google App Profiles (Recommended) > Consent to Custom Google Apps

Export to PDF

Consent to Custom Google Apps

Refer to the following instructions to configure app profiles for custom apps and consent to custom apps.

  1. Navigate to Management > App management, and then click Create.

  2. Select services – Select a tenant and select services for which you want to create app profiles. Click Next.

  3. Choose setup method – Select the Custom mode option. Note that the Custom mode option only appears when the selected services support custom apps.

  4. Consent to apps – Refer to the instructions in the following sections to consent to a custom Google app.

    1. App profile name – Enter a name for the profile.

    2. Admin account – Enter the name of the Admin account that has the required privileges/roles. Refer to the table below for the required privileges/roles that vary with different features. For additional details, refer to the Manage Admin Roles and Privileges section below.

ServiceFunction/ModuleAdmin account permissions
Cloud Backup for Google WorkspaceUser services protection (including Gmail, Drive, Calendar, Contacts, and Chat)Admin API privileges: Users > Read
Cloud Backup for Google WorkspaceShared drives protectionAdmin console privileges: Drive and Docs > Settings
Cloud Backup for Google WorkspaceGoogle Vault protectionAdmin console privileges:Google Vault > View All MattersGoogle Vault > Manage ExportsGoogle Vault > Manage Holds
Cloud Backup for Google WorkspaceGoogle Classroom protectionSuper Admin
Cloud Backup for Google WorkspaceGoogle Directory protectionAdmin console privileges: Security Center > This user has full administrative rights for Security Center > Audit and Investigation > ViewAdmin API privileges:Groups > Create, Read, and UpdateUsers > Create, Read, and Update Custom Attributes
FlyGmail migrationAdmin API privileges:Users > ReadGroups > ReadAdmin console privileges:Calendar > All Settings > Buildings and Resources > Room InsightsReportsMake changes to events permission to the calendar, or assign the Super Admin role to the Admin account. See more details in the Fly user guide.
FlyGoogle Drive migrationAdmin console privileges:Users > ReadDrive and Docs > SettingsReportsContent manager of shared drives See more details in the Fly user guide.
InsightsAll features for Google WorkspaceSuper Admin
Confidence Platform for GoogleAdministrationSuper Admin
Confidence Platform for GoogleGovernanceSuper Admin
Confidence Platform for GoogleRisk Intelligence● Super Admin, or the following privileges:● Admin API privileges:Users > ReadDomain Management● Admin console privileges:Drive and Docs > SettingsReportsData Classification > Manage Labels
Confidence Platform for GooglePolicy Enforcement● Super Admin, or the following privileges:● Admin API privileges:Users > ReadDomain Management● Admin console privileges:Drive and Docs > SettingsReportsData Classification > Manage Labels
Confidence Platform for GoogleInformation management● Admin API privilegesUsers > ReadGroup > ReadDomain ManagementReports● Admin console privileges:Drive and Docs > SettingsData Classification > Manage Labels
OpusAll features for Google WorkspaceSuper Admin, or the following privileges assigned to a custom role: Admin API privileges: Users > ReadDomain ManagementAdmin console privileges:Drive and Docs > SettingsReportsData Classification > Manage Labels
1. **Google service account** – Enter the service account email address. > ***Note**: You can get the email address from the **client_email** value in the downloaded private key file. For details, refer to [Create a Service Account](#missing-link). ![The client_email value in the private key file.](/en/getting-started/google/configure-custom-google-app-profiles-recommended/images/image75.png "The client_email value in the private key file.") 2. **Private key** – Enter the private key. > ***Note**: Make sure the private key starts with **-----BEGIN PRIVATE KEY-----** prefix and ends with the **\n-----END PRIVATE KEY-----\n** suffix.

Manage Admin Roles and Privileges

Refer to the instructions below to manage roles and privileges for an Admin account:

*Note: The user must have the Super Admin role to manage roles and privileges.

  1. Go to the Google .

  2. Click Manage in the Users section.

  3. Click the user you want to assign the roles. The user details page appears.

  4. In the Admin roles and privileges section, click the Expand (Button: Expand) button.

  5. If you want to assign a pre-built role such as Super Admin or User Management Admin to the account, toggle the switch to Assigned in the Assigned state column.

    Assigning roles to an Admin account.

  6. Click SAVE.

  7. If you want to create a custom role with required privileges, click CREATE CUSTOM ROLE.

  8. Click Create new role.

    ![Clicking "Create new role".](/en/getting-started/google/configure-custom-google-app-profiles-recommended/images/image78.png "Clicking "Create new role".")

  9. The Create role page appears. Enter a role name and click CONTINUE.

    ![The "Create role" page.](/en/getting-started/google/configure-custom-google-app-profiles-recommended/images/image79.png "The "Create role" page.")

  10. In the Select Privileges section, select required privileges by referring to the Admin account table above.

  11. Click CONTINUE.

  12. Click CREATE ROLE. The custom role is successfully created.

  13. You can assign the custom role to the Admin account.