Skip Navigation

Enable additional APIs to allow
BlackBerry UEM
to sync the
Chrome OS
data

You must use your organization’s
Google
admin console to enable additional APIs which will allow
UEM
to synchronize the
Chrome OS
data.
  1. Log in to the
    Google
    admin console using the administrator account for your
    Google
    domain.
  2. Navigate to
    Home > Devices > Mobile & endpoints > Settings > Third-party Integrations
    .
  3. Click
    Android EMM
    and ensure that
    Enable third-party Android mobile management
    is selected.
  4. Click
    Add EMM providers > Generate Token
    .
  5. Copy the token. Paste this in the same text file where you pasted the private key password.
  6. Close the Token Windows and click
    Save
    .
  7. Click
    Save anyway
    .
  8. Click
    Security > Access and data control > API controls
    .
  9. Under
    Domain-wide delegation
    , click
    MANAGE DOMAIN-WIDE DELEGATION
    .
  10. Click
    Add New
    (near API Clients).
  11. In the
    Client ID
    field, paste the
    Google
    service account Unique Client ID  that you recorded earlier, and enter the following addresses in the OAuth scopes field, in a comma delimited list:
    • https://www.googleapis.com/auth/admin.directory.user
    • https://www.googleapis.com/auth/admin.directory.customer
    • https://www.googleapis.com/auth/admin.directory.device.chromeos
    • https://www.googleapis.com/auth/admin.directory.device.mobile
    • https://www.googleapis.com/auth/admin.directory.orgunit
    • https://www.googleapis.com/auth/admin.directory.user
    • https://www.googleapis.com/auth/chrome.management.policy
    • https://www.googleapis.com/auth/admin.reports.audit.readonly
  12. Click
    Authorize
    .
    Note
    : Authorizing this API for the service account lets
    UEM
    access the user directory for your
    Google Cloud
    or
    Google
    Workspace by
    Google
    domain.