This article is written for Google Workspace Administrators.

Domain Wide Delegation (DWD) is a Google Workspace setting that lets a service account access user data across your domain. xFanatical Foresight relies on the service account domain-wide delegation to complete many IT workflow automation on behalf of your users without requiring users' explicit consent. You choose exactly which permissions xFanatical Foresight are allowed to use based on your rule settings. Without DWD, the xFanatical Foresight service account exists but cannot act for anyone.

Instructions

  1. If you have never set up the service account, create a service account instead.
  2. Sign into xFanatical Foresight.
  3. Go to Settings > Security > Service accounts.
  4. Click the Domain wide delegation tab.
  5. In the Setting details section
    1. Copy the Client ID.
    2. Copy the Required permissions.
  6. Sign into Google Admin Console as a Super Admin. If you're not the one, contact your Super Admin to complete the task.
    1. Go to Google Admin > Security > Access and data control > API controls > Domain wide delegation.
    2. In the Domain-wide delegation page > API clients, click Add new.
    3. In the Client ID field, paste the Client ID from Step 5a. 
    4. In the OAuth scopes (comma-delimited) field, paste the Required permissions from Step 5b, exactly as shown: all on one line, separated by commas.
    5. Click Authorize.
  7. Back in xFanatical Foresight.
  8. Go to Settings > Security > Service accounts.
  9. Click Check health now to verify. The service account status shows Ready.

Notes

  • Changes can take up to 24 hours, but usually apply sooner.
  • If you get an error while adding the domain-wide delegation entry in Google Admin Console, check that you copied the details, Client ID and required permissions, exactly as shown, with no extra spaces or repeated items.