This article is written for Google Workspace Administrators.

Each trigger or action that acts as another user needs specific Google permissions, called OAuth scopes. You grant these to the service account through Domain Wide Delegation in Google Admin Console. xFanatical Foresight tells you exactly which scopes a rule needs, so you only grant what is required.

Instructions

  1. Sign into xFanatical Foresight.
  2. Go to the Rules page.
  3. Click to create a rule.
  4. On the Select a trigger or Select an action screen, select the trigger or action you want to automate on behalf of another user in your organization.
  5. In the Actor field, under Act as another user in your Google Workspace organization, search for a user in your organization, or select a variable.
  6. If the service account doesn't have the permissions this trigger or action needs yet, a Block symbol appears in the Actor field. This usually happens the first time you use it. Hover over the icon to open the help popover.
  7. Follow the steps in the popover to grant the permissions:
    1. Go to Google Admin Console > Domain wide delegation. If you don't have this role, ask your Super Admin to complete this setup.
    2. Find the client whose Client ID matches the one shown in the popover, and click Edit.
    3. In the popover, click Copy all or and paste into the OAuth scopes field after any existing scopes. Keep the existing ones.
    4. Click Authorize.
    5. Back in xFanatical Foresight, click Retry in the popover.
    6. When the alert icon disappears, the permissions are granted. Save the rule.

Note: Google can take a few minutes, and up to 24 hours, to apply changes. Click Retry once more if the error is not resolved.