> ## Documentation Index
> Fetch the complete documentation index at: https://nango.dev/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# How to register your own Google Workspace Admin OAuth app

> Register an OAuth app with Google Workspace Admin and connect it to Nango

This guide shows you how to register your own app with Google to obtain your OAuth credentials (client id & secret). These are required to let your users grant your app access to their Google Workspace Admin account.

<Info>
  You will need to pass a security review to go live with your integration.

  [Follow our guide](/api-integrations/google-shared/google-security-review) to get approved as fast as possible.
</Info>

<Steps>
  <Step title="Create a Google Cloud account">
    If you don't already have one, sign up for a [Google Cloud account](https://console.cloud.google.com/).
  </Step>

  <Step title="Create a new project">
    1. Go to the [Google Cloud Console](https://console.cloud.google.com/).
    2. Click on the project dropdown at the top left of the page.
    3. Click **New Project**.
    4. Enter a **Project Name** for your project.
    5. Under **Location**, select the appropriate organization or folder where this project should belong.
       <Note>If you're not part of an organization, it will default to No organization</Note>
    6. Click **Create** and wait for the project to be created.
    7. Select it from the project dropdown.
  </Step>

  <Step title="Enable the APIs you need">
    1. Go to the [API Library](https://console.cloud.google.com/apis/library) in the Google Cloud Console.
    2. Search for **Admin SDK API** and select it, then click **Enable**.
  </Step>

  <Step title="Configure the OAuth consent screen">
    1. Go to **APIs & Services** > **OAuth consent screen** in the Google Cloud Console.
    2. Click **Get started**.
    3. Complete all required fields in the **App Information** form.
    4. Click **Next**. Select the appropriate Audience:
       * **External**: For applications available to any Google user
       * **Internal**: For applications restricted to users within your Google Workspace organization
    5. Click **Next**. Fill in the **Contact Information**; these are the email addresses that Google will use to notify you about any changes to your project.
    6. Click **Next**, then check the **I agree to the Google API Services: User Data Policy** checkbox, and click **Continue**.
    7. Add the scopes your application needs. Under **Data Access**, click **Add or Remove Scopes** and select the scopes that correspond to the APIs you enabled.
    8. Under **Audience**, click **Add users** if you selected **External** user type (required for testing before verification).
  </Step>

  <Step title="Create OAuth 2.0 credentials">
    1. Go to **APIs & Services** > **Credentials** in the Google Cloud Console.
    2. Click **Create Credentials** and select **OAuth client ID**.
    3. Select **Web application** as the application type.
    4. Enter a name for your OAuth client.
    5. Under **Authorized redirect URIs**, add `https://api.nango.dev/oauth/callback`.
    6. Click **Create**.
    7. A dialog will appear with your **client ID** and **client secret**. Save these credentials securely as you'll need them when configuring your integration in Nango.
  </Step>

  <Step title="Start building your integration">
    Follow the [*Quickstart*](/getting-started/quickstart) to build your integration.
  </Step>

  <Step title="Verify your app">
    Most Google Workspace Admin scopes are classified as `sensitive` by Google. You can verify this by checking the **Add or Remove Scopes** section in the **Configure the OAuth consent screen** step.

    You can develop your integration in test mode, but you need to pass a security review to go live.

    [Follow our guide](/api-integrations/google-shared/google-security-review) to prepare and pass as quickly as possible.
  </Step>

  <Step title="Publish your app (switch from Testing to Production)">
    To move your OAuth app from testing to production:

    1. Go to **APIs & Services** > **OAuth consent screen** > **Audience**.
    2. Click **Publish App** to switch your app from testing to production.
  </Step>
</Steps>

## Common Scopes

| Scope                                                           | Description                                             |
| --------------------------------------------------------------- | ------------------------------------------------------- |
| `profile`                                                       | Access to user's basic profile information              |
| `email`                                                         | Access to user's email address                          |
| `https://www.googleapis.com/auth/admin.directory.user`          | View and manage users in your domain                    |
| `https://www.googleapis.com/auth/admin.directory.user.readonly` | View information about users in your domain (read-only) |
| `https://www.googleapis.com/auth/admin.directory.group`         | View and manage groups in your domain                   |
| `https://www.googleapis.com/auth/admin.directory.orgunit`       | View and manage organizational units in your domain     |
| `https://www.googleapis.com/auth/admin.directory.customer`      | View and manage customer-related information            |

***