Adding Google Chromebook domain to the school dashboard
In order to manage Chromebooks through the School Dashboard, one needs to authorise the school dashboard to see users and assigned
Chromebooks under a Google Apps for Education domain. This allows the dashboard to pull in the list of users and devices registered under your
Google domain.
Step-by-step guide
Adding the respective JSON is a three stage process requiring admin access to both console.developers.google.com, your Google Apps admin
console and finally uploading the JSON into the school admin dashboard.
Stage 1: The Google Developer Console.
1. Log in as an admin user at https://console.developers.google.com. This email address will also be referenced in the school dashboard.
2. Create a new project.
3. Give your project a name that you will recognise in future.
4. In the API Manager overview, search for the Admin SDK API in the search box. It should be the first API listed.
5. Click on Admin SDK which will take you to the following screen. Click Enable.
5.
6. Once you have clicked Enable, you may see this screen. Do not click on the 'Go to Credentials' box, but click on Credentials on the LHS
Nav (circled).
7. If you clicked on the LHS Nav you will now see this screen. Click on 'Create Credentials' and choose Service account key from the drop
down menu.
7.
8. Choose Service account. You will be taken to this screen.
9. From the dropdown menu select 'New service account'.
9.
10. Provide a name for the Service account.
11. Once you have clicked on Create, a new private key will be downloaded to your computer. Keep this JSON safe. You will upload it into
the school dashboard.
11.
12. You will see your recently created service account key listed. Click on 'Manage service accounts'.
13. Click manage Service Accounts, then Select Edit from the right-hand side menu on your newly created service account.
13.
14. Enable Google Apps Domain-Wide Delegation. This will enable you to manage all the Chromebooks on your domain. Give a Product
name for the consent screen.
15. Once you have successfully saved this information, you will be returned to the following screen with the following Options enabled.
15.
16. Now click on the top left (hamburger) menu to return to the API Manager.
17. Clicking on Credentials will show you the newly created OAuth client ID. We will use this inside the Admin Console for your Google Apps
domain.
18. Select and Copy the Client ID as shown. Congratulations, you have now completed the developer console section.
18.
Stage 2: The GAFE Admin Console.
1. Login to the Admin Console for your Google Apps for Education domain. (https://admin.google.com)
2. Set up an organisational unit for students if you have not already done so. The students sub organisation must sitting directly under your
main domain. See https://support.google.com/a/answer/182537 for details on how to set up an organisational unit.
3. You may also choose to move the Chrome Devices to that organisational unit. Each Chrome device in your Google Admin console
belongs to an organisational that determines which settings apply to that device. Initially, all devices are in the top-level organisation. But
you can move a device to the students sub-organisation. It then gets the settings applied to the students sub-organisation.
4. Click on Security and access the API reference section. Ensure that 'Enable API access' is selected. If not, enable now.
5. Scroll down to Advanced Settings and click on Manage API client access.
6. Paste the Client ID that you had copied from the developer console into the Client Name.
6.
7. Copy and paste the following scopes into the API Scope box.
API Scopes
https://www.googleapis.com/auth/admin.directory.device.chromeos, https://www.googleapis.com/auth/admin.directory.user, https://w
ww.googleapis.com/auth/admin.reports.audit.readonly, https://www.googleapis.com/auth/admin.reports.usage.readonly
8. Excellent, Stage 2 is now complete.
Stage 3: The School Dashboard.
This is the easiest section.
1. Login to the school dashboard and navigate to Settings > Chromebook Settings.
2. Enter the Google Apps Admin email address with which you created your project.
3. Upload the JSON that was downloaded when you created your service account key.
Now we need to set up the Mobile Guardian application to ensure that it is installed when a student logs into the device.
First we need to Add it to your management console
1. Sign in to the Google Admin console.
2. Click Device management > Chrome Management > App management.
3. Select "Add Custom App"
4. Add the:
a. URL: https://chrome.google.com/webstore/detail/mobile-guardian/nglbmaiijljohnphofifiodoommladkj
b. ID: cfhdojbkjhnklbpkdaibdccddilifddb
4.
b.
5. Now we need to make the Application install automatically.
6. Sign in to the Google Admin console.
7. Click Device management > Chrome > App management.
The list of apps you have configured in all organizational units in your domain and the status of each app is displayed.
8. Select the Mobile Guardian app.
9. Select the category of settings you want to configure. You will want to set up both:
a. User settings: Configure the app for users who log in with an account in your domain.
Public session settings: Configure the app for users that log in to a public session on your devices.
b. Click on your organisation.
c. You now need to decide how this application is installed. For the MobileGuardian App we recommend it is force installed
You have now successfully completed the Google Chromebook integration. Please wait a few seconds for the dashboard to sync with the Google
API and you will then see your users and devices appear in the dashboard.