Cleveland Business Mentors — Mentor Administration

Loading…

Email account setup

Configure the Google Workspace connection used to check for and create mentor @cbmentors.org mailboxes during approval. The service account needs domain-wide delegation for the Directory read-only and (to create mailboxes) read-write scopes. The key is stored encrypted. New here? Follow the step-by-step guide on the right, then fill in the form.

How to set this up

A one-time setup by someone with access to both the organization's Google Cloud Console and the Google Workspace Admin console (a super-admin). Takes ~15 minutes.

In Google Cloud Console (console.cloud.google.com)

Enable the Admin SDK API. APIs & Services → Library → search “Admin SDK API” → Enable.
Create a service account. IAM & Admin → Service Accounts → Create. Give it a name (e.g. cbm-mentor-mailboxes). It needs no GCP roles — its access comes from the Workspace delegation below.
Create a JSON key. Open the service account → Keys → Add key → Create new key → JSON. A file downloads — this is the key you paste into the form. Keep it secret.
Copy the Client ID. On the service account's Details tab, copy the Unique ID (a long number) — you'll need it in step 5.

In Google Workspace Admin (admin.google.com, as a super-admin)

Add domain-wide delegation. Security → Access and data control → API controls → Manage Domain-Wide Delegation → Add new. Paste the Client ID from step 4.
Authorize these scopes (comma-separated), then Authorize:
https://www.googleapis.com/auth/admin.directory.user.readonly

https://www.googleapis.com/auth/admin.directory.user
The first (read-only) is enough to check; the second (read-write) is required to create mailboxes. Add both.
Pick the admin to impersonate. Any admin who can read the directory works for checking; to create mailboxes they need the User Management admin privilege. Use that email as Delegated Workspace admin email.

Back here

Paste the JSON key and enter the delegated admin email.
Tick Check… (and Create… if you want missing mailboxes auto-created), then Save.
Click Test connection to confirm it works. Delegation can take 5–10 minutes to take effect — if the test fails right after setup, wait a few minutes and retry.

Staff sign in

Email account setup