Page Comparison

1. Login to Google APIs console.

2. In the search bar, search Create a Project.

3. Click on Create a Project.

4. Fill in the required fields.

5. Click on Create

1. Login to Google APIs console.

2. In the search bar, search Workspace Alert Center API.

3. Click on Google Workspace Alert Center API.

4. Click on Enable to activate the API.

1. In the search bar, search Credentials.

2. Click on Credentials (APIs & Services).

3. In the Service Accounts section, click on Manage service accounts.

4. Click on the + Create service account button.

5. Enter a Service account name and click Done.

6. Click on the Email field of the created service account to access its details.

7. Copy and save the Unique ID of the created service account.

8. Click on the Keys tab.

9. Click on Add key button.

10. Click on Create new key. A pop-up window will open to select the details of the key.

11. In key type select JSON.

12. Click on the Create button.

13. The file with the credentials will be downloaded automatically.

14. Rename the file credentials.json.

15. Save the file in <any_directory>/devo-collectors/gsuite-google-workspace-alerts/credentials/

16. Convert the content of the credentials.json to base64. Recommended method using Python version higher or equal 3.6

    1. Copy the Python script below:

       Code Block
       import base64 def main(): with open('credentials.json', 'r') as credentials: creds_as_bytes = credentials.read().encode('utf-8') base64creds = base64.b64encode(creds_as_bytes).decode("utf-8") print(f'Base64 encoded credentials.json: {base64creds}') if __name__ == '__main__': main()

    2. Save the script to <any_directory>/devo-collectors/gsuite-google-workspace-alerts/credentials/.

    3. Rename it to b64encoder.py.

    4. Run the command below in the <any_directory>/devo-collectors/gsuite-google-workspace-alerts/credentials/ directory.

       Code Block
       $ python b64encoder.py

    5. The script will output a line starting with Base64 encoded credentials.json: Copy the base64 value as this will be required for the collector configuration.

17. Copy the content of the json file. You can use any free software to convert the content of the json file to base64.

18. Paste it into a base64 encoder and copy the result.

Once the service account is created and with credentials, it is necessary to authorize it through Domain Wide Delegation.

1. Login in the google administration console: https://admin.google.com/.

2. In the left menu select Security → Access and data control → API controls.

3. Click Manage domain wide delegation in the Domain wide delegation section.

4. Click on Add new. A pop-up window will open to enter the details.

   1. In Client ID field enter the previously copied Service Account Unique ID.

   2. In OAuth scopes field add the following: https://www.googleapis.com/auth/apps.alerts.

5. Finally click on Authorize.

You will need to provide a valid email address belonging to a user account. The user account must have appropriate permissions, such as alert viewing. Refer to Google documentation to know how to do it.