Home / Platform Considerations

Google Workspace / Gmail Considerations

To migrate bulk accounts into or out of Google Workspace/Gmail (formerly called G Suite) without end-user passwords (admin authentication), you will need to set up a Google Service Account.

You will grant permission to a service account to access your Google Workspace data. In most cases this will be a service account created by you.

Note: To migrate a single mailbox (or a few mailboxes) without usage of a Service Account, view instructions to migrate individual accounts with end-user authentication.

Google Service Account

To create a Google service account, perform the following steps:

  1. In the Google Cloud Platform Create a project

  2. Click Continue

    Alt text

  3. The required API’s will be automatically enabled. Click Continue

    Alt text

  4. Select the Project you just created, which by default will be called My Project

    Alt text

  5. Click + CREATE SERVICE ACCOUNT at the top of the screen

    Alt text

  6. In the Service account name field, enter Transend as the name and then click DONE

    Alt text

  7. Click your Service Account’s email address

    Alt text

  8. Click dropdown SHOW DOMAIN-WIDE DELEGATION

    Alt text

  9. Checkbox Enable Google Workspace Domain-wide Delegation

  10. In the Product name for the consent screen field, enter Transend Migrator and click SAVE

    Alt text

  11. Click the Keys tab at the top

    Alt text

  12. Click Add Key > Create new key

    Alt text

  13. Change to P12 key

    Alt text

  14. The .p12 key is downloaded to your Downloads folder

    Alt text

  15. Copy the .p12 key to the following directory:

    c:\ProgramData\Transend

  16. Click the Details tab at the top and copy the service account email address and Unique ID into notepad

    Alt text

  17. Open the Google Admin Console

  18. Click Security

    Alt text

  19. Click API controls

    Alt text

  20. Click MANAGE DOMAIN WIDE DELEGATION

    Alt text

  21. Click Add new

    Alt text

  22. In the Client ID field, paste in the Unique ID that you previously copied into NotePad

  23. OAUTH Scopes:

    Copy the following scopes into Notepad, into a single line comma delimited. Then paste it into the OAUTH Scopes field.

    https://mail.google.com,https://www.googleapis.com/auth/calendar,https://www.googleapis.com/auth/userinfo.profile,https://www.googleapis.com/auth/contacts,https://www.googleapis.com/auth/tasks,https://www.googleapis.com/auth/gmail.labels,https://www.googleapis.com/auth/drive,https://www.googleapis.com/auth/gmail.settings.basic

  24. Click Authorize

    Alt text

Enter credentials into Transend Migration Console

Enter the following Service Account credentials into Transend Migration Console on the Configuration Settings > Required screen:

  1. Service account email address – this is the service account email address you copied to notepad in step 16

  2. Service account .p12 key file – press the Select button to browse to the .p12 key you saved to the following directory in step 15:

    c:\ProgramData\Transend

    Alt text

  3. Congratulations! The Google Service Account is now setup and ready for use with Transend Migration Console