Home / Platform Considerations

Google Workspace / Gmail Considerations

To migrate bulk accounts to or from Google Workspace/Gmail (formerly called G Suite) without end-user passwords (admin authentication), you will need to set up a Google Service Account.

You will grant permission to a service account to access your Google Workspace data. In most cases this will be a service account created by you.

Note: To migrate a single mailbox (or a few mailboxes) without usage of a Service Account, view instructions to migrate individual accounts with end-user authentication.

Google Service Account

To create a Google service account, perform the following steps:

  1. In the Google Cloud Platform Create a project

  2. Click CREATE PROJECT on the right side of the screen.

    Alt text

  3. Assign a Project Name, an (optional) Organization and then click CREATE.

    Alt text

  4. To Enable Access to APIs, Confirm project by selecting NEXT

    Alt text

  5. Enable APIs by clicking ENABLE

    Alt text

  6. When you see all APIs have been enabled (displayed with a checkmark) click the link at the bottom

    Alt text

  7. Select the Project you just created, which by default will be called My Project unless you assigned it a name

    Alt text

  8. Click + CREATE SERVICE ACCOUNT at the top of the screen

    Alt text

  9. In the Service account name field, enter Transend as the name and then click DONE

    Alt text

  10. Click your Service Account’s email address

    Alt text

  11. Click the Keys tab at the top

    Alt text

  12. Click Add Key > Create new key

    Alt text

  13. Change to P12 key and click CREATE

    Alt text

  14. The .p12 key is downloaded to your Downloads folder

    Alt text

  15. Copy the .p12 key to the following directory:

    c:\ProgramData\Transend

  16. Click the Details tab at the top and copy the service account email address and Unique ID into notepad

    Alt text

  17. Open the Google Admin Console

  18. Click Security > Access and data control > API controls

    Alt text

  19. Click MANAGE DOMAIN WIDE DELEGATION

    Alt text

  20. Click Add new at the top of the screen

    Alt text

  21. In the Client ID field, paste in the Unique ID that you previously copied into NotePad

    Alt text

  22. OAUTH Scopes:

    Highlight the below scopes and click Ctrl-C to copy the scopes into Notepad, into a single line comma delimited. Then paste it into the OAUTH Scopes field.

    Important: To maintain proper encoding you must use Ctrl-C when copying scopes. If you right click to copy you will lose important characters like commas and colons.

    https://mail.google.com,https://www.googleapis.com/auth/calendar,https://www.googleapis.com/auth/userinfo.profile,https://www.googleapis.com/auth/contacts,https://www.googleapis.com/auth/tasks,https://www.googleapis.com/auth/gmail.labels,https://www.googleapis.com/auth/drive,https://www.googleapis.com/auth/gmail.settings.basic

  23. Click Authorize

    Alt text

Enter credentials into Transend Migration Console

Enter the following Service Account credentials into Transend Migration Console on the Configuration Settings > Required screen:

  1. Service account email address – this is the service account email address you copied to notepad in step 16

  2. Service account .p12 key file – press the Select button to browse to the .p12 key you saved to the following directory in step 14:

    c:\ProgramData\Transend

    Alt text

  3. Congratulations! The Google Service Account is now setup and ready for use with Transend Migration Console