Home / Platform Considerations

Google Workspace / Gmail Considerations

To migrate bulk accounts to or from Google Workspace/Gmail (formerly called G Suite) without end-user passwords (admin authentication), you will need to set up a Google Service Account.

You will grant permission to a service account to access your Google Workspace data. In most cases this will be a service account created by you.

Note: To migrate a single mailbox (or a few mailboxes) without usage of a Service Account, view instructions to migrate individual accounts with end-user authentication.

Google Service Account

To create a Google service account, perform the following steps:

  1. In the Google Cloud Platform Create a project

  2. To Enable Access to APIs, Confirm project by selecting NEXT

    Alt text

  3. Enable APIs by clicking ENABLE

    Alt text

  4. When you see all APIs have been enabled (displayed with a checkmark) click the link at the bottom

    Alt text

  5. Select the Project you just created, which by default will be called My Project

    Alt text

  6. Click + CREATE SERVICE ACCOUNT at the top of the screen

    Alt text

  7. In the Service account name field, enter Transend as the name and then click DONE

    Alt text

  8. Click your Service Account’s email address

    Alt text

  9. Click dropdown SHOW DOMAIN-WIDE DELEGATION

    Alt text

  10. Checkbox Enable Google Workspace Domain-wide Delegation

  11. In the Product name for the consent screen field, enter Transend Migration Console and click SAVE

    Alt text

  12. Click the Keys tab at the top

    Alt text

  13. Click Add Key > Create new key

    Alt text

  14. Change to P12 key and click CREATE

    Alt text

  15. The .p12 key is downloaded to your Downloads folder

    Alt text

  16. Copy the .p12 key to the following directory:

    c:\ProgramData\Transend

  17. Click the Details tab at the top and copy the service account email address and Unique ID into notepad

    Alt text

  18. Open the Google Admin Console

  19. Click Security

    Alt text

  20. Click API controls

    Alt text

  21. Click MANAGE DOMAIN WIDE DELEGATION

    Alt text

  22. Click Add new

    Alt text

  23. In the Client ID field, paste in the Unique ID that you previously copied into NotePad

  24. OAUTH Scopes:

    Copy the following scopes into Notepad, into a single line comma delimited. Then paste it into the OAUTH Scopes field.

    https://mail.google.com,https://www.googleapis.com/auth/calendar,https://www.googleapis.com/auth/userinfo.profile,https://www.googleapis.com/auth/contacts,https://www.googleapis.com/auth/tasks,https://www.googleapis.com/auth/gmail.labels,https://www.googleapis.com/auth/drive,https://www.googleapis.com/auth/gmail.settings.basic

  25. Click Authorize

    Alt text

Enter credentials into Transend Migration Console

Enter the following Service Account credentials into Transend Migration Console on the Configuration Settings > Required screen:

  1. Service account email address – this is the service account email address you copied to notepad in step 17

  2. Service account .p12 key file – press the Select button to browse to the .p12 key you saved to the following directory in step 15:

    c:\ProgramData\Transend

    Alt text

  3. Congratulations! The Google Service Account is now setup and ready for use with Transend Migration Console