Prepare Google Admin Console

Once you have a Google Workspace (GWS) Admin user account, follow these steps to set up the environment for Chrome OS device and policy management using a custom EMM/MDM solution:

Create & Configure Google Cloud Project for MDM
  1. Go to Google Cloud Console → https://console.cloud.google.com
  2. You will see an agreement pop-up to agree and proceed.

  3. Create a new Google Cloud Project for managing Chrome OS devices.
  4. Enter Project name and click on “Create”.
  5. Enable the Chrome Management API:
    1. Navigate to APIs & Services → Enable APIs & Services.
    2. Search for Chrome Policy API & Chrome Device Management API → Enable both.
  6. Enable Admins SDK API.

  7. Enable Chrome Policy API.
  8. Enable the Google Workspace Alert Center API.
  9. On the IAM & Admin > Organization policies, disable the iam.allowedPolicyMemberDomains policy by selecting Policy Source to Inherit parent’s policy.
  10. On the APIs & Services page, in the left navigation bar, click Credentials.
  11. On the next page that appears, click + CREATE CREDENTIALS, then select Service account.
  12. Enter the information below, then click CREATE AND CONTINUE.
  13. Click the Role drop-down, then select below role.
    • Cloud Pub/Sub Service Agent
    • Create Service Accounts
    • Delete Service Accounts
    • Editor
    • Pub/Sub Admin
    • Pub/Sub Publisher
    • Pub/Sub Subscriber
    • Security Admin
    • Service Account Key Admin
    • Viewer
  14. Click DONE.
  15. On the Service Account page, record the Unique ID value for later use, then click the KEYS tab.
  16. In the Keys section, click the ADD KEY drop-down, and select Create new key.
  17. In the pop-up, select the JSON option, then click CREATE.
  18. The JSON key file downloads, and the following pop-up appears.