Connect Google Mobile Device Manager with Human Managed via API

This article covers the step-by-step procedure to send data such as Mobile Devices, Chrome OS, Users, Groups, Group Members, Org Unit, and more from your Google MDM instance to the Human Managed platform via API. 

Human Managed will establish a connection to pull Google MDM data from your instance. Some parts of this this guide is derived from Google’s Developer Website.

Step 1: Create a service request for Human Managed to configure the API Receiver

1. Submit a request 
2. In the Subject, type or select Connect Google MDM via API
3. Once the ticket has been accepted by Human Managed and the ticket status has been updated, follow the next steps.

Step 2: Create Service Account

1. In the Google Cloud console, go to Menu  > IAM & Admin > Service Accounts.
2. Click Create service account.
3. Fill in the service account details, then click Create and continue.
   
   Note: By default, Google creates a unique service account ID. If you would like to change the ID, modify the ID in the service account ID field.
   
   
4. OPTIONAL: Assign roles to your service account to grant access to your Google Cloud project's resources. For more details, refer to Granting, changing, and revoking access to resources.
5. Click Continue.
6. OPTIONAL: Enter users or groups that can manage and perform actions with this service account. For more details, refer to Managing service account impersonation.
7. Click Done. Take note of the email address for the service account.

Step 3: Assign a role to a Service Account 

1. In the Google Cloud console, go to Menu  > Account > Admin roles.
2. Point to the role that you want to assign, and then click Assign admin.
3. Click Assign service accounts.
4. Enter the email address of the service account.
5. Click Add > Assign role

Step 4: Create credentials for a Service Account 

You need to obtain credentials in the form of a public/private key pair. These credentials are used by your code to authorize service account actions within your app.

To obtain credentials for your service account:

1. In the Google Cloud console, go to Menu  > IAM & Admin > Service Accounts.
2. Select your service account.
3. Click Keys > Add key > Create new key.
4. Select JSON, then click Create.
   
   Note: Your new public/private key pair is generated and downloaded to your machine as a new file. Save the downloaded JSON file as credentials.json in your working directory. This file is the only copy of this key. For information about how to store your key securely, see Managing service account keys.
   
   
5. Click Close.

6. OPTIONAL: Set up domain-wide delegation for a Service Account.

Step 5: Submit your credentials to Human Managed 

In the same service request ticket you opened in Step 1, update the ticket with the following details:

• Service Account (email address) – see Step 2
• Service Account Credentials Key (credentials.json) – See Step 4

1.