In Google:
Make one of the users with a mailbox into a super admin.
https://console.cloud.google.com/projectselector2/apis/dashboard
Using the account from above, sign into Google Cloud one time. It will ask you to approve some legal text, just so the service is initialized. Need to wait a few minutes too.
https://console.cloud.google.com/iam-admin/iam
For the organization (the one with the building), do edit and add the role Organization Policy Administrator.
https://console.cloud.google.com/iam-admin/orgpolicies/list
Change the organization policy to allow creation of JSON keys for service accounts. Change constraints/iam.disableServiceAccountKeyCreation and iam.disableServiceAccountKeyCreation to be turned off. Click manage policy and change enforcement to off.
In Office 365:
Domains - Microsoft 365 admin center
Add the domain and verify. Don't change MX, etc.
Active users - Microsoft 365 admin center
Make and license at least one user with a mailbox.
Migration Batch - Exchange admin center
Make a new migration batch
Migrate to Exchange Online
Google Workspace (Gmail) Migration
Click start to do the wizard, and sign into the Google admin. Make sure you are not signed into multiple Google accounts. This takes a few minutes.
Once there are 4 checks, there is a link in the middle to add scopes for API access.
Create a new endpoint
For the e-mail address, use the e-mail above
Import the JSON that was downloaded
Make and import a CSV with a single field: EmailAddress
Back in Google:
Enable these 2 APIs, making sure you select the project first:
https://console.cloud.google.com/apis/library/people.googleapis.com
https://console.cloud.google.com/apis/library/calendar-json.googleapis.com
Alternative Google:
https://console.developers.google.com/iam-admin/serviceaccounts
Make a new project, and then make a service account. Click on the service account, and take note of the unique ID. Then go to keys, and make a new JSON key.
Enable these 4 APIs, making sure you select the project first:
https://console.cloud.google.com/apis/library/gmail.googleapis.com
https://console.cloud.google.com/apis/library/calendar-json.googleapis.com
https://console.cloud.google.com/apis/library/contacts.googleapis.com
https://console.cloud.google.com/apis/library/people.googleapis.com
https://admin.google.com/ac/owl/domainwidedelegation
Add a new client, use the Client ID from the service account above, and use these scopes:
https://mail.google.com/,https://www.googleapis.com/auth/calendar,https://www.google.com/m8/feeds/,https://www.googleapis.com/auth/gmail.settings.sharing,https://www.googleapis.com/auth/contacts
Refernece:
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article