Google Workspace account management scenarios

Integrate Google Workspace with Brightspace Learning Environment without a service account

Administrators can integrate Google Workspace with Brightspace Learning Environment without a service account. As a result, administrators can integrate multiple Google Workspaces with Brightspace Learning Environment.

  1. From the Admin Tools menu, under Organization Related, click Google Workspace Administration > Settings.

  2. In the Workspace Access area, select the No service account radio button.

  3. Click Save.

Users create their own Google Workspace accounts

Administrators can enable users to self-create their Google Workspace accounts. The user's default Google Workspace account name is the same as their Brightspace Learning Environment user name.

  1. From the Google Workspace Administration page, click Settings, and under Provisioning User Settings, select The user can create a new Google Workspace account that is linked to their organization username.
    Note: If you integrated Google Workspace with Brightspace Learning Environment without a service account, this user provisioning functionality is not supported.
  2. Set a password policy for user passwords in the d2l.3rdParty.GoogleApps.PasswordRegex (e.g.: "^.{8,30}$") config variable.
  3. Ensure that users have the View Google Workspace Widget and View Access Google Workspace Widget permissions so they can see the widgets.
  4. Ensure that users have the View Google Workspace widget and View Access Google Workspace widget permissions so they can see the widgets.
  5. You must have one of the widgets enabled, depending on the needs of your organization.
  6. Ensure that your Google Workspace widgets are enabled.

Users link their Google and Brightspace Learning Environment accounts

If you create accounts outside of Brightspace Learning Environment and users know their Google user name and password, they can link their Brightspace Learning Environment and Google accounts themselves. Users can link their accounts by entering their user name and password once in one of the Google Workspace widgets.

  1. From the Google Workspace Administration page, click Settings. Under Provisioning User Settings, select The user can create a link between their organization username and an existing Google Workspace account.
  2. Ensure the users have the View Google Workspace Widget and View Access Google Workspace Widget permissions so they can see the widgets.
  3. From the Google Workspace Administration page, click Settings. Under Provisioning User Settings, select The user can create a link between their organization username and an existing Google Workspace account.
  4. Ensure the users have the View Google Workspace widget and View Access Google Workspace widget permissions so they can see the widgets.
  5. You must have one of the widgets enabled, depending on the needs of your organization.
  6. Ensure that your Google Workspace widgets are enabled.

Administrators create user Google Workspace accounts

A Google Workspace administrator can create Google Workspace accounts and associate them with Brightspace Learning Environment users from within Brightspace Learning Environment. An administrator can create many Google Workspace accounts by performing a bulk creation operation from within Brightspace Learning Environment using the Google Workspace administration interface.

  1. Set a user password policy in the d2l.3rdParty.GoogleApps.PasswordRegex (e.g.: "^.{8,30}$") config variable.
  2. Ensure the administrator has the Manage and Administer Google Users permission that allows managing and administering Google Workspace users.
  3. Optionally, set the d2l.3rdParty.GoogleApps.ProvisioningUserType config variable to "No Access" if you don't want learners to have the ability to create a Google account.

Administrators link user accounts

A Google Workspace administrator can reset account links and assign new account links within Brightspace Learning Environment. If an administrator must link many Google Workspace accounts, D2L recommends performing a bulk link operation from within Brightspace Learning Environment using the Google Workspace administration interface.

  1. From the Google Workspace Administration page, click Settings. Under Provisioning User Settings, select The user cannot create a new Google Workspace account or a link to an existing Google Workspace account.
  2. Ensure that the administrator has the Manage and Administer Google Users permission within Brightspace Learning Environment that allows managing and administering Google users.

Administrators have read-only access to Google Directory API

A Google Workspace administrator cannot create new users, suspend accounts, or restore accounts.

  1. Administrators can give their service account the ReadOnly API route via the Google Domain Admin Console by entering the following API route: https://www.googleapis.com/auth/admin.directory.user.readonly along with any other routes you want to use into Scopes.
  2. After the ReadOnly API route is set up in the Google Domain Admin Console, you must enable the Read-only access to Google Directory API radio button on the Google Workspace Administration > Settings page. This limits the options on the Manage Users page in Brightspace Learning Environment:
  3. From the Admin Tools menu, under Organization Related, click Google Workspace Administration > Settings.
  4. In the Workspace Access area, select the Read-only access to Google Directory API radio button.
  5. Click Save.