User Permissions - Google Directory Admin User Follow

In this article:

• What is the purpose of the Hāpara Admin account?
• Creating a Hāpara Admin account

What is the purpose of the Hāpara Admin account?

Google’s Open Authentication Protocol or “OAuth” requires that all third party applications, like Hāpara, are added individually by a Super Administrator in the domain.

OAuth is the industry-standard protocol for authorization. It allows third-party apps to access APIs without users having to give their credentials, including passwords, to those apps. Hāpara needs permission from a domain Super Administrator in order to work with a Google Workspace domain.

Hāpara also requires a user with specific Admin Role permissions (ie., Groups Admin and User Management).

This user enables critical Hāpara functionality within the student Google domain:

• Create and manage Google Groups and their memberships
• Create and manage Hāpara system user accounts
• Create and manage Google Drive folder structure for classes, teachers and students
• Teacher access to reset student Google passwords via Hāpara (optional)

Creating a Hāpara Admin Account.

We recommend creating a separate, non-human user, that is not linked to any real person. This avoids potential loss of Hāpara functionality in the event of a human account being suspended or deactivated or having Admin privileges restricted.

First, create a Hāpara Admin User:

1. Open admin.google.com.
2. Navigate to Directory > Users.
3. Click Add new user.
4. Enter Name and email details.
5. Click Manage user’s password, organizational unit and profile photo.
6. Store this user in an Organizational Unit with the Hāpara Marketplace app installed. E.g., staff, faculty, admin, tech.
7. Click Add new user.
8. Click Done.

Next, assign Custom Admin privileges to this new account:

1. Locate the new user you have just created.
2. Under the Admin roles and privileges menu, click ASSIGN ROLES.
3. Assign the roles Groups Admin and User Management.
4. Click Save.