Head over to console.cloud.google.com. In the top navigation bar, click the project dropdown and select the GCP project associated with your Drive Audit Genie setup.

If you don't have a project yet, click New Project, give it a name (something descriptive like drive-audit-genie), and click Create.

Drive Audit Genie needs two Google APIs enabled in your project. In the left sidebar, go to APIs & Services → Library and enable both of the following:

1. Admin SDK API — search “Admin SDK”, click it, then click Enable.
2. Google Drive API — search “Google Drive API”, click it, then click Enable.

In the left sidebar go to IAM & Admin → Service Accounts, then click + Create Service Account at the top.

1. Service account name: Something like dag-domain-auditor
2. Description: Optional — but “Drive Audit Genie Domain-Wide Access” is a crowd-pleaser at security reviews.
3. Click Create and Continue.
4. On the Grant this service account access to project step — skip it (click Continue).
5. On the Grant users access step — skip it too (click Done).

You'll land back on the Service Accounts list and see your new account listed. Leave this tab open — you'll need it in Steps 4 and 5.

Click the email address of the service account you just created to open its detail page. Then:

1. Click the Edit (pencil) icon at the top.
2. Expand the section called Show advanced settings.
3. Check the box labeled Enable Google Workspace Domain-wide Delegation.
4. In the Product name for the consent screen field, enter: Drive Audit Genie
5. Click Save.

Still on the Service Account detail page, click the Keys tab at the top of the page. Then:

1. Click Add Key → Create new key.
2. Choose JSON (it should already be selected).
3. Click Create.

A .json file will download to your computer automatically. Keep this file safe — it's the golden ticket that lets Drive Audit Genie speak on behalf of your domain.

Open the JSON file you just downloaded in any text editor (Notepad, TextEdit, VS Code — anything works). Look for the field named “client_id”. It will be a long number that looks something like this:

Copy that number — you'll paste it in Step 8.

In a new tab, go to admin.google.com. Sign in as a Super Administrator for your Google Workspace domain.

Navigate to:

Security → Access and data control → API controls → Manage Domain Wide Delegation

On the Domain-Wide Delegation page, click Add new. You'll see two fields:

1. Client ID: Paste the client_id number you copied in Step 6.
2. OAuth Scopes: Copy the entire line below (all three scopes as one comma-separated string) and paste it into the scopes field. Do not add spaces or line breaks.

After pasting, click Authorize. Your service account will appear in the list with the three scopes shown.

You're in the home stretch! Back in your Google Workspace sidebar (Drive Audit Genie add-on):

1. Open Drive Audit Genie and navigate to the 👑 Admin Genie section.
2. Click Setup Domain Delegation.
3. Paste the full contents of your JSON key file into the field provided — or use the upload button if available.
4. Click Verify Connection.

Drive Audit Genie will test the credentials and confirm your domain is connected. If verification succeeds, the Admin Genie card will update to show your domain name and user count. Your genie is officially out of the bottle. 👑