---
title: "Application for import of users & resources"
canonical: "https://docs.cuesystem.com/space/GWSG/275612094/Application%20for%20import%20of%20users%20%26%20resources"
format: markdown
---
1. Login to Google cloud console [https://console.cloud.google.com/](https://console.cloud.google.com/).
2. Select the correct tenant/project or create a new one.
3. In the Library section, add the following APIs: **People**, **Contacts**, **Calendar**, and **ADMIN SDK API**.** **
  <span style="color: #ff5630">Myslim, ze toto:</span>
4. Configure OAuth Consent screen.
5. Type: internal (only for users from the same tenant).   
You can configure by your own the following: appname, user support email, a developer information address.
6. Add **Service Account**.
7. **Generate the JSON certificate** to the newly created service account. **Save **the file as it will be required for authorization.
8. **Enable OAuth Client **for this service account.
9. Copy the **Client ID** of the new client.
10. In Google Space Administration go to security, domain-wide security  (Security/API controls/Domain-wide delegation) or use the following link: [https://admin.google.com/ac/owl/domainwidedelegation](https://admin.google.com/ac/owl/domainwidedelegation).  
<span style="color: #ff5630">V google space administraci jdeme do security  a pak … no do domain wide security - nebo pouzij odkaz </span>[Domain-wide delegation (google.com)](https://admin.google.com/ac/owl/domainwidedelegation)<span style="color: #ff5630"> </span>
11. Click **Add new** and insert ClientID.
12. Insert scopes for:  
[https://www.googleapis.com/auth/admin.directory.user.readonly](https://www.googleapis.com/auth/admin.directory.user.readonly)  
[https://www.googleapis.com/auth/admin.directory.resource.calendar.readonly](https://www.googleapis.com/auth/admin.directory.resource.calendar.readonly)
  When using the certificate always delegate to the admin user, for example, [admin@cue.eu](mailto:admin@cue.eu).  
`.CreateWithUser("admin@cue.eu")`