Customer IT / SpaceIQ Onboarding Team
This article will cover the steps required to integrate SiQ with the G-Suite calendar. When complete, this integration will let employees move meeting room bookings to their Google calendar. This integration uses the Cronofy Enterprise Connector.
You must be an administrator in your G-Suite organization in order to complete this integration.
You will need to enable this integration in SiQ.
From the SiQ Web App, complete the following:
- Click your Profile Name in the top right corner.
- Click Settings. The Settings screen displays.
- From the left menu, click Integrations.
- From the Third Party Integrations area, click the READ MORE link. The Integrations screen displays.
You can either search for Google Calendar in the Search field or navigate to Google Calendar tile. To navigate complete the following:
- From the left menu, click Meeting Rooms.
- For Google Calendar, click the Activate button.
The Google Calendar dialog displays.
In the Gmail Domain Name field enter your company's domain name. Note this domain must be set up as a G-Suite domain. Then click the Activate button.
Check your email for an activation link. When you click on it, you will be asked to give Cronofy Enterprise Connect permissions to manage certain resources:
Click on Google, and then click on Install the Cronofy G Suite app. This will take you to the G Suite Marketplace where you can install the Cronofy app:
When you have finished installing, check both boxes and click on the Link GSuite Domain button.
Confirm that the app is installed and then you’ll be taken to authorize calendar access for your domain.
You’ll then be redirected back to SiQ. This will then perform the required synchronization in the background.
And that's all there is too it! Now when you book a meeting room, your organization's Google calendar will receive the information needed to display SiQ meeting room bookings.
Service Account Permissions
Google’s marketplace applications can be configured to restrict access to a subset of users and resources. This is configured using based upon Organizational Units.
For more information see Google’s documentation on configuration https://support.google.com/a/answer/172931 and https://support.google.com/a/answer/4352075 for an overview on organization structures within G-Suite.
In this example we can create an Organizational Unit named “Resource” as a child resource of our root domain:
In order to authorize the application to use the Organizational Unit, a user must be created within this Organizational Unit.
This user must be configured to be granted the following admin privileges:
- For the Organizational Unit
- Admin API > Users > Read
- For all Organizational Units
- Admin API > Domain Management
This can be achieved by assigning each privilege via a distinct custom role:
At this stage, the Cronofy application should be installed for the domain.
After installing the Cronofy Application at the root domain level we can restrict access - blocking access to all users outside of the Organizational Unit:
And configure overridden access to our Organizational Unit to allow access to the application:
Cronofy will still make the user of Domain wide Delegation but be sandboxed within the Organizational Unit. When authorizing the Google Service Account with Cronofy the newly created user must be used when linking.
After this has been completed any user accounts which should be accessed should be placed within the Organizational Unit in order to allow access. By default, all resources will be accessible and so can be linked.