Google Directory Audit

All the Chromebooks can be identified in the Site using the Google Directory Audit. Network Inventory can detect Chromebooks only when auditing a Site with configured Google Directory Audit Sources.

In order to get information about Chromebooks, the Automation Server uses Google Credentials that you configure to connect with the Google Admin Console and export inventory data.

NOTE: Managing Chromebooks requires you to have created Google administrative account with properly configured API access. You must also purchase Chromebook licenses associated with this account.

The steps for setting up a Chromebook for management through Google may change at Google's discretion. For details on managing Chromebook, see the Google support documentation https://support.google.com/chrome/a/answer/1289189.

To audit Chromebooks:

1. Enroll the Chromebooks

   To enroll the Chromebook, you need to create a Google administrative account and buy a Chromebook license.

   If the Chromebook has already been used, you may need to perform a factory reset on the Chromebook before it can be enrolled.

   For details, see: https://support.google.com/chrome/a/answer/1360534.

2. Enable API access and create a client ID

   1. Sign in to your Google Admin console using an administrator account (https://admin.google.com) and click Security > API controls.
   2. Select the Trust Enternal, domain owned apps option.
   3. Log in to the Google Cloud Platform (https://console.cloud.google.com/cloud-resource-manager), click Create Project from the toolbar, specify project details (e.g. name and location), and click Create.

      TIP: Creating a project may take several seconds. When completed, you will get a notification message.

   4. Click the notifications icon and select your project by clicking the Select Project button from the notifications list.

      TIP: The project automatically appears in the Project info widget of the Home Dashboard.

   5. In the left Navigation menu, go to APIs & Services > Dashboard. Then click the Enable APIs and Services button from the toolbar. The API Library page opens.
   6. In the search string, enter Admin SDK and choose the Admin SDK API link from the search results, then click Enable.
   7. In the Navigation menu, go to APIs & Services > OAuth consent screen.
   8. Under User Type, select External and click Create. The Edit app registration page opens.
   9. Provide all required information, then click Save and Continue.
   10. In the Navigation menu, go to APIs & Services > Credentials.
   11. On the toolbar, click Create Credentials and choose OAuth Client ID from the drop-down list.
   12. In the Navigation pane, go to Credentials, click Create credentials and choose OAth Client ID from the drop-down list.
   13. Under Application Type, choose the Desktop app option from the drop-down list.
   14. Specify the name of your OAuth client in the Name field and click Create.

   15. Under OAth 2.0 Client IDs, select newly-created record and click the download icon . The JSON file automatically downloads to your computer. The file will contain Client Secret and Client ID, you will need this data to configure Google Credentials for the Google Directory Audit Source.

3. Configure Google Directory Audit Source

4. Audit Google Directory Audit Source