User Guide

How to create a Google Directory Chromebook segment

Preview

Create a Google Directory segment to discover Chromebooks managed through Google Admin Directory and audit the ones you want to track in Inventory. By default, scans and audits for the segment run on AlloyScan cloud workers, services hosted and managed by AlloyScan. You do not need to install or maintain any local components.

NOTE: With the default cloud worker, Google Directory credentials are encrypted and stored in the AlloyScan cloud. If you want to keep them within your local network, you can use a local Audit Service instead. This can be a service you already use for other segments.

Prerequisites

  • Site Administrator role.
  • For local execution, an Audit Service with access to Google Admin Directory.
  • A Google Directory credential with the required fields:
  • Client email
  • Private key
  • Delegated admin email
  • Optional Customer ID

Create the segment

  1. Open Network > Segments and select + New segment.
  2. Select Google Directory and select Next.
  3. Under Execution placement, keep AlloyScan cloud worker, which is selected by default. To run scans and audits in your environment, select Local Audit service and choose an Audit Service.
  4. Review the segment name and change it if needed. Select the Chromebooks resource.
  5. Select or add credentials for the provider. Cloud execution uses cloud credentials stored in AlloyScan; local execution uses credentials from the selected Audit Service. You can import service-account JSON to fill the client email and private key; enter the delegated admin email separately.
  6. Create a scan schedule, or continue without a schedule. For cloud execution, Cloud start window (minutes) specifies how long after the scheduled time the scan may start.
  7. Review the settings and create the segment.

Use a cloud worker for an existing segment

Open the segment's settings, select AlloyScan cloud worker under Execution placement, select or add compatible cloud credentials, and save. Existing Audit Service credentials are not transferred to cloud storage. You can continue using local execution without changing the segment's credentials.

Verify

After saving, the new segment appears in Network > Segments with the Google Directory type icon.

  1. Open the segment.
  2. Click Scan to discover Chromebook devices.
  3. Review the Scan Results grid. Select the devices marked Ready for audit, then click Audit.
  4. Open Inventory and check the Chromebooks tile for the audited devices.
  5. Open a Chromebook device to review its General and Details tabs.

Note: Google Directory is a separate segment type from Google Cloud Platform. Use the Google Cloud Platform segment workflow for Google Cloud Platform resources.