White Glove Tutorials

One of our goals at Trafera is to make deploying Chromebooks as easy and frustration-free as possible. To help with enrollment, we will need limited access to your Google Domain during white glove setup

These guides will help you through the process of creating a restricted admin account and enrollment-only user account for our use. If you need additional help or have any questions, we’re here for you.

Feel free to contact our support team at:
support@trafera.com or call toll-free 1-855-862-5120.

Creating the Organizational Unit (OU)

1. Go to https://admin.google.com and log in with a Super Admin account
2. Select Organizational Units from the Directory
3. Click Create Organizational Unit
4. Name the OU
   • We recommend something identifiable like "TFenroll"
   • You can add a description (not required)
   • The Parent Organizational Unit defaults to the primary domain (ex. @yourdomain.com)
5. Click Create

Creating a Trafera User

1. Go to https://admin.google.com and log in with a Super Admin account
2. Select Users from the Directory
3. Click Add new user
4. Name the user
   • We recommend something identifiable like "trafera.enroll"
5. Click Manage user's password, organizational unit, and profile photo
6. Ensure the user is moved to the OU you created in the previous section
7. Click Add new user

Create a new Admin Role

1. Go to https://admin.google.com and log in with a Super Admin account
2. In the left menu, go to Account > Admin Roles
3. Click Create new role
4. Name the role "Trafera's Chromebook Utilities" and click Continue
5. Select the following privileges
   • Organizational Units > Read
   • Manage ChromeOS Devices
6. Click Continue
7. Click Create Role

Add Trafera's user account to the newly created role

1. Find the "Trafera's Chromebook Utilities" role you created and click it
2. Click Admins
3. Click Assign members
4. Add the Trafera user account you created here
5. Click Assign role

Allow the Trafera ChromeOS Utilities

1. Go to https://admin.google.com and log in with a Super Admin account
2. In the left menu, go to Security > Access and data control > API cpntrols
3. Under the center App access control, select Manage third-party app access
4. Select Configure new app
5. Paste the following value into the search box and click Search
   • 663732795308-3mk4rqg25ud0nme3p177ghtdhcnq1o9a.apps.googleusercontent.com
6. In the results, click "Trafera Chromebook Mover" or "Trafera ChromeOS Utilities"
7. For scope, click Select org units. Find the OU that the Trafera user account is located in, select it, and click Continue
8. For Access to Google Data, select "Limited" and click Continue
9. Click Finish
10. Confirm the parental consent for that OU

Congratulations! You have now created an account that can be used to perform white glove services for your Google domain. If you have any questions, please contact support@trafera.com.

More information regarding Google’s privileges and roles can be found at https://support.google.com/a/answer/1219251