white glove tutorials

One of our goals at Trafera is to make deploying Chromebooks as easy and frustration-free as possible. To help with enrollment, we will need limited access to your Google Domain during white glove setup. These guides will help you through the process of creating a restricted admin account and enrollment-only user account for our use. If you need additional help or have any questions, we’re here for you. Feel free to contact our support team at support@trafera.com or call toll-free 1-855-862-5120.

Jump to section:

Creating a Locked-Down Chrome Admin Account

When enrolling Chromebooks, we often receive requests to modify device information fields or locations within the Google Admin Console. In order to efficiently and accurately provide this service, we recommend the creation of a locked-down enrollment account. This allows for the explicit function of device enrollment and modification, without giving access to anything else in your Google domain. Alternatively, you may also opt to give more broad permissions to the enrollment account using a pre-configured admin role.

Create an Enrollment Only Account in Google Admin

Secured enrollment-only account setup. This account will only have enrollment privileges, with no access to the Google Admin Console or services such as Gmail and Drive.

How to Manage Wifi through the Google Admin Console

While we are more than happy to process your order with pre-configured Wifi, we have found that most customers prefer the advantages offered by configuring their Wifi settings in the Google Admin Console. This video will show you how.

Step-By-Step Text Walkthrough

Show/Hide Text Instructions

Creating the Organizational Unit [OU]

  1. Go to https://admin.google.com and login with a Super Admin account
  2. Select “Organizational Units”
  3. Hover over the OU tree to reveal the option to [Create new organizational unit]
    • Look for a, plus (+) symbol at the right
  4. Name the OU
    • we recommend something identifiable like “TFenroll”
  5. Click “Create”
    • You may need to refresh (F5) to see the newly created OU

Creating the User

  1. Go to https://admin.google.com and login with a Super Admin account
  2. Select “Users”
  3. Click “Add New User” to open the profile page
  4. Fill out the required fields
    • We recommend credentials that are easy to type
  5. Click “Add New User” to create
  6. Click “Done” to finalize creating the user
  7. Locate the user account you just created. Hover over the user to reveal the option to change OU
    • You may need to refresh (F5) to have the user appear
  8. Click the “More” dropdown menu
  9. Click “Change Organizational Unit”
  10. Place the user in the OU created in step 5
  11. Click “Continue”
  12. Click “Change” to save
  13. Do not assign a license to this user
    • License assignment maybe set to automatic based on your “Billing” Settings
    • You can remove licenses by selecting the user and going to the “More” dropdown at the top
      • Some licenses are unremovable, you can leave those assigned
  14. Do not assign admin roles or privileges to this user
    • You can check this by clicking on the user and looking in the roles and privileges section

OU Settings

  1. Now to setup the OU. Return to the Admin Console home screen
  2. Select “Devices”
  3. On the left side Device Settings menu click the “Chrome” dropdown
  4. Click “Settings”
  5. On the left side, OU Tree, click the OU you created in step 5
    • Scroll down to Enrollment controls > Enrollment permissions
      • Make sure the setting is on “Allow users in this organization to enroll new or re-enroll existing devices”
      • This is usually already selected by default, but inherited settings can sometimes change this
  6. Click “Save” at the top if you made changes

Apps Settings

  1. Now to setup the Apps settings for the OU. Return to the Admin Console home screen
  2. Select “Apps”
  3. Click “G Suite”
  4. On the left side click the OU you created in step 5
  5. Select all checkboxes, then click “Off” on the top right
    • Confirm any additional pop-up boxes
  6. Go back to the “Apps” settings
  7. Click “Additional Google services”
  8. On the left side click the OU you created in step 5
  9. Select all checkboxes, then click “Off” on the top right
    • Confirm any additional pop-up boxes

Your enrollment-only account is now complete