Skip Navigation

white glove tutorials

One of our goals at Trafera is to make deploying Chromebooks as easy and frustration-free as possible. To help with enrollment, we will need limited access to your Google Domain during white glove setup. These guides will help you through the process of creating a restricted admin account and enrollment-only user account for our use. If you need additional help or have any questions, we’re here for you. Feel free to contact our support team at support@trafera.com or call toll-free 1-855-862-5120.

Creating The Organizational Unit [OU]

Go to https://admin.google.com and login with a Super Admin account

  1. Select “Organizational Units”
  2. Click “Create organizational unit”
  3. Name the OU
    • We recommend something identifiable like “TFenroll”
    • You can add a description (not required)
    • The Parent Organizational unit is defaulted to the primary domain (ex. @trafera.com)
  4. Click “Create”

Apps Settings

  1. Now to setup the Apps settings for the OU. Return to the Admin Console home screen.
  2. Select “Apps”
  3. Click “Google Workspace”
  4. On the left side, click the Enrollment OU you created
  5. Select all checkboxes, then click “Off” on the top right
    • Confirm any additional pop-up boxes
  6. Go back to the “Apps” setting
  7. Click “Additional Google Services”
  8. On the left side click the Enrollment OU you created
  9. Select all checkboxes, then click “Off” on the top right
    • Confirm any additional pop-up boxes

Creating an Enrollment Admin Account:

  1. Go to https://admin.google.com and login with a Super Admin account
  2. Select “Admin Roles”
  3. Click “Create new Role”
  4. Name the Role
    • We recommend “Enrollment Account”
  5. Assign Privileges (Use the Search bar to quickly find these privileges)
    • Under Organizational Unit – Select “Read”
    • “Manage Printers”
    • “Manage Chrome OS Devices”
    • “Manage Chrome OS Devices (read only)”
    • “Start Remote Desktop”
    • “Manage Chrome OS Settings”
  6. Assign Admin Privileges
    • Under Organization Units – select “Read”
    • “Schema Read”
  7. Create Role
  8. The Enrollment Account is now completed

Please note that the video guides in this section may not reflect the current layout

Creating a locked-down chrome admin account

Create an enrollment only account in google admin

How to manage wifi through the google admin console