Granting Doowii Access to Google Classroom

This guide explains how your Google Workspace Administrator can securely grant Doowii access following Google’s recommended practices for delegated access to Classroom APIs.

Doowii integrates with Google Workspace for Education to ingest Google Classroom data (including coursework, course rosters, assignments, submissions, and materials) so your organization can analyze teaching and learning workflows in one place.

Prerequisites

1. Google Workspace for Education Fundamentals or higher

2. Admin privileges to the Google Admin console

3. The Doowii-provided service account email (shared privately during setup)

4. Confirmation that your organization permits third-party API access to Classroom

---

1. Overview of Doowii’s Google Classroom Integration

Doowii uses Google Classroom APIs to read and (optionally) write teaching and learning data.

This enables:

• Class roster and content access for alignment with SIS data and reporting

• Performance analytics for teachers and academic leaders

• Optional Data-Driven Content Generation:

  • Lesson plan generation workflows

  • Quiz and assignment generation

  • Assignment and material publishing

The integration uses a Doowii-owned Google Cloud service account, authorized via domain-wide delegation within your Google Workspace tenant.

---

2. Required OAuth Scopes

Depending on your institution’s selected workflows, you may choose Read Only access or Read + Write access.

Confirm with your Doowii representative on the the OAuth Scopes needed for your project.

2.1 Read-Only Scopes (Standard Analytics Use Cases)

Purpose	Scope
List/view courses	https://www.googleapis.com/auth/classroom.courses.readonly
List/view coursework (assignments, materials)	https://www.googleapis.com/auth/classroom.coursework.me.readonly https://www.googleapis.com/auth/classroom.coursework.students.readonly
View student rosters	https://www.googleapis.com/auth/classroom.rosters.readonly
View course topics	https://www.googleapis.com/auth/classroom.topics.readonly

These scopes allow Doowii to read course structures, teaching materials, rosters, and assignments.

---

2.2 Write Scopes (Optional – For Content Generation)

Only enable these if your organization has partnered with Doowii to push generated content into Google Classroom.

Purpose	Scope
Create/update coursework	https://www.googleapis.com/auth/classroom.coursework.me https://www.googleapis.com/auth/classroom.coursework.students
Create/update course materials	https://www.googleapis.com/auth/classroom.courses
Manage topics	https://www.googleapis.com/auth/classroom.topics

Generally, we propose all content that Doowii writes to your Classroom be labeled clearly as “Doowii Generated”.

---

3. Step-by-Step Setup Instructions

Step 1 — Customer Org: Verify API Access Is Enabled in Google Admin Console

1. Go to Admin Console → Security → API Controls

2. Ensure “Enable API access” is checked

3. Confirm that the Organization allows third-party app integrations

   • (This is default for most EDU tenants.)

Step 2 — Doowii: Provide Service Account Client ID

Doowii provides your organization with:

• The GCP service account email

• The unique OAuth 2.0 Client ID associated with the service account

You will use these in Step 3.

Step 3 — Customer Org: Grant Domain-Wide Delegation to the Doowii Service Account

1. In the Google Admin Console:

   Security → API Controls → Domain-wide delegation

2. Click Add new.

3. Enter the Client ID provided by Doowii.

4. Add the required OAuth scopes (comma-separated).

Example (read-only):

https://www.googleapis.com/auth/classroom.courses.readonly,
https://www.googleapis.com/auth/classroom.rosters.readonly,
https://www.googleapis.com/auth/classroom.coursework.me.readonly,
https://www.googleapis.com/auth/classroom.coursework.students.readonly,
https://www.googleapis.com/auth/classroom.topics.readonly

Example (read/write):

https://www.googleapis.com/auth/classroom.coursework.me,
https://www.googleapis.com/auth/classroom.coursework.students,
https://www.googleapis.com/auth/classroom.courses,
https://www.googleapis.com/auth/classroom.topics

1. Click Authorize.

Step 4 — Customer Org: Confirm Classroom API Is Enabled

1. Go to Google Cloud Console for your Workspace organization.

2. Navigate to: APIs & Services → Enabled APIs & Services

3. Verify Classroom API is enabled.

4. If not, click Enable APIs and Services → Classroom API → Enable.

Step 5 — Doowii: Validate Access and Begin Initial Sync

Doowii completes:

• Token validation

• Scope confirmation

• Classroom → SIS roster alignment

• Initial metadata sync

• Optional write-access smoke test (if granted)

This step should not require customer participation unless issues arise.

---

4. Summary (For Administrators)

To grant Doowii access:

1. Enable API access

2. Authorize Doowii’s service account via domain-wide delegation

3. Add the required Classroom API scopes

4. Confirm Classroom API is active

5. Notify Doowii to begin verification and ingestion

This process uses Google-recommended methods and is fully auditable.

References (Google Documentation)

• Google Classroom API Overview: https://developers.google.com/classroom

• Delegated Domain-Wide Authority: https://developers.google.com/admin-sdk/directory/v1/guides/delegation

• OAuth Scopes for Classroom: https://developers.google.com/classroom/guides/auth