---
title: "Domain-Wide Delegation of Authority for service account"
slug: "domain-wide-delegation-gw"
updated: 2026-04-16T05:52:17Z
published: 2026-04-29T10:51:57Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.britive.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Domain-Wide Delegation of Authority for service account

1. Login to [Google Cloud Directory Sync (GCDS)](https://admin.google.com).
2. Click on **Security** -> **Access and data control** -> **API Controls** from the navigation menu.
3. Click on **MANAGE DOMAIN WIDE DELEGATION** in the **Domain wide delegation** pane.
4. Click **Add new**.
5. In the **Client ID** field, enter the Client ID obtained from the service account creation steps. For more details, see [Creating a Service Account](/v1/docs/creating-a-service-account).
6. In the **OAuth scopes (comma-delimited)**enter a comma-separated list of the following:
  - https://www.googleapis.com/auth/admin.directory.user
  - https://www.googleapis.com/auth/cloud-platform
  - https://www.googleapis.com/auth/admin.directory.group
  - https://www.googleapis.com/auth/admin.directory.group.member
  - https://www.googleapis.com/auth/admin.directory.rolemanagement

Note:

The scope above is needed only if a super admin role has been granted.
  - https://www.googleapis.com/auth/admin.directory.customer.readonly
  - https://www.googleapis.com/auth/admin.directory.domain.readonly
7. Click **AUTHORIZE**.

For more details, see [Delegate domain-wide authority to your service account](https://developers.google.com/admin-sdk/directory/v1/guides/delegation).