Setup Guide Unclear / Not up to Date

[magic-happenz]

Describe the bug
I failed multiple times setting this up. There are multiple things that do not work from the https://psgsuite.io/Initial%20Setup/ setup guide beginning with the broken links to create the project which is due to API changes I assume (i.e.: there is no Apps Activity API
existing).
Then there is no domain wide delegation checkbox anymore in the service account, at least not for me. All in all when following this guide step by step I still end up with error:
Exception calling "Execute" with "0" argument(s): "Error:"unauthorized_client", Description:"Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.", Uri:"""
OR
Exception calling "Execute" with "0" argument(s): "Error:"invalid_grant", Description:"java.security.SignatureException:

To Reproduce
Steps to reproduce the behavior:

1. Setup environment according to https://psgsuite.io/Initial%20Setup/
2. Set-PSGSuiteConfig
3. Get-GSUserList
4. Error

Expected behavior
Get a list of users from my GSuite tenant.

Environment (please complete the following information):

• OS: [e.g. Windows 11 21H2]
• PowerShell Version: 5.1.22000.282
• PSGSuite Version: 2.36.4

[jgeron-suhsd]

Directions are mostly unclear and do need updating, but if you're able to mostly get through it and are able to run get-gsuser to return information about your admin account, try the following:

I was having this exact issue tonight on one of several domains that I work with. My problem was my CustomerID was incorrect. Double check your CustomerID in your PSGSuiteConfig.

Assuming you can run Get-GSUser, you should be able to find your CustomerID.

Then run Set-PSGSuiteConfig -ConfigName NameOfYourConfig -CustomerID YourCustomerID -Preference CustomerID

Then try running Get-GSUserList again. Should be all set.

[magic-happenz]

Thanks for the tip but I am wondering how to do this if the config is not working? If you can run Get-GSUser you acutally already made it. My problem is that no config worked. BTW you can obtain it from https://admin.google.com/ac/accountsettings/profile. Would be good to acutally mention this in the guide...

However, after hours and hours of investigation I finally made it working. Here some tips for anyone who have to use it in the future:

• Do not run this module in VSCode! It will not work!
• Create the project manually regardless if you are super admin or not. Add Admin and License SDK and click on [Click here to create a new project with the following API's enabled](https://console.developers.google.com/flows/enableapi?apiid=admin,appsactivity,contacts,driveactivity.googleapis.com,licensing,gmail,calendar,classroom.googleapis.com,docs.googleapis.com,drive,sheets.googleapis.com,slides.googleapis.com,groupssettings,chat.googleapis.com,people.googleapis.com,tasks). It will run into an error but magically enable something in your app. Without it, it will not work!
• Add all the scopes from the manual. I acutally just need 3 scopes for my use case and can´t see a reason so much permissions are required but guess what. Whithout all, it will not work!
• Use P12 certificate path. The module also support JSON but you guess it. With JSON it will not work!
• In case you finally made this running use Export-PSGSuiteConfig! and store it in a secure place.
• In case you get any error when running Set-PSGSuiteConfig delete the config file from
• C:\Users<username>\AppData\Local\powershell\SCRT HQ\PSGSuite\Configuration.psd1. The cmdlet also saves wrong configs and you can´t overwrite all settings...

Hope that helps anyone and that this guide could be updated to avoid the hard time people have that need to use it.

[jgeron-suhsd]

FYI - I run the module in VSCode without any issues, so I'm not sure what you're problem is in that regard.

[magic-happenz]

Yes could be but at least for me some commands I run into errors on VSCode while they work in Powershell.

[tekuadam]

For more info - In VSCode I get the following specifically when running it in the PowerShell Integrated Console:

Get-GSGmailProfile : The value supplied is not valid, or the property is read-only. Change the value, and then try again.
At line:1 char:1
+ Get-GSGmailProfile
+ ~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Get-GSGmailProfile

If I run the same in the powershell terminal it works fine.

I've had this in the past with other modules, I assume due to the way the PowerShell extension handles modules.