Advanced Settings

Return to the Google Admin Console > Security > Settings

Choose App Access Control

Choose Manage Domain-Wide Delegation

In this screen, Click Add New

copy the Client ID value that you copied from the Service Account and paste it into the Client ID field.  

Then copy and paste the following comma-separated list of API scopes into the OAuth Scopes section and click Authorize.

https://www.googleapis.com/auth/admin.directory.group,https://www.googleapis.com/auth/admin.directory.orgunit,https://www.googleapis.com/auth/admin.directory.user,https://www.googleapis.com/auth/classroom.courses,https://www.googleapis.com/auth/classroom.courses.readonly,https://www.googleapis.com/auth/classroom.profile.emails,https://www.googleapis.com/auth/classroom.profile.photos,https://www.googleapis.com/auth/classroom.rosters,https://www.googleapis.com/auth/classroom.rosters.readonly,https://www.googleapis.com/auth/classroom.coursework.students.readonly,https://www.googleapis.com/auth/classroom.coursework.me.readonly,https://www.googleapis.com/auth/classroom.coursework.students,https://www.googleapis.com/auth/classroom.coursework.me,https://www.googleapis.com/auth/classroom.student-submissions.students.readonly,https://www.googleapis.com/auth/classroom.student-submissions.me.readonly

Keep these credentials

Click View Client ID on your Service Account and keep this tab open as you will need the Client ID and Service account email address later in this setup.

Classroom Teachers Group

In your Google Admin Console go to Groups, then click the group named Classroom Teachers (classroom_teachers@yourdomain.org). Click Manage Users in Classroom Teachers, then add your teachers to this group to enable the Google Classroom feature for your teachers.

Note: Teacher accounts can not be members of a sub-group under the Google Classroom Teachers group. The Teacher accounts must be added directly into the 'classroom_teachers' group