The Google Service Account is a special Google account that is used by applications to access Google APIs. You should create this account after you generate your EMM token so you can upload all information at one time. The account is only required if you are using the Google Accounts method for deploying Android for Work.

  1. Navigate to the Google Cloud Platform- Google Developers Console.

  2. Sign in with your Google credentials.


    The Google Admin credentials do not have to be associated with your business domain. Consider creating a Google account specifically for Android for Work for your organization to use so as not to conflict with any existing Google accounts.

  3. Use the drop-down menu from the Select a project menu and select Create a project.

  4. Enter a Project Name to create your API project in the New project window. Consider using AndroidForWork-CompanyName as the naming convention.
  5. Agree to the terms and conditions and select Create.

    Your project generates and the Google Developer Console redirects you to the API Manager page.

  6. Select Enable APIS and Services for Android for Work from the APIs & Services Dashboard.
  7. Search and enable the following APIs: Google EMM API and Admin SDK API.

    After creating your project and enabling APIs, create your service account in the Google Developer's Console.

Create Service Account

Remain in the Google Developer's Console to create the service account.

  1. Navigate to APIs & Services > Credentials > Create Credentials >Service Account Key > New Service Account .
  1. Define the Service Account name for your service account. Consider following the Android for Work naming convention and be sure to note the name you choose as you will need it in further steps.

  2. Use the drop-down menu to select the Role > Project as Owner.
  3. Select the Key Type as P12.
  4. Select Create. The identity certificate gets automatically created and downloaded to your local drive.


    You must save your identity certificate and password for when you upload the certificate into the AirWatch Console.

  5. Select Manage service accounts from the Service Account Keys list which opens the Service Accounts page.

  6. Select the menu button (three vertical dots) beside your service account and select Edit.

  7. Select Enable G Suite Domain-wide Delegation.

  8. Enter a Product name in order change settings for G Suite Domain. Consider using AndroidForWork-CompanyName as the naming convention.

  9. Select Save.
  10. Select View Client ID under the Options field. The details of your service account displays. From here, you will leave the Developer Console and input your credentials into the Google Admin Console.

    Be sure to save your client ID before navigating away from the Developer's Console. You will also use these credentials in the AirWatch Console when you upload your EMM token. For more information, see Upload EMM Token

    For steps to configure the Google Admin Console, see Setup Google Admin Console