# Google Workspace

## Verified Mago App for Google Workspace

When using Mago with Google Workspace room resources and users, the various features of the room app and the mobile app leverage Google services through Google APIs. To enable these features, at the time of user access it is necessary to authorize the verified app "Mago" and grant access to the required scopes.

## Configure app access (Admin Policy Enforced error)

If you have third-party app restrictions in your Google domain, you may see the 400 "`admin_policy_enforced`" error when you try to sign in.

Refer to this guide to authorize "Mago" as a third-party app in the policy:

{% embed url="<https://support.google.com/a/answer/7281227>" %}

Enter the following App Client IDs:

**Mago / Mago app for web**\
`436832489008-nl03st57foo9su4qg5mddnadhl7ql5oe.apps.googleusercontent.com`

**Mago mobile app for Android**\
`436832489008-5ie2c8hme7jucfh4vn4hul7sdkm8mhuk.apps.googleusercontent.com`

**Mago mobile app for iOS**\
`436832489008-l3lejr6nqvgmevau7u999gm6c17jdci2.apps.googleusercontent.com`

## Required features and scopes

| Mago – Feature                                                                                                                     | Required Scope Permissions                                                              |
| ---------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- |
| Log in with room account and view room name and email address                                                                      | `auth/userinfo.email`                                                                   |
| Select the room calendar to list upcoming meetings on the display                                                                  | `auth/calendar.readonly`                                                                |
| Create a new instant meeting as a Host and book the room calendar                                                                  | `auth/calendar.events`                                                                  |
| Search for Google Directory contacts to add recipients to meeting invitations                                                      | <p><code>auth/contacts.readonly</code><br><code>auth/contacts.other.readonly</code></p> |
| Browse, import, open and view cloud storage files (Google Drive) during a Mago Workspace or Mago Stage session (file presentation) | <p><code>auth/drive</code></p><p><code>auth/drive.file</code></p>                       |

| Mago Workspace app – Feature                                                                                                       | Required Scope Permissions                                        |
| ---------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------- |
| Log in to Mago Workspace via a personal Google account, view the account name and email address                                    | `auth/userinfo.email`                                             |
| Choose a personal calendar to list your personal meetings in the app and start them in the meeting room                            | `auth/calendar.readonly`                                          |
| Create a new instant meeting as a Host and book the room calendar                                                                  | `auth/calendar.events`                                            |
| Browse, import, open and view cloud storage files (Google Drive) during a Mago Workspace or Mago Stage session (file presentation) | <p><code>auth/drive</code></p><p><code>auth/drive.file</code></p> |