Fix OU Import Errors
If the Google Admin Console OU import or sync process fails, administrators may see an error message stating the OU import failed. The primary cause of import errors is Google account permissions and API or security settings in Google Admin Console.1. Verify Google Account Permissions
Syncing or importing OUs from Google requires the following Google account permissions:- Admin API Privileges:
- Domain Management
- Organization Units (create, read, update, delete)
- Users (create, read, update, delete)
If there is only 1 OU for the domain, importing the OU structure to GoGuardian isn’t necessary. Multiple OUs allow for greater control over access to student data for administrator accounts and are used for granular filtering and reviewing activity features in GoGuardian Admin and Beacon.
2. Configure API Access
Verify access to the GoGuardian OAuth App in Google Admin Console.- In the Google Admin Console Dashboard, go to Security, then Access and Data Control, then API Controls.
- From the API access control page, select Manage Third-Party App Access.
-
Click Configure new app. In the search bar, enter “GoGuardian” and click Search. From the search results, look for the following OAuth Client ID:
1022294148666-393p05kvfint8elhvpn7dlle48gopg1j.apps.googleusercontent.com - Select the All users option or scope to specific org units.
- Set the app to Trusted, click Continue, then click Finish on the final page.
Fix Students Listed in the Wrong OU
If a student’s Organizational Unit displays only a forward slash (”/”), this typically means the OU that the student belongs to in Google Admin Console was not chosen to be synced to GoGuardian. When this occurs, the student is placed in the root or domain-level OU.The root OU can still be filtered by any filtering policies applied at the root level.
- Look up the student in Google Admin Console to confirm their current OU.
- If the OU is incorrect, click Change Organizational Unit and select the correct OU.
- Manually sync Org Units with Google Admin Console in GoGuardian Admin or Org Management.
- Allow up to 5 minutes for updated Organizational Units to display in GoGuardian Admin.
Understand Automatic Sync
GoGuardian automatically syncs your selected imported OUs once per day. If student accounts are moved between imported OUs in Google Admin Console, or if you add a new student to an imported OU, the updates are reflected in GoGuardian Admin by the next morning.Important: Handling OU Structure Changes
Over the course of the year, you might rename, reorganize, add, or delete OUs in Google Admin Console. If your OU structure is modified in Google Admin Console, you must manually re-import or re-sync your OUs to reflect the changes.After re-importing your OUs, re-evaluate your GoGuardian Admin policies to confirm they’re applied appropriately. If there are significant changes to imported OUs, any filtering policies applied to those OUs may be removed.
Resources
Manage Users and Settings
Review account and permission settings for GoGuardian Teacher.
Set Up Teacher Accounts
Get started with teacher account configuration.
Import Teachers from Google Directory
Sync teacher accounts directly from Google Admin Console.
Student Not Found
Troubleshoot missing students in GoGuardian Teacher.