Q: Getting "unauthorized_client: Client is unauthorized to retrieve access token" error

If you are getting the following error message:- <code>unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes</code> This is likely that Patronum does not have the correct access to a specific user or resource via the Google Admin Console setup. For the Google API's to correctly work Patronum needs access to all users within your Google Workspace environment. Access is configured within the <a href="https://admin.google.com/ac/apps/gmail/marketplace/appdetails/824001351376">Google Admin Console</a> <img src="https://storage.crisp.chat/users/helpdesk/website/661f215e36c4a800/image_1rxhpsb.png" alt="" /> <ol> <li>Within the Google Admin Console, from the main menu select Apps > Google Workspace Marketplace apps > Apps list.</li> <li>From the list of app select Patronum.</li> <li>Within the User access section select View organisational units and groups.</li> <li>Make sure Patronum is ON for everyone, and configured for the Root of your Google Organisation.</li> </ol> <img src="https://storage.crisp.chat/users/helpdesk/website/661f215e36c4a800/image_yqz8ax.png" alt="" /> ||| It is not possible to configure Patronum for a setsub of users due to Google API limitations.

Q: Sharing Google Contacts (administrator)

Patronum allows users to share their Google Contacts with other within the same domain. As an administrator you can also configure contact sharing for your users. <ol> <li>Navigate to the Contacts section.</li> <li>Select the (+) icon.</li> <li>From here you can select the user you want to share the contacts from, and select the specific label. <img src="https://storage.crisp.chat/users/helpdesk/website/661f215e36c4a800/image_8lum3w.png" alt="Select User for Contact Sharing" /></li> <li>Select which users you will be sharing these contacts with.</li> <li>Select which permissions they will have. <img src="https://storage.crisp.chat/users/helpdesk/website/661f215e36c4a800/image_bh9was.png" alt="Setting Up Google Shared Contacts" /> The options are:-</li> </ol> <ul> <li>Can View - Users can only view contacts, they will not be able to edit contacts. (recommended to install Chrome Extension to prevent editing)</li> <li>Can Edit - User can view and edit, but can not share contacts with others. </li> <li>Can Manage - Users have full access to contacts, they can view, edit, and also reshare to other users. </li> <li>Owner - Is the current owner of the contact label. </li> </ul>

Question 1

Getting "unauthorized_client: Client is unauthorized to retrieve access token" error

Accepted Answer

If you are getting the following error message:-

unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes

This is likely that Patronum does not have the correct access to a specific user or resource via the Google Admin Console setup. For the Google API's to correctly work Patronum needs access to all users within your Google Workspace environment. Access is configured within the Google Admin Console

Within the Google Admin Console, from the main menu select Apps > Google Workspace Marketplace apps > Apps list.
From the list of app select Patronum.
Within the User access section select View organisational units and groups.
Make sure Patronum is ON for everyone, and configured for the Root of your Google Organisation.

||| It is not possible to configure Patronum for a setsub of users due to Google API limitations.

Question 2

Creating a Policy

Accepted Answer

Policies within Patronum are extremely powerful and can be used to create workflows for onboarding and offboarding of users based on specific criteria such as new users, job title or even date.

To create a Policy workflow follow these steps:

WORKFLOW

From within the Policy section select the create (+) icon.
Give the policy a name and description. These will be used in any email notifications or approvals.
Start to define your policy by configuring the workflow conditions. From here you can define which users you want the policy to be applied to. You can base your policy on all Users, by users in Organisation Unit, or by a Google Group. You can also exclude users based on a Google Group.
Further filtering of your user cohort is possible, such as filtering on Last Sign In, Department or Job Title
The last section (Actions) with the Workflow is used to define specific users within the workflow. Executor - Used when a user is being offboarded. The executor is the account which Patronum will move data to, such as email, files or calendar items. Approval - This user is required to approve the workflow before it is allowed

Question 3

Managing Users Files

Accepted Answer

Manage files and folders

Within Patronum you can manage your users Files and Shared Drives.

|| Access to Google Shared Drives depends on if the Shared Drive is internal or external. If internal Patronum will give administrators full visibility and access, however if you are accessing an external Shared Drive Patronum will only be able to manage the drive to the level of the highest permission of an internal user.

To manage an individuals Google Files:-

Navigate to the user you are interested in.
Select the FILES tab.

Managing Google Drive & Shared Drives

From the Files section an administrator can explore and manage a users My Drive and Shared Drives.

Browsing Users My Drive and Shared Drives.

Share - Allows an administrator to manage the Sharing Permissions of a file or folder.
Rename - Allows an administrator to rename a file or folder.
Add a shortcut to Drive - Allows an administrator to browse another users My Drive and add a file or folder as a shortcut to the users My Drive.
Move to - Allows an administrator to move a file or folder, including subfiles and folders to another location in the users My Drive.
Make a Copy - Allows an administrator to make a copy of files and folders an

Question 4

Sharing Google Contacts (administrator)

Accepted Answer

Patronum allows users to share their Google Contacts with other within the same domain. As an administrator you can also configure contact sharing for your users.

Navigate to the Contacts section.
Select the (+) icon.
From here you can select the user you want to share the contacts from, and select the specific label.
Select which users you will be sharing these contacts with.
Select which permissions they will have. The options are:-

Can View - Users can only view contacts, they will not be able to edit contacts. (recommended to install Chrome Extension to prevent editing)
Can Edit - User can view and edit, but can not share contacts with others.
Can Manage - Users have full access to contacts, they can view, edit, and also reshare to other users.
Owner - Is the current owner of the contact label.

Question 5

Email Signature - Video Tutorial

Accepted Answer

Video tutorial on how to set up and create a Google Gmail email signature within Patronum.

${youtube}How to Create a Gmail Email Signature with Images, Social Icons and Logo

Question 6

Custom Permissions and Role Management

Accepted Answer

Patronum provides your business with a set of extremely flexible custom permissions and role-based management capabilities. So instead of granting a user complete super-user access to your Google Workspace via the Google admin console, you can assign lesser roles via Patronum that limits which tasks your users can perform. For example, allow member of your marketing team to manage only email signatures for a specific set of users based on their Organisational Unit or provide helpdesk staff with access to users Google Drive information without giving them the Google admin console. Assign pre-built Patronum roles, or create custom roles of your own.

You can choose from the following permissions in order to create your specific role which matches the exact needs of your organisation. Custom Permissions

Featured & Frequently Read Articles

Browse All Categories