Prepare Your Android Branded Mobile App

Choose this option if: 

• Your company already uses Google Workspace or Cloud Identity
• You want long-term ownership tied to your company, not an individual person

Set up Google Cloud for Your Organization

1. Sign in to Google Cloud Console using your work email address (example: name@companyemail.com)
2. Click the menu icon on the top left corner

3. Under Products, select Google Cloud Setup

   Note: If you can't find it within the sidebar, click View all products

4. Under the Production heading, click Start
5. Click Begin the setup

6. Follow the prompts to complete 'Task 1: Organization'

   Note: Tasks 2-10 are not required at this time

Add an "Organization Policy Administrator" Role to Your Organization

Note: This step is not required for organizations that were created before May 3, 2024.

1. Select your organization's name from the resource selector beside the Google Cloud logo (it will show a building icon next to it, not 3 hexagons)

   

2. Click the Menu icon (3 lines), then IAM & Admin, then IAM
3. Click Grant Access
4. Under Add Principals, click the New principals input field and type in your Google account holder email address (the one you're already signed in with)
5. Under Assign Roles, click the Select a role drop down menu and type in "Organization Policy Administrator"
6. Click Save

Allow Service Account Key Creation for Your Organization

Note: This step is not required for organizations that were created before May 3, 2024.

1. Click the Menu icon (3 lines), then IAM & Admin, then Organization policies

2. In the Filter search bar, type or paste in "Disable service account key creation"

   

3. In the screenshot shown above, you'll see that two constraints are shown. You will need to complete the steps below for both constraints
4. Click the first Disable service account key creation
5. Click Manage Policy
6. Under Policy source, select Override parent's policy
7. Under Rules, if there is an existing Rule, click the trash can icon to delete it
8. Click Add a rule
9. Under Enforcement, select Off
10. Click Set policy
11. Repeat steps 4-10 for the second Disable service account key creation constraint

Create a Google Cloud Project

We use a Google Cloud Project to store information related to your app.

1. Click the resource selector beside the Google Cloud logo in the top left corner
2. Click New Project

3. In the Project name field, enter your app's name

   Important: your app's name should match the name you input in your Thinkific admin so that we can identify your project from our side

4. Under Location, click Browse
5. Select the organization you created earlier
6. Click Create

7. Once your project is created, you'll see a notification under the bell icon

    

8. Click Select Project

Grant Thinkific Access to Your Google Cloud Project

1. Ensure your project/app's name is displayed beside the Google Cloud logo (it will show an icon of 3 hexagons beside it, not a building icon)

   

2. Click the Menu icon (3 lines), then IAM & Admin, then IAM
3. Click Grant Access
4. Under Add principals, enter our email: svc-mobileapp-mgt@thinkific.com
5. Under Assign Roles, click Select a role
6. Under Quick Access, click Basic
7. On the right column under Roles, click Owner
8. Click Save

If you are encountering an error while saving, see the Troubleshooting section at the bottom of this guide.

Choose this option if: 

• You do not use Google Workspace or Cloud Identity

• You want the fastest, lowest-friction setup

Create a Google Cloud Project

We use a Google Cloud Project to store information related to your app.

1. Sign in to Google Cloud Console using any Google account (such as a Gmail account, example: appname@gmail.com)
2. Click the resource selector beside the Google Cloud logo in the top left corner
3. Click New Project

4. In the Project name field, enter your app's name

   Important: your app's name should match the name you input in your Thinkific admin so that we can identify your project from our side

5. Click Create

   Note: If you are encountering an error while saving, see the Troubleshooting section at the bottom of this guide.

6. Once your project is created, you'll see a notification under the bell icon

    

7. Click Select Project

Grant Thinkific Access to Your Google Cloud Project

1. Ensure your project/app's name is displayed beside the Google Cloud logo (it will show an icon of 3 hexagons beside it, not a building icon)

   

2. Click the Menu icon (3 lines), then IAM & Admin, then IAM
3. Click Grant Access
4. Under Add principals, enter our email: svc-mobileapp-mgt@thinkific.com
5. Under Assign Roles, click Select a role
6. Under Quick Access, click Basic
7. On the right column under Roles, click Owner
8. Click Save

The 'Domain Restricted Sharing' organization policy (constraints/iam.allowedPolicyMemberDomains) is enforced by default depending on how and when your organization was created in Google Cloud. 

To override this policy, follow the steps below:

1. In Google Cloud, select your organization’s name (it will show a building icon next to it, not 3 hexagons)
2. Click the Menu icon (3 lines), then IAM & Admin, then Organization policies
3. In the Filter search bar, type or paste in “Domain restricted sharing”
4. Click Domain restricted sharing
5. Click Manage Policy
6. Under Policy source, select Override parent’s policy
7. Under Policy enforcement, select Replace

8. Click Add a rule

9. Under Policy values, select Allow All
10. Click Done
11. Click Set Policy

Once this is complete you can proceed with Grant Thinkific Access to Your Google Cloud Project.

If you're following Option 2: Set up a Google Cloud Project without an Organization and you encounter one of the following blockers:

• Google asks you to “Set up your organization” or verify your domain, OR
• You cannot continue without completing organization setup

Your email domain is managed by Google Workspace or Cloud Identity and Google is enforcing your company’s existing setup.
 

Switch to Option 1: Set up a Google Cloud Project under an Organization instead.