Introduction
Manual enrollment of Chrome devices using the Google Admin Console is crucial for organizations that want to connect HP Insights Services with their Chrome OS devices. This method is useful when automatic enrollment is not possible or when IT administrators need more control over the enrollment process. By setting up user roles, turning on partner access, and completing the integration steps, organizations can make sure their Chrome devices are enrolled, synced, and monitored through the HP Workforce Experience Platform (WXP).
This article provides a step-by-step guidance to:
Prerequisites
Before proceeding with the steps to enable integration between HP Insights and the Google Admin Console, complete the prerequisites listed here. Once devices are enrolled in the Google Admin console, they are automatically synced to HP Insights.
1: Activate Google Admin Console and HP Services accounts
To enable integration between HP Insights and the Google Admin console, complete the following steps:
Sign up for a Google Admin Console account and access https://admin.google.com. For those who do not have a Google Admin console account for their company domain, start here.
Access a user account in the Google Admin console with the Super Admin role.
Complete the domain verification step or use a domain provided by Google
Activate an HP Insights account and access the HP portal at https://workforceexperience.hp.com/
If enrolling HP Chrome Enterprise devices, they come packaged with Chrome Enterprise Upgrade licenses. Chrome Enterprise Upgrade licenses do not need to be purchased separately.
2: Configure WXP User with EMM Admin role
To configure Chrome Enterprise Integration within HP Insights, log in with the EMM Admin role.
Adding a new User with EMM Admin Role
To add a new user with the EMM Admin role:
Log in to the WXP URL using an IT Admin role. The Home page is displayed.
From the left menu of WXP, click Accounts > Users. The Users listing page is displayed.
Click Add. An Add User dialog box is displayed with multiple options.
In the dialog box, select Manually, then click Next.
Enter the user's First Name, Last Name, and Email.
Select the EMM Admin role.
Click Add. A popup message is displayed with success or failure message.
When the new user is added, a welcome email is sent to the user with instructions to activate their HP Insights account. This user is given the necessary permissions to integrate HP Insights and Google Admin console
Assigning the EMM Admin Role to an Existing User
Log in to the WXP URL using an IT Admin role. The Home page is displayed.
From the left menu of WXP, click Accounts > Users. The Users page is displayed.
There are two options to assign roles to an existing user:
Option 1: From the Users listing page. This option is recommended to assign the EMM Admin role to multiple users.
On the Users listing page, use the checkbox to select one or more users. When at least one user is selected, the option to Assign Roles is displayed.
Click Assign Roles. The Assign Roles dialog box is displayed.
Select the role either from the list of roles or use the search box to find the role.
Option 2: From the User details page. When this option is selected, the role can be added to only one user at a time.
From the Users listing page, click the email address of a user to add the role. The User details page is displayed.
On the User details page, scroll to the Roles section. A pencil icon is displayed to edit existing roles.
Click the pencil icon. The Assign Roles dialog box is displayed.
Select the role either from the list of roles or use the search box to find the role.
After selecting the EMM Admin role. Click Save. A popup message is displayed with a success or failure message.
When successful, the EMM Admin role is assigned the selected users.
3. Enroll Chrome Devices in the Google Admin Console
Manually enroll Chrome devices to the Google Admin console following the Device Enrollment instructions provided by Google. Once devices are enrolled in the Google Admin console, they will be automatically synced to the HP Insights service daily.
4. Enable Partner Access for Chrome Management
Devices automatically enroll in the top-level organizational unit. If partner access isn't enabled at the top-level organizational unit, set up device enrollment in an organizational unit where partner access is enabled. For further details, see Device Enrollment.
1: Turn on partner access device settings
To turn on partner-access device settings:
Sign in to the Google Admin Console using a Super Admin role.
From the Google Admin Console homepage, click Devices > Chrome management.
Click More controls at the bottom if Devices isn’t on the homepage.
Click Device Settings.
(Optional) on the left, select an organizational unit to customize the management level across organizational units,
In the Chrome Management - Partner Access section, click the Enable Chrome Management - Partner Access box
Agree to enable partner access and click Enable Chrome Management - Partner Access
Click Save
2: Turn on partner access user settings
To turn on partner-access user settings:
From the Google Admin console Home page, go to Devices > Chrome management (Click More controls at the bottom if Devices isn't on the homepage)
Click User & browser settings
In the Chrome Management - Partner Access section, check the Enable Chrome Management - Partner Access box
Agree to enable partner access and click Enable Chrome Management - Partner Access
Click Save
3. Integrate HP Insights with Google Admin Console
To integrate HP Insights with Google Admin console:
Log in to WXP using an an EMM Admin role. The Home page is displayed.
From the left menu of WXP, click Settings > Preferences. The Preferences tab is displayed.
On the Preferences tab, scroll down to Third-Party Software section.
Click the pencil icon for Google Chrome Enterprise Integration.
Turn on the toggle Enable Google Chrome Enterprise.
Enter the email address of the super admin user from the Google Admin Console account.
Click the link Get an authorization code from Google.
Enter credentials.
Click Allow when prompted for permissions and the final confirmation screen.
Copy the authorization code on the next screen.
Back in the HP portal, under the Google Chrome Enterprise Integration field, paste the authorization code.
Click Save.
Once the integration is enabled, the HP Insights will synchronize device info and telemetry with the Google Admin console once a day. Wait up to 24 hours to ensure Chrome devices enrolled in the Google Admin console are showing up on the platform.
Disable Partner access for Chrome management
To stop the communication from the Google Admin console and HP Insights, revoke OAuth 2.0 authorization by revoking the token. Or, use the Google Admin console to disable access to devices.
To disable access to devices using the Google Admin console:
Sign in to the Google Admin console using a Super Admin role.
From the Home page of Google Admin console, click Devices > Chrome management (Click More controls at the bottom if Devices isn't on the homepage).
Click Device Settings.
In the Chrome Management - Partner Access section, uncheck the Enable Chrome Management - Partner Access box.
Click Save.
Click Devices > Chrome management > User & browser settings.
In the Chrome Management - Partner Access section, uncheck the Enable Chrome Management - Partner Access box.
Click Save.
Disconnect HP Insights from the Google Admin console
To disconnect HP Insights from the Google Admin console:
Log in to WXP using an EMM Admin role.
From the left menu of WXP, click Settings > Preferences. The Preferences tab is displayed.
On the Preferences tab, scroll down to Third-Party Software section.
Click the pencil icon for Google Chrome Enterprise Integration
Turn off the toggle Enable Google Chrome Enterprise
Related Resources
For additional information, refer to the following articles
Contact Us
For any assistance, create a support case or email [email protected]