Setting up the Google Classroom integration (for school admins)
This page is for whoever administers your school's Google Workspace. Teachers and students do not need to do anything here.
Why this is needed
- Google Workspace for Education blocks unconfigured third-party apps for users under 18 by default.
- Until the app is allowed, a student signing in sees "Access blocked: your institution's administrator needs to review this app" and cannot continue.
- Marking the client ID below as a trusted app removes that message.
OAuth client ID
97952614508-js9fj33juhbc0o226d8udr950e1lgea0.apps.googleusercontent.com
In the Google Admin console, go to Security → Access and data control → API controls → Manage third-party app access, and set this ID to Trusted. For a bulk CSV upload, the columns are app name, type (Web), this client ID, organizational unit, and access level (trusted).
Scopes we request
We ask for all of these at once, and only when a teacher presses “Connect to Classroom”. We never ask for them at sign-in. Google’s consent screen shows a checkbox per permission, so a teacher can grant only some of them.
Roster import
- https://www.googleapis.com/auth/classroom.courses.readonly
- https://www.googleapis.com/auth/classroom.rosters.readonly
- https://www.googleapis.com/auth/classroom.profile.emails
Posting course work and returning grades
- https://www.googleapis.com/auth/classroom.coursework.students
- https://www.googleapis.com/auth/classroom.topics
Posting to the stream and sharing materials (optional)
These two are optional. Roster import, posting course work and returning grades all work without them.
- https://www.googleapis.com/auth/classroom.announcements
- https://www.googleapis.com/auth/classroom.courseworkmaterials
Students consent to nothing
- Every Classroom read and write happens as a teacher. We never ask students for additional permissions.
- Students only need ordinary “Sign in with Google” (email address and name).
- Students can also join with a 6-character class code and no Google account at all.
What we read and why
| Classroom class names and course IDs | So the teacher can pick a class |
|---|---|
| Student names and email addresses on the roster | To match the Classroom roster to enrolment here |
| Assignments the teacher created here | To list the same assignment under Classwork in Classroom |
| Submission grades | To return the score for completed assignments to the Classroom gradebook |
| Submission states (turned in, returned, late) | To show what Classroom says next to what we say (read only) |
| Classwork topics | To group the assignments we post under a single heading |
| Stream posts and materials (optional) | Only if a teacher chooses to post a practice summary or a how-to link |
We use this only to run the class. Never for advertising. Once the connection is removed we stop calling Classroom entirely.