Getting Groove email or calendar sync up and running usually requires users to go through an OAuth process that allows Groove to access your Google and Salesforce data. Even though this is a simple process, in practice, it is a risk to rely on that process if you have a larger number of users in your organization and want sync to work reliably. Typically, some users will need help understanding how to do it; some will log in using their personal Gmail account, some will revoke access by mistake, or Google will revoke access if a user changes their password.
Domain Wide Enablement (DWE) allows you to avoid all these issues by giving Groove access to all your users' email and calendar data using a service account. This method is called Domain Wide Enablement since you can selectively turn email and calendar sync on/off for each user from the Groove user management page.
To activate Domain Wide Enablement, follow these steps:
Installing the Groove Marketplace app in Google Apps
Install the Groove Marketplace App in your G-Suite (Google apps) admin console.
1. In the Google Apps management console, click Apps > Marketplace apps
2. Click on the + button to add a Marketplace app
3. In the search window, search for "Groove."
4. In the search result, find "Groove: Gmail & Google Calendar Integration for Salesforce" and click the button + INSTALL APP

5. Accept the permissions that Groove requests, agree to Groove's terms, and finish the installation
6. Double-check that you have granted Groove all the required permissions. Click Security > Show More > Advances Settings > Manage API client access in the G-Suite admin console. You should see a row in the list for Groove with a list of all the permissions you have granted Groove.
Create a Salesforce service account.
-
This is the Salesforce account that Groove will use to read and write email and calendar events to Salesforce when Groove calendar or email sync is enabled.
-
We recommend using a dedicated account with the username groove@<yourdomain> rather than the account of a real user to avoid confusion. In any case, this account must have System admin privileges.
-
IMPORTANT: Assign a Groove license to the service account user
-
IMPORTANT: it is vital for Groove sync that this account remains activated and its connected apps permissions remain active. If you deactivate this account, revoke permissions to Groove for this account, or un-assign the Groove license, email and calendar sync will be broken for all your users.
Activate Domain Wide sync and test
-
Log out of Salesforce (important)
-
-
click on Connect a Salesforce Service Account in the Domain-Wide Sync section. This will take you through the Salesforce login flow, where you should log in with the credentials of the Salesforce service account you created previously.
-
-
Click on the button Test Permissions and wait for a green alert in the top right corner. If you see a red alert, contact Groove support
-
If you have tested the permissions successfully, check the box Activate Domain Wide Enablement and click Save
Activate Email or Calendar sync for select users.
-
After you activate Domain Wide Enablement, you can now decide which of your user's calendar or email sync will be activated.
-
Go here and click the 'Users' button at the top of the page to see a list of all Salesforce users
-
Check the box for each user you want to turn email or calendar sync on/off
-
In the Actions menu, select Update email sync settings or Update calendar sync settings, respectively, and activate/deactivate email or calendar sync
-
If you select more than three users, activating email or calendar sync might take several minutes. Groove will send you an email as soon as it's finished.
Note: If users have email aliases, you will want to populate the fields 'Email Alias 1' and 'Email Alias 2' on the User's profile. Please do so to avoid the Assigned To of records being set to the service account to sync emails and events.