GSuiteforEducation:DeploymentGuide

Thisguideservesasaresourcefordomainadministratorsinchargeof
movingtheirstudentand/orfaculty/staffpopulationstoGSuitefor
Education.Insideyoullfindastep-by-stepoutlineforcompletingthe
technicalaspectsofyourdeployment,includingrelevanthelpcenterarticles
andvideos.GSuitedeploymentstypicallytakebetween1dayand6weeks.
ThismaterialistargetedtowardsITadministrators(orothers)lookingto
learnmoreaboutthetechnicalaspectsofaGSuitedeployment.Ifyouwish
toconnectwithotherschoolsasyoudeploy,orifyouhaveadditional
technicalquestions,pleasevisitourcommunitysupportforum.Thisforumis
directlymanagedbyourEDUteam.

-1-
 GSuiteforEducation:DeploymentGuide
Bookmarkedtaskchecklist Relevantlinks
GSuiteforEducationPrivacyNotice PrivacyNotice
BestPractices:DomainSetupOptions
1.Choosedomainname(s)-selectanoptionbelow
MultipleDomains&Limitations
2.Signupyourdomain(s)forGSuite SignUpforGSuite
3.Decideonyourorganizationalstructure CreateanOrganizationalStructure
TurnServicesOn/OffforOrgs
SetupaWalledGarden
4.Decideonmailflow-selectanoptionbelow
Configuredualdeliverythroughlegacyserver DualDeliverythroughLegacyServer
ConfiguredualdeliverythroughGoogle DualDeliverythroughGoogle
ConfiguresplitdeliverythroughGoogle SplitDeliverythroughGoogle
5.ProvisionusersinGSuite
ChooseamethodforcreatingusersinApps ProvisioningOptionsOverview
IfperformingaCSVupload: CSVUploadHelpCenterArticle
CreateCSVfileofusers(500usersperfile) CSVUploadHow-ToVideo
Uploadviathecontrolpanel&waitforemailstatingtheuploadiscomplete
IfusingGSuiteDirectorySync(GADS):
DownloadGADS GADSGeneralInfo/DownloadPage
WatchtheGADSTechnicalOverview GADSHow-ToVideo
ReadtheGADSAdminGuide GADSAdminGuide
ConfigureGADS
Runsimulationsync,correctanyissues,runactualsync
6.GoogleClassroomsetup
Manualcreationofclasses CreatingaClass
ClassroomAPI ClassroomAPI
3rdPartyOptions
7.Implementauthentication-selectanoptionbelow
StorepasswordsinGSuite ResetGSuitepasswords
EnterAdmincontactinformationforusers
ConfigureSingleSign-on LearnmoreaboutSSO
8.Datamigration-selectanoptionbelow
Nodatamigrationnecessary
Migratedataforusers(serversidemigrationoptions) EmailMigrationOptions
Letusersmigratetheirowndata(clientsidemigrationoptions) EmailMigrationOptions
9.AdditionalResources
DomainBestPracticesGuide DomainBestPractices
TakealookatYouTubesettingsforGSuite YouTubesettingsforGSuite
GSuiteMarketplace&ChromeWebStore Marketplace&ChromeWebStore
Connectwithotheradminsthroughourforums EDUForums
ProfessionalDevelopment&TrainingResources GuidetoGoingGoogleResources

Ifyoudlikeadditionalassistance,youcanfindpartnersthatareabletoassistintheGSuiteMarketplace.

Ifyouarealsointerestedinhowyoucanpilotdevices,specificinformationcanbefoundinGoogleDevicesfor
EducationPilotGuide.

IfyoureinterestedinmoredetailedinformationaboutswitchingtoGSuite,pleasetakealookat:
GuidetoGoingGoogle
GSuiteDeploymentsite
GSuiteTechnicalTransitionGuide

-2-
 GSuiteforEducation:DeploymentGuide

GSuiteforEducationPrivacyNotice
PleasereviewtheGSuiteforEducationPrivacyNoticeforinformationonhowGooglecollectsanduses
informationfromGSuiteforEducationaccountsspecifically.YoucanalsovisittheGoogleforEducationTrustsite
foranswerstoFAQ.

1.DomainSet-Up
Therearemanywaystosetupyourdomains.Herearethemorecommonsetupsweveseen.Pleasebeforemaking
adecision,checkBestPracticesGuide(DomainSetupOptions)

(NOTE:SigningyourproductiondomainupforGSuitewillNOTaffectyourcurrentmailflow).

A.Managingonedomain/GSuiteinstance(Bestoption)
Registermydistrict.edu(exampledomainname)andprovisionbothteacher,staff,andstudentaccounts
withinthisGSuiteaccount.Ifcontactsharingisturnedon,alluserswillhaveaccesstocontactinformationof
usersprovisionedinthedomain.

B. ManagingmultipledomainsinoneGSuiteinstance(Recommended)
RegisteryourproductiondomaininGSuite.Forexample,ifyoucurrentlyusemydistrict.eduforyourteacher
emailaccounts,registerthatasyourprimarydomain.Then,addanadditionaldomainforyourstudents,like
students.mydistrict.org,inthesameGSuiteinstance.Ifcontactsharingisturnedon,alluserswillhaveaccess
tocontactinformationofusersprovisionedinthedomain.

C.ManagingmultipleGSuiteinstances(Notrecommended,duetoinabilitytocollaborateseamlesslybetween
separateGSuiteinstances)
Registermydistrict.eduforyourteachersandstaffandstudents.mydistrict.eduforyourstudentsastwo
separateGSuiteinstances.Youllmanagetheseusingtwoseparatecontrolpanels.Ifcontactsharingisturned
on,bydefaultuserswillonlyhaveaccesstocontactinformationofusersprovisionedintheirindividualG
Suiteinstance.IfyoudliketoaddcontactinformationofusersoutsideoftheGSuiteinstance,youllneedto
createcontactobjectsusingtheSharedContactsAPI,GSuiteDirectorySyncoramarketplacetool.

2.SignUpforGSuite
Onceyoudecideonthedomainname(s)thatllbeassociatedwithyourproductionGSuiteinstance(s),youllsign
uphere.Pleasenotethatyoumustalreadyown,orbeabletopurchase,thesedomainnames.Totakefull
advantageofGSuiteforEducation,domainverificationisarequiredstep.Ifverificationsoundsalittletoo
technicalforyou,dontworry,younowhaveaccessto1:1,step-by-stepdomainverificationsupportwiththehelp
ofaGoogleSupportspecialistcompletelyfreeofcharge.

Togetintouch,followtheseinstructions.Pleasenotethatyou'llneedtohavealreadysignedupforGAFEbefore
callingSupport.

3.Decideonyourorganizationalstructure
Organizationalunitsallowyoutosegmentyouruserpopulation(i.e.youcancreateanorganizationforstudents
andanotherforfaculty-youcouldfurtherbreakdownthestudentorganizationbygrade).Administratorscanturn
servicesonorofffordifferentorganizationalunits.Organizationalunitsalsoallowforemaildeliverytobe

-3-
 GSuiteforEducation:DeploymentGuide
restrictedforcertainpopulations.Youconfigureemaildeliverysettingssothatsomeuserscanonlyemailusers
withinthedomain(andreceiveemailsfromuserswithinthedomain).

Forbestpractices,reviewbestpracticesdocument.
Forstep-by-stepinstructionsonhowtodoso,pleaseseethislink.

4.MailArchitecture
WillyoubechangingyourMXrecordstopointtoGoogle?Willsomeusersremainonyourlegacyserver,while
otheruserswillstartusingGSuite?Youllwanttoconsideryourcurrentmailarchitecture/flowandthinkaboutthe
bestwaytoadjustmovingforwardsothatmailcanbedeliveredtouserswithinGSuite.Youllalsowantto
considerhowyourlegacyserverwillhandleemailssentfromwithinthelegacyservertouserwhomaybeonG
Suite.

Generalinformationonmaildeliveryoptionscanbefoundhere.

DualDeliverythroughLegacyServer

Inthisscenario,yourMXrecords
willnotchange-theyllcontinueto
pointtoyourlegacyserver.Onyour
GSuitedomainyoullsetupa
domainalias(forexample,
g.school.edu)withMXrecords
pointingtoGSuite.Youllthen
forwardfromyourlegacyserverto
thedomainaliasthatyouvesetup.

DualDeliverythroughGoogle

Inthisscenario,yourMXrecords
willpointtoGoogle.Youllthenset
upemailroutinginyourGSuite
controlpaneltosendmailbackto
yourlegacyserverforallaccounts.
Instructionsonconfiguringemail
routingcanbefoundhere.

SplitdeliverythroughGSuite

-4-
 GSuiteforEducation:DeploymentGuide

Inthisscenario,yourMXrecords
willpointtoGoogle.Youllthenset
upemailroutinginyourGSuite
controlpaneltosendmailbackto
yourlegacyserverforaccountsthat
arenotfoundinGoogle.
Instructionsonconfiguringemail
routingcanbefoundhere.

5.Provisioning
Thereareafewdifferentoptionswhenitcomestocreatingusersandyoullwanttochoosetheonethatworks
bestforyourinstitution.Generalinformationonprovisioningoptionscanbefoundhere.Pleasereviewbest
practicesdocumenttoseewhatisthebestoptionforyou.

1. Manualprovisioning
2. CSVUpload
CSVuploadscanbeusedtouploadupto500usersatatime.IfyouchooseaCSVupload,youllformatyourfile
asatableandincludeheaderstodefineeachfield,likethis:

CellA1:EmailAddress|CellB1:FirstName|CellC1:LastName|CellD1:Password

3. GSuiteDirectorySync
GSuiteDirectorySyncallowsyoutoautomaticallyprovisionusers,groups,andcontactsbasedontheuser
datainyourLDAPserver,suchasMicrosoftActiveDirectory.GSuiteDirectorySyncconnectstoyourGSuite
directoryandadds/deletesuseraccountstomatchyourexistingorganizationalschema.TheGSuiteDirectory
SyncconfigurationwizardguidesyouthroughcustomizingyoursynchronizationandmappingofyourLDAP
userlisttoyourGSuiteusers,nicknames,sharedcontacts,andgroups.Tomanageyoursynchronization,you
canperformtestsynchronizations,andconfigurechangelimits,notifications,andscheduledsynchronizations.

IfyoureinterestedinusingGSuiteDirectorySync,youllwanttotakealookatthefollowing:
WatchtheGSuiteDirectorySyncTechnicalOverview
ReadtheGADSAdminGuide

4. ProvisioningAPI
TheProvisioningAPIallowsforuserstobecreatedprogrammatically.Ifyoureinterestedinlearningmore,take
alookattheProvisioningAPIdocumentation.

5. Provisioningpartner:pleaseaskGooglerepresentativestofindthebestpartnerforyouneeds.

6.GoogleClassroomSetup

-5-
 GSuiteforEducation:DeploymentGuide

WillyoubeprepopulatingGoogleClassroomclassesautomaticallyorwillyouhaveteacherscreatetheirown
classes?

Teacherscreatingtheirownclasses

Tomanuallycreateaclass,ateachercanfollowtheinstructionsasnotedhere.

ClassroomAPI

WeverecentlylaunchedtheClassroomAPIwhichallowsdeveloperstoautomaticallycreateandpopulate
classes.ThiscanallbecompletedbytheGoogleAdministratorwithnointeractionfromstudentsorteachers.
Developerswillwanttoreviewthefollowing:
ClassroomAPIHome
ClassroomAPIGuides

3rdPartyOptions

WiththenewClassroomAPI,3rdpartydevelopers,caneasilyintegratewithGoogleClassroomtocreateand
populateclasses.Somegreatexamplesofthisare:
GSuiteManager(GAM)
NewVisions-rosterSync

TherosterSynctoolisreallyeasytouseasit'saGoogleSheetAdd-onandallowsyoutocreateandupdateGoogle
ClassroomrostersusingStudentInformationSystem(SIS)CSVexportsanddatastoredinGoogleSheets.Ifyou
wantaquickandeasywaytocreateandpopulateGoogleClassroom,youcanusethistool.

7.Authentication
WillyourusersbeauthenticatingstraighttoGoogle(usingthedefaultGoogleloginpage)?Orareyoulookingto
integrateloginwithotherservicesthatyouhaveatyourschool?

IfyouruserswillhavepasswordsstoredinGoogle,thenyouwillneedtoeithersyncpasswordsfromanexisting
campussystemorcreatenewpasswordsforusersinApps.IfyourelookingtosyncpasswordsfromActive
Directory,youllwanttotakealookatthefollowing:
AuthMagic
SSOEasy

WerecommendthatyouentertheAdminorHelpdeskcontactinformationforenduserpasswordrecovery,so
userscancontacttherightteamincaseofanyloginissues,itonlytakes1minute!Seethisarticleforthespecific
steps.

Ifyoureinterestedinintegratingloginswithotherservicesatyourinstitution,youshouldtakealookatourSingle
Sign-Onarticles/resources.NOTE:SingleSign-Onworksforbrowserbasedinteractions.Ifyouruserswillbe
interactingwithGSuiteviamailclientsormobiledevices,theywillneedapasswordstoredinGSuite.
LearnmoreaboutSSO
SAMLSSOwithApps
ShibbolethSSOandApps

-6-
 GSuiteforEducation:DeploymentGuide
SSOinAppsMarketplace

8.DataMigration
Datamigrationscanbeperformedserverside(runbyIT)orclientside(runbytheenduser).Thedatathatcanbe
migratedfromyourlegacyserverwilldependonthelegacyserveryourelookingtomigratefrom.More
informationonmigrationoptionscanbefoundhere.

Nomigration
Pros:Reducesoveralltime/complexityofdeploymentasthereisnoneedforITadminstomigratedata.
Cons:Usersmaywantsomeoftheirlegacyaccountdataandmaynotknowhowtokeepit.

Clientside
Pros:Reducesoveralltime/complexityofdeploymentasthereisnoneedforITadminstomigratedata.
Cons:HelpDesk/ITadminsmaybecontactedbyusersforhelp,sinceusersrunthesemigrationsontheirown.

-7-
 GSuiteforEducation:DeploymentGuide
ServerSide
Pros:Sinceuserdataistransferredwithoutuserintervention,itcanmakethetransitiontoGSuitemore
positive.
Cons:Canincreaseoveralltime/complexityofdeploymentasITadminsneedtomigratedata.

9.AdditionalResources
YouTubesettingsforGSuite
ThisfeatureisintegrateddirectlyintotheGSuiteAdminconsoleunderYouTubesettings[Apps>Additional
Googleservices>YouTube].Inadditiontorestrictingvideocontent,adminswillbeabletodelegateapprovers
towhitelistadditionalcontentforsigned-inusersonthedomain.Moreinformationhere.

GSuiteMarketplace
IfyoureinterestedadditionalapplicationsorarelookingforsomeonetoassistyouwithyourGSuite
deployment,pleasetakealookattheGSuiteMarketplace.

Connectwithotheradminsthroughourforums
YoucanuseourGSuiteforEducationCommunityforumstoconnectwithotherGSuitedomain
administrators,askfortips,andsharebestpractices.

ChromeWebStore
TakealookatadditionalwebapplicationsthatyoucaninstallonyourChromebrowser.

ProfessionalDevelopment&TrainingResources
Ifyourelookingforprofessionaldevelopmentandtrainingresourcestoassistyouruserpopulationinyour
movetoGSuite,pleasetakealookattheresourcesintheGuidetoGoingGoogle.Youllfindprofessional
developmentplans,ideasforstartingtouseGSuiteintheclassroom,andtrainingresources.

ExtraCredit:HerearesomerecommendedresourcestostayuptodateafteryouvedeployedGSuite
Recommendedbandwidthlimits
Trackproductupdatesandreleases
LookattheAppsStatusDashboardandtheGSuiteKnownIssuespagebeforecontactingsupport
CheckouttheGoogleEnterpriseBlog
LearnmoreaboutGoogleinEducationandfollowourGoogle+page

-8-