- Open Team menu → Team settings → Google integration as an owner or administrator.
- Create a Web application OAuth client in Google Cloud. Enable Search Console API and, for GA4 imports, Analytics Admin API and Analytics Data API. Configure the consent screen and test users where required.
- Copy the exact callback URL shown by Evumi into the client's authorized redirect URIs. It is your instance origin followed by
/api/integrations/google/callback. - Save the client ID and secret in the team settings. The secret is encrypted with the server's
TOKEN_ENCRYPTION_KEY; the UI only shows whether one exists. - Open a site's SEO or GA4 import settings and authorize the appropriate Google account. Choose a verified matching property.
Each site keeps a separate grant; a team OAuth client does not automatically give access to another member's Google account. Changing the client ID requires the affected sites to reconnect. Leaving the secret blank while keeping the same client ID preserves the saved secret.
Instance-level GOOGLE_CLIENT_ID / GOOGLE_CLIENT_SECRET remain an optional fallback for teams without their own configuration. Keep the encryption key stable and back it up securely; it is required to decrypt both team configuration and existing site grants.