1. In the Google Apps control panel, go to the ‘Advanced tools’ tab.
  2. In the ‘Authentication’ section, click ‘Manage OAuth domain key’.
  3. Make sure that the ‘Allow access to all APIs’ box *isn’t* ticked.
  4. Click the ‘Advanced tools’ tab.
  5. In the ‘Authentication’ section, click ‘Manage third party OAuth Client access’.
  6. Under ‘Client Name’, type the name of your consumer key. This is usually the name of your primary Google Apps domain.
  7. Under ‘One or More API Scopes’, type the following text:
    https://apps-apis.google.com/a/feeds/migration/,https://www.google.com/calendar/feeds/,https://www.google.com/m8/feeds/,https://apps-apis.google.com/a/feeds/user/#readonly

  8. Click ‘Authorize’.