Stay organized with collections
Save and categorize content based on your preferences.
Follow the steps in this quickstart guide, and in about 10 minutes you'll have
a simple Python command-line app that makes requests to the zero-touch
enrollment reseller API.
Prerequisites
To run this quickstart, you'll need:
A Google account, that's a member of your zero-touch enrollment reseller
account. If you haven't onboarded yet, follow the steps in Get started in
the Reseller portal guide.
Use this
wizard to create or select a project in the Google Developers Console and
automatically turn on the API. Click Continue, then Go to credentials
.
Set What data will you be accessing? to Application data.
Click Next. You should be prompted to create a service
account.
Give a descriptive name for Service account name.
Note the Service account ID (it looks like an email address) because you'll
use it later.
Set Role to Service Accounts > Service Account User.
Click Done to finish creating the service account.
Click the email address for the service account that you created.
Click **Keys**.
Click **Add key**, then click **Create new key**.
For **Key type**, select **JSON**.
Click Create and the private key downloads to your computer.
Click **Close**.
Move the file to your working directory and rename it service_account_key.json.
Step 2: Link the service account
Open the zero-touch enrollment portal. You might need to sign in.
Click settings_ethernetService
accounts.
Click addLink service account.
Set Email address to the address of the service account you created.
Click Link service account to use the service account with your zero-touch
enrollment account.
Step 3: Install the Google client library
Run the following command to install the library using pip:
pipinstall--upgradegoogle-api-python-client
See the library's installation
page for different installation
options.
Step 4: Set up the sample
Create a file named quickstart.py in your working directory. Copy in the
following code and save the file. Insert your own reseller partner
ID as the value for PARTNER_ID (the app's first line after the
imports).
#!/usr/bin/env python# -*- coding: utf-8 -*-"""Zero-touch enrollment reseller quickstart.This script forms the quickstart introduction to the zero-touch enrollemntreseller API. To learn more, visit https://developer.google.com/zero-touch"""fromapiclient.discoveryimportbuildfromhttplib2importHttpfromoauth2client.service_accountimportServiceAccountCredentials# TODO: replace this with your partner reseller ID.PARTNER_ID='11036885';# A single auth scope is used for the zero-touch enrollment customer API.SCOPES=['https://www.googleapis.com/auth/androidworkprovisioning']SERVICE_ACCOUNT_KEY_FILE='service_account_key.json'defget_credential():"""Creates a Credential object with the correct OAuth2 authorization. Creates a Credential object with the correct OAuth2 authorization for the service account that calls the reseller API. The service endpoint calls this method when setting up a new service instance. Returns: Credential, the user's credential. """credential=ServiceAccountCredentials.from_json_keyfile_name(SERVICE_ACCOUNT_KEY_FILE,scopes=SCOPES)returncredentialdefget_service():"""Creates a service endpoint for the zero-touch enrollment reseller API. Builds and returns an authorized API client service for v1 of the API. Use the service endpoint to call the API methods. Returns: A service Resource object with methods for interacting with the service. """http_auth=get_credential().authorize(Http())service=build('androiddeviceprovisioning','v1',http=http_auth)returnservicedefmain():"""Runs the zero-touch enrollment quickstart app. """# Create a zero-touch enrollment API service endpoint.service=get_service()# Send an API request to list all our customers.response=service.partners().customers().list(partnerId=PARTNER_ID).execute()# Print out the details of each customer.if'customers'inresponse:forcustomerinresponse['customers']:print'Name:{0} ID:{1}'.format(customer['companyName'],customer['companyId'])else:print'No customers found'if__name__=='__main__':main()
Partner ID
API calls typically need your reseller partner ID as an argument. To find your
partner ID from the zero-touch enrollment portal, follow the steps below:
Copy your partner ID number from the Your reseller ID line.
Step 5: Run the sample
Use your operating system's help to run the script in the file. On UNIX and Mac
computers, run the command below in your terminal:
pythonquickstart.py
Printing API responses
To make it easier to inspect responses when trying out the API, format the JSON
response data. The snippet below shows how you might do this in Python using the
JSON module:
Tell us what went wrong with the quickstart and we'll work to
fix it. To learn how zero-touch uses service accounts to authorize API calls, read
Authorization.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-28 UTC."],[[["\u003cp\u003eThis quickstart guide helps you set up a Python command-line app to interact with the zero-touch enrollment reseller API in about 10 minutes.\u003c/p\u003e\n"],["\u003cp\u003ePrerequisites include having a Google account, Python 2.6 or greater, the pip package management tool, and internet access.\u003c/p\u003e\n"],["\u003cp\u003eThe setup involves creating and enabling a service account in the Google Developers Console, linking it in the zero-touch enrollment portal, and downloading its JSON key file.\u003c/p\u003e\n"],["\u003cp\u003eYou will need to install the Google client library using pip, and then create and modify the \u003ccode\u003equickstart.py\u003c/code\u003e file with your reseller partner ID to run a sample API request.\u003c/p\u003e\n"],["\u003cp\u003eThe guide provides instructions for finding your partner ID, running the Python script, and formatting JSON responses for easier inspection.\u003c/p\u003e\n"]]],["First, enable the zero-touch enrollment API by creating a service account, setting its role, and downloading its JSON key. Next, link this service account in the zero-touch enrollment portal using the service account's email address. Install the Google client library with `pip`. Then, create a `quickstart.py` file, inserting your reseller partner ID, and run it via the terminal to make an API request, listing customer details. Retrieve partner ID from the Service Accounts page in the portal.\n"],null,["# Python quickstart for resellers\n\nFollow the steps in this quickstart guide, and in about 10 minutes you'll have\na simple Python command-line app that makes requests to the zero-touch\nenrollment reseller API.\n\nPrerequisites\n-------------\n\nTo run this quickstart, you'll need:\n\n- A Google account, that's a member of your zero-touch enrollment reseller account. If you haven't onboarded yet, follow the steps in *Get started* in the [Reseller portal guide](/zero-touch/guides/portal).\n- Python 2.6 or greater.\n- The [pip](https://pypi.python.org/pypi/pip) package management tool.\n- Access to the internet and a web browser.\n\nStep 1: Turn on the zero-touch enrollment API\n---------------------------------------------\n\n1. Use [this\n wizard](https://console.developers.google.com/start/api?id=androiddeviceprovisioning.googleapis.com) to create or select a project in the Google Developers Console and automatically turn on the API. Click **Continue** , then **Go to credentials**.\n2. Set **What data will you be accessing?** to *Application data*.\n3. Click **Next**. You should be prompted to create a service account.\n4. Give a descriptive name for **Service account name**.\n5. Note the **Service account ID** (it looks like an email address) because you'll use it later.\n6. Set **Role** to *Service Accounts \\\u003e Service Account User*.\n7. Click **Done** to finish creating the service account.\n8. Click the email address for the service account that you created.\n9. Click \\*\\*Keys\\*\\*.\n10. Click \\*\\*Add key\\*\\*, then click \\*\\*Create new key\\*\\*.\n11. For \\*\\*Key type\\*\\*, select \\*\\*JSON\\*\\*.\n12. Click **Create** and the private key downloads to your computer.\n13. Click \\*\\*Close\\*\\*.\n14. Move the file to your working directory and rename it `service_account_key.json`.\n\n| **Warning:** Service account keys can become a security risk if not managed carefully. For advice see [best practices for managing API keys](https://cloud.google.com/iam/docs/best-practices-for-managing-service-account-keys).\n\nStep 2: Link the service account\n--------------------------------\n\n1. Open the zero-touch enrollment [portal](https://enterprise.google.com/android/zero-touch/resellers). You might need to sign in.\n2. Click settings_ethernet **Service\n accounts**.\n3. Click add **Link service account**.\n4. Set **Email address** to the address of the service account you created.\n5. Click **Link service account** to use the service account with your zero-touch enrollment account.\n\nStep 3: Install the Google client library\n-----------------------------------------\n\nRun the following command to install the library using pip: \n\n pip install --upgrade google-api-python-client\n\nSee the library's [installation\npage](/api-client-library/python/start/installation) for different installation\noptions.\n\nStep 4: Set up the sample\n-------------------------\n\nCreate a file named `quickstart.py` in your working directory. Copy in the\nfollowing code and save the file. Insert your own [reseller partner\nID](#partner-id) as the value for `PARTNER_ID` (the app's first line after the\nimports). \n\n```python\n#!/usr/bin/env python\n# -*- coding: utf-8 -*-\n\"\"\"Zero-touch enrollment reseller quickstart.\n\nThis script forms the quickstart introduction to the zero-touch enrollemnt\nreseller API. To learn more, visit https://developer.google.com/zero-touch\n\"\"\"\n\nfrom apiclient.discovery import build\nfrom httplib2 import Http\nfrom oauth2client.service_account import ServiceAccountCredentials\n\n# TODO: replace this with your partner reseller ID.\nPARTNER_ID = '11036885';\n\n# A single auth scope is used for the zero-touch enrollment customer API.\nSCOPES = ['https://www.googleapis.com/auth/androidworkprovisioning']\nSERVICE_ACCOUNT_KEY_FILE = 'service_account_key.json'\n\ndef get_credential():\n \"\"\"Creates a Credential object with the correct OAuth2 authorization.\n\n Creates a Credential object with the correct OAuth2 authorization\n for the service account that calls the reseller API. The service\n endpoint calls this method when setting up a new service instance.\n\n Returns:\n Credential, the user's credential.\n \"\"\"\n credential = ServiceAccountCredentials.from_json_keyfile_name(\n SERVICE_ACCOUNT_KEY_FILE, scopes=SCOPES)\n return credential\n\n\ndef get_service():\n \"\"\"Creates a service endpoint for the zero-touch enrollment reseller API.\n\n Builds and returns an authorized API client service for v1 of the API. Use\n the service endpoint to call the API methods.\n\n Returns:\n A service Resource object with methods for interacting with the service.\n \"\"\"\n http_auth = get_credential().authorize(Http())\n service = build('androiddeviceprovisioning', 'v1', http=http_auth)\n return service\n\n\ndef main():\n \"\"\"Runs the zero-touch enrollment quickstart app.\n \"\"\"\n # Create a zero-touch enrollment API service endpoint.\n service = get_service()\n\n # Send an API request to list all our customers.\n response = service.partners().customers().list(partnerId=PARTNER_ID).execute()\n\n # Print out the details of each customer.\n if 'customers' in response:\n for customer in response['customers']:\n print 'Name:{0} ID:{1}'.format(\n customer['companyName'], customer['companyId'])\n else:\n print 'No customers found'\n\n\nif __name__ == '__main__':\n main()\n```\n\n### Partner ID\n\nAPI calls typically need your reseller partner ID as an argument. To find your\npartner ID from the zero-touch enrollment portal, follow the steps below:\n\n1. Open the [portal](https://enterprise.google.com/android/zero-touch/resellers). You might need to sign in.\n2. Click settings_ethernet **Service\n accounts**.\n3. Copy your partner ID number from the **Your reseller ID** line.\n\nStep 5: Run the sample\n----------------------\n\nUse your operating system's help to run the script in the file. On UNIX and Mac\ncomputers, run the command below in your terminal: \n\n python quickstart.py\n\n### Printing API responses\n\nTo make it easier to inspect responses when trying out the API, format the JSON\nresponse data. The snippet below shows how you might do this in Python using the\nJSON module: \n\n from json import dumps\n\n # ...\n\n results = provisioning.partners().devices().claimAsync(partnerId=MY_PARTNER_ID,\n body={'claims':new_claims}).execute()\n # Print formatted JSON response\n print dumps(results, indent=4, sort_keys=True)\n\nTroubleshooting\n---------------\n\n\n[Tell us what went wrong]() with the quickstart and we'll work to\nfix it. To learn how zero-touch uses service accounts to authorize API calls, read\n[Authorization](/zero-touch/guides/auth).\n\nLearn more\n----------\n\n- [Google Developers Console help documentation](/console/help/new)\n- [Google APIs Client for Python documentation](/api-client-library/python)\n- [pip User Guide](https://pip.pypa.io/en/stable/user_guide/)"]]