NOTE: Google Support note on this topic: https://support.google.com/a/answer/105694?hl=en
.

  1. Sign into the Google Admin console.
  2. From the dashboard, go to Apps -> Google Workspace -> Settings for Gmail -> End User Access.
  3. Optionally, inn the Organizations section, select the organizational unit for which you want to configure settings.
  4. Click on POP and IMAP access, enable checkbox: Enable IMAP access for all users.

    If you select the option Restrict which mail clients users can use (OAuth mail clients only) then you need to enter cloudHQ OAuth IDs. The following needs to be added:

    125135905029-ksahm056a3gahtqa9h0j31jd85r1bmjv.apps.googleusercontent.com,
    125135905029-2lpgr8qp9gvk5obu2pl10upulgupmku5.apps.googleusercontent.com,
    125135905029-ldlnqmnd4taru0d7j3kvh7spu85gru6k.apps.googleusercontent.com,
    125135905029.apps.googleusercontent.com

  5. Click on Save
It may take 15-30 minutes for IMAP and POP changes to take effect. As long as the box is cleared, users can configure POP and IMAP access for a host of clients.