Reputation: 49
I am getting start with Google Apps Admin SDK > Email Audit API, I can successfully call the API
GET https://apps-apis.google.com/a/feeds/compliance/audit/mail/monitor/{domain name}/{source user name}
using OAuth token authorized by a super admin account, but I cannot use the super-admin to build my service due to permission issue.
We have another account specific for using this API, we want to setup a custom role for this account to minimize to permission grant to this account, but we fail to find the right permission for Email Audit API.
So my question is: What is the minimal roles/permission in google admin panel for the user be able to use ALL Email Audit API feature?
Upvotes: 0
Views: 193
Reputation: 13469
You may check on this support page the privileges that can be associated with administrator roles in the Google Admin console. You can also refer with this SO thread which recommends to use a service account. "After emailing Google support, I learned I could just use OAuth2 for the super user account that created the application on the developer's console." Hope this helps!
Upvotes: 0