Konrad
Reputation: 892
Google Cloud & APIs- Is it possible to have limited domain-wide delegation?
When using Google Calendar's API, we would like to move from Oauth2 at user level to limited domain-wide delegation. That is, we would like delegation to allow us access only to resources belonging to certain users or certain groups of users, not the whole domain. Is this possible?
Upvotes: 0
Views: 71
Answers (1)
John Hanley
Reputation: 81346
No, Domain Wide delegation is for the account and not for selected users.
I do not recommend your strategy of moving from OAuth user accounts to OAuth service accounts with domain-wide delegation. This type of access should be restricted to applications that interface with G Suite to provide added benefits and not as a method of accessing user data.
Upvotes: 2
Related Questions
- Domain wide delegation with default credentials in Cloud Run
- Google Workspace: manage domain-wide delegation programmatically
- Domain-wide delegation with impersonation
- Limit Google API access to single or group of users instead of domain-wide authority to your service account
- Google service account: Delegate Domain-Wide Delegation of Authority to impersonate only ONE user
- Google service account: Delegate Domain-Wide Delegation of Authority to impersonate only ONE user
- Gmail API domain-wide delegation
- Cross GSuite Organizations Domain-Wide Delegation
- How to perform G Suite domain-Wide delegation of authority without user intervention?
- Which Google APIs support OAuth2 Domain-Wide Delegation?