0

i would need to get detailed admin privileges from google apps user. From Provisioning API the maximum I can know if the user is superadmin. But I want to know if the user can modify user accounts, to add users, edit users, etc. When i have a user_feed i can find in user_feed.login.admin whether admin is true or false. Is there any possibility to find this out?

Something I have seen in Audit API, but this is not for me.

Thank you for your help.

Shay Erlichmen
  • 31,691
  • 7
  • 68
  • 87
nori.cz
  • 3
  • 2

1 Answers1

1

There is no way to determine if a user is a delegated admin and has rights to create / update / read / delete users short of trying these operations. Obviously if user_feed.login.admin is true then the user is a super admin and has all of these rights.

I'd suggest you simply design your application to catch errors that occur when non-privileged users attempt these operations and display an error explaining what rights need to be granted to the user to proceed.

Jay Lee
  • 13,415
  • 3
  • 28
  • 59
  • Hi, thank you for your answer. It's a shame that it does not work that way. Programmatically modify user permissions would be great. – nori.cz Jan 01 '13 at 11:31