3

Is there an Google Admin API to create a new service account using the credentials of another service account?

I'm creating a SAAS solution where I'm providing certain services to end users from different domains. Google recommends (not restricts) to use different service account (ESA) for each domain so that their data is entirely segregated.

To achieve this, I need to create a new ESA programmatically whenever a new customer signsup.

I'm able to provide the services to all users (from different domains) using single ESA, but I was not able to find any API that allows me to create a new ESA programmatically. Is it possible?

Jay Lee
  • 13,415
  • 3
  • 28
  • 59
PC.
  • 6,870
  • 5
  • 36
  • 71
  • If you're not sharing the service account credentials with end users, there should be no security risk in using a single service account for many domains. – Jay Lee May 09 '16 at 11:59
  • Android suggests the use of multiple ESA not because the keys can be compromised, but to keep each customer's data segregated. – PC. May 10 '16 at 04:55
  • Please update your question with details about the app and platform you are trying to use and links to the docs you are referring to. – Jay Lee May 10 '16 at 09:12
  • I'm creating an EMM solution using Google play API and [this](https://developers.google.com/android/work/overview#service_accounts) document says _we recommend that you use any given ESA for only one customer, which ensures data separation among your customers_ – PC. May 10 '16 at 12:21

0 Answers0