2

please, anyone could tell me which permissions I should grant a user or service account to be able to access "Admin SDK Directory API" and use users.list method? Thanks in advance. Stefano

Stefano
  • 23
  • 3
  • If [this](https://stackoverflow.com/a/74099446/17926478) answered your question, please click the accept button on the left (check icon). By doing so, other people in the community, who may have the same concern as you, will know that theirs can be resolved. If the accept button is unavailable to you, feel free to tell me. [How to accept answer](https://stackoverflow.com/help/accepted-answer) – Lorena Gomez Oct 19 '22 at 18:43

1 Answers1

0

Depending on what you need, you can assign a Super Admin role and it will have access to all features in the Admin console and Admin SDK or in this case if you only want the user to be able to use the method users.list then you can create a custom role and grant the privileges you need. For example you can assign the Users > Read privilege and the user should be able to use this method.

References:

Directory API: Prerequisites

Lorena Gomez
  • 1,946
  • 2
  • 4
  • 11
  • Hi Lorena, I have asked to my admin to grant permission to the service account, but it doesn't work. I have read in some docs that It can take up to 24 hours for new roles to take effect, but the 24 hourse already passed... – Stefano Oct 28 '22 at 08:14
  • @Stefano what exactly are you trying to do with the service account? Do you get any errors? Please share more details so I can help in a better way. – Lorena Gomez Oct 28 '22 at 13:43
  • Hi Lorena, it works now! Really, the cloud took days (so more than 24 hours) before the new authorization was acquired by the service account – Stefano Nov 02 '22 at 15:54