Getting all groups an user is a member of through oauth (google)

oauth-2.0 google-apps google-groups
Henk-Jan picture Henk-Jan · Jul 23, 2012 · Viewed 7.2k times · Source

I'm building a web-application that lets users login with a google-apps account. I need some userinfo, nr of new e-mails, calendar access and all the groups (in my domain) the user is a member of. The trouble is that i can't find the right scope (and endpoint) to get the groups a user is member of. Does somebody knows if it is possible? And how it's done...

What I got so far: I've played with the Groups-provisioning scope (https://apps-apis.google.com/a/feeds/groups/) the problem is that you have to be an administrator to view the data.. And I want all users to see there memberships... The google oauth playground isn't getting me further (https://code.google.com/oauthplayground/)

Answer

jan pospisil picture jan pospisil · Jul 23, 2012

i had the same problem and figured it out.

  1. needed scope is "https://apps-apis.google.com/a/feeds/groups/"

  2. API request looks like this: "https://apps-apis.google.com/a/feeds/group/2.0/{domain}/{group name}/member" as a header of request use: 'Authorization': "OAuth " + {access_token}

  3. google application account holder must have roles by following manual(reading rule at least):

To enable the Provisioning API for a Next generation control panel:

  1. Log in to your admin account and select Domain settings.
  2. Select the User settings tab.
  3. Select the checkbox enabling the Provisioning API, and save your changes.

To enable the Provisioning API for a current control panel:

  1. Log in to your admin account and select the Users and groups tab.
  2. Select the the Settings subtab.
  3. Select the checkbox to enable the Provisioning API and save your changes.

Domain administrator only has possibility to change this settings.

Related questions

Read all mails using Gmail API with OAuth

Is there any method to read all mails (i.e. both read and unread) using Gmail API with OAuth. The following link returns only new mails: https://gmail.google.com/gmail/feed/atom So I want all Emails to be …

Read More
Use bash curl with oauth to return google apps user account data?

I am looking for a fairly simple method to use curl to return information about a batch of users accounts (like createddate or lastlogin) in google Apps. I am very inexperienced with curl and the Google Apps api's. Does anyone …

Read More
Google OAuth scope for sending mail

Using Google Oauth2, the following scope is used to get API-access to a users email: https://mail.google.com/ Testing the scope via OAuth 2.0 Playground confirms that the app wants to "View and manage your email": Is there a way …

Read More