2

Assuming a Google Apps Script has been granted authorisation by the superadmin account to manage Drive files & folders, can this script perform operations on other-users Drive folders & files, or the authorisation is limited to superadmin-specific files & folders?

1 Answer 1

2

Yes it can. From https://developers.google.com/admin-sdk/directory/v1/guides/delegation

In enterprise applications you may want to programmatically access a user's data without any manual authorization on their part. In G Suite domains, the domain administrator can grant third-party applications with domain-wide access to its users' data — this is referred as domain-wide delegation of authority. To delegate authority this way, domain administrators can use service accounts with OAuth 2.0.

While the above quote says "third-party applications" it also includes in-house applications.

2
  • Thanks Ruben, will this apply also to Google Apps Scripts attached to a form?
    – Riccardo
    Commented Feb 28, 2019 at 17:03
  • @Riccardo applies to any script. Commented Feb 28, 2019 at 17:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.