Limited Privileges in Provisioning Script

[Mally Mclane]

Hello,

(Apologies if this is answered already, finding the right search terms
to hit the archive proved difficult!)

We have our scripts ready and able to provision our Google Apps
account - but the only way we can find to authenticate is to embed a
superadmin user/pass in the script - not desirable. We tried creating
a user with limited admin access, but it seems the provisioning api
does not support this.

How else do people manage access for the provisioning scripts they
run?


Best


Mally

[Michael Manoochehri]

Hi Mally:

The recommended way to access the Google Apps Provisioning API is to use 3 legged OAuth. This auth method solves the problem of having to share or store valuable administrator passwords. The API currently supports the OAuth 1.0 protocol.

OAuth 1.0 access tokens are long lived, meaning that once you have acquired an access token, you can store it for reuse later in your script.

For more information, check out some of our OAuth related code samples here:

http://www.google.com/codesearch#Y_gnTlD6ECg/trunk/samples/oauth/oauth_example.py

- Michael

[Mally Mclane]

Michael,

Thankyou - will look into it.

Mally

> --
> You received this message because you are subscribed to the Google Groups "Google Apps Domain Information and Management APIs" group.
> To view this discussion on the web visit https://groups.google.com/d/msg/google-apps-mgmt-apis/-/Xe5B3oUmKCYJ.
> To post to this group, send email to google-app...@googlegroups.com.
> To unsubscribe from this group, send email to google-apps-mgmt...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/google-apps-mgmt-apis?hl=en.
>