[xtd3] Setup Partner Access to Client Domain

[Dominik Kugelmann]

Hi Ross,

I am currently setting up access for our consultants on a client's domain using our logins and our project. 

In the .gam folder I've created the appropriate directory and added the information to the gam.cfg for the client called client.com. I've also added the client ID and the scopes to the client's admin console. 

What additional information would I need to put into the folder or gam.cfg file to make this possible? 

Best,

Dominik

[Ross Scroggs]

Dominik,

What did you put in the client subdirectory? If you're using the your project you would copy client_secrets.json and oauth2service.json.

You would make a new oauth2.txt.

See: https://github.com/taers232c/GAMADV-XTD3/wiki/gam.cfg#multiple-customers-and-domains

Ross

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/e6dad03f-ad82-4e9f-b4ca-9bba035b8724%40googlegroups.com.

--

Ross Scroggs

ross.s...@gmail.com

[Jay Lee]

Just to add, reseller accounts with rights to manage their resold accounts should be able to authorize once (oauth2.txt) and then perform Admin SDK Directory API calls against each of their customers. To do that you need to set the GAM domain or customer ID config option (not sure which option this is in Ross' build).

Jay

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAJkvRS-DhHj0_j8Fw9GMybD1935gA9BcD-%2BsNBR2h81CFktXoQ%40mail.gmail.com.

[Steve - DynTech]

Jay - that is very insightful. I need to test this out. 

I presume you referring to the user that would have access to the Reseller console (https://admin.google.com/partner/console/)? So for instance my domain to manage customers might be @reseller.domain.com (different to my @domain.com for day to day) and that user would then be the account I'd use for actions on other customers.

On Friday, 16 August 2019 10:16:10 UTC-5, Jay Lee wrote:

Just to add, reseller accounts with rights to manage their resold accounts should be able to authorize once (oauth2.txt) and then perform Admin SDK Directory API calls against each of their customers. To do that you need to set the GAM domain or customer ID config option (not sure which option this is in Ross' build).

Jay

[Dominik Kugelmann]

Jay, Ross.

after adding the customer ID to the gam.cfg I can run commands as usual.