Admin Roles Question re: Org scopes

[David Aulick]

Hello,

If we create the Org units manually and have no need for the devices to move between orgs (e.g. Unenroll OU setting), will the app still work without the https://www.googleapis.com/auth/admin.directory.orgunit scope?  Or at the minimum can we just have the readonly version?  (https://www.googleapis.com/auth/admin.directory.orgunit.readonly)

Customer's security team is worried about that scope and wondering if it can be downgraded or removed.

[Joe Parente]

You still need it to enable/disable guest mode for the devices. You can disable that functionality but it will somewhat degrade the experience.

--
You received this message because you are subscribed to the Google Groups "Grab n Go Loaners" group.
To unsubscribe from this group and stop receiving emails from it, send an email to loaner+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/loaner/CAEewX_ofyG8UfOKC-rNP1oUvtLsquUbOouvU5NidFaRRNub21w%40mail.gmail.com.