The customerId is identical for all users in the Google Apps instance (including users in other secondary domains).
If you're working with a single Google Apps instance, the customerId is static and thus once discovering it from an admin account, you can hard code it.
In order to retrieve the customerId via the users.get() API call, the authenticated user needs to at the very least be a delegated admin with read-only access to users via the API privileges.