Question

i would need to get detailed admin privileges from google apps user. From Provisioning API the maximum I can know if the user is superadmin. But I want to know if the user can modify user accounts, to add users, edit users, etc. When i have a user_feed i can find in user_feed.login.admin whether admin is true or false. Is there any possibility to find this out?

Something I have seen in Audit API, but this is not for me.

Thank you for your help.

Was it helpful?

Solution

There is no way to determine if a user is a delegated admin and has rights to create / update / read / delete users short of trying these operations. Obviously if user_feed.login.admin is true then the user is a super admin and has all of these rights.

I'd suggest you simply design your application to catch errors that occur when non-privileged users attempt these operations and display an error explaining what rights need to be granted to the user to proceed.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top