User permissions
Given that you likely don't want many super-admin accounts out there in the wild, we recommend creating an admin role for users of Gopher for Groups. The permissions needed are:
- Groups (service permission)
- Groups (API privilege)
- Domain Management (API privilege)
The last permission is broader than we would prefer, but unfortunately necessary because the analysis of external group membership requires Gopher for Groups to access the list of domains associated with your school's Google Workspace account. This is due to a current limitation in the Groups API wherein the EXTERNAL flag for group members is not currently used. We're hoping Google will eventually resolve this but have no timeline or expectation for it.
 |
 |