google-cloud-platformgoogle-apigoogle-people-api

Obtain other Google Workspace accounts' Google Contacts using API


I am superadmin of a Google Workspace. I would like to obtain Google Contacts of several accounts of interest. For example, press@....org and donate@....org accounts of my workspace (for anaylytics / backup / mailing list compilation).

What are the ways I can achieve this, regarding authorization? As a superadmin, can I impersonate other users and access their Google Contacts via an API? Can service accounts be used for this?

If anyone has an example or some advice on achieving this, it would be great :)

Thank you!


Solution

  • Google Workspace supports Domain Wide Delegation of Authority which allows you to impersonate Workspace users via service accounts.

    Domain-wide delegation of authority grants third-party and internal applications access to your users' data.

    This requires setup at Workspace and Cloud IAM for the service account.

    Perform Google Workspace domain-wide delegation of authority