advice for google external system security when not managing users

Marwan Shaher
3 days ago
In our setup, Grouper doesn’t create the entities/users in Google. That is handled by another system. Grouper will just manage groups and memberships . Assigning the following scopes to the service account worked for our purposes:
https://www.googleapis.com/auth/admin.directory.group
https://www.googleapis.com/auth/admin.directory.group.member
https://www.googleapis.com/auth/admin.directory.user.readonly