On Mon, Oct 6, 2014 at 12:55 PM, <[email protected]> wrote:
> I'd like to grant Domain Level access for the Admin SDK (specifically the > User API) to my Google App Engine Application. > I should be able to grant the access > However, no matter what I put in for the "Client Name", I can't get it to > work. > I assume that I could set up a Service Account, but it seems to me that I > should be able to grant access directly to the application. > > Can anyone help? > It doesn't work that way. You need to connect the domain level access and service account with an application that implements OAuth/OpenID Connect or Google+ sign in. The App Engine Users API allows clients to uniquely identify using their Google accounts, but it doesn't tie into other Google APIs, authorization, or services. In short, the Users API doesn't grant you access to act as that user when speaking to other services. You'll need to modify your application to implement OpenID Connect <https://developers.google.com/accounts/docs/OAuth2Login>or Google+ Sign In (preferred option) <https://developers.google.com/+/>. From there, you can create a service account from an API project, then authorize that service account to have domain-wide authority by declaring it via the Google Apps admin console. See here for an example: https://developers.google.com/+/domains/authentication/delegation ----------------- -Vinny P Technology & Media Consultant Chicago, IL App Engine Code Samples: http://www.learntogoogleit.com -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/google-appengine. For more options, visit https://groups.google.com/d/optout.
