launched External Directory Sharing Admin console setting. The setting is
already enforced in the Google
People API, and we will now also enforce it in Google CardDAV API
and Google
Contacts API v3.
The setting gives Google Apps admins more control over their domain directory
data, allowing them to determine what directory information external apps and
APIs can access.
Admins can manage the setting from Apps
> Google Apps > Settings for Contacts > Advanced Settings in the Admin
console.
By default, the external directory sharing setting is set to “Domain and public
data.” When the external directory sharing setting is set to “Only public data,”
the Google CardDAV
API, Google
Contacts API v3, and Google
People API will no longer return domain data in their
responses or will return forbidden 403 errors where appropriate. Any clients that
use these APIs for domain data, including mobile apps, marketplace apps, and scripts, may no longer work as expected.
If admins have chosen to share “Only public data” from the Admin console, –
are some common use cases that may become restricted by these new sharing
controls:
- People who use the Mail and Contacts applications on iOS will no longer be able to access directory information using the Global Address List feature if the Google Apps account was added onto the iOS device using the “Add Google Account” option.
- Apps Scripts that utilize the Contacts API v3 or CardDAV API to access directory information. For example, an Apps Script that fetches birthdays of all users within the domain using the Contacts API v3 to send party reminder emails.
- Third-party Marketplace apps that utilize the Contacts API v3 or CardDAV API to access directory information.
Google Apps products that use the domain directory data for contacts, such as
the Gmail, Drive, and Calendar apps on iOS, will not be affected
by this change. Also not impacted by this change are the Google Apps Sync for
Microsoft Outlook® sync plug-in and any device that syncs using Google Sync, both of
which will continue to be able to access directory information even if the
External Directory Sharing setting is set to “Only public data.” The Google Apps Admin SDK, used
by admins to manage users and domain shared contacts, is also unaffected by the
External Directory Sharing setting.
Launch Details
Release track:
Launching to both Rapid release and Scheduled release on September 26th, 2016
Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)
Impact:
Admins and developers using Google CardDAV
API, Google
Contacts API v3, and Google
People API
Action:
Admin action suggested/FYI
–
.
.
.
.
