Link Menu Expand (external link) Document Search Copy Copied

List Privileges

Definition

The List Privileges action retrieves a comprehensive list of all privileges associated with a specific customer in Google Directory. This action allows administrators to view the permissions assigned to various roles, helping manage access control and ensure proper user authorization.

Key capabilities include:

  • Fetching service-specific privileges.
  • Simplifying the process of auditing permissions.
  • Updating permissions across the organization.

Example Use Cases

  1. Access Control Review Retrieve all privileges assigned to a customer to audit user access levels and ensure security policies are enforced.

  2. Role Management Identify service-specific privileges to create or update custom admin roles with tailored permissions.

  3. Compliance Reporting Generate reports of assigned privileges to support regulatory compliance and internal security audits.

  4. Troubleshooting Access Issues Investigate user access issues by verifying the necessary privileges for key services in Google Workspace.

  5. Onboarding and Offboarding Processes Ensure proper role assignment when onboarding new admins or revoking permissions during offboarding.

Inputs

1. Connection

This field connects your Google Directory account to the action, enabling secure access to retrieve privileges.

  • Note: Ensure you have the proper permissions to access the customer’s privilege data.

2. Customer Id

The unique identifier for your Google Workspace customer account.

  • Why It’s Important: This ID is necessary to fetch all privileges associated with the customer account. Without it, the system cannot retrieve privilege data.
  • Alternate Option: You can use the alias my_customer to represent your account’s Customer ID. This is especially useful when managing your own organization without needing to look up the ID repeatedly.

How to Find your Customer ID:

  1. Sign in to your Google Admin console using an administrator account.
  2. From the Admin console Home page, go to Account settings.
  3. Under Account settings, click on Profile to locate your Customer ID.

Outputs

Field Description
Privileges A list of all privileges associated with the specified customer. Each item in this list contains the details below.
Service ID The unique, obfuscated ID of the Google service that the privilege belongs to.
Helps identify which Google service the privilege is linked with (e.g., Gmail, Drive, Admin Console).
Privilege Name The name of the privilege assigned to the customer for the corresponding service.
Examples: USER_MANAGEMENT, GROUP_SETTINGS, or DOMAIN_SETTINGS.
Useful for understanding what actions users with certain roles can perform in the Google Admin Console.