This topic was automatically generated from Slack. You can find the original thread here.
Hi
Is there a way to get super admin access in g suite nodes ?
Essentially if a workspace admin allows, can we get calendar access of all members ?
Something like what CRMs do ?
To answer your questions step-by-step: ### 1. Is there a way to get super admin access in G Suite (Google Workspace) nodes? No, you cannot programmatically “get” super admin access to a Google Workspace (formerly G Suite) domain unless you are granted that access by an existing super admin. Super admin privileges are controlled by Google Workspace’s admin console, and only existing super admins can assign this role to other users. There is no API or workflow (including Pipedream or any other automation tool) that can escalate privileges to super admin without explicit action by an existing super admin. ### 2. If a workspace admin allows, can we get calendar access of all members? (Like CRMs do) Yes, but with limitations and proper configuration: - Domain-wide delegation: Google Workspace super admins can set up domain-wide delegation of authority for a service account. This allows an app (like a CRM or a custom integration) to impersonate users and access their data (e.g., Google Calendar) on their behalf. - How it works: 1. A super admin creates a service account in Google Cloud. 2. The super admin grants domain-wide delegation to that service account for specific scopes (e.g., calendar access). 3. Your app authenticates as the service account and can impersonate any user in the domain for the allowed scopes. 4. You can then access calendars for all users, similar to how CRMs do it. - Security: This is a powerful capability and should be used carefully. Only super admins can grant this, and it should be limited to trusted apps. - Pipedream: If you want to use Pipedream to access all users’ calendars, you would need to set up domain-wide delegation as above, then use the service account credentials in your workflow. Pipedream does not provide a way to “become” a super admin or bypass Google Workspace security. ### Summary - Super admin access can only be granted by another super admin. - Accessing all users’ calendars is possible if a super admin sets up domain-wide delegation for a service account with the right scopes. - This is how CRMs and other enterprise apps access user data at scale in Google Workspace. If you need help setting up domain-wide delegation or integrating this with Pipedream, let me know!