Starting on September 26th, 2016, we will add two additional APIs to the recently
launched External Directory Sharing Admin console setting. The setting is
already enforced in the
Google
People API, and we will now also enforce it in
Google CardDAV API
and
Google
Contacts API v3.
The setting gives Google Apps admins more control over their domain directory
data, allowing them to determine what directory information external apps and
APIs can access.
Admins can manage the setting from
Apps
> Google Apps > Settings for Contacts > Advanced Settings in the Admin
console.
By default, the external directory sharing setting is set to “Domain and public
data.” When the external directory sharing setting is set to “Only public data,”
the
Google CardDAV
API,
Google
Contacts API v3, and
Google
People API will no longer return domain data in their
responses or will return forbidden 403 errors where appropriate. Any clients that
use these APIs for domain data, including mobile apps, marketplace apps, and scripts, may no longer work as expected.
If admins have chosen to share “Only public data” from the Admin console, here
are some common use cases that may become restricted by these new sharing
controls:
- People who use the Mail and Contacts applications on iOS will no longer be able to access directory information using the Global Address List feature if the Google Apps account was added onto the iOS device using the “Add Google Account” option.
- Apps Scripts that utilize the Contacts API v3 or CardDAV API to access directory information. For example, an Apps Script that fetches birthdays of all users within the domain using the Contacts API v3 to send party reminder emails.
- Third-party Marketplace apps that utilize the Contacts API v3 or CardDAV API to access directory information.
Google Apps products that use the domain directory data for contacts, such as
the Gmail, Drive, and Calendar apps on iOS, will
not be affected
by this change. Also not impacted by this change are the
Google Apps Sync for
Microsoft Outlook® sync plug-in and any device that syncs using
Google Sync, both of
which will continue to be able to access directory information even if the
External Directory Sharing setting is set to “Only public data.” The
Google Apps Admin SDK, used
by admins to manage users and domain shared contacts, is also unaffected by the
External Directory Sharing setting.
Launch Details
Release track:
Launching to both Rapid release and Scheduled release on September 26th, 2016
Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)
Impact:
Admins and developers using
Google CardDAV
API,
Google
Contacts API v3, and
Google
People API
Action:
Admin action suggested/FYI
Note: all launches are applicable to all Google Apps editions unless otherwise noted
Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates