blocks|key|176204|text|可以让代码使用来自GSuite的目录API检查Google管理SDK组成员资格。你可能会对以下其中之一感兴趣：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|176205|检索成员的所有组|unordered-list-item|176206|检索组的成员+(如果只检查一个或几个组)。|176207|你需要|176208|在G套件管理控制台中启用API访问|176209|G套件管理员可以访问应用程序编程接口(API)的管理SDK-a集合。使用这些API，您可以为G+Suite产品构建定制的管理工具。在使用Admin之前，需要在Google控制台中启用API访问。
必须将您注册为此任务的超级管理员。启用API访问
要验证是否启用了API访问，请执行以下操作：|blockquote|176210|登录到您的谷歌管理控制台。
使用管理员帐户登录，而不是使用经常帐户some_user@gmail.com。|ordered-list-item|176211|从管理控制台仪表板，转到Security+>+API引用。
要查看仪表板上的安全性，您可能必须单击底部的More+controls。|style|BOLD|176212|确保选中了启用API访问框。|176213|在底部，单击Save。|176214|为您的GAE应用程序的Admin+SDK页面启用来自Google+Apps+APIs组的Google+Apps+APIs+API|CODE|176215|安装Google客户端库在您的GAE应用程序(如果还没有完成)|176216|地址认证，肯定使用您的GAE应用程序的服务帐户。请参阅Google客户端库认证概述。也可能与应用程序引擎OAuth2.0授权的cron作业分析谷歌表格有关。|176217|(如果希望)仅限制应用程序访问GSuite域，请参见限制应用程序引擎访问自定义域上的G+Suite帐户|176218|使用目录api编码访问控制逻辑，以获取组成员信息。|176219|entityMap|0|LINK|mutability|MUTABLE|url|https://developers.google.com/admin-sdk/directory/|1|https://developers.google.com/admin-sdk/|2|https://developers.google.com/admin-sdk/directory/v1/guides/manage-groups#get_all_member_groups|3|https://developers.google.com/admin-sdk/directory/v1/guides/manage-group-members#get_member|4|https://support.google.com/a/answer/60757?hl=en|5|6|https://support.google.com/a/answer/2405986#super_admin|7|https://support.google.com/a/answer/182076|8|9|https://developers.google.com/api-client-library/python/start/installation#appengine|10|https://developers.google.com/api-client-library/python/auth/service-accounts|11|https://developers.google.com/api-client-library/python/guide/aaa_overview|12|https://stackoverflow.com/questions/42182137/app-engine-oauth2-0-authorized-cron-job-to-analyze-google-sheet|13|https://stackoverflow.com/questions/41943712/restrict-app-engine-access-to-g-suite-accounts-on-custom-domain^0|G|5|0|N|B|1|0|0|8|2|0|0|6|3|0|0|0|H|4|0|O|5|5|31|5|6|0|0|2|7|5|7|8|0|C|8|N|5|1G|D|0|5|7|0|6|4|0|B|9|Q|G|18|G|0|0|C|9|0|J|4|A|11|4|B|1A|T|C|0|Q|P|D|0|0^^$0|@$1|2|3|4|5|6|7|27|8|@]|9|@$A|28|B|29|1|2A]|$A|2B|B|2C|1|2D]]|C|$]]|$1|D|3|E|5|F|7|2E|8|@]|9|@$A|2F|B|2G|1|2H]]|C|$]]|$1|G|3|H|5|F|7|2I|8|@]|9|@$A|2J|B|2K|1|2L]]|C|$]]|$1|I|3|J|5|6|7|2M|8|@]|9|@]|C|$]]|$1|K|3|L|5|F|7|2N|8|@]|9|@$A|2O|B|2P|1|2Q]]|C|$]]|$1|M|3|N|5|O|7|2R|8|@]|9|@$A|2S|B|2T|1|2U]|$A|2V|B|2W|1|2X]]|C|$]]|$1|P|3|Q|5|R|7|2Y|8|@]|9|@$A|2Z|B|30|1|31]|$A|32|B|33|1|34]]|C|$]]|$1|S|3|T|5|R|7|35|8|@$A|36|B|37|U|V]|$A|38|B|39|U|V]|$A|3A|B|3B|U|V]]|9|@]|C|$]]|$1|W|3|X|5|R|7|3C|8|@$A|3D|B|3E|U|V]]|9|@]|C|$]]|$1|Y|3|Z|5|R|7|3F|8|@$A|3G|B|3H|U|V]]|9|@]|C|$]]|$1|10|3|11|5|F|7|3I|8|@$A|3J|B|3K|U|12]|$A|3L|B|3M|U|12]|$A|3N|B|3O|U|12]]|9|@]|C|$]]|$1|13|3|14|5|F|7|3P|8|@]|9|@$A|3Q|B|3R|1|3S]]|C|$]]|$1|15|3|16|5|F|7|3T|8|@]|9|@$A|3U|B|3V|1|3W]|$A|3X|B|3Y|1|3Z]|$A|40|B|41|1|42]]|C|$]]|$1|17|3|18|5|F|7|43|8|@]|9|@$A|44|B|45|1|46]]|C|$]]|$1|19|3|1A|5|F|7|47|8|@]|9|@]|C|$]]|$1|1B|3|-4|5|6|7|48|8|@]|9|@]|C|$]]]|1C|$1D|$5|1E|1F|1G|C|$1H|1I]]|1J|$5|1E|1F|1G|C|$1H|1K]]|1L|$5|1E|1F|1G|C|$1H|1M]]|1N|$5|1E|1F|1G|C|$1H|1O]]|1P|$5|1E|1F|1G|C|$1H|1Q]]|1R|$5|1E|1F|1G|C|$1H|1K]]|1S|$5|1E|1F|1G|C|$1H|1T]]|1U|$5|1E|1F|1G|C|$1H|1V]]|1W|$5|1E|1F|1G|C|$1H|1V]]|1X|$5|1E|1F|1G|C|$1H|1Y]]|1Z|$5|1E|1F|1G|C|$1H|20]]|21|$5|1E|1F|1G|C|$1H|22]]|23|$5|1E|1F|1G|C|$1H|24]]|25|$5|1E|1F|1G|C|$1H|26]]]]

It is possible to have code check the GSuite group membership using the <a href="https://developers.google.com/admin-sdk/directory/" rel="nofollow noreferrer">Directory API</a> from the <a href="https://developers.google.com/admin-sdk/" rel="nofollow noreferrer">Google Apps Admin SDK</a>. You'd probably be interested in one of:

<ul>
<li><a href="https://developers.google.com/admin-sdk/directory/v1/guides/manage-groups#get_all_member_groups" rel="nofollow noreferrer">retrieve all groups for a member</a></li>
<li><a href="https://developers.google.com/admin-sdk/directory/v1/guides/manage-group-members#get_member" rel="nofollow noreferrer">retrieve a group's member</a> (if just one or a few groups are to be checked).</li>
</ul>

You'll need to

<ul>
<li><a href="https://support.google.com/a/answer/60757?hl=en" rel="nofollow noreferrer">Enable the API access in the G Suite Admin console</a>:</li>
</ul>

<blockquote>
 G Suite administrators have access to the <a href="https://developers.google.com/admin-sdk/" rel="nofollow noreferrer">Admin SDK</a>–a collection
 of Application Programming Interfaces (APIs). With these APIs, you can
 build customized administrative tools for your G Suite products.
 Before you can use the Admin SDK, you need to enable API access in the
 Google Admin console. 
 
 You must be signed in as a <a href="https://support.google.com/a/answer/2405986#super_admin" rel="nofollow noreferrer">super administrator</a> for this task.
 Enable API access
 
 To verify that API access is enabled:
 
 <ol>
 <li><a href="https://support.google.com/a/answer/182076" rel="nofollow noreferrer">Sign in</a> to your <a href="https://support.google.com/a/answer/182076" rel="nofollow noreferrer">Google Admin console</a>.
 
 Sign in using an administrator account, not your current account some_user@gmail.com.</li>
 <li>From the Admin console dashboard, go to Security > API reference.
 
 To see Security on the dashboard, you might have to click More controls at the bottom.</li>
 <li>Make sure the Enable API access box is checked.</li>
 <li>At the bottom, click Save.</li>
 </ol>
</blockquote>

<ul>
<li>enable the <code>Admin SDK</code> API from the <code>Google Apps APIs</code> group in for your GAE app's <a href="https://console.cloud.google.com/apis/library" rel="nofollow noreferrer">API Manager</a> page</li>
<li><a href="https://developers.google.com/api-client-library/python/start/installation#appengine" rel="nofollow noreferrer">install the Google API Client Library</a> in your GAE app (if not already done)</li>
<li>address authentication, posibly using your GAE app's <a href="https://developers.google.com/api-client-library/python/auth/service-accounts" rel="nofollow noreferrer">service account</a>. See Google API Client Libraries <a href="https://developers.google.com/api-client-library/python/guide/aaa_overview" rel="nofollow noreferrer">Authentication Overview</a>. And maybe related <a href="https://stackoverflow.com/questions/42182137/app-engine-oauth2-0-authorized-cron-job-to-analyze-google-sheet">App Engine OAuth2.0 authorized cron job to analyze Google Sheet</a>.</li>
<li>(if you want to) restrict app access to only your GSuite domain, see <a href="https://stackoverflow.com/questions/41943712/restrict-app-engine-access-to-g-suite-accounts-on-custom-domain">Restrict App Engine access to G Suite accounts on custom domain</a></li>
<li>code your access control logic using the directory api to obtain group membership info</li>
</ul>

Is it possible to control access to a request handler entirely or some parts therein based on what GSuite for Education/Business group a user belongs to?

GAE Python: Control access based on GSuite group

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋 

腾讯云AI代码助手

CODING DevOps

Cloud Studio

SDK中心

API中心

命令行工具

文章&问答评论现已支持表情

全新交互，全新视觉，新增快捷键、悬浮工具栏、高亮块等功能并同时优化现有功能，全面提升创作效率和体验

社区富文本编辑器全新改版！诚邀体验～ 

是否可以根据用户所属的教育/业务组( GSuite for Education/Business group )完全控制对请求处理程序或其中某些部分的访问？

问GAE Python:基于GSuite组的控制访问
EN

回答 1

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问GAE Python:基于GSuite组的控制访问EN