How to give an App Engine app access to the calendars of all Workspace Users?

[Human42]

I have an app that I am deploying in App Engine. It is contained inside of a Google Cloud Project under the client's Organization. The Organization also has a Google Workspace. I want to give the app access to the calendars of all the Workspace users. How do I do this?

• Do we need to enable domain-wide delegation for the service account of the app?
• I looked at the pre-built Workspace Roles. Can the service account of the App Engine app be delegated as a Workspace Services Admin?
• Do we need to do only one of the above or both of the above?

[Stephane_fr]

Hi

You need to use a Service Account with wide domain delegation.

You can check this example on admin sdk directory api but philosophy is the same for your case : https://developers.google.com/admin-sdk/directory/v1/guides/delegation

Stéphane