Narrow Domain-Wide Delegation to specific group/user

[JonathanBern]

Hello, I'm creating an application that retrieves the ongoing event out of the calendar in an gmail account. Since this application will be running in Google Cloud Functions, OAuth2.0 application is no option and I'm relying on a service account.

The service account needs permission to scopes in domain-wide delegation. Since The service account only need read only access to only one calendar and contacts (of a gmail acc) we want to narrow the scope to this account. We cannot give the service account domain-wide delegation since the tenant has over thousand users we don't want the service account access over the other accounts.

Is there any solution to narrow the scope you give at domain-wide delegations?

[CronosBelgium]

This would really help us as well.

Multiple companies together under 1 google tenant make it impossible to just assign domain wide read-only (or even worse, write) rights for a service account. It needs to be scoped so it can be narrowed to just a user, few users or groups.

[Aryan1]

its just impossible to do that

[JonathanBern]

@Aryan1 You have any suggestions as a work-a-round? 

[Aryan1]

Sorry to say but i don't think any other option to do that thing