Skip to main content

Managing Google APIs Console Teams with Groups (including Apps for Business!)

As a Developer Advocate @ Google, I've worked with tons of individuals & companies who have multiple projects with Google. A key piece to all of their integrations is our Google APIs Console (and soon to be the Cloud Console) - the one-stop shop to create and manage Google API projects. One question that comes up often is, "how do we manage team access?" This is especially important for companies where employees come and go over time, possibly taking the keys to their projects with them.

The tl;dr is use Google Groups to manage Team members.

The console has a built-in system to manage project members via email addresses. It can be found under Team:


As you can see, you can add multiple emails to this list. A common practice among companies is to create a shared `mycompany-google-api@gmail.com` address and pass around that email password. WAT?!? DON'T DO THIS. Sharing passwords is insecure and generally bad for the universe.

Everyone working on your Google projects should have their own account. Instead of adding each user to the team, add them to a Google Group. Then add that group as a member (probably owner) of the project and manage ownership through the built-in management controls of Groups.

Protip: Did you know that anyone can create a Google account, even with a non-Gmail or Google Apps email? A smart move would be to have your developers create a new Google Account with your company email and not use their personal Google accounts for work-related development.

If you're looking at Google Groups, I would recommend naming your group as `company-google-api-owners@googlegroups.com` and setting the group as invite-only.

Note for Google Apps for Business: Your domain won't let you add members to a project that isn't in your domain, so a standard Google Group won't work (see how it is @googlegroups.com above?) Fortunately, we have a solution! Google Groups for Business works in the same way as a standard group but is created by admins and ends with `@company-domain.com.`

Note for Cloud Console: Projects created through the Cloud Console require at least one real user owner, so you can't try and delete yourself as the owner of the project if you've added a Group. You can have a sole Group owner if the project was created in the Google APIs Console.

Hope this tip helps you and your teams prevent future headaches!

P.S. if your company manages a Google+ Page and/or YouTube page, check out my post on how to manage your accounts.

Popular posts from this blog

My weekend project: an Arduino, Raspberry Pi & Node.js robot

Yes I know, I'll get more buzzwords when I my JavaScript creates Cloud Synergy - but after I Pivot. I've been spending my wee few hours a week designing, tinkering and finally building my little robotics platform. I've had ideas brewing for a while but haven't had enough time outside of work to start hacking. It all started when I first saw Rick Waldron's Johnny Five framework  for Node.js. Sensors are asynchronous, so, ya, a node.js robot framework makes sense. A few months later I started sketching designs, reading up on firmata  and buying my arduino & Pi. Before the what & why, here's the basic BOM: 1 Arduino Uno R3 running firmata 1 original Raspberry Pi with Raspbian, Node.js & 4gb of storage 1 Magicians chassis 1 SN754410NE Quad Half H-Bridge to drive the motors 1 dual-output mobile battery back A custom mount for the Pi & some custom USB cabling for power Why Raspberry Pi The main controller is a Rpi. It tur

A Maker's Equipment List

I've been building up a nice supply of tools and components so I decided it is high-time to build a small workspace in my tiny SF apartment. There were things I knew I still needed but wrestled with some tough choices (like which Oscilloscope to buy.) I wanted either a nice Wishlist on Amazon or at least a great list to start my journey. I found a few decent starting points in the form of video & blogs: How to set up an electronics lab/workshop at home So You Want to Build Electronics How to equip your EE lab The first link is actually a transcription from +EEVblog /by +Dave Jones ( EEVblog is an awesome blog and YouTube channel, you should subscribe .) The second blog /by  +Kenneth Finnegan  covers more of the components side. What I couldn't find is a complete compiled list with links to purchase. So I made one! I put together a simple Amazon Affiliate store called Maker Workbench Equipment List . I merged what I thought made sense and added a bunch of items

Google+ Pages, Events and Hangouts On Air for organizers (part 1)

If you run a conference, meetup or event, you're probably thinking about increasing your presence on Google+. I've recently helped a few folks set up their Google+ presence in haste so I thought it would be worth typing notes on what you need to know. I've observed 3 types of events being organized on Google+: A yearly conference or unconf that it is a stand-alone brand, such as CES . An umbrella conference with several related or affiliated events, like JSConf . A broad collection of many local communities, such as the Google Developer Groups . In this multipart series, I'll dive into each main part:   Google+ Pages ,  Events  &  Hangouts On Air , starting with Google+ Pages. I'll also touch on YouTube channels. Google+ Pages In the past, organizers would create a brand new email for their event, like myconf-needs-a-gmail@gmail.com. You don't need to do that anymore. Actually, DON'T CREATE ONE OFF GMAILS ANYMORE!  Using you're existing