SCRT-HQ / PSGSuite

Powershell module for Google / G Suite API calls wrapped in handy functions. Authentication is established using a service account via P12 key to negate the consent popup and allow for greater handsoff automation capabilities
https://psgsuite.io/
Apache License 2.0
235 stars 67 forks source link

Need Super Admin setup to prompt for OAuth. #324

Open jsavage95 opened 4 years ago

jsavage95 commented 4 years ago

The problem I am trying to setup my PSGsuite config however it isn't prompting me for OAuth.


Notes I am able to follow the normal setup for a Super Admin provided in https://psgsuite.io/Initial%20Setup/ however a security risk with this is that I can currently change the admin email to any one I want and it works fine without any prompt for a password.

With this I have the following in the config as per the instructions: -admin email -app email -client id -.p12 location -client secrets

Furthermore the free user setup works and prompts OATH which is what we want however we can't do anything with our regular email accounts (which we should normally be able to do).


What we are wanting here is the following:

FISHMANPET commented 2 years ago

ClientSecrets and p12 are for two separate authentication types - non-admin oauth vs super user p12, so you wouldn't want to have them both in the same config.

Also my understanding is that SuperAdmin allows you take actions on behalf of users, so it would be expected that you're able to change the admin email without having to authenticate - that's what SuperAdmin grants you.