SCRT-HQ / PSGSuite

Powershell module for Google / G Suite API calls wrapped in handy functions. Authentication is established using a service account via P12 key to negate the consent popup and allow for greater handsoff automation capabilities
https://psgsuite.io/
Apache License 2.0
234 stars 68 forks source link

Set group labels via CloudIdentity API #384

Open RA198DFE opened 9 months ago

RA198DFE commented 9 months ago

Feature: Add support for to set group labels via Cloud Identity API (groups.patch method) https://cloud.google.com/identity/docs/reference/rest/v1/groups/patch

Use case: Controlling access to sensitive data or Admin roles with security groups. To achieve this, the Google Workspace group must have the security label applied. Currently this isn't possible Admin SDK API and tools that use this API exclusively.

Security labelled groups can be applied to Admin Roles, which reduces management overheads of onboarding admin users, as use can simply be added to groups , as opposed to each admin role directly.

Detail: Setting Group labels is currently not possible with the Admin SDK API, as it lacks support for labels in the groups API.