View Source

Go to, https://admin.google.com > Admin Roles

ILA eSolution > Google Role Creation with Read Only Scopes > Screenshot 2020-05-24 at 11.33.39 PM.png

Click Create new Role.

ILA eSolution > Google Role Creation with Read Only Scopes > Screenshot 2020-05-23 at 11.41.00 AM.png

Define Role name and description.

ILA eSolution > Google Role Creation with Read Only Scopes > Screenshot 2020-05-23 at 11.37.44 AM.png

Choose API permission scopes,

Groups > Read
Users > Read

ILA eSolution > Google Role Creation with Read Only Scopes > Screenshot 2020-05-23 at 11.39.14 AM.png

Verify chosen roles and Click create role.

ILA eSolution > Google Role Creation with Read Only Scopes > Screenshot 2020-05-23 at 11.40.13 AM.png

Click Assign Role > Choose google service user.

ILA eSolution > Google Role Creation with Read Only Scopes > Screenshot 2020-05-23 at 11.41.32 AM.png

Confirm roles assigned and privileges.

ILA eSolution > Google Role Creation with Read Only Scopes > Screenshot 2020-05-23 at 11.45.05 AM.png

Go to API explorer, and Test assigned roles and privileges.

https://developers.google.com/admin-sdk/directory/v1/reference/groups/get

Enter your Google group mail address > Execute.

Make sure execution status 200.

ILA eSolution > Google Role Creation with Read Only Scopes > Screenshot 2020-05-24 at 11.40.09 PM.png

Click Allow.

ILA eSolution > Google Role Creation with Read Only Scopes > Screenshot 2020-05-24 at 11.32.02 PM.png