Starting on September 26th, 2016, we will add two additional APIs to the recently launched External Directory Sharing Admin console setting. The setting is already enforced in the Google People API, and we will now also enforce it in Google CardDAV APIand Google Contacts API v3.

The setting gives Google Apps admins more control over their domain directory data, allowing them to determine what directory information external apps and APIs can access.

Admins can manage the setting from Apps > Google Apps > Settings for Contacts > Advanced Settings in the Admin console.
By default, the external directory sharing setting is set to “Domain and public data.” When the external directory sharing setting is set to “Only public data,” the Google CardDAV API, Google Contacts API v3, and Google People API will no longer return domain data in their responses or will return forbidden 403 errors where appropriate. Any clients that use these APIs for domain data, including mobile apps, marketplace apps, and scripts, may no longer work as expected.

If admins have chosen to share “Only public data” from the Admin console, here are some common use cases that may become restricted by these new sharing controls:
  • People who use the Mail and Contacts applications on iOS will no longer be able to access directory information using the Global Address List feature if the Google Apps account was added onto the iOS device using the “Add Google Account” option.
  • Apps Scripts that utilize the Contacts API v3 or CardDAV API to access directory information. For example, an Apps Script that fetches birthdays of all users within the domain using the Contacts API v3 to send party reminder emails.
  • Third-party Marketplace apps that utilize the Contacts API v3 or CardDAV API to access directory information. 
Google Apps products that use the domain directory data for contacts, such as the Gmail, Drive, and Calendar apps on iOS, will not be affected by this change. Also not impacted by this change are the Google Apps Sync for Microsoft Outlook® sync plug-in and any device that syncs using Google Sync, both of which will continue to be able to access directory information even if the External Directory Sharing setting is set to “Only public data.” The Google Apps Admin SDK, used by admins to manage users and domain shared contacts, is also unaffected by the External Directory Sharing setting.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release on September 26th, 2016

Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)

Impact:
Admins and developers using Google CardDAV API, Google Contacts API v3, and Google People API

Action:
Admin action suggested/FYI

Note: all launches are applicable to all Google Apps editions unless otherwise noted

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates