Starting on September 26th, 2016, we will add two additional APIs to the recently launched External Directory Sharing Admin console setting. The setting is already enforced in the
Google People API, and we will now also enforce it in
Google CardDAV APIand
Google Contacts API v3.
The setting gives Google Apps admins more control over their domain directory data, allowing them to determine what directory information external apps and APIs can access.
Admins can manage the setting from
Apps > Google Apps > Settings for Contacts > Advanced Settings in the Admin console.
By default, the external directory sharing setting is set to “Domain and public data.” When the external directory sharing setting is set to “Only public data,” the
Google CardDAV API,
Google Contacts API v3, and
Google People API will no longer return domain data in their responses or will return forbidden 403 errors where appropriate. Any clients that use these APIs for domain data, including mobile apps, marketplace apps, and scripts, may no longer work as expected.
If admins have chosen to share “Only public data” from the Admin console, here are some common use cases that may become restricted by these new sharing controls:
- People who use the Mail and Contacts applications on iOS will no longer be able to access directory information using the Global Address List feature if the Google Apps account was added onto the iOS device using the “Add Google Account” option.
- Apps Scripts that utilize the Contacts API v3 or CardDAV API to access directory information. For example, an Apps Script that fetches birthdays of all users within the domain using the Contacts API v3 to send party reminder emails.
- Third-party Marketplace apps that utilize the Contacts API v3 or CardDAV API to access directory information.
Google Apps products that use the domain directory data for contacts, such as the Gmail, Drive, and Calendar apps on iOS, will
not be affected by this change. Also not impacted by this change are the
Google Apps Sync for Microsoft Outlook® sync plug-in and any device that syncs using
Google Sync, both of which will continue to be able to access directory information even if the External Directory Sharing setting is set to “Only public data.” The
Google Apps Admin SDK, used by admins to manage users and domain shared contacts, is also unaffected by the External Directory Sharing setting.
Launch DetailsRelease track:Launching to both Rapid release and Scheduled release on September 26th, 2016
Rollout pace: Gradual rollout (potentially longer than 3 days for feature visibility)
Impact: Admins and developers using
Google CardDAV API,
Google Contacts API v3, and
Google People APIAction: Admin action suggested/FYI
Note: all launches are applicable to all Google Apps editions unless otherwise notedLaunch release calendarLaunch detail categoriesGet these product update alerts by emailSubscribe to the RSS feed of these updates
