Retrieves a paginated list of all privileges for a customer.
HTTP request
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roles/ALL/privileges
The URL uses gRPC Transcoding syntax.
Path parameters
| Parameters | |
|---|---|
customer
|
The unique ID for the customer's Google Workspace account. In case of a multi-domain account, to fetch all groups for a customer, use this field instead of |
Request body
The request body must be empty.
Response body
If successful, the response body contains data with the following structure:
| JSON representation |
|---|
{
"kind"
:
string
,
"etag"
:
string
,
"items"
:
[
{
object (
|
| Fields | |
|---|---|
kind
|
The type of the API resource. This is always |
etag
|
ETag of the resource. |
items[]
|
A list of Privilege resources. |
Authorization scopes
Requires one of the following OAuth scopes:
-
https://www.googleapis.com/auth/admin.directory.rolemanagement -
https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly
For more information, see the Authorization guide .
Privilege
| JSON representation |
|---|
{
"serviceId"
:
string
,
"kind"
:
string
,
"etag"
:
string
,
"isOuScopable"
:
boolean
,
"childPrivileges"
:
[
{
object (
|
| Fields | |
|---|---|
serviceId
|
The obfuscated ID of the service this privilege is for. This value is returned with |
kind
|
The type of the API resource. This is always |
etag
|
ETag of the resource. |
isOuScopable
|
If the privilege can be restricted to an organization unit. |
childPrivileges[]
|
A list of child privileges. Privileges for a service form a tree. Each privilege can have a list of child privileges; this list is empty for a leaf privilege. |
privilegeName
|
The name of the privilege. |
serviceName
|
The name of the service this privilege is for. |

