Sign in
service-accounts

Changed on

Create the org-level service account (one per organization).

HTTP 201 with the secret-free representation. HTTP 400 if an org-level account already exists (rotate via PUT/PATCH or DELETE first) or the payload is invalid.

post/service-accounts{format}

Request

  • The document declares no server URL.
  • Auth: one of:
    • HTTP bearer
    • API key in cookie sessionid

Path parameters

format'.json' required

Headers

X-Organization-Idstring

Selects the active organization for this request. Optional for callers that belong to exactly one active organization — the single membership is resolved implicitly. Required when the caller has two or more active memberships; omitting it in that case returns 400. If the header names an organization the caller is not an active member of, the server returns 403.

Request body

emailstring email required
admin_emailstring email

Google Workspace super-admin email used as the DWD impersonation subject. The service account must have domain-wide delegation granted for the Admin SDK and Calendar API scopes in the Google Admin Console.

private_key_idstring required
private_keystring required

Response

idinteger required
emailstring email required
admin_emailstring email required

Google Workspace super-admin email used as the DWD impersonation subject. The service account must have domain-wide delegation granted for the Admin SDK and Calendar API scopes in the Google Admin Console.

configuredboolean required

A persisted row is, by definition, configured.

createdstring date-time required
modifiedstring date-time required

Changes

  • bbeb063561c2Revision changes
    • ○

      added the new optional header request parameter X-Organization-Id

  • 408c86eb5933Revision changes
    • ●

      removed the request property (media type: application/json)

    • ●

      removed the request property (media type: application/x-www-form-urlencoded)

    • ●

      removed the request property (media type: multipart/form-data)