From c68e0bfbc4945ddb2e1cca5612f1168cd599c55a Mon Sep 17 00:00:00 2001 From: Jay Lee Date: Tue, 28 May 2019 14:02:46 -0400 Subject: [PATCH] Remove SA DwD enablement steps on project create The step to enable domain-wide delegation for a service account is unnecessary. Even when unchecked, the service account gets access to the scopes that admin has granted in admin console (gam user check serviceaccount). --- src/gam.py | 9 --------- 1 file changed, 9 deletions(-) diff --git a/src/gam.py b/src/gam.py index 3cfdaacf..db376c36 100755 --- a/src/gam.py +++ b/src/gam.py @@ -7652,15 +7652,6 @@ def _createClientSecretsOauth2service(httpObj, projectId): } }''' % (client_id, client_secret, projectId) writeFile(GC_Values[GC_CLIENT_SECRETS_JSON], cs_data, continueOnError=False) - print('''Almost there! Now please switch back to your browser and: - -1. Click OK to close "OAuth client" popup if it's still open. -2. Click "Manage service accounts" on the right of the screen. -3. Click the 3 dots to the right of your service account. -4. Choose Edit. -5. Click "Show Domain-Wide Delegation". Check "Enable G Suite Domain-wide Delegation", Click Save. -''') - input('Press Enter when done...') print('That\'s it! Your GAM Project is created and ready to use.') VALIDEMAIL_PATTERN = re.compile(r'^[^@]+@[^@]+\.[^@]+$')