Retrieves a paginated list of all privileges for a customer.
HTTP request
GET https://admin.googleapis.com/admin/directory/v1/customer/{customer}/roles/ALL/privileges
The URL uses gRPC Transcoding syntax.
Path parameters
| Parameters | |
|---|---|
| customer | 
 The unique ID for the customer's Google Workspace account. In case of a multi-domain account, to fetch all groups for a customer, use this field instead of  | 
Request body
The request body must be empty.
Response body
If successful, the response body contains data with the following structure:
| JSON representation | 
|---|
| {
  "kind": string,
  "etag": string,
  "items": [
    {
      object ( | 
| Fields | |
|---|---|
| kind | 
 The type of the API resource. This is always  | 
| etag | 
 ETag of the resource. | 
| items[] | 
 A list of Privilege resources. | 
Authorization scopes
Requires one of the following OAuth scopes:
- https://www.googleapis.com/auth/admin.directory.rolemanagement
- https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly
For more information, see the Authorization guide.
Privilege
| JSON representation | 
|---|
| {
  "serviceId": string,
  "kind": string,
  "etag": string,
  "isOuScopable": boolean,
  "childPrivileges": [
    {
      object ( | 
| Fields | |
|---|---|
| serviceId | 
 The obfuscated ID of the service this privilege is for. This value is returned with  | 
| kind | 
 The type of the API resource. This is always  | 
| etag | 
 ETag of the resource. | 
| isOuScopable | 
 If the privilege can be restricted to an organization unit. | 
| childPrivileges[] | 
 A list of child privileges. Privileges for a service form a tree. Each privilege can have a list of child privileges; this list is empty for a leaf privilege. | 
| privilegeName | 
 The name of the privilege. | 
| serviceName | 
 The name of the service this privilege is for. |