Programmatic access from outside.
WHAT THE MAIN APIs ARE
Drive, for files Sheets, docs and slides, for content Gmail, for mail Calendar Admin, for directory and organisation management
WHAT AUTHENTICATION APPROACHES EXIST
User authorisation, where a user grants access to their own data Service accounts with delegation, acting on behalf of users across an organisation
WHAT THE SECOND SUITS
Administrative and background work across many accounts.
WHAT IT REQUIRES
Explicit authorisation by an organisation administrator, for specific scopes.
WHAT A SCOPE IS
A defined permission, limiting what access is granted.
WHAT TO REQUEST
The narrowest scopes that work.
WHY
Broad scopes require more justification and cause more hesitation.
WHAT TO KNOW ABOUT QUOTAS
Each API has limits, and exceeding them returns a specific error.
WHAT TO IMPLEMENT
Retry with increasing delay Batching, where supported Caching, so unchanged data is not refetched
WHAT TO USE FOR CHANGE DETECTION
Change notifications, rather than polling.
WHY
Polling consumes quota continuously for nothing most of the time.
WHAT TO STORE SECURELY
Tokens and credentials.
