Control user access using Google groups

Use Google groups to control access to your apps.

• Quick intro
• Create a Google group
• Connect AppSheet to the groups in your organization
• Set up group authentication in an app
• Enable API access in your Google domain 
• Share the app

Quick intro

Watch this video to learn how to use Google groups to control access to AppSheet apps.

Use Google Groups to control access to your AppSheet apps

Create a Google group

You can create a Google group in one of the following ways:

• Use Google Groups
• Use the Google Workspace Admin console (Admins only)

Use Google Groups

As an app creator, you can create a Google group using Google Groups. For complete details, see Create a group.

Use the Google Workspace Admin console (Admins only)

As an admin, you can create a group using the Google Workspace Admin console.

To create a group using the Google Workspace Admin console:

1. Sign in to the Google Workspace admin console at admin.google.com
2. Click Groups.
3. Click Create Group.
4. Fill in the details for the group. 
   
   
5. The Access Type settings do not affect the ability for AppSheet to connect to the group. They can be left at their default values or customized as needed.
6. Add members to the group.

See also  Create a group.

Connect AppSheet to the groups in your organization

To connect AppSheet to the groups in your organization:

1. Sign in to your AppSheet account and navigate to My Account > Integrations > Auth Domains.
2. Click + New Auth Domain.
3. Specify a name for this account and click Google Cloud.
   
   
4. You will be prompted to sign in with Google. Sign in with the same account used to create the group.
5. Navigate back to My Account > Integrations > Auth Domains to confirm the authentication domain was added to the account.

Set up group authentication in an app

To set up group authentication in an app:

1. Open an AppSheet app and navigate to Security > Domain Authentication.
2. Enable Require domain authentication? 
3. Under Authentication domain source select the name of the account added in the previous step.
4. Restrict access by Workspace group by entering a group name in the Restrict by Domain field.
   This field is optional. If set, only members of the groups whose domain matches this field will be permitted to access the app with the specified role. If left empty, all members of the group, regardless of the domain, will be able to access the app with the specified role.
5. Add Authentication groups that will be used to manage user authentication for this app.
6. Save your changes.

Enable API access in your Google domain

To enable API access in your Google domain, see Control which third-party and internal apps access Google Workspace data.

 Share the app

Share the app with your end users, as described in Share: The Essentials. When the end-user accesses the app, they will be prompted to sign in using their Google Workspace credentials.