The Directory API can tell you what groups (ie Google Group) a user is in.
You can use a Service Account to access the Directory API (in fact, non-Service access, ie web-user,
doesn't seem to work?). The Service Account needs the following scope:
https://www.googleapis.com/auth/admin.directory.group.readonly
You also need a separate domain user account (eg [email protected]), which
will be 'impersonated' when making the calls.
The Directory API can tell you what groups (ie Google Group) a user is in.
You can use a Service Account to access the Directory API (in fact, non-Service access, ie web-user, doesn't seem to work?). The Service Account needs the following scope: https://www.googleapis.com/auth/admin.directory.group.readonly
You also need a separate domain user account (eg [email protected]), which will be 'impersonated' when making the calls.