Let third-party apps access Directory data

If your organization uses third-party apps that integrate with your Google services, you control how much Directory information the external apps can access.

If you allow directory access, your users have a better experience with external apps. For example, when they use a third-party mail app, they want to find domain contacts and have email addresses automatically completed. The app needs access to Directory data to make this happen.

Allow or restrict access to Directory data

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go to Menu  Directory > Directory settings.

   Requires having the Service Settings administrator privilege.

3. Click Sharing settingsExternal Directory Sharing. 
4. Select the data to share with external apps and Application Programming Interfaces (APIs):
   • Authenticated user basic profile fields—Share only the authenticated user's name, photo, and email address to enable Google Sign-In if the user grants the appropriate scopes. Other non-public profile fields for the authenticated user aren't shared. All profile information of other users in the organization isn't shared.
   • Organization data and authenticated user basic profile fields—Share all Directory information that is shared within your organization. This information includes profile information for users in your organization that admins, users, and shared external contacts have created.
5. Click Save.

Note: The information shared with external apps never includes users’ personal contacts or private profile data. It also doesn’t include suspended or deleted users.

Changes can take up to 24 hours but typically happen more quickly. Learn more

Affected apps and APIs

The External directory sharing setting applies only to the following APIs and the Apps Scripts or third-party Marketplace apps that use those APIs:

• Google People API
• Google CardDAV API

• Google Contacts API v3

The setting applies only to third-party apps, such as iOS Mail and iOS Contacts (when enrolled on an iOS device via Add Account Google), and third-party Contacts apps (on Android).

The setting doesn't apply to Google products, including mobile apps, such as the following:

• Gmail, Contacts (on Android), Inbox, Meet, and other Google mobile apps
• iOS Mail and iOS Contacts using Google Sync (when enrolled on an iOS device through Add Account Exchange)
• Google Workspace Sync for Microsoft Outlook