Let third-party apps access Directory data

If your organization uses third-party apps that integrate with your Google services, you control how much Directory information the external apps can access.

If you allow directory access, your users have a better experience with external apps. For example, when they use a third-party mail app, they want to find domain contacts and have email addresses automatically complete. The app needs access to Directory data to make this happen.

Allow or restrict access to Directory data

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DirectoryDirectory settings.
3. Click Sharing settings Contact sharing.
4. Click External Directory Sharing. 
5. Select what data to share with external apps and Application Programming Interfaces (APIs):
   • Public data and authenticated user basic profile fields—Share publicly visible domain profile data with external apps and APIs. Also share the authenticated user's name, photo, and email address to enable Google Sign-In if the appropriate scopes are granted. Other non-public profile fields for the authenticated user aren't shared. All the non-public profile information of other users in the domain aren't shared.
   • Domain and public data—(Default) Share all Directory information that’s shared with your domain and public data. This information includes profile information for users in your domain, shared external contacts, and Google+ profile names and photos.

   The information shared with external apps never includes users’ personal contacts or private profile data. It also doesn’t include suspended or deleted users.

6. Click Save.

Changes can take up to 24 hours but typically happen more quickly. Learn more

Affected apps and APIs

The External directory sharing setting applies only to the following APIs and the Apps Scripts or third-party Marketplace apps that use those APIs:

• Google People API
• Google CardDAV API

• Google Contacts API v3

The setting applies only to third-party apps, such as iOS Mail and iOS Contacts (when enrolled on an iOS device via Add Account Google), third-party Contacts apps (on Android).

The setting doesn't apply to Google products, including mobile apps, such as the following

• Gmail, Contacts (on Android), Inbox, Meet, and other Google mobile apps
• iOS Mail and iOS Contacts using Google Sync (when enrolled on an iOS device through Add Account Exchange)
• Google Workspace Sync for Microsoft Outlook