Let third-party apps access Directory data

If your organization uses third-party apps that integrate with G Suite, you control how much global Directory information the external apps can access.

If you allow directory access, your users get better external apps. For example, when they use a third-party mail app, they want to see domain contacts and have email addresses automatically complete as they type them. The app needs directory access to make this happen.

Allow or restrict access

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Menu and then Directory and then Directory settings.
  3. Click Sharing settings.
  4. In the External Directory Sharing section, choose what's shared with external apps and Application Programming Interfaces (APIs):
    • Only public data—Share only profile data that’s already visible to the public. This always includes G+ profile names and photos. Your G Suite Directory contacts are only visible within your domain, so they’re not shared.
    • Domain and public data—(Default) Share all directory information that’s visible within your domain or public. This includes G Suite Directory contacts and G+ profile names and photos. It also includes Domain Shared Contacts, which are external contacts shared within your organization. Examples might be contacts for vendors or contractors.

    The information shared with external apps never includes users’ personal contacts or private profile data. It also doesn’t include suspended or deleted users.

  5. Click Save changes.

It may take up to 24 hours for your changes to take effect.

Affected apps and APIs

The External Directory Sharing setting only applies to these APIs and the Apps Scripts or third-party Marketplace apps that use them:

The setting applies only to third-party apps. Google products, including mobile apps, have access to directory information regardless of the setting.

Example apps that are impacted by this setting:

iOS Mail and iOS Contacts (when enrolled on an iOS device via Add Account and then Google), third-party Contacts apps (on Android).

Example apps that are not impacted by this setting:

Gmail, Contacts (on Android), Inbox, Hangouts, and other Google mobile apps, iOS Mail and iOS Contacts using Google Sync (when enrolled on an iOS device via Add Account and then Exchange), G Suite Sync for Microsoft Outlook.

Was this article helpful?
How can we improve it?