I have a couple of questions regarding service accounts with GAM apps. For some context I'm trying to integrate my app with the Directory API and the Calendar API.
Does making an API call with a service account for a domain my app is installed on always require me to specify a user (email)? In particular, does making a call to the Directory API then always need an admin user to be specified?
If so, my concern is what happens if the domain admin changes? My hope is that my app can automate some of the user provisioning. What are the best practices in this circumstance? Should I be making an admin account for myself at the time of install?
Additionally, I'm hoping to create a shared calendar for use by the domain the app is installed on. Should I be making the shared calendar using the domain admin? Again, if the admin changes it seems like that calendar could potentially be lost. Any suggestions in this case? Should I be using the service accounts own calendar?
Thanks for your help. +Eric Koleda