Why does a service account with delegated domain access still need impersonation?
问题 I am considering using OAuth 2.0 service accounts and domain-wide delegation of authority to integrate our service with Google Apps. A particular use case is: When Google Apps customer signs up for our service, pre-provision our service leveraging the customer's existing org structure or resources (orgunits, groups, devices, users, folders, files, etc.). When the customer's Google Apps resources change, synchronize applicable changes to our service. I found that when using service accounts, I