Then you can designate a Group as the account owner. For example, the cameras for Camio's own San Mateo office are associated with the group firstname.lastname@example.org, and all members of that Group are considered Guests with Can View permission:
Group members with the roles of Manager or Owner (instead of just Member) have Can Manage permission.
Camio looks up Group membership using the G Suite Admin API. So the only prerequisite is to ensure that the API is enabled by your G Suite Domain Administrator.
- Enable the G Suite Admin API, if not already enabled
To enable Camio to read your domain's Groups:
- Contact us to assign your Domain Admin, then open the page:
- Press Find after entering your domain and then assign the Directory Admin, who is the person with permission to grant read-only access to your domain's Groups and Group membership.
- Ask the newly designated Directory Admin to:
- Sign in with Google, where the email address associated with the Directory Admin's Google account matches the email entered as your domain's Directory Admin.
- Press the Authorize button shown on that same https://camio.com/domains page. The Authorize button opens this link to grant read-only access to Groups:
- Verify that you can now see your G Suite Group memberships as JSON output at:
- Register each Box to its Group account owner.
When the account is a Group from your Directory, the /guests page excludes the ability to add/remove Guests. And the permissions Can View and Can Manage are instead controlled by whether the user's Group membership role is MEMBER or MANAGER/OWNER respectively.
NOTE: the read-only permission granted by your Directory Admin is used to lookup the Group memberships to know whether a person has access to view recorded video. So if the Directory Admin user ever changes, it's important that the new Directory Admin re-authorize the read-only access to Groups in step 3 above.