SPOGOU

SPOGOU is a Sheets addon made to let non-superadmins
Set easy-to-use Passwords Of Groups Of Users.
So it’s an acronym.

I started working on this idea shortly before applying to become a Google Certified Innovator, the summer of 2020, and as such brought it into that amazing process as my Innovator project. It was initially a Google Apps Script bound to a Google Sheet, but I am planning to developing it into an addon published in the Google workspace Marketplace, so any admin can install and provide to the relevant users in their organisation.

For support with SPOGOU, just submit your problem as an issue on the project page on github., or give feedback on the Feedback page.

USAGE: To install SPOGOU, open a Google Sheet, go to Add-ons / Get add-ons, search for SPOGOU on Marketplace, open, click Install.

If, and only if, you have proper delegated admin access, you will be able to run SPOGOU’s three steps. If you don’t, SPOGOU will fail.

In the Add-ons menu you will find SPOGOU and run Start, which will create the necessary sheets for your process and also show sidebars with instructions on how to proceed.

Only the first step, Start, can be run with a user without delegated admin access. The following steps require delegated admin access.

Prepare Passwords – these scopes lets you read needed info.
www.googleapis.com/auth/admin.directory.group.member.readonly
www.googleapis.com/auth/admin.directory.user
www.googleapis.com/auth/script.container.ui
www.googleapis.com/auth/spreadsheets.currentonly
www.googleapis.com/auth/userinfo.email
www.googleapis.com/auth/userinfo.profile

Set Passwords – uses this scope so you can edit the user.
www.googleapis.com/auth/admin.directory.user
And this scope so you can share the Spreadsheet to your wishes.
www.googleapis.com/auth/spreadsheets.currentonly

So, before any user can actually use SPOGOU, the admin must assign the user those admin privileges. I recommend creating two separate custom admin roles, as the group privilege can’t be limited to an OU, which the user privilege can. This means that a delegated admin can be restricted to only set passwords on users of a specific OU, for example students at their school.

For SPOGOU this also means all data is read and written in the Google Sheet you created and own. The add-on reads and writes to the Google APIs on your command, and only reads the group members and updates the passwords of the users that you have delegated admin access to and authority to update.

You can always find my tools over on Github, linked top-right, but on these pages I also demo some of them.

This is also the information site with pages for terms of service and privacy policy for my tools.

My tools are usually completely free, but if you feel they have helped or improved your workflow in any way, you are welcome to PayPal me any amount you deem appropriate.

There is No Substitute!