Guidance for programmatically updating Google Group membership using a service account and the Cloud Identity Groups API

1. Create a group to manage:
   https://identity.lbl.gov/creategroups
2. Create a GCP Project with your lbl.gov Google account under the lbl.gov organization at:
   https://console.cloud.google.com
3. Enable the Cloud Identity API for that project. Steps are at https://cloud.google.com/identity/docs/how-to/setup 
   Note: You will need to authenticate with the Groups API as a service account group admin without domain-wide delegation or as an end user. 
4. Click Go to credentials
5. Create a Service account
6. Add the service account's email address (eg [email protected]) as a group manager
7. Create and download a key for that Service account

You can now begin making calls to the Cloud Identity Groups API using the Service account

Code examples for writing a program that uses the service account and Cloud Identity Groups API methods to manage your Google group(s) are available at:
https://cloud.google.com/identity/docs/how-to/memberships-google-groups

Useful Cloud Identity Groups API methods

• Lookup a group_id based on the group email address: https://cloud.google.com/identity/docs/reference/rest/v1/groups/lookup
• List a group's membership using the group_id: https://cloud.google.com/identity/docs/reference/rest/v1/groups.memberships/list
• Add a group member: https://cloud.google.com/identity/docs/reference/rest/v1/groups.memberships/create
• Remove a group member: https://cloud.google.com/identity/docs/reference/rest/v1/groups.memberships/delete