services / Workspace / Organizational Units

Privileges for viewing and managing organizational units.

Organizational units provide a mechanism for organizing users within a Workspace, as well as for applying settings and access policies to those users.


ORGANIZATION_​UNITS_​RETRIEVE

Allows the caller to retrieve organizational unit paths.

Risks

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links

  • https:​/​/​developers.​google.​com/​admin-​sdk/​directory/​reference/​rest/​v1/​orgunits#​OrgUnit
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog