Information around permission management and how RICOH Spaces interacts with your account.
When configuring your service accounts, RICOH Spaces can only sync and create resources you allow.
For events booked through RICOH Spaces, the booking user will be the organiser on your behalf and these permissions are given by default. If RICOH Spaces is unable to edit the organiser's event for some reason, it will fall back to updating the room calendar's version.
For these reasons, we need permission to book on behalf of your users to give a seamless experience regardless of, if, the user books from the Room Panel, Web or the Mobile app.
Recommended Option - Super Admin
You do not have to give your booking user super admin privileges to use RICOH Spaces, however, it will make managing permissions much easier and not need you to manage every calendar individually.
Give your booking user "Super Admin" privileges in G Suite. This will allow it to edit all resource and user calendars in your Google account instead of requiring each to grant permissions explicitly. From the Google Admin panel, find it under Admin Roles.
What access does the account have?
We use the Google OAuth flow to get a token to use when interacting with your G Suite account, these scopes are limited to the ones you allow for the account and depend on how you configure the account. No matter what permission you give the account, RICOH Spaces will never do anything outside of the operations you ask for.
Note: According to Google, after assigning the super administrator role to a user, it may take up to 2 weeks for those permissions to take effect.
