gplay-user-management

User & Grant Management

Manage team members and their permissions in Google Play Console. Two layers:

• Users (gplay users) — account-wide members. Permissions here (*_GLOBAL, CAN_SEE_ALL_APPS) apply across the whole developer account.
• Grants (gplay grants) — per-app access for a user. Permissions here apply to a single package only.

Use users to add someone to the account (optionally with account-wide powers). Use grants to give an existing user access to specific apps without granting account-wide reach. Least privilege: prefer per-app grants over global permissions.

Preconditions

• Credentials set (gplay auth login or GPLAY_SERVICE_ACCOUNT).
• Service account needs permission to manage users (CAN_MANAGE_PERMISSIONS_GLOBAL).
• Developer ID is required for every command. Pass it with --developer. Find it in the Play Console URL (play.google.com/console/u/0/developers/<DEVELOPER_ID>/...).

Key concepts

• The flag is --developer (Developer ID), not --developer-id.
• There is no --role or --permissions flag. Permissions are supplied as a JSON body via --json.
• --json accepts an inline JSON string or @path/to/file.json.
• Users JSON key: developerAccountPermissions (account-wide). Grants JSON key: appLevelPermissions (per-app).
• delete requires --confirm — it is a no-op safety guard, and the deletion is irreversible.

Users (account-wide)

# List users
gplay users list --developer DEVELOPER_ID
gplay users list --developer DEVELOPER_ID --paginate --page-size 50
gplay users list --developer DEVELOPER_ID --output table

# Create a user (inline JSON)
gplay users create \
  --developer DEVELOPER_ID \
  --email [email protected] \
  --json '{"developerAccountPermissions":["CAN_SEE_ALL_APPS"]}'

# Create with an expiration and JSON from a file
gplay users create \
  --developer DEVELOPER_ID \
  --email [email protected] \
  --json @perms.json

# Update a user's account-wide permissions
gplay users update \
  --developer DEVELOPER_ID \
  --email [email protected] \
  --json '{"developerAccountPermissions":["CAN_SEE_ALL_APPS","CAN_VIEW_FINANCIAL_DATA_GLOBAL"]}'

# Delete a user (requires --confirm)
gplay users delete \
  --developer DEVELOPER_ID \
  --email [email protected] \
  --confirm