title: Determine Whether User is Group Member
body: <p><strong>Background</strong></p>
  
  <p>Our corporate users have a Google Apps account.  We would like to allow them (and only them) to log in to an extranet using the Google account.  Ideally we would also like to manage permissions through the Google domain management UI.  One thought is to create groups and associate group membership with extranet permissions.</p>
  
  <p><strong>Research</strong></p>
  
  <p>Google Apps supports <a href="https://developers.google.com/accounts/docs/OAuth2" rel="noreferrer">login using OAuth 2.0</a> and also <a href="https://developers.google.com/google-apps/provisioning/" rel="noreferrer">supports provisioning via API</a>, which would allow us to test if a user is a member of a group.  The Provisioning API presumably requires administrator credentials.</p>
  
  <p><strong>Question</strong></p>
  
  <p>Is it possible to programatically determine whether a Google Apps user is a member of a group without requiring domain administrator credentials?</p>
  
  <p>Is there a better way to accomplish this goal?</p>