User & Grant Management

Manage team members and their permissions in Google Play Console. Two layers:

• Users (gplay users) — account-wide members. Permissions here (*_GLOBAL, CAN_SEE_ALL_APPS) apply across the whole developer account.
• Grants (gplay grants) — per-app access for a user. Permissions here apply to a single package only.

Use users to add someone to the account (optionally with account-wide powers). Use grants to give an existing user access to specific apps without granting account-wide reach. Least privilege: prefer per-app grants over global permissions.

Preconditions

• Credentials set (gplay auth login or GPLAY_SERVICE_ACCOUNT).
• Service account needs permission to manage users (CAN_MANAGE_PERMISSIONS_GLOBAL).
• Developer ID is required for every command. Pass it with --developer. Find it in the Play Console URL (play.google.com/console/u/0/developers/<DEVELOPER_ID>/...).

Key concepts