# Gplay User Management > User and grant management for Google Play Console via gplay users and gplay grants commands. Use when asked to manage developer account users, permissions, or app-level access grants. Use when this capability is needed. - Skill: `tomevault-io/gplay-user-management` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/gplay-user-management` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/gplay-user-management/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Coding & Dev Tools - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/gplay-user-management --- # User & Grant Management Use this skill when you need to manage users and their permissions in Google Play Console. ## Preconditions - Ensure credentials are set (`gplay auth login` or `GPLAY_SERVICE_ACCOUNT` env var). - Service account needs "Admin" permission to manage users and grants. - Developer account ID is required for user operations. ## User Management ### List all users ```bash gplay users list \ --developer-id DEVELOPER_ID ``` ### List users with pagination ```bash gplay users list \ --developer-id DEVELOPER_ID \ --paginate ``` ### List users as table ```bash gplay users list \ --developer-id DEVELOPER_ID \ --output table ``` ### Create a new user ```bash gplay users create \ --developer-id DEVELOPER_ID \ --email user@example.com \ --role admin ``` ### Create user with specific permissions ```bash gplay users create \ --developer-id DEVELOPER_ID \ --email user@example.com \ --role custom \ --permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING" ``` ### Update a user ```bash gplay users update \ --developer-id DEVELOPER_ID \ --email user@example.com \ --role viewer ``` ### Delete a user ```bash gplay users delete \ --developer-id DEVELOPER_ID \ --email user@example.com \ --confirm ``` ## Grant Management Grants control app-level access for users. ### Create a grant (give user access to an app) ```bash gplay grants create \ --developer-id DEVELOPER_ID \ --email user@example.com \ --package com.example.app \ --permissions "VIEW_APP_INFORMATION,VIEW_FINANCIAL_DATA" ``` ### Update a grant (change permissions) ```bash gplay grants update \ --developer-id DEVELOPER_ID \ --email user@example.com \ --package com.example.app \ --permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING,MANAGE_RELEASES" ``` ### Delete a grant (revoke app access) ```bash gplay grants delete \ --developer-id DEVELOPER_ID \ --email user@example.com \ --package com.example.app \ --confirm ``` ## Common Flags ### User flags | Flag | Description | |------|-------------| | `--developer-id` | Developer account ID (required) | | `--email` | User email address | | `--role` | Role: `admin`, `viewer`, `custom` | | `--permissions` | Comma-separated permission list (for custom role) | | `--output` | Output format (`json`, `table`, `markdown`) | | `--paginate` | Fetch all pages | | `--confirm` | Required for destructive operations | ### Grant flags | Flag | Description | |------|-------------| | `--developer-id` | Developer account ID (required) | | `--email` | User email address (required) | | `--package` | App package name (required) | | `--permissions` | Comma-separated permission list (required) | | `--confirm` | Required for delete operations | ## Available Permissions | Permission | Description | |------------|-------------| | `VIEW_APP_INFORMATION` | View app info and download bulk reports | | `VIEW_FINANCIAL_DATA` | View financial data, orders, and cancellation surveys | | `MANAGE_ORDERS` | Manage orders and subscriptions | | `MANAGE_STORE_LISTING` | Manage store listing, pricing, and distribution | | `MANAGE_RELEASES` | Manage production and testing releases | | `MANAGE_APP_CONTENT` | Manage app content rating and policy declarations | | `VIEW_APP_QUALITY` | View app quality information | ## Workflow Examples ### Onboard a new team member ```bash # 1. Create user account gplay users create \ --developer-id 1234567890 \ --email newdev@example.com \ --role custom \ --permissions "VIEW_APP_INFORMATION" # 2. Grant access to specific apps gplay grants create \ --developer-id 1234567890 \ --email newdev@example.com \ --package com.example.app1 \ --permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES" gplay grants create \ --developer-id 1234567890 \ --email newdev@example.com \ --package com.example.app2 \ --permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING" ``` ### Offboard a team member ```bash # Revoke all access by deleting the user gplay users delete \ --developer-id 1234567890 \ --email departed@example.com \ --confirm ``` ### Audit current permissions ```bash # List all users in table format gplay users list \ --developer-id 1234567890 \ --paginate \ --output table ``` ### Promote user to release manager ```bash gplay grants update \ --developer-id 1234567890 \ --email dev@example.com \ --package com.example.app \ --permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES,MANAGE_STORE_LISTING" ``` ## Best Practices 1. **Principle of least privilege** - Grant only the permissions each user needs. 2. **Use app-level grants** - Prefer grants over account-level roles for fine-grained control. 3. **Audit regularly** - Periodically review users and their permissions. 4. **Offboard promptly** - Remove users immediately when they leave the team. 5. **Use `--confirm` carefully** - Delete operations are irreversible. 6. **Automate onboarding** - Script user creation and grant assignment for consistency. --- > Converted and distributed by [TomeVault](https://tomevault.io/claim/tamtom) — claim your Tome and manage your conversions.