Gmail API可获取用户邮件但无法获取Google Workspace群组邮件求助

错误核心原因 #

Gmail API的users().messages()系列接口仅支持Google Workspace用户账号，群组邮箱不属于用户身份范畴，无法通过服务账号的域委派（with_subject()）方式模拟访问，这就是调用群组邮箱时触发unauthorized_client错误的根本原因。

可行解决方案 #

要获取群组相关邮件，需通过「获取群组成员列表 → 遍历成员邮箱筛选群组邮件」的路径实现，具体操作如下：

1. 确认权限配置有效性 #

确保服务账号在Google Workspace中已正确配置以下域委派范围：

• https://www.googleapis.com/auth/gmail.readonly（读取用户邮件权限）
• https://www.googleapis.com/auth/admin.directory.group.member.readonly（读取群组成员权限）

2. 代码实现逻辑 #

先通过Admin Directory API拉取目标群组的所有成员邮箱，再逐个成员遍历，筛选出收件人包含目标群组地址的邮件。

完整代码示例

from pprint import pprint
from googleapiclient.discovery import build
from google.auth.transport.requests import Request
from google.oauth2.service_account import Credentials

def get_group_members(group_email, cred):
    """获取目标群组的所有成员邮箱列表"""
    directory_service = build('admin', 'directory_v1', credentials=cred)
    members = []
    next_page_token = None
    while True:
        results = directory_service.members().list(
            groupKey=group_email,
            pageToken=next_page_token,
            maxResults=200
        ).execute()
        members.extend([member['email'] for member in results.get('members', [])])
        next_page_token = results.get('nextPageToken')
        if not next_page_token:
            break
    return members

def get_group_related_messages(group_email, user_email, cred):
    """从单个用户邮箱中筛选收件人包含群组地址的邮件"""
    gmail_service = build('gmail', 'v1', credentials=cred.with_subject(user_email))
    # 构造查询条件：收件人包含目标群组邮箱
    query = f"to:{group_email}"
    results = gmail_service.users().messages().list(
        userId=user_email,
        q=query,
        maxResults=3
    ).execute()
    messages = results.get('messages', [])
    message_details = []
    for msg in messages:
        msg_detail = gmail_service.users().messages().get(
            userId=user_email,
            id=msg['id']
        ).execute()
        message_details.append(msg_detail)
    return message_details

def main(group_email):
    # 初始化服务账号凭证
    cred = Credentials.from_service_account_file('Service_account_key.json')
    # 绑定所需权限范围
    cred = cred.with_scopes([
        'https://www.googleapis.com/auth/gmail.readonly',
        'https://www.googleapis.com/auth/admin.directory.group.member.readonly'
    ])
    cred.refresh(Request())

    # 获取群组成员列表
    group_members = get_group_members(group_email, cred)
    pprint(f"群组成员列表: {group_members}")

    # 遍历成员收集群组相关邮件
    all_group_messages = []
    for member in group_members:
        try:
            member_messages = get_group_related_messages(group_email, member, cred)
            all_group_messages.append({
                'member_email': member,
                'messages': member_messages
            })
        except Exception as e:
            print(f"获取成员 {member} 邮件失败: {str(e)}")
    
    pprint(f"群组相关邮件汇总: {all_group_messages}")

if __name__ == "__main__":
    main("group@gmail.com")

3. 补充说明 #

• 若你的Google Workspace群组启用了邮件归档功能，可通过Groups Settings API直接访问归档内容，但需额外配置归档权限，且归档仅保留发送到群组的邮件副本。
• 确保服务账号已被授予Workspace Admin角色中「查看群组成员」的权限，或单独授予Admin Directory Group Member Reader角色。

内容的提问来源于stack exchange，提问作者sami