Organizing client app ownership

This page describes tools and strategies used to organize client app ownership.

Using AppGroups to organize app ownership

This section provides an overview of AppGroups and how to manage them.

What are AppGroups?

An AppGroup represents a relationship between one or more apps that are managed by the same set of people.

An AppGroup is associated with another system that is responsible for managing the roster of people who share responsibility for these apps, such as a portal. Both Apigee apps and Apigee developers are associated to the AppGroup.

Important: AppGroups provide an abstraction to manage grouped developers as a single entity for the purposes of app ownership and management. Since API access is managed at the credential level for each app, a group of developers that are members of an AppGroup can manage and own AppGroup apps as a single entity. Note that permissions and API key management are handled at the app level, separately from AppGroup membership.

AppGroups provide:

IAM roles and permissions

To control permissions required for AppGroup management, you can view and grant permissions or roles using the permissions panel on theIAM & Admin > IAM page in your Google Cloud project.

Go to IAM & Admin

The following table lists the permissions required to create and manage AppGroups resources. You can grant the permissions individually or through an Apigee role including the permissions. SeeUsers and roles for information on Apigee user and role management.

DescriptionPermissions
Manage AppGroups and associated apps and keys.
  • apigee.appgroups.list
  • apigee.appgroups.get
  • apigee.appgroups.create
  • apigee.appgroups.update
  • apigee.appgroups.delete
Manage AppGroup apps.
  • apigee.appgroupapps.list
  • apigee.appgroupapps.get
  • apigee.appgroupapps.create
  • apigee.appgroupapps.manage
  • apigee.appgroupapps.delete
Manage app keys for AppGroups:
  • apigee.appkeys.get
  • apigee.appkeys.create
  • apigee.appkeys.manage
  • apigee.appkeys.delete
Manage AppGroup subscriptions and monetization configurations.
  • apigee.appgroupbalances.adjust
  • apigee.appgroupbalances.get
  • apigee.appgroupbalances.update
  • apigee.appgroupmonetizationconfigs.get
  • apigee.appgroupmonetizationconfigs.update
  • apigee.appgroupsubscriptions.create
  • apigee.appgroupsubscriptions.get
  • apigee.appgroupsubscriptions.list
  • apigee.appgroupsubscriptions.update

Viewing and managing AppGroups

This section shows how to view and manage AppGroups. You can manage AppGroups and AppGroup appsvia the Apigee APIs andDrupal portals.

Note: AppGroup management in Apigee UI in Cloud console will be considered in a future release.Note: To manage the Display Name and Notes of an App associated with an AppGroup, you should use the DisplayName and Notes attribute in theorganizations.appgroups.apps.update method.

AppGroup settings

AppGroups include these settings:

SettingDescription
NameRequired. The AppGroup name. AppGroup names must be unique across an organization.

Allowed characters are alphanumeric characters and any of these special characters: ._\-$ %.
AppGroup IdCreated automatically and not editable. Created in the form "OrgName@@@AppGroupName". For example, with an Apigee org nameXYZDev and AppGroup nameABCMarketing, the AppGroup Id isXYZDev@@@ABCMarketing.
Display NameOptional. A friendly display name for the AppGroup.
channelIdOptional. Identifies the system responsible for creating and managing the AppGroup. This could be a storefront or marketplace. Multiple AppGroups might share the same channelId.
channelUriOptional. Reference to the group of people who share responsibility for the AppGroup. Often the channelUri links to or refers to a group or team in a developer portal or other system such as Apigee's Drupal Teams module.

Managing AppGroups using Drupal-based portals

Apigee's Team module for Drupal works with AppGroups in Apigee X and hybrid and is the primary interface for managing AppGroups. For information on Drupal-based portals, seeBuilding your Portal using Drupal.

Managing AppGroups using the Apigee APIs

Use these APIs to manage AppGroups in your orgs:

ActivitiesLink
View and manage AppGroupshttps://cloud.google.com/apigee/docs/reference/apis/apigee/rest/v1/organizations.appgroups
View and manage the apps that belong to AppGroupshttps://cloud.google.com/apigee/docs/reference/apis/apigee/rest/v1/organizations.appgroups.apps
View and manage the app keys associated to AppGroupshttps://cloud.google.com/apigee/docs/reference/apis/apigee/rest/v1/organizations.appgroups.apps.keys
View and manage AppGroup subscriptions to API productshttps://cloud.google.com/apigee/docs/reference/apis/apigee/rest/v1/organizations.appgroups.subscriptions

See alsoAppGroup subscription management.

View and manage AppGroup monetization configurations and balances (if enabled)https://cloud.google.com/apigee/docs/reference/apis/apigee/rest/v1/organizations.appgroups.subscriptions

https://cloud.google.com/apigee/docs/reference/apis/apigee/rest/v1/organizations.appgroups.balance

See alsoUse AppGroups to manage API product subscriptions andManage prepaid balances.

Migrating from Apigee Edge for Drupal users

Migrating a company-developer and its role involves creating an AppGroup representing the company, and adding the company-developer and its role(s) as custom Attributes of the AppGroup. The expected syntax to store this is:

[{      "developer":"<developer email>",      "roles":[        "<role(s)>"      ]    },    ...]

Using developer-app association to organize app ownership

A less comprehensive and flexible method of tracking app ownership than AppGroups is tracking apps by developer association.

For information on managing developer-app associations, seeRegistering app developers for information on registering developers and associated apps.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.