What should you do?

You are creating an internal App Engine application that needs to access a users Google Drive on the users behalf. Your company does not want to rely on the current users credentials. It also wants to follow Google- recommended practices.

What should you do?
A . Create a new Service account, and give all application users the role of Service Account User.
B . Create a new Service account, and add all application users to a Google Group. Give this group the role of Service Account User.
C . Use a dedicated G Suite Admin account, and authenticate the applications operations with these G Suite credentials.
D . Create a new service account, and grant it G Suite domain-wide delegation. Have the application use it to impersonate the user.

Answer: D

Explanation:

https://developers.google.com/admin-sdk/directory/v1/guides/delegation