What is the scope of Google-Appscript's PropertiesService.getScriptProperties()?

You can't use Script Properties to restrict access to Properties Service data to only one domain. You'll probably need to get the domain name of the user when the code runs, and if the user is in the domain, then run special code to access settings somewhere for that domain.

The settings specific to the domain could be put in various places, including your Script Properties. But the problem with using Script Properties could be storage quota depending upon how much data you need to store. If it's small amount of data, like whether that domain has paid there subscription or not and the date, then definitely put it in Script Properties. But if you had lots of subscribers, then you'd want to have an external storage somewhere.

The domain name can be retrieved with the following code:

In order to use the below code, you'll need 3 scopes in your appsscript.json manifest file.

"oauthScopes": ["https://www.googleapis.com/auth/script.external_request", "https://www.googleapis.com/auth/userinfo.email", "https://www.googleapis.com/auth/userinfo.profile"]

CODE:

var users = Session.getEffectiveUser().getEmail();
var urls = "https://www.googleapis.com/oauth2/v2/userinfo";

var params = {
  method : "get",
  headers : {"Authorization": "Bearer " + ScriptApp.getOAuthToken()},
};

var response = UrlFetchApp.fetch(urls, params);

if (response && response.getResponseCode() !== 200) {//There should always be a response unless the
  //Fetch call failed and if that happens then the outer try - catch can handle it

  return false;
}
var userinfo = JSON.parse(response.getContentText());

Logger.log(userinfo)

var domainName = userinfo.hd ? userinfo.hd : false;

return domainName;
//userinfo["given_name"];//First Name
//userinfo["name"];//Full Name
//userinfo["id"];
//userinfo["family_name"];
//userinfo["email"];
//userinfo["picture"];//Link to profile image
//userinfo["locale"];//ID of country de = Germany

When you are setting a property using the setProperties(properties) method, the property is set for the script itself.

According to the documentation:

setProperties(properties)

Sets all key-value pairs from the given object in the current Properties store.

Therefore, if your concern is related to which users can access these properties, this is win fact related to the sharing permissions you have set for the script itself.

For instance, when sharing a script, you have the following options:

• restricted

• sharing only with your organization

• anyone who was the link can access the script

As well as:

• viewer

• editor

You can also fiddle with these permissions programmatically by checking the Access Enum and the Permission Enum

Reference

• Properties Class Apps Script;

• Apps Script Access Enum;

• Apps Script Permission Enum.