Allow Member of Group to Post`

[Gene Molloy]

Looking for the proper format to configure a member of a group Posting setting to Allowed.

[Ross Scroggs]

Gene,

The Directory API https://developers.google.com/admin-sdk/directory/reference/rest/v1/members) doesn't support setting this option, thus GAM can't help.

Ross

--

ross.s...@gmail.com

On Jul 19, 2021, at 6:02 AM, Gene Molloy <gene....@ironmountain.com> wrote:

Looking for the proper format to configure a member of a group Posting setting to Allowed.

The information contained in this email message and its attachments is intended only for the private and confidential use of the recipient(s) named above, unless the sender expressly agrees otherwise. Transmission of email over the Internet is not a secure communications medium. If you are requesting or have requested the transmittal of personal data, as defined in applicable privacy laws by means of email or in an attachment to email, you must select a more secure alternate means of transmittal that supports your obligations to protect such personal data. 

If the reader of this message is not the intended recipient and/or you have received this email in error, you must take no action based on the information in this email and you are hereby notified that any dissemination, misuse or copying or disclosure of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by email and delete the original message. 

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/8e29e755-65a8-4555-b377-003f63652b46n%40googlegroups.com.

[Matthew]

Did you figure out a way to solve this Gene?

I created a custom "Sender" role thinking I might be able to modify the groups once with that role and then add members to the group with that role programmatically but it turns out posting permissions is one of the settings that don't support custom roles (see screenshot) :(

I'm trying to use this in a school environment where we want to give staff posting permissions to some parent groups, ideally without making them all managers.

Since the API doesn't support editing posting permissions and since roles can't be used, I'm wondering if using an intermediate group might be the only solution...

Group 1: Year_5_...@example.edu (members not allowed to post)

• communicati...@example.edu, USER, OWNER
• pare...@gmail.example.com, USER, MEMBER
• pare...@yahoo.example.com, USER, MEMBER
• pare...@hotmail.example.com, USER, MEMBER
• year_5_pare...@example.edu, GROUP, MEMBER, POSTING ALLOWED (set manually)

Group 2: Year_5_pare...@example.edu (members allowed to post)

• exec...@example.edu, GROUP, MEMBER
• teac...@example.edu, USER, MEMBER
  
• teac...@example.edu, USER, MEMBER
  

Anyone got any better ideas?

[Danny Dillon - NOAA Affiliate]

An alternative is to allow a manager to post, and then give delegates access to the manager account.

We have "sets";  group(s) with the common restriction of all_managers_can_post, a common manager for that set, and a group of end users who are given delegate access to that specific manager account.  These delegates can then post to the set of groups as the manager, without getting privileged group access.   All of this is doable with gam.

This works for us because managers can be excluded from GCDS and treated separately from GCDS sync controlled members, while owners are treated as members.

Google promised us a replacement sender role for years before we turned our legacy system off, and two years after it is still a glaring omission that is not even on a roadmap AFAIK. We used to have per group granularity which also included external senders, and consider the lack of a sender role, robust OR simple, to be a major downgrade for our groups.

Danny

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/232bfb99-da41-4cf2-9bd1-7baec4457737n%40googlegroups.com.

[James SEYMOUR]

We have created a group called something like Staff-C...@domain.com and add this to the groups where needed. They are a member and set to not receive emails, but allowed to send. The other members of the groups, either individuals or groups are set to receive emails, but not send. 

So only those in the Staff-C...@domain.com can now send to these groups and the members of this group can be controlled through the AD (as we sync).

I am sure all of this could be set up with GAMADV.

James

[B Dyer]

Ross,

How may a user submit a request to Google to add an API to the admin-sdk?     The inability to API change an individual's posting status (Allowed, Not Allowed) becomes even more of an issue with Dynamic Groups since those groups do not have owners or managers.     To prevent student users from emailing everyone else in their Dynamic group, Google Support stated yesterday that the default group setting had to be "Not Allowed" then manually go to each staff member in the group and change Posting to "Allowed".    Without a "posting" API for a user, this goes from a quick fix to a laborious process.   Other workarounds in this conversation work for standard groups but not Dynamic.

[Chris Daggett]

I think I have done the same as what you are describing, and for me it is not working.  In the past, I added all members of Staff group to the Student group as managers, so they could send. 

This summer I switched to Nesting, so Staff is a member of Student, and set to allow posting manually under advanced (since nested groups cant be added as managers). Student Group is set to Mangers only for posting, that way students can't send email, but that shouldn't matter as advanced is SUPPOSE to override (according to documentation). That said, I have had 4 staff members reach out to let me know their email is getting kicked back.  

Did you have to set to members can send instead of Managers, and then set all members individually to can not post??