unintended consequence from Group permissions change

[Tucker Perry]

Hi team,

When I change who can view topics in a group, it also changes the Post permission, removing the ability for the public to post.

The use case here is a group akin to ap@domain, or recruiting@domain, groups where anyone in the world should be able to post, but only members should be able to read. 

Is this intended behavior? Is there some way to prevent it, or do I need to record current state before making any changes so I can do a second pass on any groups to reset the public post flag?

thanks

tucker

--
tucker
eng. mgr.

[+KimNilsson]

You don't need to record current state.

Just run GAM a second time and set Post setting after setting the View setting.

[Tucker Perry]

If I'm doing this against hundreds of groups with mixed Post settings, I have no way of knowing what to set the flag to on a second pass unless I record the initial state. 

--
tucker
eng. mgr.

On Mon, Apr 24, 2017 at 2:59 AM, +KimNilsson <there.is.no...@gmail.com> wrote:

You don't need to record current state.

Just run GAM a second time and set Post setting after setting the View setting.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/b0c69e9a-8c2f-4235-8da8-f24f342a6edd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Tucker Perry]

Hopped on a call with Ross and we found the root cause. In the admin
console, we have "Group owners can allow incoming email from outside
this domain" set to FALSE. Changing this to TRUE makes the issue go
away.

I can see how they're connected, but I'm surprised that my action as
an admin is regulated by a setting relevant to users, as well as not
being the target of my settings change.

--
tucker
eng. mgr.

On Mon, Apr 24, 2017 at 8:53 AM, Tucker Perry <tuc...@uber.com> wrote:
> If I'm doing this against hundreds of groups with mixed Post settings, I
> have no way of knowing what to set the flag to on a second pass unless I
> record the initial state.
>
>
> --
> tucker
> eng. mgr.
>
> On Mon, Apr 24, 2017 at 2:59 AM, +KimNilsson
> <there.is.no...@gmail.com> wrote:
>>
>> You don't need to record current state.
>> Just run GAM a second time and set Post setting after setting the View
>> setting.
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "GAM for G Suite" group.
>> To unsubscribe from this group and stop receiving emails from it, send an

>> email to google-apps-man...@googlegroups.com.
>> To post to this group, send email to google-ap...@googlegroups.com.

[Kim Nilsson]

Ah, glad you found a solution!

--

There is No Substitute!

google.com/+KimNilsson

[Tucker Perry]

More a workaround than a solution, but it seems that GAM isn't the only tool impacted by this. The 3rd party admin console we use does the same thing. Seems like an oddity in the API's behavior. I've got a ticket open w Google on it, and I'll update the group if there's any progress there.

[Tucker Perry]

Via Google support:

Investigating further on my side with these new details, I found the issue #32460496 which match this behavior you are seeing and is already reported on the Engineering Team side. While this is under investigation with the Engineering Team, there is no ETA that can be shared at this time for a full resolution.

Please note that there is a workaround in place which consist, where possible, to use HTTP PUT method instead of PATCH. Another way to mitigate this issue, as you have already noticed is to have the checkbox "Group owners can allow incoming email from outside this domain" which in your testing had this behavior disappear.

--
tucker
eng. mgr.

--

You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsubscribe...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.

Visit this group at https://groups.google.com/group/google-apps-manager.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/244f9055-955f-4340-9e28-9ad3cdbd4d19%40googlegroups.com.