all users in my organization

[Joshua Fox]

I want to give permissions to all users in my organization.

Does  allAuthenticatedUsers do it; or if as suggested here https://cloud.google.com/iam/docs/overview#allauthenticatedusers

allAuthenticatedUsers   applies to all Google accounts, how do I get the scope I need?

[Taher (Cloud Platform Support)]

Hi Joshua,

Thank you for your question. Could you elaborate your use case a bit more so it will be helpful to anyone trying to understand the question? Please provide information regarding the context of this situation like where you want to give users this permission to do what task etc. 

[Josh Moore]

allAuthenticatedUsers does act a documented, and applies to all Google accounts.  Since you're using an organization, you can use the organization's domain (e.g. example.com) to grant roles to all users of the organization.  This is noted in our FAQ: https://cloud.google.com/iam/docs/support#to_what_identities_can_i_grant_cloud_iam_roles

We could make this more clear elsewhere in the documentation, so I'll see that we update the docs around this.

On Sun, Mar 18, 2018 at 3:07 PM 'Taher (Cloud Platform Support)' via Google App Engine <google-a...@googlegroups.com> wrote:

Hi Joshua,

Thank you for your question. Could you elaborate your use case a bit more so it will be helpful to anyone trying to understand the question? Please provide information regarding the context of this situation like where you want to give users this permission to do what task etc. 

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/42e0e83f-18e4-4463-b88e-16ea864c88be%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Josh Moore |

Cloud Solutions Engineer |

josh...@google.com |

[Joshua Fox]

On Mon, Mar 19, 2018 at 1:22 AM, 'Josh Moore' via Google App Engine <google-a...@googlegroups.com> wrote:

allAuthenticatedUsers does act a documented, and applies to all Google accounts.  Since you're using an organization, you can use the organization's domain (e.g. example.com) to grant roles to all users of the organization.  This is noted in our

Yes, that is what I need.

FAQ: https://cloud.google.com/iam/docs/support#to_what_identities_can_i_grant_cloud_iam_roles

And hovering over the info icon in Cloud Console->Cloud Storage-> Permissions ->Add Members , I see 

"Add one or more of the following:...Google Apps domain: example.com"

So I guess I just need to write the domain name there.

We could make this more clear elsewhere in the documentation, so I'll see that we update the docs around this.

On Sun, Mar 18, 2018 at 3:07 PM 'Taher (Cloud Platform Support)' via Google App Engine <google-appengine@googlegroups.com> wrote:

Hi Joshua,

Thank you for your question. Could you elaborate your use case a bit more so it will be helpful to anyone trying to understand the question? Please provide information regarding the context of this situation like where you want to give users this permission to do what task etc. 

I want to let all users in my organization  write/read to a Google Storage bucket

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscribe@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.

Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/42e0e83f-18e4-4463-b88e-16ea864c88be%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Josh Moore |

Cloud Solutions Engineer |

josh...@google.com |

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscribe@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.

Visit this group at https://groups.google.com/group/google-appengine.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/CAOvpJmX3C7_ZuKXMMiJkzXF-zv%2BQB9LSR%2BcxzGemj8FiSj5aTA%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.

--

 

JOSHUA FOX

Director, Software Architecture | Freightos

T (Israel): +972-545691165 | T (US):  +1-3123400953  

Smooth shipping.