Deprecated? who_can_view_membership

[Michael A Crowley]

Looking for the function in the GUI:
Access permissions / View E-mail Addresses

I believe it used to be set in GAM by:
who_can_view_membership

Has it been deprecated? Has it been merged with another?
I didn't find a reference to it in:
https://drive.google.com/file/d/1-ux3z6-hcjsPbhAj_EIwS7cd_emkE-NC/view

-Mike
---------------------------------------------------------------------------
Michael A. Crowley Network and Systems
mcro...@mtholyoke.edu 350 Library, Mount Holyoke College
413-538-2140 South Hadley, MA 01075
---------------------------------------------------------------------------

[Ross Scroggs]

Michael,

It's alive and well as far as I know.

See: https://developers.google.com/admin-sdk/groups-settings/v1/reference/groups#resource

What's the problem?

Ross

--

Ross Scroggs

ross.s...@gmail.com

[Michael A Crowley]

Gam 4.93 on Debian

Trying to use gam to change what is in the GUI for

Access permissions / View E-mail Addresses

It's currently set to "owners of the group".
The gam commands do not alter that setting.
(I hope I'm overlooking something obvious.)

I ran these commands:

With 'View E-mail Addresses' set to OWNER:
gam update group students-mead who_can_view_membership ALL_MANAGERS_CAN_VIEW
updated group studen...@mtholyoke.edu

gam update group students-mead whoCanViewMembership ALL_MEMBERS_CAN_VIEW
updated group studen...@mtholyoke.edu

These did not alter the 'View E-mail Addresses' setting.

In GUI, set "View E-mail Addresses" to "All members of the group"
gam update group students-mead whoCanViewMembership ALL_MANAGERS_CAN_VIEW
updated group studen...@mtholyoke.edu

'View E-mail Addresses' remained 'All members of the group',
(I had wondered if setting it to a more restricted setting would
alter things.)

-Mike

On Mon, 9 Sep 2019, Ross Scroggs wrote:

>Date: Mon, 9 Sep 2019 12:23:14 -0700
>From: Ross Scroggs <ross.s...@gmail.com>
>To: google-ap...@googlegroups.com
>Subject: Re: [GAM] Deprecated? who_can_view_membership

>--
>You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
>To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
>To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAJkvRS_QmVC%3Do0_g4-EVrzhzKnG9%3DcuMuz8M26u48m3PLe-ghw%40mail.gmail.com.
>

[Greg Haverkamp]

There is no mechanism to set who can view email addresses via the API, and there never has been.  In my organization, it’s one of our long-standing “What the heck is wrong with Google?” topics, largely because we’ve historically had to manually adjust it for almost every group we create, because it’s the first thing managers ask for.

Greg

[Ross Scroggs]

Greg,

I beg to differ, it works fine for me.

$ gam update group testgroup1 whocanviewmembership ALL_IN_DOMAIN_CAN_VIEW

Group: testg...@rdschool.org, Updated

$ gam info group testgroup1 fields whocanviewmembership nousers

Group: testg...@rdschool.org

  Group Settings:

    whoCanViewMembership: ALL_IN_DOMAIN_CAN_VIEW

$ gam update group testgroup1 whocanviewmembership ALL_MANAGERS_CAN_VIEW

Group: testg...@rdschool.org, Updated

$ gam info group testgroup1 fields whocanviewmembership nousers

Group: testg...@rdschool.org

  Group Settings:

    whoCanViewMembership: ALL_MANAGERS_CAN_VIEW

$ gam update group testgroup1 whocanviewmembership ALL_MEMBERS_CAN_VIEW

Group: testg...@rdschool.org, Updated

$ gam info group testgroup1 fields whocanviewmembership nousers

Group: testg...@rdschool.org

  Group Settings:

    whoCanViewMembership: ALL_MEMBERS_CAN_VIEW

At each step I verified that the settings were properly updated in the Admin GUI

https://admin.google.com/ac/groups/<GroupID>/settings

Ross

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAHEFaoSxCTcuA17rq6SQw%2BwABr1BU%2BLu5TsJ7AH-Z6HoBYwKBg%40mail.gmail.com.

--

Ross Scroggs

ross.s...@gmail.com

[Greg Haverkamp]

That’s a setting of who can view the members of a group.  Being able to view members doesn’t entitle you to view email addresses of members.

Greg

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAJkvRS9d5a2d33Wm26Le2-Fu5Jr1rrNt3KO9jD6OLgJwMUNq1Q%40mail.gmail.com.

[Ross Scroggs]

Greg,

Now I understand the distinction; thanks for the clarification.

Ross

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAHEFaoQx2sAgEccpxSidpf%3DOydfWT48g-2iF%3DYTuUywBEDJ_ww%40mail.gmail.com.

--

Ross Scroggs

ross.s...@gmail.com

[Greg Haverkamp]

Incidentally, the defaults for this appear to have changed.

We don't permit our uses to own groups; they can only be managers.  By default, the setting for who can view email addresses has been set to Owners only.  Most Google Groups are now created using an in-house UI that creates the groups for them.  Then, one of our G Suite admins has had to go in and manually change the setting in the UI, since it was often  requested.

After this conversation, I just on a whim decided to try to see everything from scratch, and... The default appears to have changed.  I've tried both our existing Groups-dedicated UI, as well as our new groups management tool (Internet2's Grouper), and in both cases, email visibility has now defaults for emails to be viewable by Owners, Managers, All organization members, and All members.  I don't recall seeing this announced... Not a shock that that would happen.

(Still not manageable via API, unfortunately.  At least, no documentation to that effect.)

Greg

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAJkvRS-Ag76aEHqjBBTY5roS-%2BZ6%3DV0Bnz2SPXYtRDbuNP8dnw%40mail.gmail.com.

[+KimNilsson]

@Gregory,

so a change in the positive direction? Which should mean that most (who usually WANT to see members) don't have to change settings of new groups?

[Greg Haverkamp]

At first blush, that's how it appears.  We haven't done a lot of testing -- only two groups so far -- but if this is a universal change, it is certainly an improvement from our point of view.  I talked to our person who manages most of the groups for users, and he couldn't imagine a scenario where we'd want to mask email addresses, though I imagine there are a few group types.

It would still be nice to have access to to it via the API.

Greg

On Sat, Sep 14, 2019 at 3:27 AM +KimNilsson <there.is.no...@gmail.com> wrote:

@Gregory,

so a change in the positive direction? Which should mean that most (who usually WANT to see members) don't have to change settings of new groups?

--

You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/a1526ad2-40fc-4075-89f4-e0e180c6cbb6%40googlegroups.com.