Group copyfrom "WHO_CAN_VIEW_MEMBERSHIP_CANNOT_BE_BROADER_THAN_WHO_CAN_SEE_GROUP"

Skip to first unread message

Will Sultzer

unread,
Jun 18, 2024, 12:03:21 PM6/18/24
to GAM for Google Workspace
Good Morning,

I'm encountering the following error when running the following command:

gam update group NewG...@domain.com  copyfrom OldG...@domain.com

Group:  NewG...@domain.com, Update Failed: Failed request validation in update settings: WHO_CAN_VIEW_MEMBERSHIP_CANNOT_BE_BROADER_THAN_WHO_CAN_SEE_GROUP

When checking the group info for OldGroup I see:

    whoCanViewGroup: ALL_IN_DOMAIN_CAN_VIEW
    whoCanViewMembership: ALL_IN_DOMAIN_CAN_VIEW

When checking the group info for NewGroup I see:
    whoCanViewGroup: ALL_IN_DOMAIN_CAN_VIEW
    whoCanViewMembership: ALL_IN_DOMAIN_CAN_VIEW

Any ideas what might be happening? I've used this command in the past without issue, at least I believe this is the same syntax I had used.

Ross Scroggs

unread,
Jun 18, 2024, 12:42:55 PM6/18/24
to google-ap...@googlegroups.com
Will,

Send me a Meet/Zoom invitation and I'll loo into this with you.

Ross
----
Ross Scroggs



--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/7cee3d29-dac3-4330-a6c2-d12dac6302c2n%40googlegroups.com.

Ross Scroggs

unread,
Jun 18, 2024, 12:52:21 PM6/18/24
to google-ap...@googlegroups.com
Will,


In the GUI, "Who can see group" is whoCanDiscoverGroup in the API.

Check that value.

Ross
----
Ross Scroggs


On Jun 18, 2024, at 9:03 AM, Will Sultzer <wsul...@clarkson.edu> wrote:

Ross Scroggs

unread,
Jun 18, 2024, 2:58:55 PM6/18/24
to google-ap...@googlegroups.com
Ross
----
Ross Scroggs


On Jun 18, 2024, at 9:03 AM, Will Sultzer <wsul...@clarkson.edu> wrote:

Will Sultzer

unread,
Jun 18, 2024, 3:31:42 PM6/18/24
to google-ap...@googlegroups.com
Ross,

Thank you for getting back to me. I'm realizing now something must have changed with the way group settings work in the time between the target group being created and now. There are some settings enabled on the group which, are no longer allowed to be enabled with the configuration of the group. 

For reference: 

The group is set to WhoCanDiscover=ALL_MEMBERS_CAN_DISCOVER however whoCanViewGroup=ALL_IN_DOMAIN_CAN_VIEW. When working in the GUI if you set WhoCanDiscover to members you can only set WhoCanView to members as well, organization is grayed out. It looks like this is causing my issue. 

Will Sultzer

You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/IMvMv_-uK6E/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/50BF8A48-8AA7-47E0-852A-244133DCB4CA%40gmail.com.

Ross Scroggs

unread,
Jun 18, 2024, 4:18:45 PM6/18/24
to google-ap...@googlegroups.com
W ill,


I have seen this before, settings that were previously acceptable are now invalid.

Ross
----
Ross Scroggs


MELAYE SONGELL Channel

unread,
Jun 23, 2024, 7:00:08 AM6/23/24
to GAM for Google Workspace
https://groups.google.com/g/songellsasak/c/e4hcEGOwB54
Reply all
Reply to author
Forward
0 new messages