Groups and Multiple Domains

3,561 views
Skip to first unread message

Scott - Cloud Logic

unread,
Jul 16, 2010, 5:18:26 AM7/16/10
to Google Apps Manager
Hi Jay,

First, many thanks for your very useful app.

I have a client who is going to change a domain alias into a secondary
domain so most of their users can use the secondary domain name as
their primary email address. Using your Manager I can change their
email address easily. Thank you for that.

Now to the question!

The client has a number of Groups that currently are emailable at
grou...@primarydomain.com and grou...@aliasdomain.com.

When we change the alias domain into a secondary domain, the groups
will only have email addresses grou...@primarydomain.com. Google
Support have confirmed this and advised I must add the secondary
domain email address to each group using the Provisioning API.

I've looked around your Manager site but can't see any functionality
to do this. Can you advise if your Manager does actually do this and,
if not, have you any plans to add it?

In addition, have you any plans to add functionality to create Groups
that only have the secondary domain as their email address and to add
and remove members to such Groups?

cheers,
Scott

Jay Lee

unread,
Jul 16, 2010, 7:40:16 AM7/16/10
to Google Apps Manager
Hi Scott,

Unfortunately it doesn't seem to be possible to do either right now:

1) Groups cannot be created with their primary address in the
secondary domain. Attempting to create such an account via the API
just results in the group being created in the Primary domain.

2) Email Aliases are used to add secondary addresses however they can
only be pointed at a user account, they can't point to a group or
another alias.

These limitations are entirely on Google's side, they just haven't
provided any method for doing this yet. See the Provisioning API docs
for the nitty gritty:

http://code.google.com/googleapps/domain/gdata_provisioning_api_v2.0_developers_protocol.html#Managing_Multiple_Domain_Users

For these reasons, it's not possible to directly add a secondary
domain address to a group. However you should be able to work around
this by setting up a user account in the secondary domain and
configuring that user account to forward all mail to the group. So if
you had grou...@primarydomain.com and you want the group to also be
able to receive email sent to grou...@secondarydomain.com, you would
create a user in the secondary domain with a username of
grou...@secondarydomain.com and configure that user to forward all
mail to grou...@primarydomain.com. Hope this makes sense,

If/when Google adds the ability to add an alias to a group or to
create groups in secondary domains, I'll definitely see about adding
the functionality to GAM.

Jay

On Jul 16, 5:18 am, Scott - Cloud Logic
<scott.mcken...@cloudlogic.co.uk> wrote:
> Hi Jay,
>
> First, many thanks for your very useful app.
>
> I have a client who is going to change a domain alias into a secondary
> domain so most of their users can use the secondary domain name as
> their primary email address.  Using your Manager I can change their
> email address easily.  Thank you for that.
>
> Now to the question!
>
> The client has a number of Groups that currently are emailable at
> groupn...@primarydomain.com and groupn...@aliasdomain.com.
>
> When we change the alias domain into a secondary domain, the groups
> will only have email addresses groupn...@primarydomain.com.  Google

Scott - Cloud Logic

unread,
Jul 19, 2010, 8:55:36 AM7/19/10
to Google Apps Manager
Hi Jay,

Many thanks for that. I feared that was the case. The person I was
emailing at Google Apps support seemed to think it was possible using
the following commands with the API but I'm guessing she's advising
this without direct experience testing it:

"From what I know of the API, the following command should allow you
to change this name to update the group with a new [secondary domain]
address:
Update Group PUT https://apps-apis.google.com/a/feeds/group/2.0/domain/groupId

If it does not work, I would recommend creating a new group with the
following command with the [secondary domain] group name you would
like, then adding the members under this new name:
Create Group POST https://apps-apis.google.com/a/feeds/group/2.0/domain
Add Member to Group POST https://apps-apis.google.com/a/feeds/group/2.0/domain/groupId/member"

Is this any help at all?

Unfortunately this is a Google Apps Premier Account so adding a
separate user to forward to each of the 28 groups would be expensive,
although I suppose I could do it with filters just using one user
account and nicknames with each nickname filtering and forwarding to a
separate primary domain group. Thanks for the suggestion.

cheers,
Scott

On Jul 16, 12:40 pm, Jay Lee <j...@pbu.edu> wrote:
> Hi Scott,
>
>   Unfortunately it doesn't seem to be possible to do either right now:
>
> 1) Groups cannot be created with their primary address in the
> secondary domain. Attempting to create such an account via the API
> just results in the group being created in the Primary domain.
>
> 2) Email Aliases are used to add secondary addresses however they can
> only be pointed at a user account, they can't point to a group or
> another alias.
>
> These limitations are entirely on Google's side, they just haven't
> provided any method for doing this yet. See the Provisioning API docs
> for the nitty gritty:
>
> http://code.google.com/googleapps/domain/gdata_provisioning_api_v2.0_...
>
> For these reasons, it's not possible to directly add a secondary
> domain address to a group. However you should be able to work around
> this by setting up a user account in the secondary domain and
> configuring that user account to forward all mail to the group. So if
> you had groupn...@primarydomain.com and you want the group to also be
> able to receive email sent to groupn...@secondarydomain.com, you would
> create a user in the secondary domain with a username of
> groupn...@secondarydomain.com and configure that user to forward all
> mail to groupn...@primarydomain.com. Hope this makes sense,

Scott - Cloud Logic

unread,
Jul 20, 2010, 1:53:51 PM7/20/10
to Google Apps Manager
Hi Jay,

Good news!

I did some more testing and found that I could in fact create a group
that had as its primary address grou...@secondardarydomain.com by
using the following command in your GAM:

gam create group anyone...@secondarydomain.com name "Anyone
Beatles" description "Fab Four" permission anyone

I was then able to add the appropriate members to this domain using
the Google Apps control panel.

What I've then done is create a group called, in the above scenario,
anyone...@primarydomain.com in the Google Apps control panel and
added as its only member the anyone...@secondarydomain.com group.

This means that whether someone emails anyonebeatles@
primarydomain.com or secondarydomain.com, the email is routed to the
members of anyone...@secondarydomain.com correctly!

cheers,
Scott



On Jul 19, 1:55 pm, Scott - Cloud Logic
<scott.mcken...@cloudlogic.co.uk> wrote:
> Hi Jay,
>
> Many thanks for that.  I feared that was the case.  The person I was
> emailing at Google Apps support seemed to think it was possible using
> the following commands with the API but I'm guessing she's advising
> this without direct experience testing it:
>
> "From what I know of the API, the following command should allow you
> to change this name to update the group with a new [secondary domain]
> address:
> Update Group    PUThttps://apps-apis.google.com/a/feeds/group/2.0/domain/groupId
>
> If it does not work, I would recommend creating a new group with the
> following command with the [secondary domain] group name you would
> like, then adding the members under this new name:
> Create Group    POSThttps://apps-apis.google.com/a/feeds/group/2.0/domain
> Add Member to Group     POSThttps://apps-apis.google.com/a/feeds/group/2.0/domain/groupId/member"
Reply all
Reply to author
Forward
0 new messages