Groups Access Permissions - View email addresses

333 views
Skip to first unread message

T Roche

unread,
Mar 29, 2019, 11:38:38 AM3/29/19
to GAM for G Suite
Background:
We recently discovered that our Groups report shows "Group permission changed.  Anonymous user changed Who can view members' emails from None to Anyone in the organization, Owners of the group, Managers of the group....".

Google support advised "After doing further research I have found that any reporting this issue between March 21st and March 27th was triggered by an internal cleanup system, not by a user/admin in the customer's domain, and is not malicious in any way. However, due to this issue, this internal cleanup activity was inadvertently shown in customer audit logs, and was labeled as being done by an "Anonymous user"."

Although we are seeing the Known Issue of the "Anonymous user", our main issue was that the permissions were changed, and Google are saying we have to restore the settings ourselves on the c1600 groups.

My question is, am I correct that the setting "Who can view members' emails" is not available via the API and therefore is not configurable with GAM?

Ross Scroggs

unread,
Mar 29, 2019, 11:59:43 AM3/29/19
to google-ap...@googlegroups.com
Tracey,

I think you're right, I've never discovered an API setting that corresponds to "Who can view members' emails"/"View Email Addresses"

Ross

This email originated from TU Dublin. If you received this email in error, please delete it from your system. Please note that if you are not the named addressee, disclosing, copying, distributing or taking any action based on the contents of this email or attachments is prohibited. 

Is ó OT Baile Átha Cliath a tháinig an ríomhphost seo. Má fuair tú an ríomhphost seo trí earráid, scrios de do chóras é le do thoil. Tabhair ar aird, mura tú an seolaí ainmnithe, go bhfuil dianchosc ar aon nochtadh, aon chóipeáil, aon dáileadh nó ar aon ghníomh a dhéanfar bunaithe ar an ábhar atá sa ríomhphost nó sna hiatáin seo.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/ca885b6d-fcf1-4fb4-b27c-8ece7b261a08%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


--

Blutarsky

unread,
Jul 29, 2019, 2:39:52 PM7/29/19
to GAM for G Suite
Any news on this? Can someone clarify the exact meaning of this "View email addresses" setting? Does it means that anyone can view all other members emails in each message/post?


On Friday, March 29, 2019 at 4:59:43 PM UTC+1, Ross Scroggs wrote:
Tracey,

I think you're right, I've never discovered an API setting that corresponds to "Who can view members' emails"/"View Email Addresses"

Ross

On Fri, Mar 29, 2019 at 8:38 AM T Roche <025...@dit.ie> wrote:
Background:
We recently discovered that our Groups report shows "Group permission changed.  Anonymous user changed Who can view members' emails from None to Anyone in the organization, Owners of the group, Managers of the group....".

Google support advised "After doing further research I have found that any reporting this issue between March 21st and March 27th was triggered by an internal cleanup system, not by a user/admin in the customer's domain, and is not malicious in any way. However, due to this issue, this internal cleanup activity was inadvertently shown in customer audit logs, and was labeled as being done by an "Anonymous user"."

Although we are seeing the Known Issue of the "Anonymous user", our main issue was that the permissions were changed, and Google are saying we have to restore the settings ourselves on the c1600 groups.

My question is, am I correct that the setting "Who can view members' emails" is not available via the API and therefore is not configurable with GAM?

This email originated from TU Dublin. If you received this email in error, please delete it from your system. Please note that if you are not the named addressee, disclosing, copying, distributing or taking any action based on the contents of this email or attachments is prohibited. 

Is ó OT Baile Átha Cliath a tháinig an ríomhphost seo. Má fuair tú an ríomhphost seo trí earráid, scrios de do chóras é le do thoil. Tabhair ar aird, mura tú an seolaí ainmnithe, go bhfuil dianchosc ar aon nochtadh, aon chóipeáil, aon dáileadh nó ar aon ghníomh a dhéanfar bunaithe ar an ábhar atá sa ríomhphost nó sna hiatáin seo.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.


--
Ross Scroggs

Ross Scroggs

unread,
Jul 29, 2019, 3:07:45 PM7/29/19
to google-ap...@googlegroups.com
View Email Addresses

User can view email addresses on the web interface. Regardless of this setting, user can still see email addresses on posts delivered to his or her inbox

Ross

On Mon, Jul 29, 2019 at 11:39 AM Blutarsky <riccar...@gmail.com> wrote:
Any news on this? Can someone clarify the exact meaning of this "View email addresses" setting? Does it means that anyone can view all other members emails in each message/post?

On Friday, March 29, 2019 at 4:59:43 PM UTC+1, Ross Scroggs wrote:
Tracey,

I think you're right, I've never discovered an API setting that corresponds to "Who can view members' emails"/"View Email Addresses"

Ross

On Fri, Mar 29, 2019 at 8:38 AM T Roche <025...@dit.ie> wrote:
Background:
We recently discovered that our Groups report shows "Group permission changed.  Anonymous user changed Who can view members' emails from None to Anyone in the organization, Owners of the group, Managers of the group....".

Google support advised "After doing further research I have found that any reporting this issue between March 21st and March 27th was triggered by an internal cleanup system, not by a user/admin in the customer's domain, and is not malicious in any way. However, due to this issue, this internal cleanup activity was inadvertently shown in customer audit logs, and was labeled as being done by an "Anonymous user"."

Although we are seeing the Known Issue of the "Anonymous user", our main issue was that the permissions were changed, and Google are saying we have to restore the settings ourselves on the c1600 groups.

My question is, am I correct that the setting "Who can view members' emails" is not available via the API and therefore is not configurable with GAM?

This email originated from TU Dublin. If you received this email in error, please delete it from your system. Please note that if you are not the named addressee, disclosing, copying, distributing or taking any action based on the contents of this email or attachments is prohibited. 

Is ó OT Baile Átha Cliath a tháinig an ríomhphost seo. Má fuair tú an ríomhphost seo trí earráid, scrios de do chóras é le do thoil. Tabhair ar aird, mura tú an seolaí ainmnithe, go bhfuil dianchosc ar aon nochtadh, aon chóipeáil, aon dáileadh nó ar aon ghníomh a dhéanfar bunaithe ar an ábhar atá sa ríomhphost nó sna hiatáin seo.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.


--
Ross Scroggs

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/40c2dcd2-d1c1-4002-86dd-51d109372db2%40googlegroups.com.


--
Message has been deleted

Blutarsky

unread,
Jul 29, 2019, 5:04:57 PM7/29/19
to GAM for G Suite
I'd like to avoid exposing group members emails to any other member. Is this the meaning?
Apparently member emails are hidden. Did I got it wrong?
See attached image

download (6).png



On Monday, July 29, 2019 at 9:07:45 PM UTC+2, Ross Scroggs wrote:
View Email Addresses

User can view email addresses on the web interface. Regardless of this setting, user can still see email addresses on posts delivered to his or her inbox

Ross

On Mon, Jul 29, 2019 at 11:39 AM Blutarsky <riccar...@gmail.com> wrote:
Any news on this? Can someone clarify the exact meaning of this "View email addresses" setting? Does it means that anyone can view all other members emails in each message/post?

On Friday, March 29, 2019 at 4:59:43 PM UTC+1, Ross Scroggs wrote:
Tracey,

I think you're right, I've never discovered an API setting that corresponds to "Who can view members' emails"/"View Email Addresses"

Ross

On Fri, Mar 29, 2019 at 8:38 AM T Roche <025...@dit.ie> wrote:
Background:
We recently discovered that our Groups report shows "Group permission changed.  Anonymous user changed Who can view members' emails from None to Anyone in the organization, Owners of the group, Managers of the group....".

Google support advised "After doing further research I have found that any reporting this issue between March 21st and March 27th was triggered by an internal cleanup system, not by a user/admin in the customer's domain, and is not malicious in any way. However, due to this issue, this internal cleanup activity was inadvertently shown in customer audit logs, and was labeled as being done by an "Anonymous user"."

Although we are seeing the Known Issue of the "Anonymous user", our main issue was that the permissions were changed, and Google are saying we have to restore the settings ourselves on the c1600 groups.

My question is, am I correct that the setting "Who can view members' emails" is not available via the API and therefore is not configurable with GAM?

This email originated from TU Dublin. If you received this email in error, please delete it from your system. Please note that if you are not the named addressee, disclosing, copying, distributing or taking any action based on the contents of this email or attachments is prohibited. 

Is ó OT Baile Átha Cliath a tháinig an ríomhphost seo. Má fuair tú an ríomhphost seo trí earráid, scrios de do chóras é le do thoil. Tabhair ar aird, mura tú an seolaí ainmnithe, go bhfuil dianchosc ar aon nochtadh, aon chóipeáil, aon dáileadh nó ar aon ghníomh a dhéanfar bunaithe ar an ábhar atá sa ríomhphost nó sna hiatáin seo.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.


--
Ross Scroggs

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.


--
Ross Scroggs

Blutarsky

unread,
Jul 29, 2019, 5:09:47 PM7/29/19
to GAM for G Suite
If the email exposed is just senders email, no problem at all.

Blutarsky

unread,
Jul 30, 2019, 4:43:07 AM7/30/19
to GAM for G Suite
Is it just the sender email that is visible?

+KimNilsson

unread,
Jul 30, 2019, 11:22:51 AM7/30/19
to GAM for G Suite
If the recipient has view members access to the group it should show members immediately in the Gmail view.

Blutarsky

unread,
Jul 30, 2019, 4:42:15 PM7/30/19
to GAM for G Suite
Thanks Kim. Will set the switch manually upon groups creation

Blutarsky

unread,
Jul 31, 2019, 6:49:48 AM7/31/19
to GAM for G Suite
It looks like ti will not expose emails anyway. I have created a test group with a bunch of members. Group Access permission View members is set to "All members of the group, All organisation members. User can view the forum membership list"
However neither hovering the mouse in gmail list nor within the message view will show any member detail/email. Could you test this on your side?

On Tuesday, July 30, 2019 at 5:22:51 PM UTC+2, +KimNilsson wrote:
Reply all
Reply to author
Forward
0 new messages