3 ms·

Does this apply with https://cloud.google.com/resource-manager/docs/organization-policy/restricting-domains https://cloud.google.com/resource-manager/docs/organ

• Ephil012 4y ago
  I am on a personal gmail so I can't test this myself. However, I suspect it might not prevent it. The feature you linked seems to just allow you restrict domains that projects within your org can be shared with. The issue is not that you're sharing projects with someone else, but that they're sharing projects with you. So in that case, this feature would do nothing to block that as far as I can tell. That is unless they add the ability to block someone outside sharing stuff with you (which I did not see any mention of after a quick skim of the link you posted).
• blinkingled 4y ago
  No, as this is at the granting org level - so the org owner may restrict it to their domain and anyone under it won't be able to assign privileges to an identity from a random domain, but that's not what this is about - If I own the org and project I can opt to not restrict the domains and invite anyone. However IIRC Owner Role grants require email invite acceptance, just not sure if that's policy driven as well - https://issuetracker.google.com/issues/111843590?pli=1 https://issuetracker.google.com/issues/111843590?pli=1