Bug 56984 – Google Workspace Connector account should only request minimal permissions

Bug 56984 - Google Workspace Connector account should only request minimal permissions


Summary:	Google Workspace Connector account should only request minimal permissions

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	Google Apps for Work
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Mail maintainers
QA Contact:	Mail maintainers

URL:	https://cloud.google.com/iam/docs/und...
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2024-01-15 17:10 CET by Finn David
Modified:	2024-01-15 23:43 CET (History)
CC List:	2 users (show)

See Also:
What kind of report is it?:	Feature Request
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:	Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2024011521000396
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Finn David

2024-01-15 17:10:11 CET

In the "Google Workspace setup wizard" you have to create a "UCS sync" account which gets many permissions (the editor role has ~7900 permissions ).

Customers (might) want to have the possibility to reduce those permissions, at least after the initial setup.