allow specific organization to post mail to group (bimpression.com) - google-workspace

I want to allow only one organization to post emails and invite meetings to a specific group.
I am familiar with the setting of the group to allow receiving from outside the organization, but it will open this option to the whole internet.
I looked out and found this article (of google support) but this solution will restrict every mail to my organization (user and groups) - which I really don't want to do
example
A few months ago I chatted with a Google representative, which recommended creating a routing rule - but it didn't work as well (which blocked all email traffic to our org, users, and groups)
the outcome that I need:
*#external-org.com to be able to post mails to specific-group#bimpression.com (my organization)

Related

Registering for notification emails from cloud-proactive-comms

My colleagues receive emails from "cloud-proactive-comms" with notifications to upgrade our cluster in response to security threats and stuff like that.
How do I register for these emails as well?
First of all, you need to be a project owner in order to receive those emails form "cloud-proactive-comms".
You can also check with your colleague, which permission you are lacking to get those email. As it's possible that your colleague is a Project Owner.
Additionally, if you need RSS feeds available for Security bulletins related to Kubernetes Engine, please visit this article.

Automatic invites to your github organisation

At the moment for a Github organisation of mine, potential members have to be manually searched for an added. Is there way a to make your Github Organization public, so people can easily and automagically join your cause?
I am a beginner with Github, but have searched a lot and they don't seem to have this feature. Is it a plugin anywhere?
I see 2 problems, either of which would be nice to fix.
Why can't users request an invite to your organisation, even if you have to manually approve?
Why can't I send out bulk invites to say an email list? Or can I do this?
Thanks Stack Overflow
I don't know why Github doesn't offer anything like this functionality. Github Organisations seem still kind of underdone, and I look forward to them making them more useful. For the moment I have something which can help you with one of your problems.
Second Problem: Bulk Invites
After needing bulk invite students for a university club I am a part of, I created thundergolfer/automated-github-organisation-invites. It's a Heroku deploy-able web app that allows anyone with access to the URL to get themselves an organisation invite automatically.
It uses the Github API to do basically what you need. You can send out a bulk email with a link to the web app. Job Done.
First Problem: Users requesting invites
The problem with the above solution is that you don't get a chance to review who requests an invite. They are automatically added. Perhaps when I get time in the future I can extend the project above to allow you to capture requests and then review them before sending out the email.
I am not sure about the first point. But the second point should be no problem. You can use the GitHub API to invite members to your organisation. You can read more about it here:
https://developer.github.com/v3/orgs/members/#add-a-member
If using GitHub classroom then you can solve both problems. In the classroom you can add multiple email invites at the same time (or link with a LMS to get the list of people to invite automatically, both are explained here). You can also create an assignment and end up with a link that can be sent to people to join. Within an assignment there can be auto Team and Repo creation.
With your second problem another option is a python script that can bulk invite users to a GitHub organisation:
https://github.com/RobbyJ/github_batch_organisation_invite

How to determine if users with different home domains are part of same google apps org?

In Google Apps, there is always a base/primary organization. But Google Apps can have subdomains and suborganizations both (or combination of those).
We want to be able to identify the currently logged-in user as being part of the overall organization, whether it be the primary org/domain or some subdomain or suborg. But when you get user info or license info, it returns the home domain of the currently logged in user as the ID for their organization. No ID is consistent across all subdomains or suborgs.
I've also tried listing all orgs using the organization apis, but that doesn't seem to work when trying to get the org info of the root org: https://developers.google.com/admin-sdk/directory/v1/guides/manage-org-units
Is there a way, given a particular Google Apps user, to determine what the primary organization is?
The only alternative we have is to treat every domain/subdomain in the Google Apps org as it's own independent org. This is less than ideal because now a Google Apps admin who manages all of their sub-orgs/subdomains in one place in Google will now have to manage a separate organization in our app for each domain in their overall org. This uses up extra resources in our system for creating these additional orgs, but more importantly creates a very confusing organization/user management model.
When you look at the Users resource for the two users, compare the customerId attribute. If they match, the two users are in the same Google Apps account. If they don't they're not.
Also, don't assume two logged in users are in the same Apps account. One could be an Apps account and one could be a consumer account even though they have the same SMTP domain.

Get all email addresses of user using Google API

For my own gmail account, I have multiple email addresses associated with it. For example, I have an email address from my university that is associated with my gmail, and I can send emails from my gmail as if they are coming from my university email address.
I'm reading up on the Google APIs, and I see that I can get a user's gmail address, but can I also get any other email address that is associated with their gmail account?
When a user logs in to my site, I'd like to present them with a list of the gmail-associated email addresses and let them select the one they would like to use.
EDIT: Thanks everyone for the answers, but I don't think any of them answers the question. I've been playing with Google's OAuth playground. It is strange that I can get lots of very personal information (a list of a user's contacts and even received emails) but I can't get the user's alternative email addresses.
Your description is a little vague. Are you talking about send-as alias accounts or alternate email accounts?
Send-as Alias
Either way, you can interact with the send-as accounts here: Manage Send-as Alias
Alternate Emails via Admin SDK
As for alternate email accounts, they can be accessed via:
Admin SDK: https://developers.google.com/admin-sdk/directory/v1/guides/manage-user-aliases?hl=en
Google Apps Script: https://developers.google.com/apps-script/reference/gmail/gmail-app#getAliases()
Additional info here on how the accounts work.
Email addresses associated with your account
Alternate email addresses and other Google products
Connect other email accounts to your Google Account
Federated Login
Also, I'm not exactly sure how you are trying to incorporate this functionality into your site but another area I recommend checking out is Federated Login for Google Account Users. This might also provide you with the functionality you seek.
Using federated login (also known as federated identity), your website
or application can allow visitors to sign in using their Google user
accounts. Federated login frees users from having to set up separate
login accounts for different websites, and frees you from the task of
implementing login authentication measures.
It has been a while since the question was asked. You can use the Google People API to get a user's primary email address and aliases. Here's the documentation. The scope you need to use is: https://www.googleapis.com/auth/user.addresses.read
This will return all the email addresses for the user and also tell you which is the primary one.
If you use OAuth to have your users sign-in with their Google accounts (with or without G+) the user will be prompted (by Google) to select which of their accounts they wish to authorize your application to use:
https://developers.google.com/accounts/docs/OAuth2Login
So to directly answer your question, I'm not aware of an API to return that list of users - however you shouldn't need to, Google will take care of this before returning to your application.
If your user is already logged in, and you wish to give them the ability to change the Google account they are using, I believe it is possible to prompt them again to select the account they are interested in (search for select_account on the link above).
This is possible. However, this has changed since Google announced the deprecation of their Google+ People API, which a lot of folks used to get all the email addresses for a user. The current most voted answer now goes to a 404.
Google Plus People API Replacement
Google has replaced the Google Plus People API /plus/v1/people/me with https://developers.google.com/people/ and you’ll want to use the https://www.googleapis.com/auth/user.emails.read profile scope as discussed here as a replacement. The schema is different, so you'll need to change your mapping as well.
If your app already used the following scopes from the old /plus/v1/people/me your user will not have to re-consent when you switch to the new API:
email
profile
https://www.googleapis.com/auth/plus.login
https://www.googleapis.com/auth/plus.me
https://www.googleapis.com/auth/plus.profile.agerange.read
https://www.googleapis.com/auth/plus.profile.emails.read
https://www.googleapis.com/auth/plus.profile.language.read

How do I set up a searchable email distribution list, accesible via webpage?

I work for a large company, which uses MS Exchange for Email. We have a distribution list for people to post questions, where anyone can answer. I am looking for a way to maintain a copy of this distribution list so that anyone can search it. Ideally, this would be searchable from within Outlook as well as by going to a webpage, but I will take either one. Someone has proposed to create a dummy email account, which just gets the distribution list traffic. Everyone interested in this distribution list could then attach this account. While this may work, there are several challenges with this approach:
1) It becomes problematic when you have several hundred people attaching a single email Inbox/account.
2). I need this account to be read-only, so someone doesn't accidentally delete an email from this account, thinking that it is in their personal account.
3). Our company has an auto-archive policy. This account would need to be exempt from that policy.
Any ideas?
Thanks
GS
The dummy mailbox is not a bad idea. You can give the people appropiate permissions to the Inbox folder of that mailbox.
To work around the permission issue you could either
1) create a transport agent which monitors the mailflow and dumps all messages to a database or CMS/SharePoint/whatever.
2) Create the dummy mailbox and setup a service which monitors this mailbox using push/pull/streaming notifications and dump the messages to a database/CMS/SharePoint/whatever.
The SharePoint solution would make the search option a piece of cake. But if you don't already have a SharePoint instance up and running this might be overkill.