Domain Auth, Google Groups, and external users/emails

[matthewmoran]

We are using Domain Auth and Google Groups with several of our Appsheet projects. However, when attempting to use a group with external users, they get "Access denied" unless they are explicitly added to the App via the Share button. 

Any idea why this might be the case?

Thanks.
MM

[Trevwiller]

Domain auth, from my experience authorizes any user that's email has explicitly that domain in their email. IF the users do not have the domain in their email they are denied. Even if their organization has their email under some allow list. They are considered external to the domain so they would need to be added on a per person basis on these addresses.

[matthewmoran]

It seems that may be the case, though, Appsheet support had a different answer.

We're running some test but we can definitely add the external users individually.

This is problematic from a functional maintenance standpoint as we already create specific groups that include External users for other Workspace services. It introduces one more area to miss permission adjustments. Hmm..