Verify federated ad/entra user visible in IAM gcp side for role assignment - currently only admin side can assign user to a group

GoogleCloudPlatform / pbmm-on-gcp-onboarding

GCP Canadian Public Sector Landing Zone overlay on top of the TEF via CFT modules - a secure cloud foundation

https://cloud.google.com/architecture/security-foundations

Apache License 2.0

44 stars 56 forks source link

Verify federated ad/entra user visible in IAM gcp side for role assignment - currently only admin side can assign user to a group #430

Closed fmichaelobrien closed 1 month ago

fmichaelobrien commented 4 months ago

A recently federated user is N/A for a client on the gcp side. Workaround was to add the user to a group on the admin side and see it on the gcp IAM side.

Reproduction in AD on my test Azure account is required

github-actions[bot] commented 1 month ago

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days