IAM Policy Issues #150

New Issue

MrUnknownDE · 2026-04-05T16:16:45+02:00

MrUnknownDE commented

2026-04-05 16:16:45 +02:00

Originally created by @coltondick on 10/15/2025

I am struggling to setup an IAM policy that grants users access to their own emails. I've setup an ingestion for Google Workspace as an administrator. I've created a "End User" role with the following policy:

[
  {
    "action": ["read", "search"],
    "subject": "archive",
    "conditions": {
      "userEmail": "${user.email}"
    }
  },
  {
    "action": ["read", "search"],
    "subject": ["dashboard", "ingestion"]
  }
]

But when I login to a "End User" account I cannot see any of the emails associated with the user.email

*Originally created by @coltondick on 10/15/2025* I am struggling to setup an IAM policy that grants users access to their own emails. I've setup an ingestion for Google Workspace as an administrator. I've created a "End User" role with the following policy: ```json [ { "action": ["read", "search"], "subject": "archive", "conditions": { "userEmail": "${user.email}" } }, { "action": ["read", "search"], "subject": ["dashboard", "ingestion"] } ] ``` But when I login to a "End User" account I cannot see any of the emails associated with the `user.email`

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/OpenArchiver#150