Adding Google accounts to Cloud Identity Groups

Question

I have Google identity with a domain example.com and have created a group, say my-admins@example.com . I can create users a-user@example.com and say another-user@example.com and add them to group my-admins@example.com .

I have a Google Cloud organization example.com and have successfully added my-admins@example.com and assigned it the roles I want (eg Organization Admins).

It's possible for me to add google accounts, eg googleaccount123@gmail.com as principals to my organization and assign them roles, but I can't seem to add them to the my-admins@example.com group.

Are my Google identity groups always scoped to users with the same domain? If so how do I get to a place where I can manage a mixed group of example users and google accounts?

Answer 1

我意识到问题在于有一个组属性允许/拒绝从组织外部添加成员。