Listing non member projects of an organization that members of the domain has IAM roles on
Assigned
Feature Request P2
Status Update
No update yet.
Description
fa...@google.com created issue on behalf of nobody@google.com #1
At the moment it is not possible for an ORG admin of a domain to list those external projects that a domain member has roles on. Hence, it causes issues notifying the domain member to migrate the project to the Organization or remove their IAM bindings from external projects. This might be a security issue in prospective of the admin ORG.
However, in some situations listing those projects might also be a privacy concern for Project owners who are outside the ORG/domain. Thus, if listing such projects is not possible due to this concern, it would be nice to have an alternative way to know that a member has IAM roles on an external project, and maybe an indicator to them (maybe number of projects ) rather than listing the project ID/number. Another way could be listing projects based on the role granted on the project such as when the member (of the domain) is Owner, maybe this privacy concern would not apply.
This feature request has been forwarded to the Resource Manager product management team so that they may evaluate it. There is no timeline or implementation guarantee for feature requests. All communication regarding this feature request is to be done here.
Description
However, in some situations listing those projects might also be a privacy concern for Project owners who are outside the ORG/domain. Thus, if listing such projects is not possible due to this concern, it would be nice to have an alternative way to know that a member has IAM roles on an external project, and maybe an indicator to them (maybe number of projects ) rather than listing the project ID/number. Another way could be listing projects based on the role granted on the project such as when the member (of the domain) is Owner, maybe this privacy concern would not apply.
This feature request has been forwarded to the Resource Manager product management team so that they may evaluate it. There is no timeline or implementation guarantee for feature requests. All communication regarding this feature request is to be done here.