Google Workspace groups: Value 'ALL_OWNERS_CAN_CONTACT' is not valid for field 'Contact owners'

I have this too. I'm guessing one has to create a service request because it smells of product defect..

Hi Henrik. I think the permission groups in the Google Workspace target system are outdated. Or after the upgrade One Identity has changed some mappings or data mappings and it's not working?

But if you try and browse the target system through sync editor and find the corresponding group I'm sure the attribute Contact owners has the value ALL_OWNERS_CAN_CONTACT but there is no corresponding value like that in Identity Manager..

Have you checked if you need to define the value in the column properties -> Value Settings -> Permitted values in the Designer for that column of the GAPGroup table? Might work.

I already tried that and I think that you are not allowed to add more values to the attribute..that would of course be the easy solution..

The value coming from Google is not one of the "permitted" values and the schemas says that we cannot customize the permitted values. So indeed a product defect as you mentioned above.

The value coming from Google is not one of the "permitted" values and the schemas says that we cannot customize the permitted values. So indeed a product defect as you mentioned above.

According to Google, (Groups  |  Admin console  |  Google for Developers) the allowed settings for whoCanContactOwner is defined as follows. So, either the documentation is wrong / not up-to-date or the value are not correct. 

Specifies who can contact the group owner. Possible values are:

• ALL_IN_DOMAIN_CAN_CONTACT
• ALL_MANAGERS_CAN_CONTACT
• ALL_MEMBERS_CAN_CONTACT
• ANYONE_CAN_CONTACT

According to Class Groups | Google.Apis.Groupssettings.v1 (googleapis.dev) the values can be:
ALL_IN_DOMAIN_CAN_CONTACT
ALL_MANAGERS_CAN_CONTACT
ALL_MEMBERS_CAN_CONTACT
ANYONE_CAN_CONTACT
ALL_OWNERS_CAN_CONTACT

I love APIs that pretend to be versioned (v1) but change during the day. :-)

Yes, it seems that Google added a new permitted value for the property in newer versions of the API.

I suggest contacting support in that matter. 

I figured that Google added the new allowed value in Version 1.49.0.2191 but forgot to update the developer page mentioned by me.

The missing limited value is tracked by VPR#37275 internally if you want to mention that to support.

Thanks Markus.

By the way, how can you tell the difference in the webportal between 9.1.1 and 9.2? ;)

Are you referring to release notes?

No.

In 9.1.1 it's lighter color, and in 9.2 it's darker..as you repeatedly said during Unite..

Oh - *LOL* - No I got it. You attended my session at Unite 2023 in Madrid?

Yes, yes I did..you were "mean" to Matthias..

It wasn't my intention to be mean. I am sorry.