Make sure lumsites@domain.com sees all users in the domain (and a trick to only show real humans)

Make sure lumsites@domain.com sees all users in the domain (and a trick to only show real humans)

When naming a user for a certain admin role in the Google Admin Console, you can decide the target OU (Organizational Unit) on which the user will be able to use his or her admin powers.
This has a direct bearing on the users you will be able to see in the LumSites user pickers.
It is strongly advised to allow the admin account to have reading access on all users in the platform, unless a specific internal policy forbids you to do so.

A trick that is being used sometimes, is to put all your technical and generic (non-human) accounts in a separate OU, and give lumsites@domain.com reading rights on all OUs but that one. In this instance, when creating a user directory on LumSites, you will only see the real people :)

Flavien

Flavien

View Comments
Navigation