I have Google identity with a domain example.com and have created a group, say [email protected]. I can create users [email protected] and say [email protected] and add them to group [email protected].
I have a Google Cloud organization example.com and have successfully added [email protected] and assigned it the roles I want (e.g Organization Admins).
It's possible for me to add google accounts, e.g [email protected] as principals to my organization and assign them roles, but I can't seem to add them to the [email protected] group.
Are my Google identity groups always scoped to users with the same domain? If so how do I get to a place where I can manage a mixed group of example users and google accounts?
I've realized the issue is that there is a group attribute allowing/denying adding members from outside of the organization.