When connecting a Jive Place to G Suite, the integration either assigns
permissions to individual users or creates Google user groups.
You have two ways you can set up permissions for this integration:
Any user who can read content in the Jive place will be added to the "can view" list for the
Google-connected folder, and users who can create content in the Jive place will be added as
The integration creates up to two Google groups per connected Jive place, and users will be
added to the appropriate group per their permission level in the Jive place. For example, in a
member-only Jive group, the integration creates a Google user group and adds it to the "can
edit" list for the Google-connected folder. Any member of the Jive group gets added to the
Google user group.
Note: The created Google groups are hidden, and will not show up
for users in any of the Google apps.
The following image shows how Google permisisons look:
How does it work with Google Drive?
When connecting a Place to Google Drive, the remote folder get provisioning of the
permissions differently depending on the Place type.
In case of a Group, it's pretty straight forward, each member of the Group is added
individually as a collaborator on the remote Google Drive folder.
In case of a Space, it varies among the 3 types of the permission groups -
For "Everyone" and "All Registered Users" - Either "Everyone@<DOMAIN_NAME>" or
"RegisteredUsersGroup@<DOMAIN_NAME>" will be added as a permitted group on the
remote Google Drive folder. If this group doesn't exist on the Google Domain, the
process of connecting the place will be still completed successfully, no error will be
shown on the UI and access will not be granted to any users.
Federated groups - Assuming the same LDAP server is configured against the Google
domain, the remote folder will get provisioned with the same LDAP group as in Jive.
This is the recommended way of managing the permissions, however it is not yet
supported and will be implemented soon (planned for next cloud release).
Manually created user groups - The users on such groups will be added to the remote
Google Drive folder, one by one, similarly to the way it works with Place of Group
type. Note this is the only use case where we manage Space permissions on an
individual user level on the Google Drive side. This approach, however, works well
only if the permission groups have less than 200 users.
Permissions sync from Jive to Google Drive happens automatically irrespective whether
the user currently exists or is later added to a permission group.
For a Space with a custom Jive permission group, the members of that permission group are
automatically added as contributors to that Google Drive folder when that Space is connected
to Google Drive. Also, after establishing the connection, any new user added to the
permission group is automatically added as a contributor to the Google Drive folder.
If the sharing in Google Drive fails, the Join Group operation fails too.