Redirect permission requests to library administrators

As a Google Workspace super admin, use this procedure only if your organization uses Gmail as its email system.

If this is not the case, ask your email system administrator to set up forwarding rules of all your storage accounts to the following email address: aodocs-permission-requests@ao-docs.appspotmail.com.

Why do you need to set a forwarding rule for the storage account?
Configure a forwarding rule for storage accounts
Known issues

Why do you need to set a forwarding rule for the storage account?

If you don't implement a forwarding rule, when users make sharing requests on AODocs document attachments, the requests are sent by email only to the storage account.

This is a technical account, so if no one regularly accesses the mailbox of the storage account, the sharing requests won't be received and processed by the appropriate person, and the sharing requests will be lost.

When you implement the simple forwarding rule described in this article:

  • your storage accounts are identified (tagged) via a group
  • the sharing request emails received by the storage accounts are redirected to AODocs via this AODocs email address: aodocs-permission-requests@ao-docs.appspotmail.com
  • when the emails reach the AODocs back-end, AODocs performs a triage to assign the sharing request to the corresponding library administrator
  • AODocs sends emails to the corresponding library administrator – below is an example of a sharing request

sharingrequest.png

  • the library administrator can process the sharing requests

Configure a forwarding rule for storage accounts

Create an admin group

1. Open the Google Admin console.

2. Press Groups.

3. Press Create group.

4. Enter the following values:

  • Name: AODocs email forwarding group
  • Description: This Google Group uses the Google Admin console's email routing rules to forward all the emails received by the AODocs storage accounts to AODocs Application.
  • Group email address: aodocs-emails-forwarding@yourdomain.com

5. Press Next.

image01.png

6. In the Access type section, select the checkbox Restricted.

7. Press Create group.

8. Press Done.

Note: Do not delete this admin group for as long as you use AODocs in Google Workspace.

image02.png

Add the storage accounts to the newly created admin group

If you have multiple storage accounts, add them all as members to the newly created group. In our example, we are adding the storage account aodocs@demo.aodocs.com to the group aodocs-emails-forwarding@demo.aodocs.com.

1. Open the forwarding group you just created and select Members.

2. Press Add

3. Add your storage accounts. 

4. Press Add to group.

Your storage accounts are displayed in the list of members.

image03.png

Create the forwarding rule in Google

1. In the Google Admin console, press Apps.

2. Press Google Workspace, then Gmail.

3. Scroll down and press Routing. You can also use the search bar.

4. Next to Routing, press Configure.

image04.png

5. Configure the routing rule with the following settings:

Note: Don't configure the settings that are not mentioned.

  • In the Routing description, type in: Used to forward emails sent to the AODocs storage accounts to the AODocs application.
  • In the Email messages to affect section, select the checkboxes: 
    • Inbound 
    • Internal - receivingimage05.png
  • In the For the above types of messages, do the following section:
    • select Modify message from the drop-down menu
      image06.png
    • under Also deliver to, select the checkbox Add more recipients
    • press Add and add this address as a recipient: aodocs-permission-requests@ao-docs.appspotmail.com
    • press Saveimage07.png
  • In the Account types to affect section, select the checkbox Users.
  • In the Envelope filter section:
    • select the checkbox Only affect specific envelope recipients
    • select Group membership (only received mail) from the drop-down menu
    • press Select groups and add the AODocs email forwarding group: aodocs-emails-forwarding@yourdomain.com
      Note: If you have more than one organization, configure the routing rule at the root organization.image08.png

6. Save the routing rule.


Known issues

Share permissions on folders

In Secured Folders, if you give edit rights to a user on a folder via the AODocs interface, they still don't have edit access on the folder in Google Drive (whereas they have edit rights in AODocs). If they access the folder via Google Drive, they may continue sending access requests.

 

Synchronization delay between AODocs and Google Drive

When you share documents or folders in AODocs, there is sometimes a delay before the new access permissions are synchronized to Google Drive. If a user tries to access a folder or document via Google Drive on which the access permissions haven't yet been propagated, they may send an access request even though this has already been granted on the AODocs side. In this case, you need to wait for the permissions to propagate to Google Drive.

Learn more:  Google Drive performance recommendations (under Guidelines).

Was this article helpful? 13 out of 14 found this helpful
If you didn’t find what you were looking for, don’t hesitate to leave a comment!
Have more questions? Submit a request

Comments

0 comments

Please sign in to leave a comment.