Error applying IAM policy for cloudrun service #153
Description
Error: Error applying IAM policy for cloudrun service "v1/projects/payments-hub-sandbox/locations/us-central1/services/genai-for-marketing-backend-apis": Error setting IAM policy for cloudrun service "v1/projects/payments-hub-sandbox/locations/us-central1/services/genai-for-marketing-backend-apis": googleapi: Error 400: One or more users named in the policy do not belong to a permitted customer, perhaps due to an organization policy.
Resolution:
Our Concern: Above link shows the resolution which is disabling the IAM policy.
- We want to understand the impact of disabling the policy.
- Is there any alternative approach without disabling the policy?
- What are the other domains which will get access to execute this genai-marketing use case if I disable the policy?