turbot/steampipe-mod-googleworkspace-compliance

Query: gmail_delegation_disabled

Usage

powerpipe query googleworkspace_compliance.query.gmail_delegation_disabled

SQL

with all_users as (
select primary_email as user_email from googledirectory_user
),
gmail_settings as (
select
u.user_email,
gs.delegates
from all_users u
left join googleworkspace_gmail_settings gs on gs.user_email = u.user_email
)
select
user_email as resource,
case
when delegates is null or jsonb_array_length(delegates) = 0 then 'ok'
else 'alarm'
end as status,
case
when delegates is null or jsonb_array_length(delegates) = 0 then 'No mailbox delegation configured for user: ' || user_email || '.'
else 'Mailbox delegation is enabled for user: ' || user_email || ' with ' || jsonb_array_length(delegates) || ' delegate(s).'
end as reason
from
gmail_settings;

Controls

The query is being used by the following controls: