directory_user_2fa_enrolleddirectory_user_admin_2fa_enrolleddirectory_user_admin_countdirectory_user_admin_max_countdirectory_user_is_delegated_admindrive_domain_restrictiondrive_members_only_accessdrive_viewer_restrictionsgmail_auto_forwarding_disabledgmail_delegation_disabledgmail_pop_imap_disabledgroups_admin_created_only
Query: gmail_delegation_disabled
Usage
powerpipe query googleworkspace_compliance.query.gmail_delegation_disabled
SQL
with all_users as ( select primary_email as user_email from googledirectory_user),gmail_settings as ( select u.user_email, gs.delegates from all_users u left join googleworkspace_gmail_settings gs on gs.user_email = u.user_email)select user_email as resource, case when delegates is null or jsonb_array_length(delegates) = 0 then 'ok' else 'alarm' end as status, case when delegates is null or jsonb_array_length(delegates) = 0 then 'No mailbox delegation configured for user: ' || user_email || '.' else 'Mailbox delegation is enabled for user: ' || user_email || ' with ' || jsonb_array_length(delegates) || ' delegate(s).' end as reasonfrom gmail_settings;
Controls
The query is being used by the following controls: