Description

Fully-managed corporate Google accounts can be used for increased visibility, auditing, and controlling access to Cloud Platform resources. Email accounts based outside of the user's organization, such as personal accounts, should not be used for business purposes. It was detected that the IAM policy '{GcpIamPolicy}' contains users with non corporate emails: {GcpIamPolicy.PolicyBindings.Users}.

• 

  Recommended Mitigation

  It is recommended to remove all non corporate login accounts. To ensure that no email addresses outside the organization can be granted IAM permissions to its Google Cloud projects, folders or organization, turn on the Organization Policy for Domain Restricted Sharing. For more information see <a href="https://cloud.google.com/resource-manager/docs/organization-policy/restricting-domains" target="_blank" rel="noopener noreferrer">https://cloud.google.com/resource-manager/docs/organization-policy/restricting-domains</a>