How Amazon Q Business connector crawls Gmail ACLs
Connectors support crawling ACL and identity information where applicable based on the data source. If you index documents without ACLs, all documents are considered public. Indexing documents with ACLs ensures data security.
Amazon Q Business supports crawling ACLs for document security by default.
When you connect an Gmail data source to Amazon Q Business, Amazon Q Business crawls ACL information attached to a document (user and group information) from your Gmail instance. If you choose to activate ACL crawling, the information can be used to filter chat responses to your end user's document access level.
The user IDs are mapped as follows:
-
_user_id– User IDs exist in Gmail on files where there are set access permissions. They're mapped from the user emails as the IDs in Gmail.
For more information, see:
