How can I resolve OIDC authentication to policies? Is it required to set this for every user? Is there a way to assign a policy based on external IAM, e.g. in Google Cloud?

We recommend ingesting users & groups from OIDCs, then assigning policies to those groups in datahub.

Thanks @green-football-43791 I would be using Google Identity. (I don’t think it matters, but FYI Google IAP will be in front of datahub at the project level.)