# Add an external identity API looks like it does not work

**URL:** <https://discuss.elastic.co/t/add-an-external-identity-api-looks-like-it-does-not-work/359003>\
**Category:** Elastic Search\
**Tags:** elastic-workplace-search\
**Created:** [May 8, 2024, 12:16am UTC](https://discuss.elastic.co/t/add-an-external-identity-api-looks-like-it-does-not-work/359003 "2024-05-08T00:16:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![m-amano](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/m-amano/32/62977_2.png) [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Post date:** [May 8, 2024, 12:16am UTC](https://discuss.elastic.co/t/add-an-external-identity-api-looks-like-it-does-not-work/359003/1 "2024-05-08T00:16:02Z")

</div>

I'm using WorkplaceSearch of v.8.12.0 Elastic Cloud.  
I have connected WorkplaceSearch and Google Drive with Google Drive connector.

I tried [this API] to give Elastic users document-level permission ([External Identities API Reference | Workplace Search documentation [8.13] | Elastic](https://www.elastic.co/guide/en/workplace-search/current/workplace-search-external-identities-api.html)).

The login on Elasticsearch and email in Google Drive are the same - e.g. `johndoe` in Elasticsearch and `johndoe@gmail.com` in Google Drive.

The API returned with no error but it looks like the user still has full access to the Google Drive documents and can receive all results from WorkplaceSearch.

Does anyone know why??

---

<div class="post-metadata">

**Author:** ![Artem\_Shelkovnikov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/artem_shelkovnikov/32/134322_2.png) [@Artem\_Shelkovnikov](https://discuss.elastic.co/u/Artem_Shelkovnikov)\
**Post date:** [May 8, 2024, 8:32am UTC](https://discuss.elastic.co/t/add-an-external-identity-api-looks-like-it-does-not-work/359003/2 "2024-05-08T08:32:51Z")

</div>

Hi Mizuki,

We were discussing it in [another topic](https://discuss.elastic.co/t/is-it-possible-to-apply-document-level-permissions-to-google-drive-synchronized-documents/358922/3) - there's no need to create additional topics while the discussion is still ongoing.

Let's continue this conversation in the original topic.

---

<div class="post-metadata">

**Author:** ![Artem\_Shelkovnikov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/artem_shelkovnikov/32/134322_2.png) [@Artem\_Shelkovnikov](https://discuss.elastic.co/u/Artem_Shelkovnikov)\
**Post date:** [May 8, 2024, 8:33am UTC](https://discuss.elastic.co/t/add-an-external-identity-api-looks-like-it-does-not-work/359003/3 "2024-05-08T08:33:30Z")

</div>


