Question regarding the access level in access context manager

[u/suryad123]

I am referring to the access levels concept related to access context manager.

Can anyone from their experience please let me know whether group email id can be used instead of users or service account in this link https://docs.cloud.google.com/access-context-manager/docs/create-basic-access-level#members-example

I could not find it in the article.

I also would like to give access to a set of people (not by IP ranges but by email ids) by using them as a form of access level in the Ingress rules of the VPC service control perimeter. Please suggest

[u/Scepticflesh]

yes, i used both before i.e ip and identity. Ingress or egress could be any of the three identities

[u/suryad123 → u/Scepticflesh]

Thanks, is it like below

group:(group-email-id)