To ensure that application teams can only add users from within your organization to their groups, you need to configure the group settings in the Google Workspace Admin console. Here are the steps:

Access Google Workspace Admin Console:

Go to the Google Workspace Admin console.

Navigate to the Groups section.

Configure Group Settings:

Select the relevant groups used by the application teams.

Go to the group settings and set the group to only allow members from your domain.

This prevents external users from being added to these groups.

Apply and Save Changes:

Apply the changes to ensure that only users from within your organization can be added to these groups.

Verify Configuration:

Test the configuration by attempting to add an external user to the group and verifying that it is not allowed.

Benefits:

Security: Prevents unauthorized access by ensuring that only internal users can be added to groups.

Compliance: Helps in adhering to organizational policies regarding user access and management.

References

Google Workspace Admin Help: Groups