According to the Google documentation, The \'allAuthenticatedUsers\' member would include anybody that is authenticated included regular gmail accounts. So I gave that member th
You should not apply the allUsers and allAuthenticatedUsers on the project-level according to the Cloud Functions Docs (see the note in "Controlling access on all functions in a project"). Can you try to apply this to that single function you want to protect?