Grant gwsq modify account permission gwsq can't see secondary email addreses. This means it doesn't work well for linked accounts. For example, it may assign a CL to a deactivated account. Gerrit doesn't provide ACL for reading seconday email, so the lowest possible ACL is modifyAccount. Bug: b/271879567 Change-Id: Ib584240de07cd254d582742c242cf2b7aee66a14 Reviewed-on: https://chromium-review.googlesource.com/c/All-Projects/+/4335799 Reviewed-by: Gavin Mak <[email protected]>