I'm struggling to understand how to reproduce this.
I have a Google Workspace organization: org.com
I create a new user: sneed@org.com
Where/when/how is the sneed+alias@org.com created? How is the user sneed@org.com doing this if they don't have administrative access to organization management?