Is there a way to allow/give consent to a developer to access my google cloud platform billing data ?
https://cloud.google.com/billing/docs/how-to/export-data-bigquery
If it is your Google cloud platform billing data you're trying to give access to i believe it is possible. you just need to assign him(his email) as a billing administrator, he should be able to see billing stuff like receipts and such
I kinda followed this https://cloud.google.com/billing/docs/how-to/billing-access
Related
I've got a Google App Engine project account and want to give access to a new developer who's going to help out, but I don't want him to have the account access details. How do I add him as a user so he can deploy and test code on my account (locally on his machine using the SDK and live), but not do anything I don't want him to do with the account?
I know I need to use IAM roles somehow, but does the developer already need a Google account (don't think he has one) or can I just send an invite to his existing email etc?
Many thanks,
Alex
Your developer will require a Google account, which can be a gmail account or a Google Apps account.
Check out the description of the App Engine IAM roles and then grant the appropriate access to your developer's Google account.
In your case that might be either "Editor" or "App Engine Service Admin".
I'm building a website in Go(lang) using Google App Engine. I want users to be able to register for the site by providing an Email and Password. I don't want to use the users API, because I don't want my users to require a google account and I eventually plan on making this a pay site.
What is a good way to handle user registration/authentication on google app engine? Should I use the datastore for user accounts and credentials, or Cloud SQL? Any other good options? I don't know where to start.
IMHO it's easier to use an existing, reputable infrastructure/service.
Google offers such services, see What is the difference between Google identity toolkit, Google OAauth and Google+ sign in.
I opted for the Google Identity Toolkit, which nicely supports simultaneously both private accounts and federated logins with several popular identity providers.
Update June 17, 2016: The banner on the GITkit doumentation authentication indicates GITkit may be on its way out, to be absorbed into the Firebase Authentication.
I read this page: https://cloud.google.com/appengine/docs/ssl
What I'm wondering: When you create a Google Apps for Work account to get a certificate, does the same user need to 'own' the Google Cloud Platform account where the appengine is running?
And who should be the 'owner' of Cloud DNS?
In many cases, the programmer is not part of the company, so he doesn't have a google apps user account. Or is sharing access of the Cloud Platform enough to get SSL.
Regards, Peter
Note: GAE SSL on custom domains is about to break free of Google Apps, which may significantly change the context for your question and answer(s). See https://support.google.com/a/answer/2644334:
Currently the Google Apps SSL configs only map certificates to the custom domain URLs, regardless of those URLs being served by GAE apps or not, so app ownership identity shouldn't matter. But this needs to be done by a Google Apps Admin.
For now Google Apps Admins can still map custom domain URLs to GAE apps (unclear if they need to own the apps, the above note suggest they might not need to) - which will change after the migration to the Developer Console.
Both the Google Apps Admin or the GAE app owner can perform the app mapping to a custom domain URL (via the Apps Admin console or the Developer Console, respectively) provided they pass the domain ownership verification (the actual Cloud DNS owner doesn't matter technically).
The page you read links to a more detailed documentation for Google Apps, where you can find this :
To add your application to the Google Apps account, the account
administrator’s sign-in account (email address) should be an owner of
the app. This is set in the Google Cloud Platform documentation under
Permissions.
So the admin user who enables SSL on Google Apps must also be an owner of the Google Cloud Platform project.
Who owns the DNS settings (be it Google Cloud DNS or any other DNS service) is independent : it doesn't have to be the same person.
My company has an application hosted on Google App Engine for which I had enabled billing back when we couldn't setup a Google Checkout account with a Google Apps for your Domain account.
So what I did is add the company's credit card to my personal Google Checkout account, and use my personal Checkout account to pay for the GAE app weekly fees.
Now that Google Checkout (aka Google Wallet) can be setup with domain accounts, I would like to transfer my company's GAE app billing to the Wallet/Checkout account that I have created with my company's Google App domain account.
However, I don't see any obvious way to do this in the Billing settings section of my app's administration console, and the documentation only mentions how to transfer billing responsabilities to someone else.
Does anybody know how to do this?
Thanks!
You have to log in with the account that you want to be the billing administrator and then go to the Billing Settings from the Admin Console and click on Take Over Billing. Here is a screenshot:
Is there a way to access and download App Engine Billing and Quota data for an app instance using code?
No, there's currently no programmatic method to access billing or quota data.