I am trying to add my client as owner on my Google Cloud Console Project, but I am getting the following error: An email address does not belong to an active account
Here I create Google account for him(related to his custom domain), but I also found difficulties in granting him as the owner of the project.
You will have to register an account at google developer with your non-gmail address first. And then go to Permissions in the Google Developers Console, add a Member with the non-gmail account as owner. After that you will be able to select the non-gmail email address in Consent screen Link
You can add a user to your project using the Google Cloud Platform Console. When you add a user to your Google Compute Engine project, it gives the user some amount of access to Google Compute Engine resources in that project, determined by the roles such as viewer, editor, or owner. For example, if you add a user as an owner, they will be able to add and modify Google Compute Engine resources in the project, connect to the project's instances using SSH, and change the project's membership.
To add or delete users, or to change their permissions:
Go to the Permissions page in the console.
To add a new team member, click the Add Member button.
To delete a team member, check the box next to their account and click Remove.
To change a user's permissions, select a different role in the Permission column.
You can choose from these three user roles:
Can View - provide READ access
Can Edit - provides "Can View" access
Is Owner - provides "Can Edit" access
For more information check Managing your project's users, and this SO question.
Related
We used to be able to have social accounts request access packages by signing in at myaccess.microsoft.com. Now, we get an error that says you can not sign in with a personal account. Why is this the case since it remains possible to create a domain like gmail.com or outlook.com as a connected organization in Entitlement Management?
Also, after landing on the myaccess portal and expanding an access package that a user has been approved for to view its resources, it used to be able for example, to open a SharePoint site or an application directly from this view by simply clicking on the resource or clicking an open Now that ability has been removing leaving us to have to send links tot he resource to users. This degrades experience substantially. Can we have this ability returned?
Please check the type of personal account in your portal, and if guest, you cannot log in myaccess.onmicrosoft.com , if created in the portal or of type member, it is accessible.
This is the relevant doc.
Sign in to the My Access portal.
Be sure you use your organizational (work or school) account. If
you're unsure, check with your project or business manager.
I invited my personal account (user type) to test if I login directly myaccess.onmicrosoft.com.And the following screenshots do report errors.
I'm trying to use the googleapiclient Python SDK to create a domain mapping for my App Engine app. I'm using the "App Engine default service account" to authenticate, which works (I can get the list of domain mappings). However, when I try to create a mapping, I get the following error:
Caller is not authorized to administer the domain 'abc.[mydomain]'. If you own 'abc.[mydomain]', you can obtain authorization by verifying ownership of the domain, or any of its parent domains, via the Webmaster Central portal: https://www.google.com/webmasters/verification/verification?domain=abc.[mydomain]. We recommend verifying ownership of the largest scope you wish to use with subdomains (eg. verify 'example.com' if you wish to map 'subdomain.example.com').
The same call works in the API Explorer without any issues.
I tried giving the service account the Owner role in the IAM console, to no avail.
(I haven't tried running it from within App Engine; presumably that works, but I'd really like to be able to test this part of my app locally.)
Thanks to John Hanley for pointing me in the right direction.
Go to the Google Search Console and sign in
Navigate to "Settings" (towards the bottom of the menu)
Select "Users and Permissions"
Click the "more" (three vertical dots) button next to your email address, then "Manage property owners"
Choose your domain from the list
Click "Add an owner" at the bottom of the page
I have created a YouTube API key, but when I try to use it I get an error message that the key is not enabled. When I try to enable the key in the Google Cloud Console, I get the error message:
IAM: you have insufficient permissions to enable or disable services
and APIs for this project. Contact a project owner to request
permissions.
I can't seem to find a way to set the project owner. I created this project myself, so I should be the project owner. I'm not sure if it's relevant, but the account is managed via G-Suite.
Update: per the documentation, I logged on to G-Suite as an administrator and went to Apps > Additional Google services, but "Web & App Activity" is not listed as an option.
Your gsuite admin can activate the API or remove a restriction on it.
To add an owner for a project, first select the project in the dropdown at the top of the screen. Then go to "IAM and Admin" in the navigation bar, then go to the IAM page. Click on "Add" at the top, and then you can add Project->Owner.
It can be confusing because even if somebody is an organization administrator, they aren't necessarily the owner of a project yet.
We have hired a firm to complete a project in the Google Cloud Platform and need to add their development lead as an Editing Member to our Developer Console so they can create and manage the project.
When trying to add their lead by email address I get a warning that I cannot add a non-domain member. Obviously they do not have an email address with our domain.
I've crawled through the permissions in our Google Apps Admin console and cannot find a setting for this. We would prefer to add them without having to add another user to our Google Apps For Work account.
Does anyone know how to add anyone to the Google Developer's Console from outside of our Google Apps domain?
To workaround this, you can do the following:
Have the domain Administrator for your domain Google Apps Account create a Google Group (say the group name is "GAE").
Have the domain Administrator allow out-of-domain members for the group "GAE".
Add the email addresses of out-of-domain members to group "GAE".
Add group "GAE" to the project.
There will be no confirmation email sent.
Once this is done, within 24 hours group membership propagates such that your Google App Engine Project becomes aware of the new group membership and allows its members access.
In your app.yaml configuration file you can required login: admin. My question is now "what" or "who" is an admin?
In the App Engine console in the Administration -> Permissions section they're also talking about an admin. However, if you add a new user you can only choose between owner, developer and viewer.
Which of those is an admin? Only the owner or owner+developer or all three?
When working with users either on your own apps domain or normal Google users:
Owners can do anything supported by the UI.
Only Owners can make changes on the Permissions tab (invite, change role, remove).
Developers can do anything except changes on the Permissions tab.
Viewers cannot change anything.
Everyone who was an admin before feature went live is initially an Owner. (This is available since version 1.4.2)
All three roles are given admin status when the application runs (i.e., users.is_current_user_admin() returns True).