Cloud Scheduler Page Access Issue - Shared project - google-cloud-platform

The manager holds the account that provides billing to the said project, now I cannot go to Cloud Scheduler page due to my account not having a billing setup, therefore my workaround is to manually input the link directly to the page like this
https://console.cloud.google.com/cloudscheduler?project={PROJECT_ID}
but now it no longer work and throwing error page. Supposedly I am able to access "Cloud Scheduler" page regardless if the account I use does not have a billing setup since the billing was already made by other account on this shared the project right? Is anyone having the same issue as of this date? Any solution?

It seems the billing card that being used is no longer valid or having some issue.

Related

Unable to add HTTPArchive dataset to BigQuery project

I'd like to explore the HTTPArchive data that is publicly available in BigQuery. To access the data, I'm following along with these instructions:
https://github.com/HTTPArchive/httparchive.org/blob/main/docs/gettingstarted_bigquery.md
Unfortunately, when I get to step 7, I get an error message as follows:
You seem to be missing permissions on the billing project. The billing project can be changed using the project picker at the top of the page. If the project is correct then please talk to your administrator. Original error message: The caller does not have permission
In my googling to resolve the issue, I found this SO question/answer: missing permission on "billingAccounts/XXXXXXXXXXXXXXXXXXXXXXXX": billing.resourceAssociations.create Terraform (GCP)
Unfortunately, adding all the various billing roles to the principal associated with the account does not resolve the issue. I've added all the mentioned billing roles but I'm still running into the same problem.
I can't tell for sure (I just don't have the expertise atm) but it seems the project isn't correctly linked to the billing resource but I could be wrong.
I do get this message when I click on "Change billing account" (within the "Actions" menu) under the "Account management page".
This seems like it could be the issue but it might also just mean that I don't have a second Billing account to change to.
Any and all help greatly appreciated.
You have to unlink first your project from your current Cloud Billing Account to link to your new or desired billing account. To do so, you have to make sure that you have predefined roles for permissions both on your project and billing account. You can follow the steps based on this documentation.
Another option is to create a new Cloud Billing Account. If you are under an organization, you must have this permission - billing.accounts.create. You can follow these instructions on creating your new billing account. If you are the one who manages your Google Cloud resources, you won't need to add any permissions to create a new billing account.
Kindly comment below if this can help you proceed on setting up your HTTPArchive to BigQuery so we can still find another solution to your blocker.

Cannot enable API on GCP (User role=Owner && Billing account is linked)

I am using the same process with GCP with several projects, and never had this issue.
The issue
Not able to enable APIs (Cloud Run etc..)
Missing Required Permission
You are missing the required permission: billing.accounts.list
Some info
I am logged in as an Owner
The project has a Billing account linked
The Cloud Console Engineering team is aware of this issue as it has been reported a few days ago. A workaround by the engineering team was to enable them with the gcloud command tool.
A fix for the issue has been rolled out which should take effect at some point today to enable your API's but sometimes it takes some time to see the changes.
But probably you will be able to enable your API tomorrow.

How to link a project to GCP credits linked to a different account?

I need a guide on linking a project to an account with gcp credits. We are a startup and have received gcp credits for testing, but the credits are linked to the personal account of previous admin who is no longer working for us but has allowed us to continue using the project and credits until it expires. That is the only option available from GCP, the credits cant be transferred. So I want to create more projects and want to use the credits linked to the previous admin. The previous admin has agreed to link the project. I want to know the exact steps to link the resource usage of the new project to the credits.
I have gone through https://cloud.google.com/billing/docs/how-to/modify-project
however when I hit change billing it says there's no other billing account available as I have only a single billing account.
You probably need to ask to the previous Admin, which is the billing owner to do a few steps for you.
This is needed because he is the Billing Owner of the account.
Taking a look at the link you sent, you can find this information about permissions need to add the project and so on.
If you check there, these are the permissions needed in order to enable the billing for a project [1]:
- Project Owner or Project Billing Manager on the project, AND Billing Account Administrator or Billing Account User for the target Cloud Billing account.
I guess that you are Proj Owner of your project, but you aren't a Billing Account User of this Free Trial account with the credits.
If you want to take an advise, you could ask the previous admin to set your project under his billing account.
Or he will need to grant the permissions for you.
Either way, you need him to set up this for you, as he has the account being billed.
And an important reminder, you can't change the ownership of the trial account to another email address.
[1] - https://cloud.google.com/billing/docs/how-to/modify-project#enable_billing_for_a_new_project

Managing customer's project and billing

I have used Google Cloud for a while for my own projects. But this time I would like to deploy one of my customer's project to it. What is the best way to manage the fees?
Creating the project in my GC account and granting access to the customer to see the fees and send them invoices.
Creating the project in my GC account and somehow set their billing account to my project.
Creating the project in their GC account and ask for permissions to manage it.
Something else.
Which one is the correct solution, or what do you use? If the second solution is the good one, how can I achieve it?
Thank you!
Let's review each option and consider everything from both you as the developer and the client who owns (pays for) the project. Think security and responsibility (legal, financial and ethical) when making these decisions.
Option 1:
Creating the project in my GC account and granting access to the
customer to see the fees and send them invoices.
I would create a separate project for this customer and not mix their work into a project that has your own work. Granting the customer access to the billing information for a mixed account and then trying to separate items might take more time than it is worth. I don't recommend this method.
Option 2:
Creating the project in my GC account and somehow set their billing
account to my project.
The customer will need to grant you access to their billing account which I do not recommend. I would not grant access to my billing account to a third party. They could attach any project they want I would get the bill. I don't recommend this method.
Option 3:
Creating the project in their GC account and ask for permissions to
manage it.
This is the best option. The project and billing are under the client's control and the client grants you the required permission such as Project Editor to your user identity. Project Ownership and Billing responsibility remains with the client and the client can grant and remove access to you anytime they want easily without a ripple effect of additional work.
This all depends on your preference, however, I would go with the second one. You can create the project for them, and they can create the billing account. You then can modify the billing account on the project you created by following the steps over here.
Nevertheless, as I mentioned this is all your preference so you can use any of the other approaches you mentioned too.
Hope you find this useful.

Have no access to my VM instances, no sufficient permissions

I lost my access to my VM instances. I am a student at the University of Melbourne, thus I tried to use GCP with my google account provided by the university (***#student.unimelb.edu.au).
I created my VM instances and I am still able to SSH to my VM, however, I lost my access to it via GCP Dashboard. And here goes the error code:
You are missing at least one of the following required permissions:
Project
resourcemanager.projects.get
And when I checked API with troubleshooter, it says
You do not have the required permissions to make this request. Please
contact your organization administrator.
I don't think I have done anything concerning administrative problems, why did I lose control of my instances?
Your permissions have been limited. like the message say, try to contact your University administrator to know more. If your project is billed to the University, University is organisation admin and can do anything on its own domain.
Is your VM respected the rules of your university? What was its size? did you mining on it? did you install unauthorized software? At administration level, Google provide a lot of metrics and alert about abnormal resource usage. Maybe you broke a rule.
Are you sure you had permission before creating the instance, to view the instance ?
With the error you are talking about maybe you didn't have access from the start itself. You would have been given access to create, but not to list VMs. I found the access-control of GCP very complex, you can have access to many things through CLI, but to get the same through console, you need to be granted more accesses.
Ask your admin to provide your account, one of the viewer or editor or maybe browser roles from here:
https://cloud.google.com/resource-manager/docs/access-control-proj
Or may be as guillaume suggested you might have broken a rule ;)