Service Accounts not showing in Developers Console - google-cloud-platform

In my project's Developer Console, Permissions > Service Accounts, I just get the loading spinning blue circle. I want to be able to see the service email addresses and generate keys...
This also happens with other pages, e.g. Logging.
Any advice on how to fix this? I've tried clearing cache & cookies, doing a "cache refresh" with shift+refresh; no luck.

Related

AWS session timeout

Using AWS I have a lot of Chrome tabs open with multiple services. When I switch between them I am constantly getting signed out. Sometimes it's a matter of just few minutes.
AWS minimum session duration is one hour, so that's probably not the problem. How can I tackle this? Getting logged out of Lambda makes it lose all the undeployed code, this is very inconvenient.
Edit:
Answering the question in a comment: I do have multiple accounts and when I want to open a tab with a new service I just click management console (screenshot) and follow on from there. It appears to cause the actual logout.
But here's the thing - I am currently using resources only from the first account. So (since I'm within one account all the time) it shouldn't log me out right?
I see this message when I use AWS one one Account, then login to a different account in a different tab. If I return to the original tab, it recognises that I am no longer logged-into the first account and asks me to reload.
It seems that you are using SSO to login and it is generating a different set of temporary SSO credentials. Instead of using that link, select the AWS service from the search field at the top of the console, then right-click the service and "Open in New Tab". That will open the other service in a new tab, using the same login credentials.

Google Cloud doesn't allow me to create my first project with admin role

I'm trying to create my first project in google cloud with organization's administrator account. I have access to the administrator's email and passwords and I am logging in with that account to do so. The problem is that when I click on create new project I receive the following error:
There was an error while loading /home/dashboard?project=proven-now-305315&authuser=1.
You are missing at least one of the following required permissions:
Project
resourcemanager.projects.get
Check that the project ID is valid and you have permissions to access it. Learn more
Send feedback
The detail is that in my resource administration panel I already gave the permission that they ask me to the resource as shown in the following image:
As I have read, the project IAM Admin role should grant the resourcemanager.projects.get role and as you can see in the image the resource rcv # .. which is the administrator has it activated, however I keep trying to create a new project and it doesn't allow me to do it. Any idea?
In case anybody else, like me, reaches this answer, I want to point out that the accepted answer is correct, but for me I had to also make sure that within the settings, I ensured that Project Creation Settings on the right pane and under the section of Cloud Resource Manager Api Settings was set to on. It was turned off by default. Many people on my team overlooked this as it is significantly smaller text.
This may be an option that was not present before or it was turned on by default in the past. For us, it was turned off.
Please refer to the included image for a visual representation of the
settings that need to be turned on.
The problem was for some reason the Google Cloud was disable for all users, I solved following this instructions. Solved with this!
To activate this service, please follow the steps:
Access the admin console and go to Apps -> Additional Google Services
Look for the service “Google Cloud Platform” and click on the box next to it
In to top right corner click in “ON”
Confirm you want to turn it on in the pop-up box.

How do I resolve message "There was an error. Please try again" when accepting Google Account Transfer request

We have just set up a Google Cloud Identity domain, and have a number of users who already have consumer Google accounts using their corporate email addresses.
I've invited several of them to transfer their account to our domain - most have succeeded, but two receive a message when clicking through the process to accept the transfer request.
A pop up appears at the bottom of the screen saying
There was an error. Please try again'.
No further information is given
Does anyone know the cause and/or resolution to this error
Update: My colleagues tried accepting the request a week or so later, and strangely it worked OK. IF anyone else experiences this, it looks like it was a transient issue with transferring accounts into Organisational control.
This sounds like conflicting accounts. This could happen when users sign up for free Google services before their organization signs up for a managed Google Account. If this is the case, there is Transfer tool for unmanaged users.
If info above doesn't help you might want to check if logs contains more details about the error. In Admin console logs, or maybe in Google Cloud Project audit logs.

Cannot create groups in GCP or Google Groups - as owner

Just wanting to start to setup a GCP environment for my own domain, play around some. Running into a setup issue where I cannot create Groups, whether from GCP (Menu > "IAM & Admin" > Groups) or just Google Groups.
Google Groups tells me I haven't got the correct permissions. Google Cloud Platform tells me I'm missing required permission cloudidentity.groups.create.
I managed to create a bunch of groups in Google Admin, but they're not the right ones (apparently).
Now, I'm owner of my domain, it has Google for Work (Basic) and I've enable Cloud Identity (apparently do not need it as it's just for me, but was running low on ideas).
Any idea how to fix this?
Google's help pages send me in circles. Google GCP & Admin docs likewise keep telling me to just "click Create".
Ok, this is very silly, but: you must have "Groups for Business" turned on in the Admin Console as an App for everything to start working.
With the App "Groups for Business" turned off, you can still create Groups (lol, whut?), assign them to Users, but somehow, they don't work.
Turning on Groups for Business and going back into the "Getting started" in Google Cloud Console magically got it to work.
(P.s. - I don't recall turning the App off, it's been years since I looked at that)

Google G-Suite API Console not showing Enable G Suite Domain-wide Delegation

I'm working with a client to setup service account credentials, for the purpose of reading G-Suite Directory information over API.
I've done this a dozen times before with no issues, and now I'm having a problem with a setting not showing up for the client.
Below is an image that shows what I would see normally. The area circled in read is where the ability to enable Domain-Wide Delegation exists.
However, the client does now see that section. Instead they see this button. And clicking the button just displays the Client ID's, but doesn't have an option to Enable Domain-Wide Delegation.
We haven't gone through the entire setup to test if this service account works, and I haven't been able to duplicate this UI interface with my testing accounts. I always get the "Show Domain-Wide Delegation" from the first image, and not the button.
The client says they are a Super Admin on the G-Suite Admin Console. I have detailed instructions for all the steps prior, which they said are exactly correct. The only difference is when they get to this page.
I was hoping someone would have some insight into why this interface would be different, and what might be some ways around fixing it?
If you don't see the checkbox, it means you don't need to enable it. You can get the client ID from the UI or by looking at the JSON private key you downloaded, and use that to authorize your scopes in the Admin console.
(thanks #kspearrin who also mentioned that in the comments)