Can't delete google cloud project: no access - google-cloud-platform

When I try to delete a Google Cloud project, I get this error:
You are not allowed access: the project cannot be modified by the end user.
However, I can confirm I am logged in as the owner of the project, I checked permissions and this account is the only linked account for that cloud project (and is owner).
When I try to disable billing (as I suspect you can't delete a billing-enabled project), I get a similar error:
Any suggestions? Thanks.

You can move to API&Auths->API
disable all apis,
then try to delete again

Related

Unknown project in my GCP projects dashboard

A new project showed up in my list of projects in my GCP console with name "My Project xxxxx" and ID "brave-watch-nnnnnn" where xxxxx and nnnnnn are numbers. But, I have no privileges on this project and cannot view the resources or modify the project.
I am the only user of my GCP account and my account is not part of any organization. I don't know how this project was created and how it got added to my console. Has anyone encountered such a scenario before and how did you resolve it ?
I think you should contact the support team. You mentioned about that your account is not part of an organization. But it's possible for someone to add you into his project via email. Did you leak your email address? You can also use gcloud projects list to see which project you have access to.
Only the owner of the project can revoke the access... that's who to contact.
b/c permission resourcemanager.projects.setIamPolicy is required to do so.

Google Cloud doesn't allow me to create my first project with admin role

I'm trying to create my first project in google cloud with organization's administrator account. I have access to the administrator's email and passwords and I am logging in with that account to do so. The problem is that when I click on create new project I receive the following error:
There was an error while loading /home/dashboard?project=proven-now-305315&authuser=1.
You are missing at least one of the following required permissions:
Project
resourcemanager.projects.get
Check that the project ID is valid and you have permissions to access it. Learn more
Send feedback
The detail is that in my resource administration panel I already gave the permission that they ask me to the resource as shown in the following image:
As I have read, the project IAM Admin role should grant the resourcemanager.projects.get role and as you can see in the image the resource rcv # .. which is the administrator has it activated, however I keep trying to create a new project and it doesn't allow me to do it. Any idea?
In case anybody else, like me, reaches this answer, I want to point out that the accepted answer is correct, but for me I had to also make sure that within the settings, I ensured that Project Creation Settings on the right pane and under the section of Cloud Resource Manager Api Settings was set to on. It was turned off by default. Many people on my team overlooked this as it is significantly smaller text.
This may be an option that was not present before or it was turned on by default in the past. For us, it was turned off.
Please refer to the included image for a visual representation of the
settings that need to be turned on.
The problem was for some reason the Google Cloud was disable for all users, I solved following this instructions. Solved with this!
To activate this service, please follow the steps:
Access the admin console and go to Apps -> Additional Google Services
Look for the service “Google Cloud Platform” and click on the box next to it
In to top right corner click in “ON”
Confirm you want to turn it on in the pop-up box.

Making a GCP project in CLI without being able to make a parent as a trial user

I am using a trial version of Google CLoud. In the command line, I am logged in with a .json key file.
gcloud projects create training_project
returns
ERROR: (gcloud.projects.create) PERMISSION_DENIED: Service accounts cannot create projects without a parent.
But with a trial account, I can neither create an organization nor a folder to serve as a parent. So, how can I make a new project with the command line interface as a trial user?
I have read this question that concerns doing this with a REST API whereas I want to use the command line interface. Furthermore, that question is not about using a trial account.
As shown in the error message (this is also documented here), service accounts are not allowed to create projects outside of an organization and must specify the parent resource when creating a project. There is no workaround for this. Since a trial user cannot create an organization as you mentioned, you won't be able to use a service account to create a project.
Having said that, you can create a project via CLI when logged in as a user instead. You can log in by running:
gcloud auth login
and following the instructions. The gcloud projects create command will then run successfully.

Access Denied: Project PROJ: The user X#gmail.com does not have permission in project- pycharm use wrong email

I have this strange issue.
I have a private google account X#gmail.com with some projects on google cloud
and recently got a new email with accessibility to my workplace projects (also on google cloud) .
y#work.com.
working with Pycharm, I am required to tap into the company's projects and work with bigquery resources, yet I receive this error:
HttpError: https://www.googleapis.com/bigquery/v2/projects/proj/queries?alt=json
returned Access Denied: Project proj: The user X#gmail.com does not
have bigquery.jobs.create permission in project proj.> INFO
yyyy-mm-dd module.py:861] ...
clearly, Pycharm uses the wrong email- X#gmail.com.
so I went back to the:
google-cloud-sdk/bin/gcloud init
and changed my email to the correct Email- y#work.com. and chose the right project.
regardless, Pycharm is still insisting on using the bad email and I have no clue how to fix it.
any help would be awesome.
Try to create new authentication file using instructions on
https://cloud.google.com/docs/authentication/getting-started
then change GOOGLE_APPLICATION_CREDENTIALS to point to that file.
You can switch between personal and work accounts by switching GOOGLE_APPLICATION_CREDENTIALS variable.

Permission denied to delete project Google Cloud, how to proceed?

I am having a very tinted design on the dashboard. I'm trying to delete but I get the message "does not exist, or you do not have permission to access it." . All right, but. How can I not have permission because I am the only user to use the service. I need to delete but I am facing this difficulty.
I am the only user of the service.
No one else uses the platform
Project permissions:
Role:
I faced same issue and finally figured this out. I hope other people can benefit from this.
If your project is under "No Organization", you can simply go to IAM, make sure you are owner, then go to project, delete/shutdown buttons will be enabled, you can delete the project.
However if you have created an organization, even if you are owner/admin of a project, you do not have delete permission. First you need to go to admin settings page and grant yourself "project deleter" role, then you will be able to shutdown/delete a project.
To give yourself "project deleter" role, go to IAM -> settings, Open dropdown at the top where you can select a project, click on all, click on your oganization name. Here you will see your email as "Organization Administrator". Edit this and add "Project Deleter".
Did this help anyone?
Only project owners can shut down the project, so make sure you are logged in as an account with the Project Owner permission before you try to delete the project. You must first disable billing before deleting any project by shutting down the project. If you are as an owner of project make sure that your log in with the right email.
Also, shutting down a project does not delete the project immediately. It only requests deletion of the project. The project owner will receive an email notification that the project has been marked for deletion
To shut down a project using the GCP Console:
1) Open the Setting page (found under IAM & admin) in the Google Cloud Platform Console.
2) Click Select a project.
3) Select a project you wish to delete, and click Open.
4) Click Shut down. Then click DELETE PROJECT. A confirmation screen describing what will happen appears.
5) Now enter the Project ID, then click Shut down.
For more information about shutting down/deleting the project please have a look at these following links with:
https://cloud.google.com/resource-manager/docs/creating-managing-projects#shutting_down_deleting_projects
https://support.google.com/cloud#topic=6158848
Open IAM and check for project permissions. check members and their roles. Check who is the owner of the project. what is your role? If you are the owner under roles and still not able to delete the project, then raise an issue in https://issuetracker.google.com/issues.