Can't add users to GCP organization

418 views
Skip to first unread message

Shahar Mor

unread,
Dec 4, 2017, 8:09:40 AM12/4/17
to gce-discussion
Hi,

We have an organization that was created automatically given our GSuite account.

We wanted to start using it (Move our existing project under it and create new projects), but it seems that we can't modify the IAM users in the organization.
We tried doing it using one of the "Super Admins" in the GSuite account, and we did successfully managed to ask GCP to create the permission, but even after GCP shows a small black notification on the bottom left that say that the user was granted permissions, the user does not have permissions. (We added the "Organization Administrator" permission).

After refreshing the IAM page of the organization the newly added permission is not listed, and only the default organization permissions are shown.

Can someone help us set it up?

Fady (Google Cloud Platform)

unread,
Dec 4, 2017, 1:07:26 PM12/4/17
to gce-discussion

Per this Google Cloud document, by default, when an organization is created, and to minimize disruptions, all members of your domain are granted project creators and billing account creators, but not for the organization itself, which would be visible but not modifiable. They will only be able to modify the organization when the G Suite or Cloud Identity super administrator has set the correct permissions.


I understand that you have tried this before, but I recommend to re-verify that the modification is being done by a G Suite super admin. For further step by step guide to assigning admin roles to users you may check this support page. If the super admin was not able to assign the admin role to the user using the guide, please privately email me your organization ID, along with the email of your super user for a quick inspection.  


On the other hand, as a member of the domain, (as explained above) you are a project creator (by default), and if you are an owner or editor of the existing project, you should be able to migrate the existing project to the organization without being an organization administrator, for further details you may check this help article.


Reply all
Reply to author
Forward
0 new messages