Unknown project in GCP Console

[Guanaco Devs]

Hi there.

I have noticed recently that I have in my GCP console 2 projects that I did not create and I guess came with the account. I have been using GCP for the last 4 years, was at the time of installing the gcloud-sdk, that I noticed those 2 projects.

Since I'm not the owner, how do I removed them from my GCP Console?

One of the projects name is "you-can-see-this-project" and the other "brave-watch-xxxxx".

When I try to delete it with the gcloud command I get

`ERROR: (gcloud.projects.delete) User [my-e...@gmail.com] does not have permission to access projects instance [you-can-see-this-project] (or it may not exist): The caller does not have permission`

If I try in the GCP Console I do not have valid permissions to remove them.

I really want to get rid of those projects.

Best Regards

Edgard

[Tapir]

Totally same for me. 

[Vitaly Bogomolov]

+1 

Two unknown projects in the list.

воскресенье, 5 сентября 2021 г. в 14:31:16 UTC+4, Tapir:

[Jofre Riba Sánchez]

This is working as intended. This was previously reported on this same group and other similar ones [1]. This has also been reported on our issue tracker in [2], [3] (and a bunch more times).

In summary, somebody granted a permission to get the name of the project (resourcamanager.projects.get) without giving you any additional permission, which has the effect of being able to see the project, but not take any action on it.

There is a feature request to hide un-wanted projects on the console [4], and another one to display a warning when somebody shares a project with groups containing +100 people [5].

This usually happens when somebody shares a project with a group (I'm guessing by accident), and everybody on that group can see the project.

As a matter of fact, the second project on that list (you-can-see-this-project) is my own, where I granted resourcemanager.projects.get to this very same group (google-a...@googlegroups.com), to demonstrate those are the only steps needed for projects to appear on the list, to show there's nothing nefarious going on, and also in an attempt to grab a bunch of screenshots of the process to write a more detailed explanation for some of our public forums (that is still ongoing work). I tried to make it obvious on the project name that this was the intended behaviour of that project, but there's so much that can be said with 30 characters.

There is right now no option to remove yourself from projects where you do not have IAM access (the permission is at the project level, not at the account level, so you need permissions on the project to modify IAM bindings), but this should have no impact on your experience. Note that the feature request is only for the console. The OP is mentioning the SDK (gcloud projects list), and this would not be modified by hiding the list on the console. The SDK is only calling resporcemanaget.projects.list [6], and that would not be modified by the request in [4].

[1] https://groups.google.com/g/google-cloud-dev/c/TEIZvOecBFs

[2] https://issuetracker.google.com/191214686

[3] https://issuetracker.google.com/195146186
[4] https://issuetracker.google.com/194427619

[5] https://issuetracker.google.com/195426458

[6] https://cloud.google.com/resource-manager/reference/rest/v1/projects/list

[Vitaly Bogomolov]

Thanks for the explanation.

понедельник, 6 сентября 2021 г. в 11:18:17 UTC+4, Jofre Riba Sánchez: