Signing Up For Support

[user1342]

Hello,

To get support with an issue I've been having with Google cloud it was suggested here to sign up to one of the technical support plans. To do this I first needed a Business Google Workplace account. I have since done this and now have a Google account connected to my domain. However, my existing Gmail account still does not have access to the newly created company (and so I still can't signup to support on my project). I am assuming this is because this company has only be assigned to the accounts that are part of my domain, but my existing project is not on those accounts. 

All I want to do is fix an issue I'm having with Google Cloud, I'm happy to sign up to support, but I don't want to have to manage these additional accounts or have to re-setup my project on a new account. 

Any advice with this would be appreciated.

Thanks

[DamianS]

Hello @user1342 ,

Welcome to the Google Cloud Community. You can grant access to your newly Organization by adding your EXISTING Gmail account into Organization IAM. All steps must be performed at the Org Admin:

Step 1: Verify Organization Access

First, ensure you have the necessary permissions to manage roles at the organization level. You need the resourcemanager.organizations.setIamPolicy permission, typically held by roles like Organization Administrator.

Step 2: Access the IAM & Admin Page

1. Open the Google Cloud Console (console.cloud.google.com).
2. Navigate to IAM & Admin > IAM.

Step 3: Select the Organization

If you have access to multiple organizations, select the appropriate organization from the drop-down menu at the top of the page next to the Google Cloud Platform logo.

Step 4: Add Members and Assign Roles

1. Click + ADD to open the Add members dialog.
2. Enter the email address of the user, group, or service account you want to grant access to.
3. Under Role, select the desired roles to apply at the organization level. Some common organization-level roles include:
   • Organization Administrator: Full control over all aspects of the organization.
   • Billing Account Administrator: Manage billing accounts.
   • Project Creator: Permission to create new projects under the organization.
4. Optionally, you can click Add Another Role to assign additional roles to the same member.
5. Click Save.

5. Confirm and Review

After adding members and assigning roles, review the list to ensure correct configurations. Changes typically take effect immediately.

Additionally, if you want to deal with billing stuff, you must also add you EXISTING email account to Billing IAM. 

Step 1: Access the Google Cloud Console

1. Open the Google Cloud Console (console.cloud.google.com).

2. Navigate to Billing.

   If you have access to multiple billing accounts, select the appropriate billing account from the list.

Step 2: Manage Billing Permissions

1. In the left-hand navigation pane of the Billing account, click Account management.
2. Click on IAM to see the list of members and their assigned roles for this billing account.

Step 3: Add or Update a Member's Role

1. To add a new member, click + ADD MEMBER.

2. Enter the email address of the user, group, or service account to whom you want to grant access.

3. In the Role dropdown, select the role that includes permissions for managing support tiers. The primary roles are:

   • Billing Account Administrator (roles/billing.admin): Provides full control of billing account, including managing billing and support settings.
   • Billing Account User (roles/billing.user): Allows viewing billing account cost information and managing billing settings but does not allow changing roles or permissions.

4. Optionally, you can specify conditions that limit when the role is active.

5. Click Save.

Apart from provided steps, I would recommend to not granting high permissions to gmail account. Best approach is to create dedicated user and group with your organization domain and use those accounts to manage cloud and billings. 

cheers,
DamianS