Google Cloud Console access for invited users

[agodoo]

I registered a domain (for ex. mydomain.com) and I opened a Cloud Identity (free edition) account attached to that domain.

Then I configured a Google Cloud access for this Admin user. So, I finally had my Cloud Identity account with my user as an admin, my organization and my Google Cloud account with which I can access Google Cloud Console.

After accessing Google Cloud Console, I setted up the payment and billing profile for my organization; I created also some groups and additional users through Google Admin console. All of them belong to mydomain.com; so for example I created an additional user adam@mydomain.com that belong to gcp-network-admins and gcp-security-admins groups.

adam@mydomain.com received an invitation email. If he tries to login to Google Cloud Console he gets a 3 step wizard where on the last step the system ask him to enter billing and payment info to access and start using Google Cloud. I don't understand why and I'm not sure if I did something wrong. Is it correct?

kind regards, Matt

[KamyarK]

Hi Matt,

If I understand correctly, the new user that you have created "adam@mydomain.com' has been added to the "gcp-network-admins" and "gcp-security-admins" groups.

I think we'd need more context on what are the configurations set on the project and the group to better troubleshoot this issue. Is this new user a part of your cloud project? What roles and permissions are given to them?

As you can see in our official documentation [1], you can control the permission settings of each member and what are the authentication processes needed for new members. 

Hope the explanations help,

[1] https://support.google.com/groups/answer/9718200?hl=en&ref_topic=9216#permissions_settings&zippy=%2C...

[agodoo]

Hello,

I assigned a role as "billing user" to the adam@ user and he was able to login without having to create a new billing account.

thank you for your support