Organization rights

Hi all,

i am not sure i am writing to the correct location (i doubt it) but i could not find a better location.

I am the owner of a Google workspace account that over the years has created a few project into GCP.

Now for some reasons it seems  that when i try to look at the organization that has been created automatically in GCP (with the name of my company (name.com for example)) i do not have the rights to do it.

How can it be that being the superadmin of my Google workspace account and the owner of the company i do not have full access to the GCP organization?

Thanks and best regards,

Fabio

Solved Solved
1 3 1,514
1 ACCEPTED SOLUTION

Hi Fabio,

Here's what's likely happening:

  • Automatic Organization Creation: When you created your Google Workspace account, an organization resource was automatically created in GCP with your company name (name.com).
  • Workspace Admin vs. Organization Admin: Being a Google Workspace Super Admin grants you control over your Workspace domain and users, but it doesn't automatically translate to full GCP organization administrator privileges.

Resolving the Access Issue:

There are two ways to gain full access to your GCP organization:

  1. Contact Existing Organization Admin: If someone else in your company already has Organization Admin privileges, they can grant you the necessary role (like "Owner" or "Organization Administrator") within the GCP console.

  2. Become Organization Admin Yourself: Since you're the Workspace Super Admin and owner, you can elevate your access. Here's how:

    • Access GCP Console: Go to https://cloud.google.com/ and log in with the same Google Workspace email address you used to create the Workspace account.

    • Check IAM Permissions: Go to the "IAM & Admin" section (usually on the left sidebar) and navigate to the organization level (it should have your company name). Look for your email address and see what roles are assigned to you. Ideally, you should see "Owner" or "Organization Administrator."

    • Grant Yourself Admin Access (if necessary): If you don't have the necessary role, you can grant it to yourself. Here, you'll need to be careful. It's recommended to only grant yourself "Owner" access if you're comfortable managing GCP resources. Otherwise, consider requesting the "Billing Administrator" role which allows you to manage billing for the organization.

       
Please let me know if the issue persists. 
 
Thanks,
Sajith

 

View solution in original post

3 REPLIES 3

Hi Fabio,

Here's what's likely happening:

  • Automatic Organization Creation: When you created your Google Workspace account, an organization resource was automatically created in GCP with your company name (name.com).
  • Workspace Admin vs. Organization Admin: Being a Google Workspace Super Admin grants you control over your Workspace domain and users, but it doesn't automatically translate to full GCP organization administrator privileges.

Resolving the Access Issue:

There are two ways to gain full access to your GCP organization:

  1. Contact Existing Organization Admin: If someone else in your company already has Organization Admin privileges, they can grant you the necessary role (like "Owner" or "Organization Administrator") within the GCP console.

  2. Become Organization Admin Yourself: Since you're the Workspace Super Admin and owner, you can elevate your access. Here's how:

    • Access GCP Console: Go to https://cloud.google.com/ and log in with the same Google Workspace email address you used to create the Workspace account.

    • Check IAM Permissions: Go to the "IAM & Admin" section (usually on the left sidebar) and navigate to the organization level (it should have your company name). Look for your email address and see what roles are assigned to you. Ideally, you should see "Owner" or "Organization Administrator."

    • Grant Yourself Admin Access (if necessary): If you don't have the necessary role, you can grant it to yourself. Here, you'll need to be careful. It's recommended to only grant yourself "Owner" access if you're comfortable managing GCP resources. Otherwise, consider requesting the "Billing Administrator" role which allows you to manage billing for the organization.

       
Please let me know if the issue persists. 
 
Thanks,
Sajith

 

Hi Sajith,

thanks a lot for your very clear response. It helped me to solve the issue.

best regards,

Fabio

Happy to help! ๐Ÿ™‚

Top Labels in this Space