I have exported the data of my complete organization (multiple accounts) from my google admin console. I want to pause/stop the data export now. What are the options to do this?
Based on my experience it is not possible. You need to contact Google Workspace Support for them to assist you on cancelling the task on the backend (it usually takes from 24 to 72 hours).
As a workaround you could remove the admin roles from the admin account that started the export, or if it was you, you could just give super admin rights to another user and ask to be removed as super admin temporarily because that would cancel the data export according to the official documentation.
Once it is cancelled you can ask the other person to give your super admin rights back, but be aware that the Admin console can take from 24 to 48 hours to give you full access as super admin again.
"If your Google Account loses super admin privileges while an export you started is running, the export is automatically canceled. No data is exported and other super admins receive an email notification that the export was unsuccessful".
Related
I had a simple Google Cloud Storage Account (for the last 5 years) that I had a small online backup service offering for my clients.
About a month or so ago I began getting messages about my "Trial" was expiring ... I ignored it mostly since I had not setup a trial anything. Then about a couple of weeks ago, my backup service quite working with the message I had no cloud account.
I went back and found the emails and clicked and "Upgraded" the account (which again I have no idea why since I have been paying Google Cloud Storage for years) and the backup began to work again.
But now when I go to look at the Project it states I have no permission for anything. I had access until this garbage happened ... of course there is absolutely no way to get support from Google.
I have tried to see how to give me admin access again, but there does not seem to be any way to do this ...
BTW ... I am the only login
Help please
about a year ago, some requirements were changed with GCP and storage. as such, you will need to ensure you have an attached billing account and manager access on the accounts that you are using to back up with. Typically these are service accounts with service credentials.
You can find the IAM roles here: https://console.cloud.google.com/iam-admin/iam
you will have to ensure you are in the correct project, then select the user that you are using to authorize with the backup service (or potentially create one).
Then you will want to edit the roles this account has with any of the following, or their subset permissions:
Storage Admin
Storage Transfer
Storage Object Admin
I also highly recommend getting a Google/Firebase technician to look at your GCP project, you can contact them through support here as they can debug if there are any backend issues. Just clarify that your project may not be a Firebase project. They are often more helpful than typical Google Support.
https://firebase.google.com/support/troubleshooter/contact
Update:
If for some reason your account was hijacked or migrated to an account you don't have access to when you should. contacting GCP support is your best option, they are able to restore access, roll back changes, and otherwise assist with any potential lockouts you have.
I have signed up for Gsuite Essentials and attempted up upgrade to Gsuite Enterprise. I only have a single email address eg a#abc.com. I had already been using this account as a normal google account. (no gmail though).
I couldn't get the admin console to show the upgrade option, but found I needed to verify my domain. So I added the TXT record to my domain abc.com, which would then let me verify.
I could then log in to the admin console as a#abc.com and clicked on the upgrade option and completed the process. This then let my a#abc.com user have access to Gmail. I have not transferred any domain settings over to google, that is all still externally hosted.
I can now no longer log in to the admin console, it says that my a#abc.com account doesn't have the rights and I need to log in as the administrator. There is no other account linked to the Gsuite settings, so there is no other administrator. I can still log in to the normal google account and do the same functions as previous.
I have now removed the TXT record hoping that would cancel it out again.
How do I get access to the admin side again?
Side note: What I am mostly worried about is that I put my credit card details into the signup, but can't get into the admin page and can't contact any form of support. It is literally impossible to get support to use the serve I paid for.
First thing first, the txt records are a string for the only purpose to verify the ownership of the domain therefore deleting them won't change anything you only need this record for the verification process and once is done you can delete them.
As an example is like a text message sent to your mobile phone, if you delete the message nothing will happen right?
I tell you this so you won't more time on the domain DNS zone settings because the issue is not there and you won't solve the problem.
There may be few things that may have happened.
The first thing you should do is to navigate in an Incognito page, make sure that is the only incognito page that you have opened and log in with a#abc.com.
Try to run different test in incognito, the issue really looks like that you are logged in with multiple Google Accounts and when you go do admin.google.com it picks up the wrong one. That's why you should go in incognito.
EDIT
Use as reference this link Here.
Follow the steps in Paragraph 'I'm taking control from another admin' here the steps:
Go to the G Suite Essentials sign-up page.
2, Sign up using your email address at the domain you're verifying.
Use an address where you can get mail.
Follow instructions in the Setup Wizard to become the admin who manages G Suite Essentials for all users at your organization.
If this didn't solve the issue then you should contact the Google Support and they will tell you what happened.
The thing is that if you can't access the Google Admin you won't be able to contact the Google Support, hence you should follow this:
.1 Can't sign in to the Admin console: https://support.google.com/a/answer/6335621?hl=en
I'm trying to use my delegate account (The principal account is managed by the enterprise owner) to access the PayPal developer and everything is fine until I click on the dashboard link. I'm getting a 403 error message.
Last year I was working with the same account and it was fine. I'm wondering if something have changed since the last time i used the dashboard feature? Did my user need more permissions to access the PayPal developer dashboard?
Any ideas?
if 'delegate' meaning authorized alias user ID; than in 'most' cases I have seen where one couldn't even log into the developer portal with their ALIAS ID. That said, I am aware that only the principal account owner may log into the developer portal using their email and password.
The permissions of an alias cannot be altered to allow such access even if they have the highest permissions on the account itself; ADMIN.
It is possible that this may have changed since last year but this is what I am aware as of 2016.
Hope this helps.
I'm working on JasperReports Server community edition.
I need to configure it so, that after logging in a user can only see specific reports, otherwise s/he should not see any other folder/resource.
As per Jaspers permission Guide, it should work with this solution but does not work somehow.
A new role eg "TEST_ROLE" was created by jasperadmin.
A new user "TEST_USER" was created and the role "TEST_ROLE" was assigned to him/her.
Now for the "TEST_ROLE:
For Repository root, permission No Access was set.
only on specific reports Read onlypermission was granted.
But when TEST_USER logs in, he sees below message:
You do not have permission to view this page.
Please contact your system administrator or log in as a user with permission.
Why it does not work?
Question2:- User with role "TEST_ROLE" should not be able to upgrade his permission. Is it achievable with permission Read only as I have described above?
Question3:- I did not get what's the diffence between Execute only and Read only permissions?. What I could comprehend that user can view/execute self created reports with execute only permissions?
The difference between Execute Only and Read Only is that those resources which have Execute Only cannot be 'seen' by the user but can be executed.
This becomes relevant when reports that the user can see are dependent on other resources in the repository eg datasources, domains, images etc.. .
To run the report the user must also have access to these other resources.
If you want to restrict the user to only to be able to view reports they can run then set the reports to 'Read Only' and set all dependent resources to 'Execute Only' on the relevant role.
This is what is possibly causing the permissions error you are seeing.
I'm trying to use the Add-AzureAccount command that's part of the Azure PowerShell tools (August 2014, v0.8.6), and although various examples on the web lead me to expect that it will let me use either an organizational account or a Microsoft Account to log in, in practice, it seems to be requiring an organizational account.
When I execute the command, it opens a hosted browser window as expected, but the prompt says Sign in with your organizational account followed by a username and password. There seems to be no way to tell it that no, I actually need to use a Microsoft Account.
(As it happens, my email address is associated with both an organizational account, and also a Microsoft Account. This may not be helping.)
I could create a completely separate organizational account in an Azure Active Directory, make that a co-admin, and log in with that, but it seems like this shouldn't be necessary.
Is there some way to force it to offer me both options?
I was able to resolve this problem through trial-and-error. As Paul points out in his post, you can load your subscription info into PowerShell using the following sequence:
1. Get-AzurePublishSettingsFile
This will open a browser to a special page that lets you download your profile settings file.
Note: If you have multiple subscriptions, you must use the dropdown to select the one that contains the Azure components you want to manage. For instance, I have a BizSpark subscription that I use for my own company, and a separate MSDN subscription that my clients use (adding me as an administrator). Both subscriptions show up on my management portal page, so I needed to download 2 separate publishsettings files.
2. Import-AzurePublishSettingsFile my-subscription.publishsettings
In my case, I renamed the settings files to "BizSpark.publishsettings" and "MSDN.publishsettings", so I ran this command twice.
3. Get-AzureSubscription
This will list all of the subscriptions that have been imported into PowerShell, showing the subscription name and the other properties.
4. Select-AzureSubscription -SubscriptionName "my-subscription"
You can now use the subscription name to select the subscription you want to use. This allows you to switch back and forth between subscriptions and work with the Azure components you need to manage.
Use #outlook.com instead of the organizational address and you will be directed to the Microsoft Account login.
Azure can be signed up with either Microsoft Account or Organizational Account. Add-AzureAccount will display a message like "Sign in with your organizational account" in the browser window, but actually if you input your Microsoft Account email address into the box and move focus out, the page will redirect to Microsoft Account sign page automatically, and then you can sign in.
Sometimes you may meet some error like "The cache contains multiple tokens satisfying the requirements". You can try to clean all the existing Azure Accounts firstly and then try to sign in again.
To clean up, run Get-AzureAccount | Remove-AzureAccount.
I have a similar problem. Using Add-AzureAccount with my Microsoft Account result in adding my organizational account.
For example I run Add-AzureAccount, in the form I type davideicardi#hotmail.com (my Microsoft account) but the resulted account is davide.icardi#mycompany.com (my organizational account).
I solved by deleting all the Azure account registered on Power Shell (also the one not related to my account, using Remove-AzureAccount), then I have deleted IE cookies (not sure it this is important...), closed the powershell console and executing again Add-AzureAccount.
I suspect that there is a bug somewhere...