Unable to check "Enable G Suite Domain-wide Delegation" in GSuite - google-workspace

I am trying to setup a service account to get delegation from a GSuite admin. The manual says I have to first check "Enable G Suite Domain-wide Delegation" option in the service account, but my checkbox is disabled.
Why does this happen and what should I do to make it work?
This is different with another question: Google G-Suite API Console not showing Enable G Suite Domain-wide Delegation
I can see the checkbox, but it is disabled.

I had to click "Edit" on top of the screen button to make changes. It was really stupid.

Related

Locked out of GSuite Admin after domain verification

I have signed up for Gsuite Essentials and attempted up upgrade to Gsuite Enterprise. I only have a single email address eg a#abc.com. I had already been using this account as a normal google account. (no gmail though).
I couldn't get the admin console to show the upgrade option, but found I needed to verify my domain. So I added the TXT record to my domain abc.com, which would then let me verify.
I could then log in to the admin console as a#abc.com and clicked on the upgrade option and completed the process. This then let my a#abc.com user have access to Gmail. I have not transferred any domain settings over to google, that is all still externally hosted.
I can now no longer log in to the admin console, it says that my a#abc.com account doesn't have the rights and I need to log in as the administrator. There is no other account linked to the Gsuite settings, so there is no other administrator. I can still log in to the normal google account and do the same functions as previous.
I have now removed the TXT record hoping that would cancel it out again.
How do I get access to the admin side again?
Side note: What I am mostly worried about is that I put my credit card details into the signup, but can't get into the admin page and can't contact any form of support. It is literally impossible to get support to use the serve I paid for.
First thing first, the txt records are a string for the only purpose to verify the ownership of the domain therefore deleting them won't change anything you only need this record for the verification process and once is done you can delete them.
As an example is like a text message sent to your mobile phone, if you delete the message nothing will happen right?
I tell you this so you won't more time on the domain DNS zone settings because the issue is not there and you won't solve the problem.
There may be few things that may have happened.
The first thing you should do is to navigate in an Incognito page, make sure that is the only incognito page that you have opened and log in with a#abc.com.
Try to run different test in incognito, the issue really looks like that you are logged in with multiple Google Accounts and when you go do admin.google.com it picks up the wrong one. That's why you should go in incognito.
EDIT
Use as reference this link Here.
Follow the steps in Paragraph 'I'm taking control from another admin' here the steps:
Go to the G Suite Essentials sign-up page.
2, Sign up using your email address at the domain you're verifying.
Use an address where you can get mail.
Follow instructions in the Setup Wizard to become the admin who manages G Suite Essentials for all users at your organization.
If this didn't solve the issue then you should contact the Google Support and they will tell you what happened.
The thing is that if you can't access the Google Admin you won't be able to contact the Google Support, hence you should follow this:
.1 Can't sign in to the Admin console: https://support.google.com/a/answer/6335621?hl=en

Not able to test Google Action

I am not able to test the Google Action. I'm getting an error:
The Web & App Activity permission is enabled, but the administrator of your Google account does not allow that. Please reach out to the administrator to change the preference.
But My team members are able to test it and we have the same privileges. I can't test it. I am not able to the "Account Linking" also.
In order to use Actions on Google or the Assistant, you will need your account's activity controls for "Web & App Activity" to be enabled.
You seem to be using a GSuite account, so this change may not be possible to toggle by yourself. In a work or school environment, the ability to change certain settings may be restricted by whoever manages the accounts. Depending on the scale you may be able to get the IT department to enable this setting.
Porting the project over to a standard GMail account will allow you to test the Action without this restriction.

I want my actions to not use any type of account linking

I want to publish this action but everytime I submit for production it shows the same message for denial. I don't want account linking of any type for my actions. Please help me in this problem.
It seems by mistake you have enabled Account Linking in your action.
If you don't want any kind of authentication or linking in your actions, check Account Linking section under Develop menu and clear it.
If it is linked you will get an option to clear it at the right side of the panel.
If you want Account Linking than you need to provide atleast one login credentials in testing credentials section.

PayPal: Cannot create sandbox account, and REST API account

I tried to build the Paypal Express Checkout. Last week all runs smoothly, I can create REST API app and the sandbox account as well.
But today, All the details is removed.
And there is this warning
We’re sorry, but something went wrong while getting your credentials.
Please try again.
When I tried to create a new app/new sandbox account it says
We're sorry, something went wrong during account creation. Please try
again.
After some googling and trying some of the solutions like "password is too weak", I realise that all the solutions are from years ago and all the screenshot is the old PayPal interface.
I would assume that this is related to the new PayPal.
PS: I am from Australia and have read the "Non-US developers should read our FAQ"
Anyone know how should I create REST API App?
This is not the correct way to create the API, but this resolves my problem instantly.
I had the same problem. The "Sandbox developer account" dropdown box had no entries although I had set up accounts before - so I couldn't create an app. After some trial and error hacking I finally found a way to inject a valid option in the html select and successfully created the app in the end.
Here's how:
Log in to your developer.paypal.com profile and go to Sandbox - Accounts.
Just use Firebug in Firefox or Developer Tools in Chrome to examine the source: Check the source of your BUSINESS account and you will find a code line like this:
<a class="profile" target="/developer/accounts/detail/22971020450123198612">Profile</a>
Note the id (e.g. 22971020450123198612), the country code (e.g. GB) and the email address.
Now go to Dashboard - My Apps & Credentials and press "Create app"
Open Firebug/Dev. Tools and examine the "Sandbox developer account" dropdown box. Right-Click the empty select in the dom and choose "Edit as HTML". Enter an option tag with your formerly noted values, just like this:
<option value="2297102045097598612,email#domain.com">email#domain.com (US)</option>
Check that the option now appears in the dropdown box.
Enter a name in the "App name" field and press "Create app".
That's it. Hope I could help.

Error when inviting a user to google cloud

I am trying to add a new member on my google-cloud project but i can't make it work.
The link inside the auto-generated email from google is well linking to the page where the user can confirm/decline the invitation inside a modal.
But when this user click "confirm" an error message appear inside the modal but disappear immediately - so quickly i can't read it. As a result i can never grant access to my project to this user.
In my browser debugger here is the error i can trace (some values are forged) :
"NetworkError: 400 Bad Request - https://console.developers.google.com/m/teams/acceptinvitation?xsrf=AFE_nuNg_V8394FDKjdfkjkjwKDFXDVg%3488T6J5783&authuser=1&action=accept&pid=apps~myproject-hosting&receive_updates=false"
This user has a custom domain which is a google-apps managed domain. I specify this because its the only kind of users we cannot invite to the project.
No problem for adding users with #gmail account.
From the google-cloud documentation i can read this :
If you are using a Premier or Google Apps domain, the administrator for your domain should first create the Google account from within the Users panel of your Admin Console.
I don't understand this sentence as my user is off-course already listed in my domain.
This might be expected behavior from the App Engine. I know that once you link you application to a specific domain via Google Apps, it becomes very hard to add people from outside that domain to your application.
I know that you can create a google group, enable "out-of-domain" members to that group. Then you can add that group to your project. Then you can add his email to the group, which should give him access to the project.
Only caveat here is that, if your domain is google.com, you will not be able to use this workaround, and this may require help from support.
Well i finally did it.
Google seems to have fixed the flashing error message making it impossible to read.
Now it display something like this : "Contact your administrator to enable AppHosting admin on your account".
This is done has follow :
Login to your main google-app account on http://admin.google.com
Go to "App"
Go to "Additional Google services"
Enable "Google Developers Console" for everyone
Now my user can be invite to the google-cloud project.