What is the Google VFE accounts? - google-apps

What does Google accounts starting with vfe.XXX.* mean? Are they suspended accounts in the domain?

Those accounts were moved from the legacy Postini environment. They should all be suspended accounts assigned to the "VFE" license type (Vault Former Employee). Those accounts contain all of your Postini message archive data.

Related

User profiles marked DELETED for active AD accounts

We have a number of our active AD accounts marked for deletion in the SharePoint 2016 User Profile service, roughly half of our people have had their accounts updated with -DELETED- even though their accounts are still active in Active Directory, running a full synchronisation doesn't seem to resolve this. There aren't any error in the event logs or the ULS logs and there doesn't appear to be any specific connection between the accounts that have been marked in this way.
Why would the User Profile synchronisation process mark an account for deletion when the AD account is still active?

Can a developer account and a live account be clearly differentiated or not?

I will need to perform some tests in sandbox mode and therefore, according to the official testing process documentation, to create a developer account.
As I wish this new developer account remains exclusively for testing purpose in the sandbox "virtual environment", I would want to know if the opening process of a developer account automatically creates a live account (using the same email address) or if these two types of accounts can be clearly differentiated?
Indeed, the procedure seems a little bit unclear IMHO because, while trying to sign to the sandbox site seems easy using directlty <sandbox.paypal.com/signin>, trying to do the same for the developer site redirects to <paypal.com/signin> (and not to <developer.paypal.com/signin>, which doesn't exist).
The account that you created to log in into developer is a live account. You can use it to pay real transactions if you want, or you can keep it just for development proposes.
Once you log in into the developer portal, you can create sandbox accounts as much as you want. Those sandbox accounts are linked to the developer live account, but with different fake email addresses. As you mentioned, you can use it to log in into https://sandbox.paypal.com/signin and perform all the tests needed.

Sharing google sheet with service account when 'Sharing outside of organization is OFF'

I'm using GSpread to download data from Google sheets and store them in a Postgres DB for different organisations.
Unfortunately one organisation has activated G Suite's strict sharing setting which makes it impossible for users to share documents outside their organisation.
This affects my ability to share Google sheets in this organisation with service accounts which are required for GSpread.
Note: I created the service account within the respective organisation and also already delegated domain-wide authority to the service account.
Any idea on how to share the Google sheet with the account?

How to reassign "legal" permission in iTunesConnect

On our first iOS app, the person who started up our account with Apple assigned the "legal" permission to our shared support mail, and as such, the "legal" permission was assigned to that Apple ID. Even though the CEO filled in all the paperwork there, having access to that mail as well, "legal" should not have been assigned to that AppleID.
We need to now move that permission from the shared support mail over to our CEO's own company mail, but I can't seem to move that permission over, even while logged in as the current "legal" user. The check box for "legal" seems to be unclickable.
Is there any way to CHANGE the AppleID that is assigned to "legal?"
See instructions for Transferring the Team Agent Role (legal role) on this page:
https://developer.apple.com/library/content/documentation/IDEs/Conceptual/AppDistributionGuide/ManagingYourTeam/ManagingYourTeam.html
In a nutshell (from the page above):
Sign in to developer.apple.com/account as the team agent, and click
Membership.
Scroll down to Settings, and click Transfer Team Agent Role.
Follow the instructions that appear in a series of dialogs.
For example, you will be asked to choose a new team agent and sign an
Agent Transferor Agreement.
The legal role can only be reassigned by contacting the developer support
https://developer.apple.com/contact/submit/
If I understand correctly and you would like to sign the legal role to another person, you have o do that under the User and Roles Tab in iTunes Connect. To change the user's roles you need to have the admin account. If you want to change the Apple ID that is used to sign all the contacts, that is unfortunately not possible. This is in most cases the initial email with which the account was initially created. This unfortunately will have to stay the same unless you convert from a private to a company account. Hope that helps.

Get all email addresses of user using Google API

For my own gmail account, I have multiple email addresses associated with it. For example, I have an email address from my university that is associated with my gmail, and I can send emails from my gmail as if they are coming from my university email address.
I'm reading up on the Google APIs, and I see that I can get a user's gmail address, but can I also get any other email address that is associated with their gmail account?
When a user logs in to my site, I'd like to present them with a list of the gmail-associated email addresses and let them select the one they would like to use.
EDIT: Thanks everyone for the answers, but I don't think any of them answers the question. I've been playing with Google's OAuth playground. It is strange that I can get lots of very personal information (a list of a user's contacts and even received emails) but I can't get the user's alternative email addresses.
Your description is a little vague. Are you talking about send-as alias accounts or alternate email accounts?
Send-as Alias
Either way, you can interact with the send-as accounts here: Manage Send-as Alias
Alternate Emails via Admin SDK
As for alternate email accounts, they can be accessed via:
Admin SDK: https://developers.google.com/admin-sdk/directory/v1/guides/manage-user-aliases?hl=en
Google Apps Script: https://developers.google.com/apps-script/reference/gmail/gmail-app#getAliases()
Additional info here on how the accounts work.
Email addresses associated with your account
Alternate email addresses and other Google products
Connect other email accounts to your Google Account
Federated Login
Also, I'm not exactly sure how you are trying to incorporate this functionality into your site but another area I recommend checking out is Federated Login for Google Account Users. This might also provide you with the functionality you seek.
Using federated login (also known as federated identity), your website
or application can allow visitors to sign in using their Google user
accounts. Federated login frees users from having to set up separate
login accounts for different websites, and frees you from the task of
implementing login authentication measures.
It has been a while since the question was asked. You can use the Google People API to get a user's primary email address and aliases. Here's the documentation. The scope you need to use is: https://www.googleapis.com/auth/user.addresses.read
This will return all the email addresses for the user and also tell you which is the primary one.
If you use OAuth to have your users sign-in with their Google accounts (with or without G+) the user will be prompted (by Google) to select which of their accounts they wish to authorize your application to use:
https://developers.google.com/accounts/docs/OAuth2Login
So to directly answer your question, I'm not aware of an API to return that list of users - however you shouldn't need to, Google will take care of this before returning to your application.
If your user is already logged in, and you wish to give them the ability to change the Google account they are using, I believe it is possible to prompt them again to select the account they are interested in (search for select_account on the link above).
This is possible. However, this has changed since Google announced the deprecation of their Google+ People API, which a lot of folks used to get all the email addresses for a user. The current most voted answer now goes to a 404.
Google Plus People API Replacement
Google has replaced the Google Plus People API /plus/v1/people/me with https://developers.google.com/people/ and you’ll want to use the https://www.googleapis.com/auth/user.emails.read profile scope as discussed here as a replacement. The schema is different, so you'll need to change your mapping as well.
If your app already used the following scopes from the old /plus/v1/people/me your user will not have to re-consent when you switch to the new API:
email
profile
https://www.googleapis.com/auth/plus.login
https://www.googleapis.com/auth/plus.me
https://www.googleapis.com/auth/plus.profile.agerange.read
https://www.googleapis.com/auth/plus.profile.emails.read
https://www.googleapis.com/auth/plus.profile.language.read