Is there any way to change the deployment owner of an Appmaker application?
The person who has created Appmaker applications for our organization is leaving, and we need to have new owners for the deployments. The options for exporting data, viewing logs, publishing and editing deployment details (e.g. admins) are only available to the deployment owner, so managing the deployment is close to impossible without the deployment owner.
Also, I'm wondering what will happen when the account of the deployment owner's account is deleted. Does the deployment disappear or is it just a deployment without an owner?
Could a Google admin transfer the ownership, even though it is not possible for the normal user?
If you have any other suggestions on how to deal with this problem, I'm happy to hear them out.
EDIT: I have tried transferring the Appmaker file to a different owner but that has no effect on the deployments.
Related
With Firebase: What are the minimum roles/permissions that should be granted to allow someone to deploy only?
I am not the owner of the organization, but I can create projects. I have gone through all the permissions, documentation, and it's not clear at all what the minimum permissions would be, there is no 'deploy only' permission, it's quite confusing.
We are using hosting only, no database, no other product, other than hosting a web application.
I want to restrict to just this, not allowing to use any other Firebase resource, just to deploy the web app. (firebase deploy only)
Provide background including what you've already tried
I have spent three hours reading documentation.
Google does not provide any way to limit permissions to allow a developer or contractor to deploy only ('Hosting Editor' permissions is what I am looking for).
They can calculate Pi to 31.4 trillion digits, do a lot of other amazing things, but not allocate minimal resources to make Firebase an Enterprise ready product.
I am in school, and I accidentally linked my school's org to my Cloud project and now I have limited functionality even though I was the project owner. Is there a way for me to remove them?
You can't without Google Support's assistance.
If a project is associated with an organization, you can't change it
back to No organization or migrate it to another organization on your
own. If you need to migrate a project after it's associated with an
organization, you'll need to contact GCP Premium Support.1
Also of note, you'll likely need approval from the Organizations Administrator as well, this is to prevent projects from being disassociated in 'hostile' type scenarios.
I'm currently using a free trial version of Azure to be able to create a QnA service as a PoC at work. I have created one and am now looking to collaborate with colleagues so we can provide a full assessment of the tool. I have followed the How To Guide 'Collaborate on your knowledge base', but found that when the person I have added as an Owner (or Contributor, as I tried both) logs in to their free Azure account, they are unable to see the knowledge base.
If they go to 'Create a knowledge base', whilst they are able to select both their own Default Directory and mine, if they select mine, when they go to select an Azure QnA service, they are unable to see mine, only services they have created.
Within Azure Active Directory, I can see the individual with a User Type of Guest and when I click into the detail of their account, I can see that the value for Invitation accepted is set to Yes. I added them within Access control (IAM) and can see that their Role is 'Owner' and the Scope is 'This resource'.
If anyone can provide any explanation as to why this still isn't working or how my colleague can best test whether it is working as expected, then it would be much appreciated.
Many thanks
Gareth
Try asking your colleagues to sign out and back again, that did work for my colleagues.
In our case, we have an Azure Active Directory group that allows to have access to some of the QnAMaker Cognitive Services and therefore, to the Knowledge Bases.
Colleagues that didn't see any of the KBs, even though they were members of that group, didn't accept the invitation. So, I had to send it again to each one of them. But, even after accepting the invitation they couldn't see any of the KBs.
Right after one of these colleagues sign out and back again, he got the list of KBs in the QnAMaker.
>>>> BACKGROUND ON THE ISSUE <<<<
We were using Google Apps for Business when we started with the project. This allowed us to use the Google Developer Console (https://console.developers.google.com/) with our #company.co.za accounts and also to “login with Google” using our #company.co.za accounts. It turns out that the Google Developer Project (where the API keys are) was created using an ex-colleague's #company.co.za Google account.
When we moved from Google Apps for Business to Office 365, we lost the ability to login to the Google Developer Console with our #copany.co.za accounts. By then the colleague wasn’t working here anymore and I guess it all happened so quickly that we didn’t make sure to tie up all the loose ends.
Now we need to transfer development of the app and subsequently all related 3rd party projects and things, to the client for future development, but I cannot access the Google project.
This will require them to create a project on their side, generate new API keys for using the Google Maps API etc. And then update the apps (Android and iOS) with the new API keys.
>>>>> THIS IS MY QUESTION <<<<<
However, and this is where my question comes in, the apps are still working and happily accessing Google Maps. This makes me think that the project must still be somewhere.
I tried to access the Google Help pages, but because we're on a Bronze package, we can only find support information in their developer communities and online documentation listed here:
Join a Community
Service Disruption Notification
Best Practice Guides
But I thought to ask here too because SO is very reliable with answers :)
So, any idea if the project is still live somewhere? Or should we just create a new project with new API keys?
I don't think this is a stackoverflow question since it's not directly programming related. However, if you want to regain access to you project, this should be fairly simple and i hope this helps:
Create a new Google Apps for Business account with your domain (or maybe your old apps domain still exists?) and a single account. If you choose monthly payment the costs will be only a few bucks.
As the Google Apps domain administrator you should be able to access all appengine projects that belong to users of the same domain. If it doesn't you can contact Google support to reassign the projects. Alternatively: You may be able to recreate an account that owned the app. If you don't know the owner email, it is shown in the consent screent for oauth. With that email, try to access the project.
Create a Gmail account and transfer project ownership to this Gmail account
Delete the Google apps domain to avoid additional costs
All this is doable within an hour.
In case it doesn't work i would suggest you contact your Google sales representative or reseller and tell him, that you would like to purchase silver level support, but only if he can restore the permissions for you. This will cost you more, but if you have to access the project it may be the only way.
Last but not least:
You can contact Google support. You don't need silver level support for that. It will just take a lot longer to process your request. While in contact with the Google support you will have to prove that you are in fact the owner of the domain, which is usually done by adding a TXT record to your domain or uploading a file to your web server, so make sure you have access to your domain's DNS zone files / settings or web server document root.
How come one user in the local Administrators Group has no problem hitting http://localhost:8080/services/v1.0/Registration.asmx while other users in the local Administrators Group get 403 (access denied) errors (with nothing in the Event log)?
Have you checked the permissions of all three areas. You need permisssion on server, reporting service and sharepoint for this.
I would strongly recommend you download Team Foundation Server Administrator tool to do this as otherwise it can be a right pain.
rasx, yea, the interface isn't the best on that tool. It basically allows an easy way to set up permissions to the Team Foundation Server, Reporting Services, and Sharepoint.
Most of the security problems I've come across always resolve down to one of those three permissions messed up on a particular user. I'm pretty sure that's what you're experiencing. Without the Team Foundation Administrator Tool that dove mentioned, you can still just add permissions to each of those areas manually.
It sucks that TFS doesn't come with an easy way to manage all permissions everywhere, but there you have it.
dove, I’m not sure about how the Team Foundation Server Administrator tool would help here. I installed it on the TF server and got an empty interface that looks like it is expecting pre-exiting Team projects.