Cannot add users from our GSuite for Education domain to our branded Youtube channels

[markwilfan]

We have lost the ability to add users from our G suite domain as channel owners or managers. Adding an external google account works fine. Error message is "Failed to invite users" as per screeny. We also get an invalid request message when trying to create a new channel. G Suite support has brushed us away to youtube help centre which is of no use to us.

 

Anybody had anything similar?

[markwilfan]

Extra info - Tried at home on outside of school filtering and does the same.

[bchiarmonte]

I have run into the same problem. I am unable to create brand channels or add any accounts in district to be able to manage them. I looked at all of the different settings in admin console and nothing seems to fit the problem. I can add an external email to manage the account. I also tried on my personal google apps domain and I am able to create a channel and add another user as a manager (from inside of that domain). Trying to add a domain user to a channel created on my personal gmail account also fails.

 

So it has to be something within the apps domain somewhere. My guess is it's broken from the phasing out of Google+.

 

Have you had any luck since posting this?

[markwilfan]

Since posting this I have posted on the YT communities forum. Someone suggested g suite settings but definitely not this. Also had 2 support chats with G Suite support to which they said "not our problem" and directed me to the non-existent youtube support. Glad you posted this as was just about to fire up a vanilla VM on the edge of our network to completely rule out filtering, chrome policies or group policies.

 

If you go into developer mode and see what is trying to load we get a call to https://myaccount.google.com/_/AccountSettingsUi/mutate?ds.extension=102625807&f.sid=-7340102138521195635&bl=boq_identityaccountsettingsuiserver_20190324.12_p0&hl=en-GB&_reqid=1451809&rt=c which gets 403'd so assume it is something to do with that. We are not inspecting ssl on this domain and have whitelisted accounts.google.com

 

It's very frustrating, had assumed that same as you that it must be a google+ thing. Hopefully it will happen to someone with more clout than us

 

The accounts you are having trouble with, are they on the primary domain for your G Suite tennant? We have added in a new domain so our users are using a secondary domain attached to our tennant. We have been unable to change it to the primary domain as apparently because we have android management turned on and chrome licences the google systems will not allow it. It used to work even in this configuration however so am convinced it is a back end issue.

[bchiarmonte]

The accounts you are having trouble with, are they on the primary domain for your G Suite tennant? We have added in a new domain so our users are using a secondary domain attached to our tennant. We have been unable to change it to the primary domain as apparently because we have android management turned on and chrome licences the google systems will not allow it. It used to work even in this configuration however so am convinced it is a back end issue.

 

All of the accounts I have tried to add are in various OUs but all part of our primary domain.

[markwilfan]

That's ruled that out as an issue for us then. Thanks for replying

[markwilfan]

@bchiarmonte It's allliiiiivvvvvveeeeeee . Just managed to add perms to our users on one of our branded channels woooooooooooooooo

[GFSadmin]

Indeed the invitation is now being sent, but alas when the recipient went to accept the invite, an error message indicating fail resulted yet again. Edited April 11, 2019 by GFSadmin

[bchiarmonte]

@markwilfan Were the users able to accept it on their end?

@GFSadmin This is what is happening for me as well. One step at a time I guess?

 

I did try to log into the account that I invited on YouTube in incognito and still had the same issue. So close.

 

I did do the "Send feedback" on that page hoping it reaches someone who can fix it. I did send feedback about the initial problem earlier this week as well. It's probably not a bad idea if you do as well, it might get flagged in the system for something they need to look at.

[markwilfan]

Indeed. Seems the issue is still there but just at a different level now. grrrrr

 

[markwilfan]

@bchiarmonte I have sent this with a screenshot via the feedback form as you have. Shows up how poor the youtube support is. There is a big accountability gap with who these issues lie with. Youtube support is impossible to contact and G Suite do not have the tools to help. It's like purgatory... hold on... this IS the bad place

[tharun518]

I have raised this on YouTube community and one of the experts escalated this to YouTube support. It would be helpful if you could add your case.

 

https://support.google.com/youtube/thread/3627225#

[bchiarmonte]

I have now replied in there as well. Thank you for pointing this out.

[markwilfan]

So this explains it all #facepalm

 

 

[https://ci6]

 

Google Customer Alert

 

Dear G Suite Administrator,

 

We are writing to inform you that some users within your organization created or joined aBrand Account. Brand Accounts allow users to use certain Google services with a separate identity (e.g., a brand identity) that is not publicly linked to their regular Google Account identity. Brand Accounts are not currently supported for G Suite for Education primary/secondary (K-12) school domains. Accordingly, we are taking the following steps with regard to Brand Accounts owned by users in your domain:

 

Users in your domain can no longer create a Brand Account or join an existing Brand Account.

 

 

On July 10, 2019, we will delete any Brand Accounts whose primary owner is a G Suite for Education primary/secondary (K-12) school user.

 

 

On July 10, 2019, we will remove any G Suite for Education primary/secondary (K-12) school users from Brand Accounts whose primary owner is not a G Suite for Education primary/secondary (K-12) school user.

 

Important Notes on Retaining Content:

 

Users can see a list of their Brand Accounts by visitinghttps://myaccount.google.com/brandaccountsin a web browser.

 

 

To preserve any existing content associated with a Brand Account, users candownload their datawhile logged into the Brand Account prior to July 10, 2019 to export the brand account’s content.

 

 

If your organization wishes to preserve the entire Brand Account, your user cantransfer the primary ownershipto another user before July 10, 2019. The new primary owner must be either (a) a G Suite account holder that is not in a G Suite for Education primary/secondary (K-12) school domain or (b) a consumer account holder (i.e.,[email protected]).

 

More Information About Brand Accounts:

 

We are separately notifying users that are an owner or manager of a Brand Account of the steps outlined above. Attached is a list of users within your Organization that are currently an owner or manager of a Brand Account.

 

These users may have used certain GoogleAdditional Serviceswith that Brand Account, like YouTube, Google Photos, and Google+. While the Brand Accounts generally were not subject to G Suite for Education domain settings, we have confirmed that Brand Accounts could not access YouTube while YouTube was disabled for the user’s Organizational Unit (OU). We have also confirmed that Brand Accounts were prevented from viewing restricted videos when YouTube Restricted Mode was enabled for the user’s OU.

 

In some cases, Brand Account users may have viewed or created comments on the non-restricted YouTube videos they watched while Restricted Mode was enabled. That functionality has now been disabled, and we have deleted all comments from YouTube that we’ve identified as being created in this state. Depending on their settings, Brand Account users may have also seen ads on YouTube that were personalized based on the Brand Account’s activity in YouTube. Ads personalization has now been disabled for these Brand Accounts.

 

For more information on Brand Accounts, please see thisHelp article.

 

We appreciate your business and sincerely apologize for any inconvenience this may have caused.

 

If you have any questions, please contactGoogle Supportand reference issue number 130821290.

 

Sincerely,

 

The G Suite Team

 

[emoji2398] 2019 Google LLC1600 Amphitheatre Parkway, Mountain View, CA 94043

 

You have received this important update about your G Suite account because youdesignated this email address as a primary or secondary contact for mandatory service communications in your GoogleAdmin consoleprofile.

 

[https://ci5]

 

 

[/Quote]

[fiza]

So this explains it all #facepalm

Got this email just now too. So are they saying our branded YouTube channel has to be in the name of a consumer account? That makes no sense at all.

[Arthur]

they saying our branded YouTube channel has to be in the name of a consumer account?

Would buying 1 X G Suite Enterprise for Education license for the brand account user also work?

 

That makes no sense at all.

I agree. It's stupid!

[fiza]

is @jamesleonard still active on Edugeek? Forcing schools to move their youtube channel control over to a consumer account is just plain daft. We spent years trying to force everyone to use official accounts for everything and now this!!

[Arthur]

@fiza. Apparently this is the reason behind the change...

 

https://plus.google.com/111680380794302148616/posts/VXazZeT1utX

 

 

See also: https://docs.google.com/document/d/1jGcFkF-9tEHmNp27bjmmVEYWuZgctlH9Kk2DfimKWRY

[markwilfan]

Simple answer. Just add controls for us to allow brand account creation etc. FFS nice one google

[Arthur]

Steve Larsen posted a potential solution in the comments of that G+ thread I linked to above...

 

https://drive.google.com/drive/folders/110vVjnd_rQK2wiNtG6DReTOXG7C-k5GY

 

[Arthur]

More details on the Cloud Identity workaround...

 

https://docs.google.com/document/d/1STg3tYu6_ipXoFPppfNuprjNsSqtJblmI2TsY5AfLOw

 

Introduction

Google has recently announced that “Accounts are not currently supported for G Suite for Education primary/secondary (K-12) school domains.”. They have suggested that users download data whilst logged into the Brand Account. This of course can be a massive undertaking and the solution may not be ideal to move this data just to Drive. The alternative option is to transfer the primary ownership to another user which is not a K-12 account. This creates its own problems by these accounts no longer being managed by the organisation as Gmail accounts lack centrally managed security controls.

 

Proposed Solution

By leveraging a new G Suite tennant, G Suite for Education primary/secondary (K-12) school domains can migrate owners to a new identity that can be controlled and managed. As YouTube is a non-core Google service a full G Suite license is not required, Cloud Identity Free would suffice.

 

Questions

 

Can a Cloud Identity user manage a YouTube channel, or manage a brand account?

Yes, this is the currently proposed solution

 

Would the new brands.domain.edu will most likely be considered a completely separate domain, and not be limited by GSFE rules?

Correct

 

Will that stop the deletion of the current Brand account?

This is the expected result. As the email from Google indicates, the owner of a Brand Account must be that of a non-K-12 EDU domain. This new tenant of Cloud Identity users meets this requirement.

 

All GSFE accounts will lose access to the brand account?

Correct, this is as expected as per the email from Google.

 

Will the brand account keep on living if you add a Cloud Identity as the new owner?

Correct, as per the email this meets requirement (a) as they describe.

 

“The new primary owner must be either

(a) a G Suite account holder that is not in a G Suite for Education primary/secondary (K-12) school domain

(b) a consumer account holder (i.e., [email protected]).”

[fiza]

More details on the Cloud Identity workaround...

 

https://docs.google.com/document/d/1STg3tYu6_ipXoFPppfNuprjNsSqtJblmI2TsY5AfLOw

 

So we have to pay extra for this Cloud Identity workaround?

[Arthur]

So we have to pay extra for this Cloud Identity workaround?

The free Cloud Identity account is sufficient apparently.

[fiza]

The free Cloud Identity account is sufficient apparently.

 

How do you get a free account please? The screenshots in the link show a 14 day trial account.

[Arthur]

How do you get a free account please?

See the section titled "Sign up for the free edition of Cloud Identity".

 

https://support.google.com/a/answer/7389973?hl=en