Google Workspace for Education - Can't Create Projects for Backup

[Dobby]

Hello friends,

 

I'm trying to set up a project in Google Cloud for 'Synology Active Backup for Google Workspace'. Every time I try to create a project, it fails with a 'resourcemanager.projects.get' permission error.

 

As far as I understand I only need to add one of the roles suggested in the screenshot, but even when adding all of them I still don't seem to have permission. I've contacted Google but as the school doesn't pay for support they're not obliged to help, although their reply did mention roles 'resourcemanager.projects.create', 'resourcemanager.projects.get', and 'resourcemanager.projects.list.' I've created a custom role 'ResourceManager.Projects' and added these three permissions, as well as the original error permission  'resourcemanager.projects.get'.  I've also turned off the enforcement for the "Disable service account key creation" policy, and checked to see if there were any deny rules but I couldn't see any.

 

After adding the various roles and permissions, I still get the same error.

 

Advice from anyone more familiar with Google Cloud than me (most people) would be greatly appreciated.

 

Thanks

 

Error Screen vs My Roles:

 

My Custom Rule:

 

 

[pete]

When I was doing something similar (ActiveBackup for individual and shared Google Drives), I followed these:

 

https://kb.synology.com/en-uk/DSM/tutorial/Preparing_Google_for_using_ABG

https://kb.synology.com/en-uk/DSM/help/ActiveBackup-GSuite/activebackup_gsuite?version=7

 

But I did find some of Google's documentation wasn't up-to-date.

[Dobby]

1 minute ago, pete said:

When I was doing something similar (ActiveBackup for individual and shared Google Drives), I followed these:

 

https://kb.synology.com/en-uk/DSM/tutorial/Preparing_Google_for_using_ABG

https://kb.synology.com/en-uk/DSM/help/ActiveBackup-GSuite/activebackup_gsuite?version=7

 

But I did find some of Google's documentation wasn't up-to-date.

 

Hi pete, thanks for your reply, I didn't realise there was a guide from Synology.

 

I get stuck between step 3 and 4 in the guide, upon pressing 'Create', I get the permission error and so can't continue.

 

 

[TheHyperTechie]

This is going to sound super silly... but I am assuming you are logging into GCP with a super administrator account?

[Dobby]

2 minutes ago, HyperTech said:

This is going to sound super silly... but I am assuming you are logging into GCP with a super administrator account?

 

Yes, I've got the 'Super Admin' role within Google Admin, I assume this translates across to Google Cloud.

[TheHyperTechie]

6 minutes ago, Dobby said:

 

Yes, I've got the 'Super Admin' role within Google Admin, I assume this translates across to Google Cloud.

Hmmm, another easy to one miss and I have seen happen before - double check your services in the Workspace Admin Console. Apps > Additional Google Services > Settings for GCP. Sometimes this is turned off, but still allows users to sign into the platform. There is a setting there for Project Creation as well.

Edited February 4 by HyperTech

[pete]

Irritatingly, my bookmarks are in Chrome (which doesn't timestamp them like Firefox does), so I can't tell if my swearing-at-google bookmarks relate to the Synology backup project or a few Google > 365 migrations.

 

I wouldn't make the assumption that "super admin" in workspace translates to "do all the things in cloud" - it more likely means "you have the ability to give yourself the access you need, should you work out what you need from our terrible documentation".

 

 

 

 

 

[Dobby]

7 minutes ago, HyperTech said:

Hmmm, another easy to one miss and I have seen happen before - double check your services in the Workspace Admin Console. Apps > Additional Google Services > Settings for GCP. Sometimes this is turned off, but still allows users to sign into the platform. There is a setting there for Project Creation as well.

 

2 minutes ago, pete said:

Irritatingly, my bookmarks are in Chrome (which doesn't timestamp them like Firefox does), so I can't tell if my swearing-at-google bookmarks relate to the Synology backup project or a few Google > 365 migrations.

 

I wouldn't make the assumption that "super admin" in workspace translates to "do all the things in cloud" - it more likely means "you have the ability to give yourself the access you need, should you work out what you need from our terrible documentation".

 

 

 

 

 

 

Absolute legends. Turned it on and it's now working.

 

Thank you so much!

 

[TheHyperTechie]

1 minute ago, Dobby said:

 

 

Absolute legends. Turned it on and it's now working.

 

Thank you so much!

 

Glad to help 🙂