For years, I've been using the email addresses [email protected] and [email protected] as if they are identical. And most of the time this is true. However now the OAuth verification process for the project seems to be failing because Google treats these as two separate identities.

The GCP project owner is [email protected]. In the OAuth consent screen, I've set mydomain.com as the sole authorized domain for my app. And I use [email protected] as my identity in Google Search Console when verifying that I am the owner of mydomain.com.

I got an email from the "The Google Cloud Trust & Safety Team", saying that the owner of the GCP project and the identity of the owner of the authorized domain do not match! The only reason for this seems to be the case of the email names, because everything else appears set up properly.

MY QUESTION: How can I change the GCP project owner from [email protected] to [email protected]?

It seems that I need to change one or the other. I would rather change the GCP owner to [email protected]. But I can not get that to happen. I followed the instructions in Grant or Revoke Role.

I go to IAM -> Permissions - Add. I enter the email without the caps & ignore their suggestion to use the one with caps. But in the "Select a role" dropdown, it shows "Owner" as a role "Currently used". I select it anyway and click Save. But IAM -> Permissions never get changed.

I've thought of changing the owner first to someone completely different and then to the lower case email. But that might involve billing emails changing, etc.

EDIT - As a result of trying to add [email protected] to the project, I received an email at that address from GCP, asking me to join the project. I accepted the request, but IAM is still only showing [email protected] as being on the project.

Is this really the case that [email protected] and [email protected] are separate GCP identities? Might there be a different reason for Trust & Safety to think they're not the same?

If I respond to the T&S email, describing my issue, will a real person actually read it, or will the same automated test be run again to check the issue?

CodePudding user response：

I think you basically have it covered. But it is important that on new Owner's account, you will need to go to "Billing" in the "hamburger" menu and either link the project to an existing billing account or set up a new Billing account to link the project.

You may also need to delete the old project owner to avoid confusion.

CodePudding user response：

Since you mention that you are never asked to select a different profile when logging into your account, then it should be the exact same account using the actual same GAIA ID as mentioned by DazWilkin, so there should be no difference within the GCP console between [email protected] and [email protected].

Google usually recognizes an email address in both forms as the same account, although there are some exceptions across their products (I have had a similar experience with email addresses from Google Groups). I think this is one of those particular exceptions.

I would strongly recommend transferring the project ownership to a totally different account within your domain, then waiting a couple of hours due to Google's "propagation time" across services, and transferring the ownership back to the account using the format [email protected].

Now answering to:

If I respond to the T&S email, describing my issue, will a real person actually read it, or will the same automated test be run again to check the issue?

They are actually a team of people, but they tend to use a lot of canned responses, so I would definitively recommend being very specific with your choice of words when responding to their emails otherwise, you may not get a relevant response. You may also try to explain this to them via email to see if there is an actual problem with the email address or if it is just them or the system being extremely picky when checking the email address.