Questions[google-cloud-identity](server)

I registered a domain (for ex. mydomain.com) and I opened a Cloud Identity (free edition) account attached to that domain.

Then I configured a Google Cloud access for this Admin user. So, I finally had my Cloud Identity account with my user as an admin, my organization and my Google Cloud account with which I can access Google Cloud Console.

After accessing Google Cloud Console, I setted up the payment and billing profile for my organization; I created also some groups and additional users through Google Admin console. All of them belong to mydomain.com; so for example I created an additional user [email protected] that belong to gcp-network-admins and gcp-security-admins groups.

[email protected] received an invitation email. If he tries to login to Google Cloud Console he gets a 3 step wizard where on the last step the system ask him to enter billing and payment info to access and start using Google Cloud. I don't understand why and I'm not sure if I did something wrong.

kind regards, Matt

I'm planning on having family accounts and I was wondering if Google Identity Platform allows some sort of hierarchical chain across users.

Example: my family consists of three people, but I'm the one paying. I'd have full permission (edit payment, for example). I'd like to give to my spouse some sort of parental consent (if it was a streaming service, he/she could watch R rated videos), but my child can only watch PG-13 videos.

Does Google Identity Platform allow such thing? If so, where can I find more information in their documentation?

Thanks!

I need to cURL a web app hosted behind IAP on GCP.

Normally, users log in through IAP and use the web app, but I need to run some cURL commands (interactive and non-interactive) that hit the web app URLs (for example: https://myapp.com/get_pics/1)

I cannot figure out how to get a Bearer token from GCP that I can use in the authorization header for cURL.

I can set up a service account with "IAP Secured Web App User" role and I have the JSON key for this service account, but I am not sure where to go after that to get a proper Bearer token that IAP will accept.

Trying to sign-up for Cloud Identity but get hit the following error message;

What's your business's domain name?

What does "There was an error finding your domain." really mean - what is it really looking for?

I am using a domain hosted by google domains currently not pointing at anything but with valid SOA and NS records.

In the GCP IAM console, I can add either the entire organization (the domain of example.com) or individual users to Roles. However, I have the users setup in GSuite/Cloud Identity and organized into OUs that I'd like to use.

Is there a way to map members of an Organizational Unit (OU) (in Cloud Identity) to an IAM Role (in GCP IAM)?