Workspace customer id for google domains? [allowedPolicyMemberDomains]

Question

Hey all,We are using domain restricted sharing https://docs.cloud.google.com/resource-manager/docs/organization-policy/restricting-domains#predefined-constraint for our organization.We are just looking to add ` [removed by moderator] ` as a member to our pub/sub topic in a project. But because of the domain restrictions we are not able to add the internal google cloud account as the member. Does anyone know how we can get the principal set/customer id for a internal google cloud account? [ie: account which is owned by google]

cdiya · Accepted Answer

Hi ​@octokrishnathanks for reaching out! There are two ways you can go about solving this:1) You can open a support case and ask support to give you the Org ID that the specific Google-owned principallives in.​​​​​​​​​​​​​​2) You could temporarily modify the Domain Restricted Sharing Org Policy constraint to allow adding of the Google-ownedidentity to yourIAM policy. Once the IAM policy change is made, you can then set the constraint back to the value you’d like to enforce.

octokrishna · Answer

​@cdiyaThanks for sharing! Support is unable to give out customer id but did share this doc which has the orgnization id for all google owned resourceshttps://cloud.google.com/resource-manager/docs/organization-restrictions/additional-considerations#google-owned-resources.

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded