I have created a marketplace app to capture google drive changes.
Enabled two API & services.
1) Google Drive API
2) G Suite Marketplace SDK
Added required content in marketplace SDK and it is published via google chrome tool. So, got a marketplace app url which I can share with others and can install app in their domain.
With this app url I have installed an app by clicking on "DOMAIN INSTALL" button.
In order to receive notification of each drive changes my script is trying to create a channel for each user under this domain But, channel is not getting created. It shows error called "invalid_grant"
So, I took another approach to add marketplace client id and scope permissions under Admin Console->security->Advance Setting ->Manage API client access manually.
Now, I am able to create a channel for user in domain and can access drive files content.
Please help me to figure out that why I am not able to get permission while installing a published G suite marketplace app?
Thanks you.
Related
I have developed a Google Appscript gmail addon which users can report spam emails.
I followed the exact steps mentioned in here to publish the add-on.
Setup GCP project and linked it with App Script
Configure OAuth screen and submit it for verification.
I am using following scopes.
OAuth Scopes
Since I am using sensitive scopes, I have to submit it for OAuth
verifcation. I was asked to verify all domains and then I verified all
domains and now all are showing as verified in search console .
I communicated it with the OAuth verification team and still OAuth
verification status is showing as "Pending developer action". I tried
to get some advice from OAuth verification team and I did not get any
response from them.
OAuth verification status
Enable and configure the Google Workspace Marketplace SDK
Create a store listing.
Since Gmail add-on needs to be available for all domains, I have
submitted the GCP for store listing as well. Status is shown as "Under
Review".
I need to publish the Add-on to Google Workspace Marketplace ASAP.
Can some one advice me to continue the publish process?
I am working on a Google Apps Script project that we need to deploy as web app but when I try to deploy a file (that own my an organization/different gSutie owner) from my Gmail account, I receive an error as below.
Please anyone that know how to change client domain settings so I can edit the script file in his account and can deploy and test myself.
Image
You need to change/modify the permission of the domain in the Google Admin Panel in order for you to deploy a script on that domain.
I'm updating an app on G Suite Marketplace SDK. It used to work by just changing the script version at the "App Configuration" Tab, and click Save.
Now it posted a warning at the top of the page saying:
Your account does not belong to the same domain as this cloud project or app
and the Save button is grey and not clickable.
Error image can be seen here:
What is the issue and where should I go to check and verify the domains?
Terms:
GCP - Google Cloud Platform
Apps Script project - Your Apps Script file
Your Google Cloud Platform (GCP) project that is associated with your Apps Script project is in a default category of "No organization." That's the problem.
If you already have an organization set up in your GCP, then skip down to the "Migrate your Cloud Platform Project" section below.
If you have not created an organization in your Cloud Platform project, then you need to do that. After creating an organization, you must migrate the Cloud Platform project for your add-on in "No organization" to your Organization.
Your organization is your "company."
Your Google Workspace account (formerly G Suite) can only have one Organization provisioned with it. You probably have Cloud Platform projects that were automatically put under the "No organization" category. If you already have an Organization in your Cloud Platform project, then you won't see an option to create another one.
Create an organization in Cloud Platform Project
Migrate your Cloud Platform Project:
Open the Cloud Platform Project for your add-on
Open IAM & Admin
Click Settings
Click the Migrate link
Choose the organization to migrate to
Click the button:
Wait for confirmation that the migration happened
I migrated a Cloud Project for an add-on without any problem. You can also change ownership of a Cloud Project from one Google account to another Google account.
My assumption is, that the Cloud Project isn't affected by migrating it because it's basically running independently from whatever account or organization it's associated with.
The only way to know that for sure is if someone from Google provided an answer, but the only way to get support for Cloud Projects is to buy a support plan, and the least expensive one is $100 dollars a month per user.
Google Cloud Project support plans
Technically, Apps Script is not supported by Google, and there is no Google contact person to get answers from.
With the Google Workspace Marketplace SDK, you must associate an Apps Script project with the Cloud Platform project. If you changed ownership of the Apps Script file that the Google Workspace Marketplace SDK was associated with, then there would likely be a problem.
You'd need to make sure that whoever owned the Cloud Platform Project also owned the Apps Script file. If the Apps Script file was deleted, then that would kill the add-on.
I run into this issue and I share what I did that is a bit different of previous answer.
I have a Gmail account that manage the Apps Script and also have a workspace domain. When the first time I publish the app I move the GCP project created in my Gmail acocunt to the GCP Oragnization of my domain. Previously it never generate problem but today I have the eror message
Your account does not belong to the same domain as this cloud project or app
What I did :
On the workspace domain with the super admin account that have the GCP Organizaional Owner role I added my Gmail account as Oragnization manager
Organization Role Administrator
=> It does not work.
So I finally added my domain account as owner of project and it works.
It seems something change in the Marketplace Workspace SDK management and if a project belong to an organization, now you can no longer modify Marketplace item with a Gmail account.
I have published a Sheets Editor Add-on on Chrome Web Store and my colleagues on the same G Suite domain can install it just fine, via the Web Store link.
However, the G Suite account admin doesn't have the option to install it for the whole domain. Anyone have a clue on where to start investigating this?
Edit: I have read in other places that it sometimes takes 3-4 days from publishing in Chrome Web Store until it shows up in the Marketplace. However this doesnt seem to be the case for us since we now have waited for about a week.
The app has to be published on the G Suite Marketplace in order to enable a domain-wide installation.
If it is only published on the Chrome Web Store it has to be installed manually by each user.
Choosing where to publish: GSuite Marketplace or Chrome WebStore
If it is published on the G Suite Marketplace it can be installed for the whole domain by admin account following this steps:
Sign in to Google Admin console.
On the dashboard, click on the Apps icon:
Once there, go to 'Marketplace apps'
Add services to your domain
Search your App and choose to install it for the whole domain
And you are done, the app is installed for the whole domain.
Install Marketplace apps
So I have found a way to publish the app even if it's not discoverable in the Marketplace.
Go to https://console.cloud.google.com/
Go to G Suite Marketplace SDK
Under Publish in the left pane, Publish the add-on and get the App URL.
From the app URL, the domain admin can install the add-on for the whole domain.
We have an app in both the Chrome web store and the in the Google apps marketplace that interacts with Google Drive. Under the covers, they are both the same app, even though they are installed from different places.
In the Drive integration settings, we provide a URL to open Drive docs with. This URL is the same for both drive and apps users.
Is there a way to determine which type of user is hitting that endpoint we provided? Whether they are working as a user from a Google Apps domain, or if they are a consumer who is working under their own account?