How to Set Gmail's Alternative Email as Support Email in Google Developer Console oAuth Consent Screen

Question

I have a @gmail.com account where I have added my domain's email as the alternative email @domain.com. I can use @domain.com to login to my gmail account instead of @gmail.com account

I have created a Google Cloud Project and want to add the @domain.com as the Support Email in oAuth Consent Screen. However, even after following the steps here and adding the @domain.com email address in the IAM Section, I am not able to select it as the support email.

I get this error after accepting the invite in the Google Cloud Activity Tab:

Permission denied (HTTP 403): IAM authority does not have the permission 'resourcemanager.projectInvites.acceptProjectOwnership' required for action CloudResourceManagerInvitationsService-AcceptProjectOwnership on resource 'projects/ofpad-1304'. Explanation: Security Context: RecordingSecurityContext{delegate=ValidatedSecurityContextWithSystemAuthorizationPolicy{delegate=ValidatedSecurityContextWithRegistryHandle{delegate=ValidatedSecurityContextWithObligations{delegate=ContextWithGaiaMintToken{delegate=ValidatedIamSecurityContext{user=gaiauser/0xd22a3e2d9, creds=EndUserCreds{loggable_credential { type: GAIA_MINT loggable_gaia_mint { } } loggable_credential { type: SERVICE_CONTROL_TOKEN }}, peer=protocol=loas;psp_version=0;level=strong_privacy_and_integrity;host=saec4.prod.google.com;is_authenticated_host=false;role=cloud-boq-clientapi-iam;gaiaId=250014094659;security_realm=campus-wen;is_delegated=false;user_type=MDB_USER_NON_PERSON, InternalIAMIdentity{log=originator { scope: GAIA_USER gaia_user { user_id: 56415740633 } }}}}}}}}

I only see the @gmail email.

How can I fix this?

Answer 1

I tried replicating your use case and was successfully able to set Gmail's Alternative Email as Support Email in Google Developer Console oAuth Consent Screen without any issues. I actually logged onto the new account, and then changed it. Until the second email actually logged onto the console, the second email did not appear.

You may consider simply granting your new email address Basic roles such as Owner which is simpler to use. You need a second email address then add that email as Owner of the project. Then you will be able to add that email in the consent screen.

1. Add Owner permission for the new email address to handle the project: To do that Go to navigation Menu > IAM & Admin > IAM, then click on the Add button, enter the email address in the New principals field and select Role > Basic > Owner.

2. After giving the Owner role to the new email address an invitation will be sent to you through email. Check emails, click on the confirmation url, it will be navigated to the Google Developers Console and then accept the invitation from the new email address. Now accept the terms and conditions.

3. Now the Google Developers Console is logged in using the NEW email address. On the OAuth consent screen click on Edit app, you will be able to see the new email address in the dropdown, select the new email address and click on save and continue. Only the new email address can change the displayed email address. You will now be successfully able to set Gmail's Alternative Email as Support Email .

4. Now you can login using your primary or initially used email address and check whether you were able to find the new email address in the User support email dropdown.