Hi Mohammad, Thanks for the feedback. Very helpful.
Given the following: Only the user account that has verified ownership of the domain name can > deploy the API initially. After that first API deployment, project members > with *Editor* permissions can deploy it. > I read that as meaning, since I am the one who usually validates our domains, I should be the one to enable the API for any given project. If someone else has tried to enable the API, I should disabled it and then re-enable it myself. As long as I am the one to enable the API, the project Owners and Editors will be able to use the domains I have previously validated. Regarding the missing domains, it may be the case that someone removed the associated validation records. They may not have realized the records must remain in place and thought they were "cleaning up" old records that don't resolve to anything (we usually use CNAME validation records as I have found the TXT records to be unreliable). On Friday, November 23, 2018 at 4:02:37 PM UTC-5, Mohammad I (Cloud Platform Support) wrote: > > Once you have verified as a domain owner in Web Central, it is possible > for you to delegate subdomains to developers within the organization to do > their tasks without having to verify domain ownership themselves[1]. For > more information on delegating, see Managing users, owners, and > permissions > <https://support.google.com/webmasters/answer/2453966?ref_topic=4564315>. > The domain name verification is automatically re-confirmed about every 30 > days. In case the verification string from your DNS settings is removed for > some reason, it will restrict your ability to change the configuration > within the Google Cloud Platform Console. This restriction does not change > the serving setup for the domain and app continues to serve over the > domain[2,3]. Verifying your domain primarily just proves to Google that > your application is in fact allowed to receive all the traffic for domain > because you've shown that you "own" it[4]. > > [1] > https://cloud.google.com/endpoints/docs/openapi/verify-domain-name#delegating_to_developers > > > [2] > https://cloud.google.com/endpoints/docs/openapi/verify-domain-name#verifying_ownership > > [3] > https://cloud.google.com/appengine/docs/standard/python/mapping-custom-domains#adding_a_custom_domain_for_your_application > > > [4] > https://groups.google.com/d/msg/google-appengine/jhJkoUf4p8M/EuMBw_nbDQAJ > > > On Friday, November 23, 2018 at 8:27:52 AM UTC-6, Mark Drummond wrote: >> >> Two related issues from the last ~24 hours or so: >> >> 1. I saw one of our developers ask our infrastructure folks to add a >> domain validation record to our (non-google) DNS, for a domain that I had >> already validated (we already have many App Engine hosted services using >> hostnames under that domain). Why would App Engine ask to validate a domain >> that is already validated? >> >> 2. A domain I previously validated no longer appears in the list of >> options when I go to add a hostname to a new App Engine app. There are >> already apps using hostnames under that domain, so why would the domain no >> longer show up in the list of options when adding a new name to an App >> Engine app? >> >> And a general question: Do domain validation records need to stay in >> place? Or can they be deleted after the domain is validated? If the records >> need to be left in place and our infrastructure team removed them, that >> might explain my second Q above. >> >> >> Thanks, >> Mark >> > -- The content of this message is subject to our e-mail confidentiality policy. <https://static.empire.ca/confidentiality/conf.html> Le contenu de ce message est assujetti à notre politique en matière de confidentialité des courriels. <https://static.empire.ca/confidentiality/conf.html> -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/a7bbcbb5-eec1-4a95-b563-8fd293331c7c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
