Our classic reCAPTCHA v3 key (domain archetravel.com, used by WordPress Contact Form 7) was auto-migrated to Google Cloud project number 474223265113. The classic admin shows "Action required: accept the invitation to the Google Cloud project".
What happens: the invitation page shows "Welcome, <name>. A project owner invited you to join the project (ID: 474223265113)". Clicking Accept redirects to Resource Manager, but no access is granted. IAM for the project still reports missing resourcemanager.projects.get / getIamPolicy. Reopening the invitation shows the same pending dialog. This has been happening for months.
Affected: all key owners. Tested today (22 Oct 2026) with two Google Workspace users of archetravel.com (org ID 1095431403131), one of them the super admin. Same result with both the banner link and /invitation?project=474223265113&account=...&memberEmail=...
Already ruled out:
- Correct account (verified in the dialog greeting and the account menu)
- No pending Cloud Terms of Service or onboarding prompt on either account
- Workspace "Google Cloud Platform" service is ON for everyone
- Context-Aware Access is not available on our licence, so it isn't configured
- Both users use Google Cloud normally and own other projects in our org
- No invitation email received
- The browser network log during Accept shows no 4xx/5xx and no error payload, and no request that seems to commit the membership
Note: the classic reCAPTCHA admin still lets owners edit and save the key's settings, and the key works.
Request: could someone check the invitation records and IAM policy of project 474223265113, and repair or reissue the owner invitations without recreating the live key?
