The management of access to resources is handled by permissions. To make handling permissions easier, GCP IAM has roles that can be allotted to users, and the roles carry the necessary permissions:
- Permissions: A permission can be defined as a token to allow access to a GCP API. Generally, permissions are assigned via roles and one role may contain one or more permissions.
- Role: A role is a collection of permissions and a convenient way to pass them to users. Some examples of roles are shown next. Custom roles can also be written by admins, but they are an alpha feature at the time the book is being written:
|
Role |
Description |
|
Organization role admin |
Provides access to all custom roles within the organization. |
|
Role admin |
Provides access to all custom roles within a project. |
|
Organization role viewer |
Provides read access to all custom... |