Page Summary

outlined_flag

• This guide explains how to assign predefined roles to view and manage all Google Cloud projects in an organization.

• To assign permissions, you must be signed in to Google Workspace as a super administrator.

• Steps are provided for assigning view, edit, and delete permissions for all Cloud projects in an organization using the Cloud console.

• Specific Resource Manager roles like Folder Viewer, Project Mover, and Project Deleter are used to grant different levels of access.

To manage add-on projects across your organization, you might need to viewand manage their associated Google Cloud projects. This guide describes how toassign predefined roles to yourself or others that allow the role to view andmanage all Google Cloud projects in an organization. To learn more about all thepermissionsyou can assign in Google Cloud, refer toIAM basic and predefined rolesreference.

Prerequisites

To assign permissions in Google Cloud for yourself or others, you must be signedin to Google Workspace as a super administrator.

Assign view permission for all Cloud projects in an organization

If you're a super administrator and want to give someone view permission for allCloudprojects in your organization, take the following steps:

1. Open the Cloud console atconsole.cloud.google.com.
2. Click Menumenu>IAM & Admin>Manage Resources.
3. Select your organization.
4. At the right, clickAdd Principal.
5. InNew principals, add the users or groups you want to let view projects.
6. InSelect a role, in the first list, selectResource Manager. In thesecond list, selectFolder Viewer.
7. ClickSave.

Assign edit permission for all Cloud projects in an organization

If you're a super administrator and want to give someone edit permission for allCloudprojects in an organization, take the following steps:

1. Open the Cloud console atconsole.cloud.google.com.
2. Click Menumenu>IAM & Admin>Manage Resources.
3. Select your organization.
4. At the right, clickAdd Principal.
5. InNew principals, add the users or groups you want to let edit projects.
6. InSelect a role, in the first list, selectResource Manager. In thesecond list, selectFolder Viewer.
7. ClickAdd Another Role.
8. InSelect a role, in the first list, selectResource Manager. In thesecond list, selectProject Mover.
9. Optionally, to allow someone to turn APIs on or off in Cloud projects:
   1. ClickAdd Another Role.
   2. InSelect a role, in the first list selectService Usage. In thesecond list, selectService Usage Admin.
10. ClickSave.

Assign delete permission for all Cloud projects in an organization

If you're a super administrator and want to give someone delete permission forallCloud projects in an organization, take the following steps:

1. Open the Google Cloud console atconsole.cloud.google.com.
2. Click Menumenu>IAM & Admin>Manage Resources.
3. Select your organization.
4. At the right, clickAdd Principal.
5. InNew principals, add the users or groups you want to let deleteprojects.
6. InSelect a role, in the first list, selectResource Manager. In thesecond list, selectFolder Viewer.
7. ClickAdd Another Role.
8. InSelect a role, in the first list, selectResource Manager. In thesecond list, selectProject Deleter.
9. ClickSave.

Related resources

• IAM overview
• Roles and permissions
• IAM basic and predefined roles reference