Console

1. In the Google Cloud console, go to theOrganization policies page.

   Go to Organization policies

2. From the project picker, select the project or organization for whichyou want to view organization policies.

3. In thefilter_listFilter field,enterconstraints/compute.sharedReservationsOwnerProjects.

4. In theName column, clickShared reservations owner projects.ThePolicy details page appears.

5. In theEffective policy section, verify whether your project ororganization is allowed to create and modify shared reservations.

gcloud

To view which projects thecompute.sharedReservationsOwnerProjectsconstraint allows to create and modify shared reservations:

1. To download the policy for your organization as a file namedpolicy.yaml, use thegcloud resource-manager org-policies describe command:

   gcloud resource-manager org-policies describe compute.sharedReservationsOwnerProjects \    --organization=ORGANIZATION_ID > policy.yaml

   ReplaceORGANIZATION_ID with theID of your organization.

2. Open thepolicy.yaml file in a text editor of your choice.

3. View thecompute.sharedReservationsOwnerProjects constraint. Theprojects that can create and modify shared reservations are listed intheallowedValues field, as shown in the following example:

   ...constraint:constraints/compute.sharedReservationsOwnerProjectslistPolicy:allowedValues:-projects/EXAMPLE_PROJECT_NUMBER1-projects/EXAMPLE_PROJECT_NUMBER2-projects/EXAMPLE_PROJECT_NUMBER3......

4. Optional: To delete thepolicy.yaml file, do one of the following:

   • If you're using a Linux or macOS terminal, then run the followingcommand:

     rm policy.yaml

   • If you're using a Windows terminal, then run the following command:

     del policy.yaml

Console

1. In the Google Cloud console, go to theOrganization policies page.

   Go to Organization policies

2. From the project picker, select the organization for which you want toedit organization policies.

3. In thefilter_listFilter field,enterconstraints/compute.sharedReservationsOwnerProjects.

4. In theName column, clickShared reservations owner projects.ThePolicy details page appears.

5. ClickeditManage policy. ThePolicy details page appears.

6. SelectOverride parent's policy. Then, in thePolicy enforcementsection, select how you want to apply the policy:

   • Merge with parent: this option combines the project-level policywith the organization-level policy. Projects allowed at either levelcan create shared reservations.

   • Replace: this option overrides any inherited policies fromhigher levels. Only projects that are explicitly allowed at thislevel can create shared reservations.

7. ClickaddAdd a rule.

8. In thePolicy values list, selectCustom.

9. In thePolicy type list, select one of the following options:

   • To authorize one or more projects to create or modify sharedreservations, selectAllow.

   • To prevent one or more projects from creating or modifying sharedreservations, selectDeny.

10. In theCustom value field, enter the number of the project that youwant to apply this rule to. For each additional project that you want toapply the rule to, clickAdd value, and then repeat this step.

11. To apply these changes, clickSet policy. TheOrganization policies page appears.

gcloud

To edit which projects thecompute.sharedReservationsOwnerProjectsconstraint allows to create and modify shared reservations, use one of thefollowing methods:

• To grant permission to a single project to create and modify sharedreservations, use thegcloud resource-manager org-policies allow command.You can repeat this command for each project that you want to grantthis permission to.

  gcloud resource-manager org-policies allow compute.sharedReservationsOwnerProjects projects/PROJECT_NUMBER \    --organization=ORGANIZATION_ID

  Replace the following:

  • PROJECT_NUMBER: thenumber of the project.

  • ORGANIZATION_ID: theID of your organization.

• To grant or revoke the permissions to multiple projects to create andmodify shared reservations, replace the organization policy constraint.To do so, complete the following steps:

  1. To download the policy for your organization as a file namedpolicy.yaml, use thegcloud resource-manager org-policies describe command:

     gcloud resource-manager org-policies describe compute.sharedReservationsOwnerProjects \    --organization=ORGANIZATION_ID > policy.yaml

  2. Open thepolicy.yaml file in a text editor of your choice.

  3. Modify theallowedValues field to list all projects that cancreate and modify shared reservations.

     • For each project that you want to grant permission to, add theproject number in a new line within theallowedValues field.

     • For each project that you want to revoke the permission tocreate and modify shared reservations, remove the project numberfrom within theallowedValues field.

     Thepolicy.yaml file looks similar to the following example:

     ...constraint:constraints/compute.sharedReservationsOwnerProjectslistPolicy:allowedValues:-projects/EXAMPLE_PROJECT_NUMBER1-projects/EXAMPLE_PROJECT_NUMBER2-projects/EXAMPLE_PROJECT_NUMBER3......

  4. Save thepolicy.yaml file and close the text editor.

  5. To update the policy for your organization, use thegcloud resource-manager org-policies set-policy command:

     gcloud resource-manager org-policies set-policy \    --organization=ORGANIZATION_ID policy.yaml

  6. Optional: To delete thepolicy.yaml file, do one of the following:

     • If you're using a Linux or macOS terminal, then run thefollowing command:

       rm policy.yaml

     • If you're using a Windows terminal, then run the followingcommand:

       del policy.yaml