GCP IAM knowledge

[y4h2]

Testing permissions testIamPermissions() is used to determin whether user have access to dashboard tool.

IAM basic and predefined roles reference basic roles:

• Viewer: read-only
• Editor: viewer + modify/deelte
• Owner: editor + manage roles, billing

[y4h2]

A Complete Guide to Cloud IAM Contains all information about GCP IAM

• Member
  • Google Account
  • Service Account: used by application
  • Google Workspace Domain
  • Cloud Identity Domain
  • All Users and All Authenticated Users
• Role: a collection of several permissions
  • Basic Roles: viewer, editor, owner
  • pre-defined Roles
  • Custom Rules
• Policy: a collection of several roles

[y4h2]

Workload identiy federation: 允许GCP使用外部的认证系统 Configuring workload identity federation