How can I create a custom role in GCP

Question

I want to create a custom role so that I could assign specific permissions to a specific set of people in my organization.

How do I create a custom role in GCP?

Answer 1

To create a custom role, a caller must possess iam.roles.create permission. By default, the owner of a project or an organization has this permission and can create and manage custom roles.

Users who are not owners, including organization admins, must be assigned either the Organization Role Administrator role, or the IAM Role Administrator role.

To create a new custom role from scratch:

1. Go to the Roles page in the GCP Console.

2. Select your organization from the Organization drop-down.

3. Click Create Role.

4. Enter a Name, a Title, and Description for the role.

5. Click Add Permissions.

6. Select the permissions you want to include in the role and click Add Permissions. Use the All Services and All Typesdrop-downs to filter and select permissions by services and types.

For more info refer to  https://cloud.google.com/iam/docs/creating-custom-roles#iam-custom-roles-get-metadata-console