{"id":180980,"date":"2024-06-10T21:32:05","date_gmt":"2024-06-10T20:32:05","guid":{"rendered":"https:\/\/datascientest.com\/en\/?p=180980"},"modified":"2024-02-29T21:50:10","modified_gmt":"2024-02-29T20:50:10","slug":"gcp-custom-role-how-can-i-customise-my-access","status":"publish","type":"post","link":"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access","title":{"rendered":"GCP custom role: How can I customise my access?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"180980\" class=\"elementor elementor-180980\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d116540 e-flex e-con-boxed e-con\" data-id=\"d116540\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0e72a00 elementor-widget elementor-widget-heading\" data-id=\"0e72a00\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">During the development of a software programme or application, dozens or even hundreds of users are involved. But not all of them have the same access rights. So if you want to customise access to the various resources on the Google Cloud Platform, there's GCP Custom.<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f990a6c e-flex e-con-boxed e-con\" data-id=\"f990a6c\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-263872b elementor-widget elementor-widget-heading\" data-id=\"263872b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">What is GCP custom role?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4619837 elementor-widget elementor-widget-text-editor\" data-id=\"4619837\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>GCP custom roles correspond to custom roles on IAM (Identity and Access Management).<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-085eacd elementor-widget elementor-widget-heading\" data-id=\"085eacd\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">GCP custom role on IAM<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a48eae elementor-widget elementor-widget-text-editor\" data-id=\"3a48eae\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>As a reminder, <a href=\"https:\/\/datascientest.com\/en\/aws-identity-access-management-iam-how-does-it-work\">IAM is the authentication and access management platform<\/a> on the Google Cloud Platform. More specifically, it defines who (user) has access to what (resources) and how (role).<\/p><ul><li><strong>The user:<\/strong> also known as the main account. This can be a Google Account, a Service Account, a Google Group, a Google Workspace account or a Cloud Identity domain. Each main account has its own identifier (often an email address).<\/li><li><strong>Cloud resources:<\/strong> these are Compute Engine <a href=\"https:\/\/datascientest.com\/en\/virtual-machine-definition-use-and-benefits\">virtual machine instances<\/a>, Google Kubernetes Engine clusters, Cloud Storage buckets, complete folders, projects, etc.<\/li><li><strong>The role:<\/strong> access authorisation is not granted directly to the user, but goes through the intermediary of roles. Roles are assigned to the main accounts and group together a set of authorisations for a resource. However, there are different types of role.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1204824 elementor-widget elementor-widget-heading\" data-id=\"1204824\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">The different types of role<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9371717 elementor-widget elementor-widget-text-editor\" data-id=\"9371717\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Cloud IAM has 3 types of roles:<\/p><ul><li><strong>Basic roles:<\/strong> these are present in IAM by default. These are the &#8220;Owner&#8221;, &#8220;Editor&#8221; and &#8220;Reader&#8221; roles. Once assigned, these roles include thousands of authorisations on <a href=\"https:\/\/datascientest.com\/en\/gpc-vpc-everything-you-need-to-know-about-googles-virtual-private-cloud\">GCP resources.<\/a> It is therefore preferable not to assign this type of role.<\/li><li><strong>Predefined roles:<\/strong> entirely managed by Google, these allow you to authorise or deny access to resources. When new features or services are added, the predefined roles are automatically updated.<\/li><li><strong>Custom roles:<\/strong> these are defined by the user themselves. This makes it possible to adapt accessibility conditions to the specific needs of the organisation. But with these custom roles, there is no automatic update when a new feature or service is added.<\/li><li><strong>GCP custom roles<\/strong> are based on the principle of least privilege. This means that users should not have more authorisations than necessary. So when a predefined role includes authorisation for a set of resources, the creation of a <strong>GCP custom role<\/strong> makes it possible to give access rights for a very specific resource rather than for the whole.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-09b9271 elementor-widget elementor-widget-text-editor\" data-id=\"09b9271\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>Good to know:<\/strong> very often, it is the <a href=\"https:\/\/datascientest.com\/en\/information-systems-administrator-adminsys-everything-you-need-to-know-about-this-profession\">system administrators<\/a> themselves who define the personalised roles according to the needs of the users. But in some cases, they can also use role recommendations (particularly if the assignments are too permissive). In this case, they will receive a recommendation to create a custom role.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1f00f98 e-flex e-con-boxed e-con\" data-id=\"1f00f98\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f17aa85 elementor-widget elementor-widget-heading\" data-id=\"f17aa85\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">How can I customise the roles on GCP?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f37df98 elementor-widget elementor-widget-text-editor\" data-id=\"f37df98\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Find out more about the different stages involved in creating a custom GCP role.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0b34cc1 elementor-widget elementor-widget-image\" data-id=\"0b34cc1\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/08\/gcp-roles1.png\" title=\"\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"><\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-49e4b16 elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"49e4b16\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/en\/data-courses\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Learn all about GCP custom roles<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2e2eecd elementor-widget elementor-widget-heading\" data-id=\"2e2eecd\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Obtaining authorisations<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e8c1d5a elementor-widget elementor-widget-text-editor\" data-id=\"e8c1d5a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>First of all, you need to obtain the authorisations to manage the roles. This means modifying, listing, deleting or creating roles. To do this, you need to obtain the role of &#8220;roles administrator&#8221; (for a project) or &#8220;organisation roles administrator&#8221; (company-wide).<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3b81604 elementor-widget elementor-widget-heading\" data-id=\"3b81604\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">View available authorisations<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5af9171 elementor-widget elementor-widget-text-editor\" data-id=\"5af9171\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The management of <strong>GCP custom roles<\/strong> depends on their location. For example, if the role is located at organisation level, it will not be possible to include a permission in a custom role at project level.<\/p><p>This is why it is essential to check the list of available permissions before creating any custom roles. To list them, you can use the<strong> Google Cloud Console<\/strong> or the Identity and Access Management <a href=\"https:\/\/datascientest.com\/en\/api-the-path-to-seamless-integration\">API.<\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2b70e89 elementor-widget elementor-widget-heading\" data-id=\"2b70e89\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Obtaining metadata<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6f41ec3 elementor-widget elementor-widget-text-editor\" data-id=\"6f41ec3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Before you can create a<strong> GCP custom role<\/strong>, you need to know its metadata. In other words, the role ID and all the authorisations it contains. Here again, the <a href=\"https:\/\/datascientest.com\/en\/google-cloud-console-how-does-it-work\">Google Cloud Console<\/a> and the IAM API allow you to display this metadata.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-817b758 elementor-widget elementor-widget-heading\" data-id=\"817b758\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Create a custom GCP role<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9c65dae elementor-widget elementor-widget-text-editor\" data-id=\"9c65dae\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Roles are created either at organisation level or at project level (never at folder level). For the latter, it is preferable to define a role at organisation level, since they can include all the authorisations compatible with<strong> GCP custom roles.<\/strong> But some can only be used at the level of the organisation, not the project. This is the case, for example, with resourcemanager.organizations.get.<\/p><p>Next, to create a custom role, you need to comply with the following rules:<\/p><ul><li>3,000 authorisations maximum ;<\/li><li>64 KB maximum for the size of the title, the description and the authorisation names.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3b6d4c4 elementor-widget elementor-widget-text-editor\" data-id=\"3b6d4c4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>If you need to assign more authorisations, you can distribute them between several custom roles on GCP.<\/p><p>To create a custom role on Identity and Access Management, you can use the Google Cloud Platform console, the IAM API or the various programming languages (C++, C, Go, Java, Python).<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5cb37df elementor-widget elementor-widget-heading\" data-id=\"5cb37df\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Include a launch stage<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4154a84 elementor-widget elementor-widget-text-editor\" data-id=\"4154a84\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>This launch phase is optional. The idea is to test the custom role before deploying it on a large scale. This is particularly important for the DISABLED function, which involves <strong>deactivating the GCP custom role.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-63100af elementor-widget elementor-widget-heading\" data-id=\"63100af\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Modifying a custom role<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d1016be elementor-widget elementor-widget-text-editor\" data-id=\"d1016be\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Once a <strong>GCP custom<\/strong> role has been created, the easiest way is to use the read-modify-write model. This allows you to update the metadata of a resource (in particular the roles). However, when you make changes, make sure that you are the only one doing so.<\/p><p>If two owners are using the read-modify-write model simultaneously, errors can occur (failed modifications).<\/p><p>To avoid these conflicts, don&#8217;t hesitate to use the etag property, which compares the values in the request with the existing etag value.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0cc2157 elementor-widget elementor-widget-text-editor\" data-id=\"0cc2157\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><strong>Good to know:<\/strong> some updates do not appear automatically, but after a delay of up to 24 hours. This is the case, for example, with the addition or removal of the following authorisations: resourcemanager.organisations.get, resourcemanager.folders.get or resourcemanager.projects.get.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-53bd0e7 e-flex e-con-boxed e-con\" data-id=\"53bd0e7\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-35e64bc elementor-widget elementor-widget-heading\" data-id=\"35e64bc\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Master custom role GCPs with DataScientest<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2e9fdbe elementor-widget elementor-widget-text-editor\" data-id=\"2e9fdbe\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Very often, the use of <strong>GCP custom<\/strong> roles is the prerogative of the administrator. To master this functionality on the <a href=\"https:\/\/datascientest.com\/en\/understanding-google-cloud-platform-buckets-their-purpose-and-functionality\">Google Cloud Platform,<\/a> you can take GCP certifications. But to develop your full knowledge of this cloud service, it&#8217;s best to take a full training course. That&#8217;s exactly what DataScientest offers. Come and join us!<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-841f8b3 elementor-widget elementor-widget-image\" data-id=\"841f8b3\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/08\/gcp-roles2.png\" title=\"\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\"><\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e9554a8 elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"e9554a8\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/en\/data-courses\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Discover our cloud computing training courses<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-582be52 e-flex e-con-boxed e-con\" data-id=\"582be52\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c882099 elementor-widget elementor-widget-html\" data-id=\"c882099\" data-element_type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<script type=\"application\/ld+json\">\n{\n  \"@context\": \"https:\/\/schema.org\",\n  \"@type\": \"FAQPage\",\n  \"mainEntity\": [{\n    \"@type\": \"Question\",\n    \"name\": \"What is GCP custom role?\",\n    \"acceptedAnswer\": {\n      \"@type\": \"Answer\",\n      \"text\": \"The GCP data catalogue is a metadata management service belonging to Dataplex. As a reminder, metadata is data about data. The idea is to give context to the various datasets available by answering the questions: Who? Who? Where? How? Why?\n    }\n  },{\n    \"@type\": \"Question\",\n    \"name\": \"What is GCP custom role?\",\n    \"acceptedAnswer\": {\n      \"@type\": \"Answer\",\n      \"text\": \"The user: also known as the main account. This can be a Google Account, a Service Account, a Google Group, a Google Workspace account or a Cloud Identity domain. Each main account has its own identifier (often an email address).  Cloud resources: these are Compute Engine virtual machine instances, Google Kubernetes Engine clusters, Cloud Storage buckets, complete folders, projects, etc. The role: access authorisation is not granted directly to the user, but goes through the intermediary of roles. Roles are assigned to the main accounts and group together a set of authorisations for a resource. However, there are different types of role.\n    }\n  }]\n}\n<\/script>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>During the development of a software programme or application, dozens or even hundreds of users are involved. But not all of them have the same access rights. So if you want to customise access to the various resources on the Google Cloud Platform, there&#8217;s GCP Custom. What is GCP custom role? GCP custom roles correspond [&hellip;]<\/p>\n","protected":false},"author":67,"featured_media":180986,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","inline_featured_image":false},"categories":[2412],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.7 (Yoast SEO v21.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>GCP custom role: How can I customise my access?<\/title>\n<meta name=\"description\" content=\"Learn how to customize access control in Google Cloud Platform (GCP) with custom roles. Explore the process of creating custom roles to precisely define permissions for your GCP resources based on specific requirements and responsibilities.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GCP custom role: How can I customise my access?\" \/>\n<meta property=\"og:description\" content=\"During the development of a software programme or application, dozens or even hundreds of users are involved. But not all of them have the same access\" \/>\n<meta property=\"og:url\" content=\"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access\" \/>\n<meta property=\"og:site_name\" content=\"Data Science Courses | DataScientest\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DataScientestEN\" \/>\n<meta property=\"article:published_time\" content=\"2024-06-10T20:32:05+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-29T20:50:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/datascientest.com\/en\/files\/2024\/02\/gcp-custom-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Melanie\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:site\" content=\"@DataScientest__\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Melanie\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access#article\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access\"},\"author\":{\"name\":\"Melanie\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d\"},\"headline\":\"GCP custom role: How can I customise my access?\",\"datePublished\":\"2024-06-10T20:32:05+00:00\",\"dateModified\":\"2024-02-29T20:50:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access\"},\"wordCount\":1014,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"articleSection\":[\"Cloud &amp; Data Engineering\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access#respond\"]}],\"copyrightYear\":\"2024\",\"copyrightHolder\":{\"@id\":\"https:\/\/datascientest.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access\",\"url\":\"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access\",\"name\":\"GCP custom role: How can I customise my access?\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/en\/#website\"},\"datePublished\":\"2024-06-10T20:32:05+00:00\",\"dateModified\":\"2024-02-29T20:50:10+00:00\",\"description\":\"Learn how to customize access control in Google Cloud Platform (GCP) with custom roles. Explore the process of creating custom roles to precisely define permissions for your GCP resources based on specific requirements and responsibilities.\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/datascientest.com\/en\/#website\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"name\":\"Data Science Courses | DataScientest\",\"description\":\"Leader in Data Science Courses\",\"publisher\":{\"@id\":\"https:\/\/datascientest.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/datascientest.com\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/datascientest.com\/en\/#organization\",\"name\":\"DataScientest\",\"url\":\"https:\/\/datascientest.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"contentUrl\":\"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png\",\"width\":301,\"height\":301,\"caption\":\"DataScientest\"},\"image\":{\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/DataScientestEN\",\"https:\/\/twitter.com\/DataScientest__\",\"https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/\",\"https:\/\/www.tiktok.com\/@datascientest\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d\",\"name\":\"Melanie\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g\",\"caption\":\"Melanie\"},\"url\":\"https:\/\/datascientest.com\/en\/author\/melaniekrause\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"GCP custom role: How can I customise my access?","description":"Learn how to customize access control in Google Cloud Platform (GCP) with custom roles. Explore the process of creating custom roles to precisely define permissions for your GCP resources based on specific requirements and responsibilities.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access","og_locale":"en_GB","og_type":"article","og_title":"GCP custom role: How can I customise my access?","og_description":"During the development of a software programme or application, dozens or even hundreds of users are involved. But not all of them have the same access","og_url":"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access","og_site_name":"Data Science Courses | DataScientest","article_publisher":"https:\/\/www.facebook.com\/DataScientestEN","article_published_time":"2024-06-10T20:32:05+00:00","article_modified_time":"2024-02-29T20:50:10+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/datascientest.com\/en\/files\/2024\/02\/gcp-custom-1.png","type":"image\/png"}],"author":"Melanie","twitter_card":"summary_large_image","twitter_creator":"@DataScientest__","twitter_site":"@DataScientest__","twitter_misc":{"Written by":"Melanie","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access#article","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access"},"author":{"name":"Melanie","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d"},"headline":"GCP custom role: How can I customise my access?","datePublished":"2024-06-10T20:32:05+00:00","dateModified":"2024-02-29T20:50:10+00:00","mainEntityOfPage":{"@id":"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access"},"wordCount":1014,"commentCount":0,"publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"articleSection":["Cloud &amp; Data Engineering"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access#respond"]}],"copyrightYear":"2024","copyrightHolder":{"@id":"https:\/\/datascientest.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access","url":"https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access","name":"GCP custom role: How can I customise my access?","isPartOf":{"@id":"https:\/\/datascientest.com\/en\/#website"},"datePublished":"2024-06-10T20:32:05+00:00","dateModified":"2024-02-29T20:50:10+00:00","description":"Learn how to customize access control in Google Cloud Platform (GCP) with custom roles. Explore the process of creating custom roles to precisely define permissions for your GCP resources based on specific requirements and responsibilities.","inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/datascientest.com\/en\/gcp-custom-role-how-can-i-customise-my-access"]}]},{"@type":"WebSite","@id":"https:\/\/datascientest.com\/en\/#website","url":"https:\/\/datascientest.com\/en\/","name":"Data Science Courses | DataScientest","description":"Leader in Data Science Courses","publisher":{"@id":"https:\/\/datascientest.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/datascientest.com\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/datascientest.com\/en\/#organization","name":"DataScientest","url":"https:\/\/datascientest.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","contentUrl":"https:\/\/datascientest.com\/en\/wp-content\/blogs.dir\/9\/files\/2024\/02\/DataScientest_icon_blue-2.png","width":301,"height":301,"caption":"DataScientest"},"image":{"@id":"https:\/\/datascientest.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DataScientestEN","https:\/\/twitter.com\/DataScientest__","https:\/\/www.linkedin.com\/school\/datascientest\/mycompany\/","https:\/\/www.tiktok.com\/@datascientest"]},{"@type":"Person","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/19d5f7ade9407eb69af3bf6d1ae1731d","name":"Melanie","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/datascientest.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8d3d660a0698de06f13ecf4823519da1?s=96&d=mm&r=g","caption":"Melanie"},"url":"https:\/\/datascientest.com\/en\/author\/melaniekrause"}]}},"_links":{"self":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/180980"}],"collection":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/users\/67"}],"replies":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/comments?post=180980"}],"version-history":[{"count":0,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/posts\/180980\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media\/180986"}],"wp:attachment":[{"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/media?parent=180980"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/categories?post=180980"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/datascientest.com\/en\/wp-json\/wp\/v2\/tags?post=180980"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}