Roles and Identities
In addition to managing resources, as a cloud engineer you will have to manage access to those resources. This is done with the use of roles and identities.
Roles in GCP
A role is a collection of permissions. Roles are granted to users by binding a user to a role. When we talk of identities, we mean the record we use to represent a human user or service account in GCP. For example, Alice is a software engineer developing applications in the cloud (the human user), and she has an identity with a name such as [email protected]. Roles are assigned to [email protected] within GCP so that Alice can create, modify, delete, and use resources in GCP.
There are three types of roles in Google Cloud Platform:
- Primitive roles
- Predefined roles
- Custom roles
Primitive roles include Owner, Editor, and Viewer. These are basic privileges that can be applied to most resources. It is a best practice to use predefined roles instead of primitive roles when possible. Primitive roles...
