domains / families / security / iam-helper-for-policy-management

iam-helper-for-policy-management

separate

Streamlines the creation, modification, and management of IAM allow policies (v1) and deny policies (v2). Manages access control across Resource Manager resources (Organization, Folder, Project) and individual resources. Use when creating, updating, listing, or deleting IAM allow policies or deny policies. Don't use for access denial troubleshooting (use iam-helper-for-troubleshooting), temporary privileged access (use iam-helper-for-privileged-access-management), configuring VPC Service Controls, or managing network firewall rules.

When to use

• creating IAM allow policies
• updating IAM allow policies
• listing IAM allow policies
• deleting IAM allow policies
• creating IAM deny policies
• updating IAM deny policies
• listing IAM deny policies
• deleting IAM deny policies

When not to use

• access denial troubleshooting
• temporary privileged access
• configuring VPC Service Controls
• managing network firewall rules

Skill page

Source