domains / families / security / iam-helper-for-policy-simulator

iam-helper-for-policy-simulator

separate

Safely simulates and applies Identity and Access Management (IAM) v1 (Allow) policy changes on Google Cloud. Uses the Policy Simulator to replay historical access logs against proposed policies to prevent breaking active workloads before applying the changes. Use when simulating or applying IAM v1 allow policies across Projects, Folders, or Organizations. Don't use for analyzing IAM v2 deny policies, VPC Service Controls, or performing general policy troubleshooting.

When to use

• Simulating IAM v1 allow policies
• Applying IAM v1 allow policies
• Modifying IAM policies for Projects
• Modifying IAM policies for Folders
• Modifying IAM policies for Organizations

When not to use

• Analyzing IAM v2 deny policies
• VPC Service Controls
• General policy troubleshooting

Skill page

Source