domains / families / security / iam-helper-for-troubleshooting

iam-helper-for-troubleshooting

separate

Diagnoses, remediates, and manages Identity and Access Management (IAM) access issues on Google Cloud. Supports two distinct operational modes: (1) Requester Flow for developers encountering access denials (capturing error context, self-service PAM JIT activations, elevated developer self-remediation, or logging structured tickets), and (2) Resolver Flow for privileged administrators (authoritative Policy Troubleshooter analysis, deny policy exemptions, least-privilege role discovery, and PAM/IAM provisioning).

When to use

• Diagnosing IAM access issues
• Remediating access denials
• Managing IAM access
• Self-service PAM JIT activations
• Logging structured tickets
• Policy Troubleshooter analysis
• Deny policy exemptions
• Least-privilege role discovery

When not to use

• Tasks where access is already granted
• Tasks where access state is unknown due to missing group expansion permissions
• Tasks encountering PERMISSION_DENIED on the caller's identity

Skill page

Source