domains / families / security / iam-helper-for-privileged-access-management

iam-helper-for-privileged-access-management

separate

Manages the end-to-end lifecycle of on-demand, temporary access using Privileged Access Manager (PAM). Use when a user asks to create, read, update, or delete PAM entitlements, request temporary access, or approve/deny pending PAM grants. Do NOT use for permanent IAM policy bindings, troubleshooting IAM permission errors, or general Google Cloud resource provisioning.

When to use

• create PAM entitlements
• read PAM entitlements
• update PAM entitlements
• delete PAM entitlements
• request temporary access
• approve pending PAM grants
• deny pending PAM grants
• configure approval workflows

When not to use

• permanent IAM policy bindings
• troubleshooting IAM permission errors
• general Google Cloud resource provisioning

Skill page

Source