10 - Identity Flashcards
IAM
Identity and Access Management
Access Control Lists
Directly grant permissions to users
Role based access control
Assign permissions to roles and then users are assigned to roles (roles are given to users, or roles assigned to users )
GCP Three roles
Primitive - owner, editor, viewer etc
Predefined roles (for each service)
Custom roles
GCP Resource Hierarchy
Organisation
Folders
Projects
Resources
GCP Organisation
All roles of one domain go under the same org in terms of IAM and billing
GCP Folders
Org can have 1 or more folder and each can have projects/folders
GCP Projects
Contain set of users, API permissions, billing info, and provisioned resources. Users and roles are specified per project
GCP Resources
Offerings and services of GCP used by an org. Roles manage their access
GCP Permission
Allows access to a GCP API
GCP Role
Collection of permissions