Admin section permissions

Look up the effective permissions used to show each admin section.

The Cloud admin window uses your effective permissions for the selected team organization. The table lists the exact permissions used to show each section. Any one permission in a row permits entry to that section.

Section entry permissions

Section

Any of these permissions

Overview

admin.billing.read, iam.invitations.read, admin.billing.payment_methods.read

Members

iam.members.read, iam.members.manage, iam.members.roles.manage, iam.members.seats.manage, iam.invitations.read, iam.invitations.manage

Groups

iam.groups.read, iam.groups.manage

Roles

iam.roles.read, iam.roles.manage, iam.roles.assign, iam.permissions.manage

Projects

admin.projects.read, admin.projects.members.manage, admin.projects.groups.manage, admin.projects.owner.transfer, admin.projects.archive.manage

Security

admin.security.read, admin.security.policy.update, admin.security.sessions.revoke, admin.security.domains.manage

Policies

admin.policies.read, admin.policies.update

Connections

admin.connections.read, admin.connections.service_accounts.read, admin.connections.service_accounts.manage, admin.connections.keys.read, admin.connections.keys.manage, admin.connections.mcp.read, admin.connections.mcp.revoke, admin.connections.mcp.unblock, admin.connections.git.read, admin.connections.git.manage

Usage

admin.billing.usage.read, admin.billing.usage.export

Billing

admin.billing.read, admin.billing.payment_methods.read, admin.billing.payment_methods.delete, admin.billing.details.read, admin.billing.details.update, admin.billing.invoices.read, admin.billing.portal.create

Audit

iam.audit.read, admin.audit.settings.read, admin.audit.settings.manage

Reading and changing

Reading data and making changes use separate permission checks. For example, iam.members.read permits reading the member list. With iam.permissions.manage, you can read Base permissions in Roles.

The account service checks each request's permissions and whether the requested operation is enabled for the selected organization.

Manage your organization in the admin window