Building Google Cloud Platform Solutions

Cross-project access

In addition to organization-level policies, Google Cloud IAM supports policies for actors that are not project members. For example, if a service account in one project needs view-only access to BigQuery data in another project, an IAM policy can be created in this other project granting the service account the bigquery.dataViewer role. Because policies made at the organization level apply to all projects, creating project-level policies for external actors is often the preferred strategy.