Building Google Cloud Platform Solutions

Billing accounts and IAM

Because billing accounts are a type of resource on Google Cloud, they have full integrations with Cloud IAM. There are several IAM roles that apply to billing accounts. The most permissive billing role is the Billing Account Creator. Creators exist at the organization level, and it can create new billing accounts. This role is usually reserved for a select few in the organization.

Below the Billing Account Creator are the Billing Account Administrator and the Project Billing Manager. Both of these roles can link and unlink billing accounts to a project. Administrator roles can be applied to the organization to grant access to all billing accounts, or to a specific billing account. In addition to associating billing ...