Building Google Cloud Platform Solutions

Organization-level policies

The uppermost level of IAM is the organization. Above the organization there is a special role known as the Organization Owner. Generally speaking, there are very few organization owners, and owners are created for the organization by Google directly. Because organization owners work directly with Google, we don't need to dive too deeply into this role here. Under organization owners, there are three additional roles that specifically apply at the organization level: Organization Admins, Organization Viewers, and Project Creators.

• Organization Admins have full power over all projects within the organization, and they can create organization-level IAM policies. Policies made at the organizational level tend to ...