Building Google Cloud Platform Solutions

General roles

As we've seen in previous chapters, primitive roles may be used to grant general permissions at the project or organization level. These primitive roles apply to Compute Engine resources in the same manner as other resources. Project and organization owners and editors fully control all compute engine resources, such as images, disks, instances, and network resources. Project and organization viewers are granted read-only access to these resources.

Much like the primitive Owner and Editor roles, the Compute Admin role grants full access to all Compute Engine operations, including network and security operations. This role may be useful when a user or service account should maintain control over Compute Engine in general, but ...