Google Cloud Platform for Developers

Compute resource roles

Similarly, the Instance Admin role provides full control over resources such as virtual machines, disks, and images. This role is useful when the service account or user requires a high-level of control over instances, but does not require network or security permissions. The Instance Admin role is a great option for implementing separation of duties. Many additional roles exist below the Instance Admin to allocate permissions on specific groups of resources, such as view-only access to images and disks.