Google Identity and Access Management

A a simple and consistent access control interface for all Google Cloud services.

Grant access to users at a resource level of granularity, rather than just project level. For example, you can create an IAM access control policy that grants the Subscriber role to a user for a particular Pub/Sub topic.

Using Recommender, you can automatically detect overly permissive access and rightsize them based on similar users in the organization and their access patterns.

Control access to resources based on contextual attributes like device security status, IP address, resource type, and date/time.