Category "google-iam"

How can i get the logs of roles modifications on some specific IAM user in GCP

I need to know who modified(added or deleted) the roles for some specific IAM user in GCP. I could not get these details in GCP logging even after adding data w

How to solve Error creating Service: googleapi: Error 403: Permission 'iam.serviceaccounts.actAs' denied on service account

I've been trying to create a public cloud run invoker policy and bind that to my cb_app cloud run service so that it can be exposed. I've created a custom servi

Grant your originating account the Service Account Token Creator role on the target service account

I used the below command to Authenticate in MAC OS terminal gcloud auth login It redirects to the google login page and show the authentication process success

GCP equivalent of "deny" permissions in aws policy

Is there a way to deny permissions in GCP custom role? For example, this is a policy in AWS that denies a set of actions on S3: { "Sid": "DenyS3", "Effe