'Creating a custom IAM role via subtraction
Right now in Google Cloud most members of my team are project "Editor". I would like them to be able to view and edit most resources in Google Cloud.
However the one thing I don't want is for them to be able to deploy new versions of Cloud Functions. That should only be done by our CI bot.
Is there a way to create a custom IAM role which is "Editor but minus <permission x>"?
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|