Get Started with Google Cloud — selected guide
Resource Access Control IAM Roles and Permissions
Twelve practical entries spanning docs, networking, storage, IAM, cost, data, workflows, and APIs
Twelve 2018–2022 introductions use small tasks to explain networking, persistent storage, access control, BigQuery queries and cost limits, object versions, sensitive-data inspection, workflow orchestration, and speech transcription.
Google Cloud Tech 4 of 12
In this collection Browse 12 summaries 4 of 12
Identity and Access Management (IAM) connects an identity to the actions it may perform through a role. This example grants one account access to Cloud Storage, tests that access, then removes it and checks that access is denied. 00:00–01:10(opens in a new tab)
Key Points Covered
- Storage Admin is broad: the added account can view, modify, or delete the stored photo, not just read it. 00:00–00:53(opens in a new tab)
- The first access attempt still fails because the permission change has not finished propagating. After a short wait and reload, the photo becomes visible. 00:00–00:53(opens in a new tab)
- Removing this account from the policy makes the next reload return a permission error. The demonstration checks the result from the affected account rather than relying only on what the policy editor displays. 00:00–01:10(opens in a new tab)
Full video: https://www.youtube.com/watch?v=Sdt-i-Q7tyA(opens in a new tab)