Google Cloud Identity and Access Management

A Google Cloud Identity and Access Management is a cloud identity and access management platform that facilitates the creation of access control systems (to manage google cloud resource access and permissions).

• AKA: Google Cloud IAM, GCP IAM, Google Identity Platform.
• Context:
  • It can typically manage IAM Identity through service accounts.
  • It can typically control IAM Permission through iam roles.
  • It can typically enforce Resource Access through iam policy.
  • It can typically secure Cloud Resource through policy binding.
  • It can typically maintain Cloud Security through access level.
  • ...
  • It can often facilitate Federation through identity federation.
  • It can often enable Single Sign-On through cloud identity.
  • It can often support Organization Access through folder hierarchy.
  • It can often implement Access Analysis through policy analyzer.
  • ...
  • It can range from being a Basic IAM Setup to being an Enterprise IAM Configuration, depending on its organization scale.
  • It can range from being a Project-Level IAM to being an Organization-Wide IAM, depending on its resource hierarchy.
  • ...
  • It can integrate with Cloud Identity for user authentication.
  • It can connect to Workspace Identity for workspace access.
  • It can support Security Command Center for security monitoring.
  • ...
• Examples:
  • Google IAM Role Types, such as:
    • Primitive Role for basic permissions.
    • Predefined Role for service-specific permissions.
    • Custom Role for fine-grained permissions.
  • Google IAM Identity Types, such as:
    • Service Account for application authentication.
    • User Account for human access.
    • Group Account for team access.
  • Google IAM Policy Types, such as:
    • Organization Policy for organization-wide control.
    • Folder Policy for department-level control.
    • Project Policy for project-level control.
  • ...
• Counter-Examples:
  • AWS Identity and Access Management for amazon web services.
  • Microsoft Azure Active Directory for microsoft azure.
  • Legacy Permission System which lacks cloud-native capabilitys.
• See: Google Cloud Platform, Cloud Identity, Google Workspace, Security Command Center.

---