DoiT Cloud Intelligence™

View GCP User Role Assignments

By Garrett SchaefferJul 6, 20201 min read
View GCP User Role Assignments

So, using something like this…

gcloud organizations get-iam-policy <ORGANIZATION_ID> --filter="bindings.members:<[email protected]>" --flatten="bindings[].members" --format="table(bindings.role)" > roles.txt

…provides a nice clean output file that can be easily shared and looks similar to this.

ROLE
roles/billing.admin
roles/compute.xpnAdmin
roles/iam.organizationRoleAdmin
roles/orgpolicy.policyAdmin
roles/resourcemanager.organizationAdmin
roles/securitycenter.admin
roles/storage.admin

With the above, we’re getting data directly from the cloud environment that all stakeholders involved may use.