IAM: Hands-On

This lesson will explore Cloud IAM using GUI and cloud shell. (Google Cloud Ephemeral Shell Environment.) This demo requires more than one user in your GCP project, so we already have the first user as yourself (as IAM lists your email ID as a user); we will create a second user in our current project.

Use of service account

Remember that we have different kinds of members in GCP IAM. We will use a service account to imitate multiple users in our GCP account. So, let’s start.

Cloud IAM quick start

In this hands-on lab, we will create two users. Then, the new user will be permitted to list the contents of a bucket. (A Cloud Storage Bucket is cloud storage that can store any object.) Next, we will remove the permissions and try to list the bucket’s contents again.

Creating a second user

1. Open the GCP console.

2. Go to IAM & Admin > Service Accounts

3. Click on “Create Service Account.”

4. Provide a name for SA(Service Account).

5. Provide any description if required.

6. Leave the optional field, move forward, and click “Create”. Then click ...