IAM
Access to Google Cloud Functions is secured with IAM. Let's have a look at a list of predefined roles, along with a short description of each:
- Cloud Function Admin: Has the right to create, update, and delete functions. Can set IAM policies and view source code.
- Cloud Functions Developer: Has the right to create, update, and delete functions, as well as view source code. Cannot set IAM policies.
- Cloud Functions Viewer: Has the right to view functions. Cannot get IAM policies, nor view the source code.
- Cloud Function Invoker: Has the right to invoke an HTTP function using its public URL.
Note that for the Cloud Functions Developer role to work, you must also assign the user the IAM Service Account User role on the Cloud Functions runtime service account.
