Access to Google Cloud Functions is secured with IAM. Let's have a look at the list of predefined roles, along with a short description for each:
- Cloud Functions Developer: Has the right to create, update, and delete functions, as well as view source code. Cannot set IAM policies.
- Cloud Functions Viewer: Has the right to view functions. Cannot get IAM policies nor view the source code.
Note that, for the Cloud Functions Developer role to work, you must also assign the user the IAM Service Account User role on the Cloud Functions runtime service account.