Access to GCE is secured with IAMs. Let's have a look at the list of predefined roles, together with a short description for each:
- Compute Admin Role: This has the right to access all Compute Engine resources.
- Compute Image User Role: This has the right to list and read images.
- Compute Instance Admin (v1) Role: This has the right to access full management of Compute Engine instances, instance groups, disks, snapshots, and images. It also has read access to all Compute Engine networking resources.
- Compute Instance Admin (beta) Role: This has the right to create, modify, and delete VM instances. Additionally, it has the right to create, modify, and delete disks and to configure shielded VM settings.
- Compute Load Balancer Admin Role: This has the right to create, modify, and delete load balancers and associated resources.
- Compute Network Admin Role: This has the right...
