Access-related troubleshooters

To help you understand and remedy access issues, Policy Intelligence offers the following troubleshooters:

• Policy Troubleshooter
• VPC Service Controls troubleshooter
• Policy Troubleshooter for Chrome Enterprise Premium

Policy Troubleshooter

Preview — Troubleshooting principal access boundary policies

This feature is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the Service Specific Terms . Pre-GA features are available "as is" and might have limited support. For more information, see the launch stage descriptions .

Policy Troubleshooter helps you understand whether a principal can access a resource. Given a principal, a resource, and a permission, Policy Troubleshooter examines the allow policies, deny policies, and principal access boundary (PAB) policies that impact the principal's access. Then, it tells you whether, based on those policies, the principal can use the specified permission to access the resource. It also lists the relevant policies and explains how they affect the principal's access.

To learn how to use Policy Troubleshooter to troubleshoot IAM allow policies, deny policies, and principal access boundary (PAB) policies, see Troubleshooting access .

To learn about the different types of policies that IAM supports, see Policy types .

VPC Service Controls troubleshooter

The VPC Service Controls troubleshooter helps you troubleshoot access issues caused by improperly configured VPC Service Controls service perimeters . Given a unique denial ID, the VPC Service Controls troubleshooter investigates the denial and reports why a service perimeter denied a request.

To learn how to use the VPC Service Controls troubleshooter, see Diagnosing issues by using the VPC Service Controls troubleshooter .

Policy Troubleshooter for Chrome Enterprise Premium

The Policy Troubleshooter for Chrome Enterprise Premium helps organizations using Chrome Enterprise Premium understand why an end user is denied access. Policy Troubleshooter evaluates both your policies and the end user's context—for example, their location or device details—to determine why access was denied.

The Chrome Enterprise Premium Policy Troubleshooter is a premium feature and requires a Chrome Enterprise Premium license.

To learn how to use Policy Troubleshooter to troubleshoot Chrome Enterprise Premium, see Troubleshooting by using the Policy Troubleshooter for Chrome Enterprise Premium .