Manage IAM roles

This page explains how to assign and modify a Backup and DR role to a user.

To access Backup and DR Service, each user needs a Google Account that has been added to a Google Cloud project, folder, or organization as a principal with an Identity and Access Management role that allows access to the management console.

For a complete list of permissions associated with each role, see IAM roles and permissions for Backup and DR Service . You can also create custom roles that contain subsets of permissions that map directly to your needs.

Assign IAM roles to a user

Use the following instructions to assign a role to a user.

1. In the Google Cloud console, go to the IAMpage.

   Go to IAM

2. Click a Select a projectdrop-down menu at the top of the page.

3. Click Grant Access.

4. In the Add Principalssection, enter the principal's email address, domain, or other identifier.

5. Select the project you want to view users in.

6. Find the principal's email address, domain, or other identifier in Principalsand select Edit principal.

7. The Assign rolesdrop-down menu displays all the roles–including any custom roles–that you can grant to the principal on this resource. Search for predefined roles .

8. Click Save.

Modify a users assigned roles

Use the following instructions to modify an existing role to a user.

1. In the Google Cloud console, go to the IAMpage.

   Go to IAM

2. Click a Select a projectdrop-down menu at the top of the page.

3. Select the user you want to modify the role of and click Edit principal.

4. The Select a roledrop-down menu displays all the roles–including any custom roles–that you can grant to the principal on this resource. Search for predefined roles .

5. Click Save.