Skip to main content
This page shows organization administrators how to create, edit, and delete IAM access policies using the Cloud Console. Access policies let you control which principals can act on resources in your organization by assigning roles through reusable policy definitions.

​
Create an access policy

Create a new access policy when you need to grant a set of roles to one or more principals. To view the Access Policies section in the Cloud Console, you need at least the IAM Viewer role.
  1. In the Cloud Console, navigate to the Access Policies page.
  2. In the top-right corner, click Create Policy.
  3. In the policy editor, enter a name for the policy.
  4. Enter a description for the policy.
  5. Add one or more rules to the policy. For each rule, enter a principal and a role to assign that role to the principal.
  6. When you’re done, click Save Policy.
After you save the policy, it appears in the Access Policies list and the rules take effect for the specified principals.

​
Edit an access policy

Edit an existing access policy when you need to change its name, description, or the rules that determine which principals receive which roles.
Default Access Policies have restricted edit behavior. You can only update which principals appear on a default policy. CoreWeave manages the policies, and they can’t be changed.
  1. In the Cloud Console, navigate to the Access Policies page.
  2. Search for the policy you want to edit. To view policy details, expand the caret next to the policy name.
  3. Click the vertical dot menu (three dots) next to the policy you want to edit, and select Edit.
  4. Update the policy name and description, or add, edit, or delete rules in the policy:
    • To edit a rule, click the card for the rule you want to edit, adjust the principals and roles, and click outside the card to save your changes to the rule.
    • To add a rule, click the Add Rule button at the bottom of the policy editor, and enter the principals and roles for the new rule.
    • To delete a rule, click the card for the rule you want to delete, and click the Delete button at the bottom of the card.
  5. When you’re done, click Save Policy.

​
Delete an access policy

Default Access Policies can’t be deleted. You can only delete policies you create yourself.
  • In the Cloud Console, on the Access Policies page, click the vertical dot menu (three dots) next to the policy you want to delete, and select Delete.
Last modified on June 29, 2026