Skip to main content
Attach an access policy that includes only the role the user needs. For example, Observability Viewer for Grafana dashboards, Billing Viewer for cost dashboards, CKS Viewer for read-only Kubernetes access, or IAM Viewer for read-only IAM visibility. Avoid attaching domain-admin roles (CKS Admin, IAM Admin, Object Storage Admin, and others) to a user you intend to keep read-only. For the full role catalog, see Access policies.
Administrator Authentication & Access
Last modified on June 18, 2026