Your users can request to add Cloud Marketplace products to your organization's private marketplace, if the following are true:
You're using Google Private Marketplace to manage which products your users can view and use.
You've turned on Product Requests.
These requests are called access requests. When a user creates an access request, your organization's Commerce Organization Governance Administrators get a notification, and they can review and authorize the request.
When you approve an access request, you must also select which collection to add the product to.
When you approve or deny a request, Cloud Marketplace sends an email to the requester with the status of their request and any message that you included. This email doesn't include your contact information and can't be used to message you, and replies to the notification aren't forwarded to administrators.
Multiple people can request the same product. If you see multiple requests for the same product in your Pending tab, you must approve or deny each request to move it to the corresponding relevant tab.
Before you begin
You must have at least one account that can receive procurement notifications.
You must have at least one account that can procure products for each Cloud Billing account in your organization.
For details about the Identity and Access Management (IAM) roles and permissions that you must have, visit the Product Requests documentation.
Before you begin
You must have at least one account that can receive product access request notifications and review them.
Review the following table to ensure that you assign the correct IAM permissions for each user. To use Product Requests, you must have correctly assigned all permissions.
| Action | Permissions or Roles | Level at which role/permission is assigned |
|---|---|---|
| Turn on Product Requests | Organization Administrator (roles/resourcemanager.organizationAdmin) AND
Commerce Organization Governance Admin (roles/commerceorggovernance.admin) roles |
Organization level |
| Receive product access request notifications | Commerce Organization Governance Admin (roles/commerceorggovernance.admin) role |
Organization level |
| Manage product access requests | Viewer (roles/viewer) AND Organization Viewer
(roles/resourcemanager.organizationViewer) AND Commerce
Organization Governance Admin
(roles/commerceorggovernance.admin) roles |
Organization level |
Review an access request
Accounts with the required roles for an organization can view all of that organization's access requests, and can complete or deny requests.
Access requests are associated with both a user and a project, so you can receive multiple requests for the same product.
To review a request, complete the following steps:
Open the access request. You can access this from the email, or view all access requests by opening the Marketplace governance page and then clicking Manage access requests.
Review the details of the access request.
Approve an access request
To approve an access request, follow the preceding steps to review the request, and then complete the following additional steps:
Click Accept request.
From the drop-down, select which Google Private Marketplace collection you want to add the product to.
Enter a message to the requester into the access request, including any information that they need to access the product or to contact an administrator.
Click Send and finish.
Deny an access request
To deny an access request, follow the preceding steps to review the request, and then complete the following additional steps:
Click Deny request.
In the access request, enter a message to the requester.
Click Deny.
After you've denied an access request, users can request access to the product again.