[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間:2025-09-04 (世界標準時間)。"],[[["\u003cp\u003eUsers require a Google Account added to a Google Cloud project, folder, or organization with an Identity and Access Management (IAM) role to access Backup and DR Service.\u003c/p\u003e\n"],["\u003cp\u003eIAM roles can be assigned to users via the Google Cloud console's IAM page by adding a principal and selecting the appropriate role from the "Assign roles" dropdown menu.\u003c/p\u003e\n"],["\u003cp\u003eExisting roles assigned to users can be modified by selecting the user in the IAM page and then utilizing the "Select a role" dropdown menu to change their assigned role.\u003c/p\u003e\n"],["\u003cp\u003ePredefined and custom roles for Backup and DR service can be found and granted within the IAM roles interface.\u003c/p\u003e\n"]]],[],null,["# Manage IAM roles\n\nThis page explains how to assign and modify a Backup and DR role to a user.\n\nTo access Backup and DR Service, each user needs a Google Account that has been\nadded to a Google Cloud project, folder, or organization as a principal with\nan Identity and Access Management role that allows access to the management console.\n\nFor a complete list of permissions associated with each role, see\n[IAM roles and permissions for Backup and DR Service](/backup-disaster-recovery/docs/access-control#roles).\nYou can also [create custom roles](/iam/docs/creating-custom-roles)\nthat contain subsets of permissions that map directly to your needs.\n\nAssign IAM roles to a user\n--------------------------\n\nUse the following instructions to assign a role to a user.\n\n1. In the Google Cloud console, go to the **IAM** page.\n\n [Go\n to IAM](https://console.cloud.google.com/projectselector/iam-admin/iam?supportedpurview=project,folder,organizationId)\n2. Click a **Select a project** drop-down menu at the top of the page.\n\n3. Click **Grant Access**.\n\n4. In the **Add Principals** section, enter the principal's email address, domain, or other identifier.\n\n5. Select the project you want to view users in.\n\n6. Find the principal's email address, domain, or other identifier in **Principals** and select **Edit principal**.\n\n7. The **Assign roles** drop-down menu displays all the roles--including any custom roles--that you can grant to the principal on this resource. Search for [predefined roles](/backup-disaster-recovery/docs/access-control#roles).\n\n8. Click **Save**.\n\nModify a users assigned roles\n-----------------------------\n\nUse the following instructions to modify an existing role to a user.\n\n1. In the Google Cloud console, go to the **IAM** page.\n\n [Go\n to IAM](https://console.cloud.google.com/projectselector/iam-admin/iam?supportedpurview=project,folder,organizationId)\n2. Click a **Select a project** drop-down menu at the top of the page.\n\n3. Select the user you want to modify the role of and click **Edit principal.**\n\n4. The **Select a role** drop-down menu displays all the roles--including any custom roles--that you can grant to the principal on this resource. Search for [predefined roles](/backup-disaster-recovery/docs/access-control#roles).\n\n5. Click **Save**."]]