Cloud Billing overview

Cloud Billing is a collection of tools that help you track and understand your Google Cloud spending, pay your bill, and optimize your costs.

This document covers the following topics:

About Cloud Billing tools

The tools in Cloud Billing help you monitor your usage costs, forecast your spending, and identify opportunities to save on costs.

Get started

  • Take an interactive tour of Cloud Billing. If you're new to Google Cloud, this tutorial walks you through the basics of understanding and managing your costs using the Google Cloud console.

    Launch the Cloud Billing tour

  • View your billing reports and cost trends. The billing report helps you answer questions like "Which Google Cloud services (such as Compute Engine or Cloud Storage) cost me the most?".

    Launch the Cloud Billing reports tour

Monitor costs

  • Export your billing data to BigQuery. Export your usage and cost data to a BigQuery dataset, and use the dataset for detailed analyses. You can also visualize your exported data in tools such as Looker Studio.

    We recommend enabling the BigQuery export as early as possible, so that the data reflects your Google Cloud usage from the beginning.

    Launch the Cloud Billing export to BigQuery tutorial

  • Create a budget and set up spending alerts. Use budgets to track your actual Google Cloud spend against your planned spends. Then, set up alerts to stay informed of your spending.

    Learn about creating budgets

Optimize and control costs

About Cloud Billing accounts and Google payments profiles

A Cloud Billing account is set up in Google Cloud and defines who pays for a given set of Google Cloud resources and Google Maps Platform APIs. Access control to a Cloud Billing account is established by IAM roles. A Cloud Billing account is connected to a Google payments profile. Your Google payments profile includes a payment instrument to which costs are charged.

Cloud Billing account Google payments profile
A Cloud Billing account:
  • Is a cloud-level resource managed in the Google Cloud console.
  • Is connected to a Google payments profile, which includes a payment instrument, defining how you pay for your charges.
  • Tracks all of the costs (charges and usage credits) incurred by your Google Cloud usage in all projects linked to the Cloud Billing account.
  • Results in a single invoice per Cloud Billing account.
  • Operates in a single currency.
  • Defines who pays for a given set of resources.
  • Has billing-specific roles and permissions to control access to billing-related functions (established by IAM roles).
A Google payments profile:
  • Is a Google-level resource managed at payments.google.com.
  • Connects to ALL of your Google services (such as Google Ads, Google Cloud, and Fi phone service).
  • Processes payments for ALL Google services (not just Google Cloud).
  • Stores information like name, address, and tax ID (when required legally) of who is responsible for the profile.
  • Stores your various payment instruments (credit cards, debit cards, bank accounts, and other payment methods you've used to buy through Google in the past).
  • Functions as a document center, where you can view invoices, payment history, and other important documents.
  • Controls who can view and receive invoices for your various Cloud Billing accounts and products.
  • Has Google payments-specific users and permissions to control access to payments-related functions.

Illustrates how projects relate to a Cloud Billing account
         and to your Google payments profile. One side shows your
         Google Cloud-level resources (Cloud Billing account
         and its associated projects) and the other side, divided by a vertical
         dotted line, shows your Google-level resource (a Google payments
         profile). Your projects' usage costs are tracked in your
         Cloud Billing account. The linked Google payments profile
         manages all payments-related information, including invoices and
         statements, and the payment instruments used to pay your bill.

Cloud Billing account types

There are two types of Cloud Billing accounts:

  • Self-serve (or Online) account

    • Payment instrument is a credit or debit card or ACH direct debit, depending on availability in each country or region.
    • Costs are charged automatically to the payment instrument connected to Cloud Billing account.
    • You can sign up for self-serve accounts online.
    • The documents generated for self-serve accounts include statements, payment receipts, and tax invoices, and are accessible in the Google Cloud console.
  • Invoiced (or Offline) account

    • Payment instrument can be check or wire transfer.
    • Invoices are sent by mail or electronically.
    • Invoices are also accessible in the Google Cloud console, as are payment receipts.
    • You must be eligible for invoiced billing. Learn more about invoiced billing eligibility.

Google payments profile types

When you create your Google payments profile, you'll be asked to specify the profile type. This information must be accurate for tax and identity verification. After you create your payments profile, this setting can't be changed. When you set up your Google payments profile, make sure to choose the type that best fits how you plan to use your profile.

There are two types of Google payments profiles:

  • Individual

    • You're using your account for your own personal payments.
    • If you register your payments profile as an individual, then only you can manage the profile. You won't be able to add or remove users, or change permissions on the profile.
  • Business

    • You're paying on behalf of a business, organization, partnership, or educational institution.
    • You use Google payments center to pay for Play apps and games, and Google services like Google Ads, Google Cloud, and Fi phone service.
    • A business profile lets you add other users to the Google payments profile you manage, so that more than one person can access or manage a payments profile.
    • All users added to a business profile can see the payment information on that profile.

Charging cycle

The charging cycle on your Cloud Billing account determines how and when you pay for your Google Cloud services and your use of Google Maps Platform APIs.

For self-serve Cloud Billing accounts, your Google Cloud costs are charged automatically in one of two ways:

  • Monthly billing: Costs are charged on a regular monthly cycle.
  • Threshold billing: Costs are charged when your account has accrued a specific amount.

For self-serve Cloud Billing accounts, your charging cycle is automatically assigned when you create the account. You don't get to choose your charging cycle and you can't change the charging cycle.

For invoiced Cloud Billing accounts, you typically receive one invoice per month and the amount of time you have to pay your invoice (your payment terms) is determined by the agreement you made with Google.

Billing contacts

A Cloud Billing account includes one or more contacts that are defined on the Google payments profile that is connected to the Cloud Billing account. These contacts are people who are designated to receive billing information specific to the payment instrument on file (for example, when a credit card needs to be updated). To access and manage this list of contacts, you can use the Google payments center or you can use the Google Cloud console.

Subaccounts

Subaccounts are intended for resellers. If you are a reseller, you can use subaccounts to represent your customers' charges for the purpose of chargebacks.

Cloud Billing subaccounts allow you to group charges from projects together on a separate section of your invoice. A billing subaccount is a Cloud Billing account that is owned by a reseller's parent Cloud Billing account. The usage charges for all billing subacccounts are paid for by the reseller's parent Cloud Billing account. Note that the parent Cloud Billing account must be on invoiced billing.

A subaccount behaves like a Cloud Billing account in most ways: it can have projects linked to it, Cloud Billing data exports can be configured on it, and it can have IAM roles defined on it. Any charges made to projects linked to the subaccount are grouped and subtotalled on the invoice, and the effect on resource management is that access control policy can be entirely segregated on the subaccount to allow for customer separation and management.

Describes how projects relate to Cloud Billing accounts,
         Cloud Billing subaccounts, and your Google payments
         profile. One side shows your Google Cloud-level resources
         (Cloud Billing account, subaccounts, and associated projects)
         and the other side, divided by a vertical dotted line, shows your
         Google-level resource (a Google payments profile). Project usage
         costs are grouped and subtotalled by the associated
         Cloud Billing subaccounts. Subaccounts are paid
         for by the reseller's parent Cloud Billing account, which is
         linked the reseller's Google payments profile.

The Cloud Billing Account API lets you create and manage subaccounts. Use the API to connect to your existing systems and provision new customers or chargeback groups programmatically.

About resource management for billing

You can configure billing on Google Cloud in a variety of ways to meet different needs. This section introduces the core concepts for your organization and for billing, and discusses how to use them effectively.

For information on organizing your resources to effectively monitor your costs, see the Guide to Cloud Billing Resource Organization & Access Management.

About resources

In the context of Google Cloud, a resource can refer to service-level resources that are used to process your workloads, such as virtual machines and databases, or to account-level resources that sit above the services, such as projects, folders, and the organization.

Resource management

Resource management focuses on how you should configure and grant access to the various cloud resources for your company/team, specifically the setup and organization of the account-level resources that sit above the service-level resources. Account-level resources are the resources involved in setting up and administering your Google Cloud account.

Resource hierarchy

Google Cloud resources are organized hierarchically. This hierarchy lets you map your organization's operational structure to Google Cloud, and to manage access control and permissions for groups of related resources. The resource hierarchy provides logical attach points for access management policies (Identity and Access Management) and Organization policies.

Both IAM and Organization policies are inherited through the hierarchy, and the effective policy at each node of the hierarchy is the result of policies directly applied at the node and policies inherited from its ancestors.

The following diagram shows an example resource hierarchy illustrating the core account-level resources involved in administering your Google Cloud account.

An example resource hierarchy illustrating the core account-level
         resources involved in administering your Google Cloud account and
         how they relate to your Cloud Billing account and
         Google payments profile.

Domain

  • Your company Domain is the primary identity of your organization and establishes your company's identity with Google services, including Google Cloud.
  • You use the Domain to manage the users in your organization.
    • At the domain level, you define which users should be associated with your organization when using Google Cloud.
    • Domain is also where you can universally administer policy for your users and devices (for example, enable 2-step verification or reset passwords for any users in your organization).
  • The Domain is linked to either a Google Workspace or Cloud Identity account.
  • The Google Workspace or Cloud Identity account is associated with exactly one Organization.
  • You manage the domain-level functionality using the Google Admin Console (admin.google.com).

For more information on the hierarchy of resources, see the Resource Manager documentation.

Organization

  • An organization is the root node of the Google Cloud hierarchy of resources.
  • All Google Cloud resources that belong to an organization are grouped under the organization node, allowing you to define settings, permissions, and policies for all projects, folders, resources, and Cloud Billing accounts it parents.
  • An organization is associated with exactly one Domain (established with either a Google Workspace or Cloud Identity account), and is created automatically when you set up your Domain in Google Cloud.
  • Using an organization, you can centrally manage your Google Cloud resources and your users' access to those resources. This includes:
    • Proactive management: reorganize resources as needed (for example, restructuring or spinning up a new division may require new projects and folders).
    • Reactive management: an organization resource provides a safety net to regain access to lost resources (for example, if one of your team members loses their access or leaves the company).
  • The various roles and resources that are related to Google Cloud (including the organization, projects, folders, resources, and Cloud Billing accounts) are managed within the Google Cloud console.

For more information on organizations, see the following documentation:

Folders

  • Folders are a grouping mechanism and can contain projects, other folders, or a combination of both.
  • To use folders, you must have an organization node.
  • Folders and projects are all mapped under the organization node.
  • Folders can be used to group resources that share common IAM policies.
  • While a folder can contain multiple folders or resources, a given folder or resource can have exactly one parent.

For more details about using folders, see Creating and managing folders.

Projects

  • All service-level resources are parented by projects, the base-level organizing entity in Google Cloud.
  • Projects are required to use service-level resources (such as Compute Engine virtual machines, Pub/Sub topics, and Cloud Storage buckets).
  • You can use projects to represent logical projects, teams, environments, or other collections that map to a business function or structure.
  • Projects form the basis for enabling services, APIs, and IAM permissions.
  • Any given resource can only exist in one project.

For more details about projects, see the following documentation:

Resources

  • Google Cloud service-level resources are the fundamental components that make up all Google Cloud services, such as Compute Engine virtual machines, Pub/Sub topics, and Cloud Storage buckets.
  • For billing and access control purposes, resources exist at the lowest level of a hierarchy that also includes projects and an organization.

Labels

  • Labels help you categorize your Google Cloud resources (such as Compute Engine instances).
  • A label is a key-value pair.
  • You can attach labels to each resource, then filter the resources based on their labels.
  • Labels are great for cost tracking at a granular level. Information about labels is forwarded to the billing system, so you can analyze your charges by label.

For more details about using labels, see Creating and managing labels.

Relationships between resources, Cloud Billing accounts, and Google payments profiles

Two types of relationships govern the interactions between organizations, Cloud Billing accounts, and projects: ownership and payment linkage.

  • Ownership refers to IAM permission inheritance.
  • Payment linkages define which Cloud Billing account pays for a given project.

The following diagram shows the relationship of ownership and payment linkages for a sample organization.

Describes how projects relate to your Cloud Billing account,
         the organization, and your Google payments profile. One side shows
         your Google Cloud-level resources (organization,
         Cloud Billing account and associated projects) and the other
         side, divided by a vertical dotted line, shows your Google-level
         resource (a Google payments profile). Your projects are paid for by
         your Cloud Billing account, which is linked to a
         Google payments profile. The organization controls ownership of the
         Cloud Billing account using IAM.

In the diagram, the organization has ownership over Projects 1, 2, and 3, meaning that it is the IAM permissions parent of the three projects.

The Cloud Billing account is linked to Projects 1, 2, and 3, meaning that it pays for costs incurred by the three projects.

The Cloud Billing account is also linked to a Google payments profile, which stores information like name, address, and payment methods.

In this example, any users who are granted IAM billing roles on the organization also have those roles on the Cloud Billing account or the projects.

For information on granting IAM billing roles, see Overview of Cloud Billing access control.

Try it for yourself

If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.

Get started for free