Single access control interface
IAM provides a simple and consistent access control interface for all Google Cloud services. Learn one access control interface and apply that knowledge to all Google Cloud resources.
Grant access to users at a resource level of granularity, rather than just project level. For example, you can create an IAM access control policy that grants the Subscriber role to a user for a particular Pub/Sub topic.
Automated access control recommendations
Remove unwanted access to Google Cloud resources with smart access control recommendations. Using Recommender, you can automatically detect overly permissive access and rightsize them based on similar users in the organization and their access patterns.
Control access to resources based on contextual attributes like device security status, IP address, resource type, and date/time.
Prior to IAM, you could only grant Owner, Editor, or Viewer roles to users. A wide range of services and resources now surface additional IAM roles out of the box. For example, the Pub/Sub service exposes Publisher and Subscriber roles in addition to the Owner, Editor, and Viewer roles.
Web, programmatic, and command-line access
Create and manage IAM policies using the Google Cloud Console, the IAM methods, and the gcloud command line tool.
Built-in audit trail
To ease compliance processes for your organization, a full audit trail is made available to admins without any additional effort.
Free of charge
IAM is offered at no additional charge for all Google Cloud customers. You will be charged only for use of other Google Cloud services. For information on the pricing of other Google Cloud services, see the Google Cloud Pricing Calculator.
"IAM will give Snapchat the ability to grant fine-grained access control to resources within a project. This allows us to compartmentalize access based on workgroups and to manage sensitive resources around individual access needs."
Subhash Sankuratripati, Security Engineer, Snapchat
IAM is available to you at no additional charge.