조직 리소스를 만들 때 도메인 내 모든 사용자에게 기본적으로 결제 계정 생성자 역할과 프로젝트 생성자 역할이 부여됩니다. 사용자는 이러한 기본 역할을 통해 Google Cloud 사용을 즉시 시작할 수 있지만, 이러한 역할은 조직 리소스의 평상시 운영에 적합하지는 않습니다.
이 페이지에서는 일반 작업을 위한 결제 계정 생성자 및 프로젝트 생성자를 지정하고 조직 리소스에 기본적으로 할당된 역할을 삭제하는 방법에 대해 설명합니다.
결제 계정 생성자 및 프로젝트 생성자 추가하기
기존 결제 계정을 조직 리소스로 마이그레이션하려면 사용자에게 결제 계정 생성자 IAM 역할이 있어야 합니다. 프로젝트 생성자 역할을 가진 사용자는 프로젝트 리소스를 만들고 관리할 수 있습니다. 결제 계정 생성자 및 프로젝트 생성자를 더 추가하려면 다음 단계를 따르세요.
콘솔
Google Cloud 콘솔을 사용하여 결제 계정 생성자 또는 프로젝트 생성자 역할을 부여하는 방법은 다음과 같습니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[],[],null,["# Managing default organization roles\n\nWhen an organization resource is created, all users in your domain are granted the **Billing Account Creator** and **Project Creator** roles by default. These default roles allow your users to start using Google Cloud immediately, but are not intended for use in regular operation of your organization resource.\n\n\u003cbr /\u003e\n\nThis page describes how to designate a **Billing Account Creator** and\n**Project Creator** for regular operations, and how to remove roles that were\nassigned by default to the organization resource.\n\nAdding a Billing Account Creator and Project Creator\n----------------------------------------------------\n\nTo migrate existing billing accounts into an organization resource, a user must have the\nBilling Account Creator IAM role. Users with the Project Creator\nrole are able to create and manage Project resources. To add additional Billing\nAccount Creators and Project Creators, follow these steps: \n\n### Console\n\nTo grant the Billing Account Creator or Project Creator role using\nGoogle Cloud console:\n\n1. Go to the **Manage resources** page in the Google Cloud console:\n\n [Open the Manage resources page](https://console.cloud.google.com/cloud-resource-manager)\n\n \u003cbr /\u003e\n\n2. On the **Organization** drop-down list, select your organization resource.\n\n3. Select the check box for the organization resource. If you do not have a\n Folder resource, the organization resource will not be visible. To\n continue, see the instructions for granting roles through the\n [IAM](/iam/docs/granting-changing-revoking-access#grant_access)\n page.\n\n4. On the right side **Info Panel** , under **Permissions**, enter the\n email address of the principal you want to add.\n\n5. In the **Select a role** drop-down, select\n **Billing \\\u003e Billing Account Creator** or **Resource Manager \\\u003e Project Creator**.\n\n6. Click **Add**. A dialog will appear to confirm the addition or update of\n the principal's new role.\n\nRemoving default roles from the organization resource\n-----------------------------------------------------\n\nAfter you designate your own Billing Account Creator and Project Creator roles,\nyou can remove these roles from the organization resource to restrict those\npermissions to specifically designated users. To remove roles from the\norganization resource, follow these steps: \n\n### Console\n\nTo remove the roles assigned to users by default using the Google Cloud console:\n\n1. Go to the **Manage resources** page in the Google Cloud console:\n\n [Open the Manage resources page](https://console.cloud.google.com/cloud-resource-manager)\n\n \u003cbr /\u003e\n\n2. Click the **Organization** drop-down list at the top of the page and then select\n your organization resource.\n\n3. Select the check box for the organization resource for which you want to\n change permissions. If you do not have a Folder resource, the\n organization resource will not be visible. To continue, see the\n instructions for revoking roles through the\n [IAM](/iam/docs/granting-changing-revoking-access#revoke_access)\n page.\n\n4. On the right side **Info Panel** , under **Permissions**, click to expand the role\n from which you want to remove users.\n\n5. Under the expanded role list, next to the principal you want to remove from\n the role, click remove.\n\n6. On the **Remove principal?** dialog that appears, click **Remove** to confirm removing the role from the specified principal.\n\n7. Repeat the above two steps for each role you want to remove."]]
