Manage your Google Cloud resources

This page explains how to view and manage your Google Cloud resources, grant Identity and Access Management (IAM) roles at the organization level, and manage organization resource billing accounts using the Google Cloud console.

Before you begin

  1. You'll need an organization resource to complete these exercises.

    An organization resource is available for Google Workspace and Cloud Identity customers:

    Once you have created your Google Workspace or Cloud Identity account and associated it with a domain, your organization resource will be automatically created for you. The resource will be provisioned at different times depending on your account status:

    • If you are new to Google Cloud and have not created a project yet, the organization resource will be created for you when you log in to the Google Cloud console and accept the terms and conditions.

    • If you are an existing Google Cloud user, the organization resource will be created for you when you create a new project or billing account. Any projects you created previously will be listed under "No organization", and this is normal. The organization resource will appear and the new project you created will be linked to it automatically.

      You will need to move any projects you created under "No organization" into your new organization resource. For instructions on how to move your projects, see Migrating projects into an organization resource.

    The organization resource that is created will be linked to your Google Workspace or Cloud Identity account with the project or billing account you created set as a child resource. All projects and billing accounts created under your Google Workspace or Cloud Identity domain will be children of this organization resource.

    Each Google Workspace or Cloud Identity account is associated with exactly one organization resource. An organization resource is associated with exactly one domain, which is set when the organization resource is created.

  2. You'll also need to be an Organization Administrator of the organization resource. If you're the Super Admin of your Google Workspace domain account, you can add yourself and others as the Organization Administrator of the corresponding organization resource. For instructions on adding Organization Administrators, see Adding an organization administrator.

View your resources

To view your Google Cloud resources, follow the steps below:

  1. Go to the Google Cloud console Manage resources page.
    Go to Manage Resources
  2. On the dropdown at the top of the page, select the organization resource for which you want to manage resources.
  3. All Projects and Folders in the organization resource are listed on the page.

Create a Project resource

To create a new project, do the following:

  1. Go to the Manage resources page in the Google Cloud console.

    Go to Manage Resources

    The remaining steps appear in the Google Cloud console.

  2. On the Select organization drop-down list at the top of the page, select the organization resource in which you want to create a project. If you are a free trial user, skip this step, as this list does not appear.
  3. Click Create Project.
  4. In the New Project window that appears, enter a project name and select a billing account as applicable. A project name can contain only letters, numbers, single quotes, hyphens, spaces, or exclamation points, and must be between 4 and 30 characters.
  5. Enter the parent organization or folder resource in the Location box. That resource will be the hierarchical parent of the new project. If No organization is an option, you can select it to create your new project as the top level of its own resource hierarchy.
  6. When you're finished entering new project details, click Create.

Once you have created your first Project, your organization resource will be provisioned automatically.

Create a Folder resource

Once you have an organization resource, you can create Folder resources and begin to organize your resource hierarchy. To create a Folder in your organization resource, follow the steps below:

  1. Go to the Google Cloud console Manage resources page.
    Go to Manage Resources
  2. On the dropdown at the top of the page, select the organization resource for which you want to create a Folder resource.
  3. Click Create Folder.
  4. In the Create Folder window that appears, enter a Folder name.
  5. If you want to create the Folder resource inside a Folder that already exists, enter the parent Folder name in the Destination box.
  6. When you're finished entering new Folder details, click Create.

Grant IAM roles at the organization level

To grant organization-level roles, follow the steps below:

  1. Go to the Google Cloud console IAM & admin page:
    Go to IAM & Admin

  2. Click Select, then use the drop-down to select the organization resource for which you want to manage IAM permissions.

    1. In the list of resources that appears, click the name of the organization resource.
    2. The IAM page that appears shows the following details:
      • The Principals column shows the accounts that have roles in the organization resource, including your account and domain.
      • The Role(s) column shows the roles that each principal has.
        • Next to your account, you should see Organization Administrator under Role(s).
        • Next to the domain account, you should see Project Creator under Roles(s).
        • If you see Multiple under Role(s), the account has more than one role. Click the drop-down to see what roles a principal has.
    3. To grant roles to an existing principal, click the drop-down under Role(s) and then select each role you want the principal to have.
      1. When you're finished selecting roles, click Save.
    4. To add a new principal, click Add at the top of the page. In the Add principals dialog that appears:
      1. Enter an email address in the Principals box.
      2. Under Roles, select each role you want the principal to have.
      3. When you're finished selecting roles, click Add.

The principals you added now have the organization-level permissions you selected.

Create a billing account

  1. Go to the Google Cloud console Billing page:
    GO TO THE BILLING PAGE
  2. In the drop-down at the top of the page, select the organization resource for which you want to add a billing account.
  3. Click Create account.
  4. On the Create a new billing account window that appears, enter the appropriate details, including a billing account name and your billing information.
    • The options you see depend on the country of your billing address.
    • For United States accounts, you can't change tax status after you create the billing account.
  5. When you're finished entering details, click Submit and enable billing.

You've now created a new billing account for your organization resource.

Migrate existing billing accounts

If you are a Google Workspace or Cloud Identity customer with existing Cloud Billing accounts, you can migrate them to your organization resource. Migrating a Cloud Billing account into an organization resource doesn't affect project services.

You must have these roles to migrate billing accounts:

  • You must be a Billing Account Administrator for the Cloud Billing account that you want to migrate.
  • You must be a Billing Account Creator on the organization resource to which you want to migrate your Cloud Billing account.
  • If you want to migrate a Cloud Billing account from an existing organization resource, you must be a Billing Account Administrator for the organization resource that you are migrating the Cloud Billing account from.

To learn about granting these roles, see the Overview of Cloud Billing access control.

To migrate your existing billing accounts into an organization resource, follow the steps below:

  1. Go to the Google Cloud console Billing page:
    Go to the Billing page
  2. From the Select an organization menu, select an organization resource to see the Cloud Billing accounts associated with it, or select No organization to see billing accounts that aren't associated with an organization resource.
  3. Under Billing account name, click the name of the Cloud Billing account that you want to migrate. The billing account overview page opens.
  4. In the Billing navigation menu, click Account management.
  5. At the top of the Account management page, click Change Organization, then select the organization resource to which you want to migrate the Cloud Billing account.

View billing accounts under the organization resource

To view billing accounts under an organization resource, follow the steps below:

  1. Go to the Google Cloud console Billing page:
    GO TO THE BILLING PAGE
  2. In the drop-down at the top of the page, select the organization resource for which you want to view billing accounts.

All billing accounts for the organization resource are listed on the page.

Clean up

To delete the Project you just created for this quickstart:

  1. Go to the Google Cloud console Manage resources page.

    Go to Manage Resources

    1. In the drop-down at the top of the page, select the organization resource in which you want to delete Project resources.
    2. In the list of Project resources that appears, select the Project that you want to delete, then click Delete.
    3. On the Shut down project dialog that appears, enter the Project ID, then click Shut down.

The Project resources you selected are deleted and all billing and traffic serving stops.

The organization resource is bound to your Google Workspace or Cloud Identity account, and deleting it is potentially a very damaging action that might be impossible to fully reverse. For more information, see Deleting an organization resource.

What's next

Try it for yourself

If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.

Get started for free