Quickstart using organizations
This page explains how to view and manage your Google Cloud resources, grant Identity and Access Management (IAM) roles at the Organization level, and manage Organization billing accounts using the Google Cloud Console.
Before you begin
You'll need an Organization resource to complete these exercises.
An Organization resource is available for Google Workspace and Cloud Identity customers:
Once you have created your Google Workspace or Cloud Identity account and associated it with a domain, your organization resource will be automatically created for you. The resource will be provisioned at different times depending on your account status:
- If you are new to Google Cloud and have not created a project yet, the organization resource will be created for you when you log in to the Google Cloud console and accept the terms and conditions.
If you are an existing Google Cloud user, the organization resource will be created for you when you create a new project or billing account. Any projects you created previously will be listed under "No organization", and this is normal. The organization resource will appear and the new project you created will be linked to it automatically.
You will need to move any projects you created under "No organization" into your new organization resource. For instructions on how to move your projects, see Migrating projects into an organization.
The organization resource that is created will be linked to your Google Workspace or Cloud Identity account with the project or billing account you created set as a child resource. All projects and billing accounts created under your Google Workspace or Cloud Identity domain will be children of this Organization.
- For information about how to migrate pre-existing projects, see Migrating existing projects.
Each Google Workspace or Cloud Identity account is associated with exactly one Organization. An Organization is associated with exactly one domain, which is set when the Organization resource is created.
You'll also need to be an Organization Admin of the Organization resource. If you're the Super Admin of your Google Workspace domain account, you can add yourself and others as the Organization Admin of the corresponding Organization. For instructions on adding Organization Admins, see Adding an organization admin.
View your resources
To view your Google Cloud resources, follow the steps below:
- Go to the Cloud Console
Go to Manage Resources
- On the dropdown at the top of the page, select the Organization for which you want to manage resources.
- All Projects and Folders in the Organization are listed on the page.
Create a Project resource
To create a Project resource, follow the steps below:
Go to the Manage resources page in the Cloud Console.
Go to the Manage Resources page
- On the Select organization drop-down list at the top of the page, select the organization in which you want to create a project. If you are a free trial user, skip this step, as this list does not appear.
- Click Create Project.
- In the New Project window that appears, enter a project name and select a billing account as applicable. A project name can contain only letters, numbers, single quotes, hyphens, spaces, or exclamation points, and must be between 4 and 30 characters.
- Enter the parent organization or folder in the Location box. That resource will be the hierarchical parent of the new project.
- When you're finished entering new project details, click Create.
Once you have created your first Project, your Organization resource will be provisioned automatically.
Create a Folder resource
Once you have an Organization resource, you can create Folder resources and begin to organize your resource hierarchy. To create a Folder in your Organization, follow the steps below:
- Go to the
Go to Manage Resources
- On the dropdown at the top of the page, select the Organization for which you want to create a Folder resource.
- Click Create Folder.
- In the Create Folder window that appears, enter a Folder name.
- If you want to create the Folder resource inside a Folder that already exists, enter the parent Folder name in the Destination box.
- When you're finished entering new Folder details, click Create.
Grant IAM roles at the Organization level
To grant Organization-level roles, follow the steps below:
Click Select, then use the drop-down to select the Organization for which you want to manage IAM permissions.
In the list of resources that appears, click the name of the Organization.
The IAM page that appears shows the following details:
- The Principals column shows the accounts that have roles in the Organization, including your account and domain.
- The Role(s) column shows the roles that each principal has.
- Next to your account, you should see Organization Administrator under Role(s).
- Next to the domain account, you should see Project Creator under Roles(s).
- If you see Multiple under Role(s), the account has more than one role. Click the drop-down to see what roles a principal has.
To grant roles to an existing principal, click the drop-down under Role(s) and then select each role you want the principal to have.
- When you're finished selecting roles, click Save.
To add a new principal, click Add at the top of the page. In the Add principals dialog that appears:
- Enter an email address in the Principals box.
- Under Roles, select each role you want the principal to have.
- When you're finished selecting roles, click Add.
The principals you added now have the Organization-level permissions you selected.
Create a billing account
- Go to the Cloud Console Billing page:
GO TO THE BILLING PAGE
- In the drop-down at the top of the page, select the Organization for which you want to add a billing account.
- Click Create account.
- On the Create a new billing account window that appears, enter the
appropriate details, including a billing account name and your billing
- The options you see depend on the country of your billing address.
- For United States accounts, you can't change tax status after you create the billing account.
- When you're finished entering details, click Submit and enable billing.
You've now created a new billing account for your Organization.
Migrate existing billing accounts
If you are a Google Workspace or Cloud Identity customer with existing Cloud Billing accounts, you can migrate them to your organization. Migrating a Cloud Billing account into an Organization doesn't affect project services.
You must have these roles to migrate billing accounts:
- You must be a Billing Account Administrator for the Cloud Billing account that you want to migrate.
- You must be a Billing Account Creator on the organization to which you want to migrate your Cloud Billing account.
- If you want to migrate a Cloud Billing account from an existing organization, you must be a Billing Account Administrator for the organization that you are migrating the Cloud Billing account from.
To learn about granting these roles, see the Overview of Cloud Billing access control.
To migrate your existing billing accounts into an organization, follow the steps below:
Go to the Cloud Console Billing page:
Go to the Billing page
- From the Select an organization menu, select an organization to see the Cloud Billing accounts associated with it, or select No organization to see billing accounts that aren't associated with an organization.
- Under Billing account name, click the name of the Cloud Billing account that you want to migrate. The billing account overview page opens.
- In the Billing navigation menu, click Account management.
- At the top of the Account management page, click Change Organization, then select the organization to which you want to migrate the Cloud Billing account.
View billing accounts under the Organization
To view billing accounts under an Organization resource, follow the steps below:
- Go to the Cloud Console Billing page:
GO TO THE BILLING PAGE
- In the drop-down at the top of the page, select the organization for which you want to view billing accounts.
All billing accounts for the Organization are listed on the page.
To delete the Project you just created for this quickstart:
Go to the Cloud Console Manage resources page.
In the drop-down at the top of the page, select the Organization in which you want to delete Project resources.
In the list of Project resources that appears, select the Project that you want to delete, then click Delete.
On the Shut down project dialog that appears, enter the Project ID, then click Shut down.
The Project resources you selected are deleted and all billing and traffic serving stops.
The Organization resource is bound to your Google Workspace or Cloud Identity account, and deleting it is potentially a very damaging action that might be impossible to fully reverse. For more information, see Deleting an Organization resource.
Try it for yourself
If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.Get started for free