Quickstart Using Organizations

This page explains how to view and manage your Google Cloud Platform (GCP) resources, grant Cloud Identity and Access Management (Cloud IAM) roles at the Organization level, and manage Organization billing accounts using the Google Cloud Platform Console.

Before you begin

  1. You'll need an Organization resource to complete these exercises.

    An Organization resource is available for G Suite and Cloud Identity customers:

    An Organization resource is automatically created the first time a user associated with a G Suite or Cloud Identity domain creates a project or billing account. The Organization will be linked to your account with the project or billing account set as a child resource. All projects and billing accounts created under your G Suite or Cloud Identity domain will be children of this Organization.

    Each G Suite or Cloud Identity account is associated with exactly one Organization. An Organization is associated with exactly one domain, which is set when the Organization resource is created.

  2. You'll also need to be an Organization Admin of the Organization resource. If you're the Super Admin of your G Suite domain account, you can add yourself and others as the Organization Admin of the corresponding Organization. For instructions on adding Organization Admins, see Adding an organization admin.

View your resources

To view your GCP resources, follow the steps below:

  1. Go to the GCP Console Manage resources page.
    GO TO THE MANAGE RESOURCES PAGE
  2. On the dropdown at the top of the page, select the Organization for which you want to manage resources.
  3. All Projects and Folders in the Organization are listed on the page.

Create a Project resource

To create a Project resource, follow the steps below:

  1. Go to the Manage resources page in the GCP Console.
    GO TO THE MANAGE RESOURCES PAGE
  2. On the Select organization drop-down list at the top of the page, select the organization in which you want to create a project. If you are a free trial user, skip this step, as this list does not appear.
  3. Click Create Project.
  4. In the New Project window that appears, enter a project name and select a billing account as applicable.
  5. If you want to add the project to a folder, enter the folder name in the Location box.
  6. When you're finished entering new project details, click Create.

Once you have created your first Project, your Organization resource will be provisioned automatically.

Create a Folder resource

Once you have an Organization resource, you can create Folder resources and begin to organize your resource hierarchy. To create a Folder in your Organization, follow the steps below:

  1. Go to the GCP Console Manage resources page.
    GO TO THE MANAGE RESOURCES PAGE
  2. On the dropdown at the top of the page, select the Organization for which you want to create a Folder resource.
  3. Click Create Folder.
  4. In the Create Folder window that appears, enter a Folder name.
  5. If you want to create the Folder resource inside a Folder that already exists, enter the parent Folder name in the Destination box.
  6. When you're finished entering new Folder details, click Create.

Grant Cloud IAM roles at the Organization level

To grant Organization-level roles, follow the steps below:

  1. Go to the GCP Console IAM & admin page:
    GO TO THE IAM & ADMIN PAGE

  2. Click Select, then use the drop-down to select the Organization for which you want to manage Cloud IAM permissions.

  3. In the list of resources that appears, click the name of the Organization.

  4. The IAM page that appears shows the following details:

    • The Members column shows the accounts that have roles in the Organization, including your account and domain.
    • The Role(s) column shows the roles that each member has.
      • Next to your account, you should see Organization Administrator under Role(s).
      • Next to the domain account, you should see Project Creator under Roles(s).
      • If you see Multiple under Role(s), the account has more than one role. Click the drop-down to see what roles a member has.
  5. To grant roles to an existing member, click the drop-down under Role(s) and then select each role you want the member to have.

    1. When you're finished selecting roles, click Save.
  6. To add a new member, click Add at the top of the page. In the Add members dialog that appears:

    1. Enter an email address in the Members box.
    2. Under Roles, select each role you want the member to have.
    3. When you're finished selecting roles, click Add.

The members you added now have the Organization-level permissions you selected.

Create a billing account

  1. Go to the GCP Console Billing page:
    GO TO THE BILLING PAGE
  2. In the drop-down at the top of the page, select the Organization for which you want to add a billing account.
  3. Click Create account.
  4. On the Create a new billing account window that appears, enter the appropriate details, including a billing account name and your billing information.
    • The options you see depend on the country of your billing address.
    • For United States accounts, you can't change tax status after you create the billing account.
  5. When you're finished entering details, click Submit and enable billing.

You've now created a new billing account for your Organization.

Migrate existing billing accounts

If you are a G Suite or Cloud Identity customer with existing billing accounts, you can migrate them to your organization. You must be a Billing Account Creator and a Billing Administrator on the organization to which you want to migrate your project to migrate billing accounts. To learn about granting these roles, see Managing Default Organization Roles. Migrating a billing account into an Organization doesn't impact project services.

To migrate your existing billing accounts into an organization, follow the steps below:

  1. Go to the GCP Console Billing page:
    GO TO THE BILLING PAGE
  2. In the drop-down at the top of the page, select No organization to see billing accounts that aren't associated with an organization.
  3. Under Billing account name, click the name of the billing account that you want to migrate. The billing account overview page will appear.
  4. Next to Billing account on the right, click Manage.
  5. On the account management page that appears, click Change Organization, and then select the organization to which you want to migrate the billing account.

View billing accounts under the Organization

To view billing accounts under an Organization resource, follow the steps below:

  1. Go to the GCP Console Billing page:
    GO TO THE BILLING PAGE
  2. In the drop-down at the top of the page, select the organization for which you want to view billing accounts.

All billing accounts for the Organization are listed on the page.

Clean up

You can delete a Project from an Organization but you cannot delete an Organization yourself. Similar to the process for creating an Organization, you must contact Google to delete an Organization.

To delete the Project you just created for this quickstart:

  1. Go to the GCP Console Manage resources page.
    GO TO THE MANAGE RESOURCES PAGE
  2. In the drop-down at the top of the page, select the Organization in which you want to delete Project resources.
  3. In the list of Project resources that appears, select the Project that you want to delete, then click Delete.
  4. On the Shut down project dialog that appears, enter the Project ID, then click Shut down.

The Project resources you selected will be deleted and all billing and traffic serving stops.

What's next

Bu sayfayı yararlı buldunuz mu? Lütfen görüşünüzü bildirin:

Şunun hakkında geri bildirim gönderin...

Resource Manager Documentation