简体   繁体   English

在 GCP 文件夹中创建项目需要哪些权限?

[英]Which permissions do I need to create projects in GCP folders?

I have a Google Cloud organisation set up.我设置了一个 Google Cloud 组织。 In it I have 5 folders, within each of them I have some sub-folders and some projects.在其中我有 5 个文件夹,每个文件夹中都有一些子文件夹和一些项目。

When I try to create another project at either the org level or within one of the top-level projects, I see a yellow exclamation mark sign which tells me "You do not have permission to create projects in this location".当我尝试在组织级别或顶级项目之一中创建另一个项目时,我看到一个黄色的感叹号,告诉我“您无权在此位置创建项目”。 However, I can create projects at the sub-folder level.但是,我可以在子文件夹级别创建项目。

I created all the folders and subfolders, and I have the following permissions:我创建了所有文件夹和子文件夹,并且拥有以下权限:

  • Organisation Admin组织管理员
  • Project Owner项目拥有者
  • Folder Admin文件夹管理员
  • Project Creator项目创建者
  • Project Mover项目推动者

Which other permissions do I need?我还需要哪些其他权限?

The error looks like this:错误如下所示:

在此处输入图像描述

I see that you have the correct permissions, but the only reasonable way I see you getting this error is if you have the following permissions at organizational level:我看到您拥有正确的权限,但我看到您收到此错误的唯一合理方式是您是否在组织级别拥有以下权限:

  • Organization Admin组织管理员
  • Project Owner项目拥有者
  • Folder Admin文件夹管理员
  • Project Mover项目推动者

and the

  • Project Creator项目创建者

was added at folder level for在文件夹级别添加了

  • subfolder_1子文件夹_1
  • subfolder_2子文件夹_2
  • subfolder_3子文件夹_3

TLDR TLDR

You need the permission Project Creator at the organisation level您需要组织级别Project Creator权限


在此处输入图像描述

LONG ANSWER长答案

Apparently, having "admin" permissions doesnt suffice if you dont have the Project Creator permission.显然,如果您没有Project Creator权限,那么拥有“管理员”权限是不够的。

As admin, I had the following permissions, but I was still unable to create the a project because I didnt have Project Creator permission:作为管理员,我有以下权限,但我仍然无法创建项目,因为我没有Project Creator权限:

Access Approval Approver
Access Context Manager Admin
Actions Admin
Recommendations AI Viewer
Access Transparency Admin
Bigtable Administrator
Billing Account Administrator
Project Billing Manager
Cloud Asset Owner
Compute Admin
Compute Network Admin
Compute Organisation Security Policy User
Compute Organisation Resource Admin
Organisation Role Administrator
Notebooks Admin
Owner
Folder Admin
Folder Creator
Folder IAM Admin
Folder Mover
Project IAM Admin
Service Broker Admin
Storage Admin

Would love to meet the gentleman at Google who came up with this idea.很想见到提出这个想法的谷歌先生。 The Owner permission's description reads as Full access to all resources. Owner权限的描述为Full access to all resources. (I am yet to see a description so unprofessionally misleading.) (我还没有看到如此不专业的误导性描述。)

在此处输入图像描述

暂无
暂无

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

相关问题 我应该如何创建服务帐户以使用 Google KMS 在 GCP 项目之间访问机密? - How should I create service accounts for accessing secrets between GCP projects with Google KMS? 在 GCP 中的组织级别创建服务帐户并分配权限/角色 - create service account and assign permissions/roles at the organization level in GCP 如何在谷歌云平台(GCP)中创建组织下的文件夹? - How to create folders under the organization in Google Cloud Platform (GCP)? 如何使用 gcloud sdk 创建没有 default.network 的 gcp 项目 - how to create gcp projects without default network using gcloud sdk 如何授予在 GCP 上随机创建服务帐户的权限? - How to granting permissions to randomly create service account on GCP? GCP Pubsub Bigquery 订阅 - 由于缺少权限而无法创建 - GCP Pubsub Bigquery Subscriptions - can't create due to missing permissions terraform 在尝试创建负载均衡器时为 GCP 返回“invalid_grant”,我无法以所有者身份查看或编辑 SA 权限 - terraform returns 'invalid_grant' for GCP when attempting to create load balancer and I cannot view or edit SA permissions as owner 我是否需要 Provate VPC 以允许从另一个 GCP 项目访问云 SQL? - Do I need a Provate VPC to Allow Cloud SQL Access from another GCP project? GCP /dev/sdb1 /home 已满但我没有项目 - GCP /dev/sdb1 /home is full but I have no projects 使用 Terraform 监控 GCP 项目 - Monitoring GCP Projects with Terraform
 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM