"You do not have permission to enable Compute Engine" from GCloud
I created a new project for the user and gave them a role Compute Instance Admin
. However, when they first load the project, they get the error "
You do not have permission to enable Compute Engine.
As the owner, I need to visit the Compute page to initialize the project. At this point, users will be able to access Google Compute.
Is there a way to automate enabling the Compute Engine for a project? Or, is there a role that I can add for this user?
source to share
Is there a way to automate enabling the Compute Engine for a project?
If Cloud SDK is installed ,
$ gcloud service-management enable --project foo compute-component.googleapis.com
must do the trick. Otherwise, you can call Google Service Management using some other method.
Or, is there a role that I can add for this user?
From the API docs :
Authorization requires the following Google IAM permissions for the specified resource
service_name
:servicemanagement.services.bind
Offline, I don't know which roles have this permission.
source to share
Enabling the API requires more responsibility. compute.instanceAdmin.v1
the role prevents users from enabling the API.
If you are the owner and enabled GCE API
, it may take a few minutes before users can access GCE
, as some resources need to be configured in the project, such as defaults, networks, firewalls, and routes.
To enable the API in a project, the minimum required role is the project editor.
source to share