Assigned
Status Update
No update yet.
Comments
po...@google.com
Hello,
Thank you for reaching out. I'm going to create an internal feature request. Please keep in mind that this feature request has to be analyzed and considered by the product team and I can't provide you ETA for it to be delivered. However, you can keep track of the status by following this thread.
Description
To my knowledge (and from Google Cloud support) there is not an option to show who have changed IAM on subaccounts.
How this might work:
Changes to the IAM (on either customer or partner side) is logged to providers organisation stackdriver logs
If applicable, reasons why alternative solutions are not sufficient:
We need to be able to verify what have been changed and by who.
Subaccount IAM policies can be done by both customers and provider and should be logged in the organisation where the subaccount is created.