IssueTracker

Customer is interested in the addition of IAM resources into the IAM Conditions.

Problem you have encountered:
Currently there's no resource type supported to control the IAM permissions through conditions

What you expected to happen:
Find the IAM resources available to control the access to IAM for a user account based on the condition

-Go to the IAM page
-From the list of members, locate the desired member and click the edit button.
-From the Edit permissions panel, locate the desired role to configure a condition for.
-Then under Condition, click Add condition.
-In the condition builder look for the IAM resources to create a condition to allows a user to apply changes when the condition is met, for example:

"members": [
"user:iam_admin@domain.com"
],
"role": "roles/resourcemanager.projectIamAdmin",
"condition": {
"title": "Conditioned IAM admin",
"description": "",
"expression": "(resource.type == 'roles/resourcemanager.projectIamAdmin' &&
resource.member==('user:user_to_modify@domain.com'))"
}

Other information (workarounds you have tried, documentation consulted, etc):
[1] https://cloud.google.com/iam/docs/configuring-resource-based-access
[2] https://cloud.google.com/iam/docs/conditions-resource-attributes