IssueTracker

Feature Request Title : Needs a built-in mechanism to directly determine the exact number of unsupported permissions for project scope, organization scope, or custom roles within the Editor role.

Resource accessed: Cloud IAM

Limitation: As per our investigation currently there is no automated API method or gcloud command available for these comparisons. GCP side For the Manual comparison only available reference document [1].

Feature Request Description : In this Feature Request customer wants following points Enhanced in Custom Role Management in GCP

1. Expanded Permission Limits for Custom Roles

   • Remove or significantly increase the current 3000 permission limit for custom roles
   • Allow creation of roles that modify existing roles (e.g., Editor) by removing specific permissions

2. Improved Custom Role Creation Methods

   • Enhance gcloud commands and Terraform to support custom role creation by specifying permissions to exclude
   • Implement a "subtractive" approach to role creation, starting from a base role and removing unwanted permissions

3. Comprehensive Permission Documentation

   • Develop a detailed manual explaining the operations possible with each permission
   • Provide clear, accessible documentation to aid in informed custom role creation and management

Reference Documents

[1] https://cloud.google.com/iam/docs/custom-roles-permissions-support