IssueTracker

This will create a public issue which anybody can view and comment on.

Please provide as much information as possible. At least, this should include a description of your issue and steps to reproduce the problem. If possible please provide a summary of what steps or workarounds you have already tried, and any docs or articles you found (un)helpful.

Problem you have encountered:

Ideally, we would be able to hand out an IAM role (custom), but restrict the resource type to a specific VPC or Cloud Router so the Service Account (or user) would only have permissions on that specific resource.

We intend to give others access to update a specific router tied to a Shared VPC in a network project on which we do not want them to have full admin on all routers/vpcs in the project, but should have access to update the routes to a specific router.

What you expected to happen:

I'd like it to work like the examples here:

https://cloud.google.com/iam/docs/configuring-resource-based-access

Something like resource.type = compute.googleapis.com/Router (or whatever the exact resource is) && resource.name (or ID) - and specify the exact router

Other information (workarounds you have tried, documentation consulted, etc):

It is not listed as an available resource type here:

https://cloud.google.com/iam/docs/resource-types-with-conditional-roles

We would like to have routers and/or VPCs added to the list of resources you can target with conditional IAM