IAM Members and Policies

Apart from roles and permissions, other IAM components are IAM members and policies.

You have seen the “can do what” part of the IAM definition; this lesson will focus on “who” and “how.”

IAM members

As per Google Cloud:

“A member can be a Google Account (for end-users), a service account (for apps and virtual machines), a Google group, or a Google Workspace or Cloud Identity domain that can access a resource. The identity of a member is an email address associated with a user, service account, or Google group; or a domain name associated with Google Workspace or Cloud Identity domain.”

To simplify, let’s look at the diagram below.