Orchestrates the lifecycle and management of IAM allow and deny policies across
IAM v1 (allow policies) and IAM v2 (deny policies).
Core Concepts & Paradigms
IAM operates across two policy paradigms:
IAM v1 (Allow Policies)
Grants roles to principals (users, service
accounts, groups, domains) on specific resources. Supports Resource Manager
resources (organizations, folders, projects) as well as individual resources
across supported Google Cloud services.
IAM v2 (Deny Policies)
Sets explicit organization-, folder-, or
project-level guardrails that prevent specified principals from using
designated permissions, regardless of any allow policies granted. Evaluated
before allow policies.
Show more
Installs
1.3K
Repository
google/skills
GitHub Stars
20.6K
First Seen
Sep 8, 2026
Security Audits
Gen Agent Trust Hub
Pass
Socket
Pass
Snyk
Pass