Applying a Google Cloud IAM Role to a Cloud Access Role at the OU Level

Last updated: October 22, 2026

To apply a Google Cloud IAM role to a cloud access role at the OU level:

  1. In the left navigation menu, click OUs > All OUs.

  2. Click the name of the OU where you will apply the role definition.

  3. Click the Identity tab.

  4. Click the Cloud Access Roles subtab.

  5. Click the Add button on the right side of the interface if you are creating a new cloud access role, or click the ellipsis menu on an existing cloud access role and select Edit to add it there.

  6. Select the User Cloud Access Role type if prompted, fill out any other necessary fields, and click Continue. Then select Google Cloud IAM Roles from the dropdown in the Google Cloud Accounts and Settings section.

  7. Click Update if you are editing a cloud access role, or Create Cloud Access Role if you are creating one.

mceclip0.png

Your Google Cloud IAM roles will apply to any Google Cloud project on child Kion projects when they are accessed via those roles.