Google today announced that its custom roles feature for its Cloud IAM (Identity and Access Management) is now available in production after a beta phase that began last October.
The new least-privilege feature basically allows organizations to carve out specific, custom access for users that ensures they only access and perform the functions they need for their jobs.
"IT security aims to ensure the right people have access to the right resources and use them in the right ways. Making sure those are the only things that can happen is the ‘principle of least privilege,’ a cornerstone of enterprise security policy," Google product manager Rohit Khare and engineering manager Pradeep Madhavarapu wrote in a post about the new offering.
While Google Cloud already provides predefined roles such as owner and cloud storage view, for example, the custom roles feature allows more specific and targeted user roles.