![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

# Access and resource management

Documentation and resources for organizing, analyzing, and managing access to your Google Cloud resources and services.

## Explore access and resource management

Read documentation and Cloud Architecture Center articles about access and resource management. [](https://docs.cloud.google.com/iam/docs/google-identities)

### [Identity management for Google Cloud](https://docs.cloud.google.com/iam/docs/google-identities)

Explore the methods you can use to configure identities for users and workloads on Google Cloud [](https://docs.cloud.google.com/iam/docs/overview)

### [IAM overview](https://docs.cloud.google.com/iam/docs/overview)

Learn about Google Cloud's Identity and Access Management system, which lets you control who can access your Google Cloud resources. [](https://docs.cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy)

### [Resource hierarchy](https://docs.cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy)

Learn about the resource hierarchy in Google Cloud and how you can use that hierarchy to organize your resources. [](https://docs.cloud.google.com/docs/enterprise/setup-checklist)

### [Google Cloud setup checklist](https://docs.cloud.google.com/docs/enterprise/setup-checklist)

Configure an initial foundation to support your Google Cloud workloads, including setting up your resource hierarchy and granting initial access. [](https://docs.cloud.google.com/architecture/identity)

### [Overview of planning identity and access management](https://docs.cloud.google.com/architecture/identity)

Plan your general practice of IAM.[](https://docs.cloud.google.com/architecture/identity) [](https://docs.cloud.google.com/architecture/patterns-practices-identity-access-governance-google-cloud)

### [Patterns and practices for identity and access governance](https://docs.cloud.google.com/architecture/patterns-practices-identity-access-governance-google-cloud)

Plan how to develop your approach for identity governance and access management for applications and workloads running on Google Cloud.[](https://docs.cloud.google.com/architecture/patterns-practices-identity-access-governance-google-cloud)

## Training, blog articles, and more

Go to training courses, blog articles, and other related resources. [](https://www.cloudskillsboost.google/paths/11)

### [Cloud engineer learning path](https://www.cloudskillsboost.google/paths/11)

Study planning, configuring, setting up, and deploying cloud solutions.[](https://www.cloudskillsboost.google/paths/11) [](https://www.cloudskillsboost.google/paths/11/course_templates/648)

### [Create and manage cloud resources](https://www.cloudskillsboost.google/paths/11/course_templates/648)

Study creating and managing Google Cloud resources.[](https://www.cloudskillsboost.google/paths/11/course_templates/648)

## Access and resource management products by use case

Expand sections or use the filter to find products and guides for typical use cases.

### Access management


Define who can access resources in your organization.

#### [Identity and Access Management (IAM) recommender](https://docs.cloud.google.com/policy-intelligence/docs/role-recommendations-overview)

Identify excess permissions using policy insights. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Certificate Authority Service](https://docs.cloud.google.com/certificate-authority-service/docs)

Simplify, automate, and customize the deployment, management, and security of private certificate authorities (CA). ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Identity and Access Management (IAM)](https://docs.cloud.google.com/iam/docs)

Establish fine-grained identity and access management for Google Cloud resources. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Policy Intelligence](https://docs.cloud.google.com/policy-intelligence/docs)

Control resources and manage access through policies to proactively improve your security configuration. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Access Context Manager](https://docs.cloud.google.com/access-context-manager/docs)

Allow organization administrators to define fine-grained, attribute-based access control for projects and resources in Google Cloud.

#### [Identity and access management planning](https://docs.cloud.google.com/architecture/identity)

Plan your design for granting the right individuals access to the right resources for the right reasons.[](https://docs.cloud.google.com/architecture/identity)

#### [Ensure access and identity](https://www.cloudskillsboost.google/course_templates/645)

Study fundamental features of cloud security related to access management and identity.[](https://www.cloudskillsboost.google/paths/11/course_templates/645) ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

#### [Cloud Identity](https://docs.cloud.google.com/identity/docs)

Manage user identities, devices, and applications from one console.

### Control and discoverability


Manage internal enterprise solutions and Google Cloud APIs.
![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

#### [Cloud API Registry](https://docs.cloud.google.com/api-registry/docs)

Discover, govern, use, and monitor Model Context Protocol (MCP) servers and tools. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

#### [Service Catalog](https://docs.cloud.google.com/service-catalog/docs)

Control internal enterprise solutions and make them easily discoverable. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

#### [Service Usage](https://docs.cloud.google.com/service-usage/docs)

List, enable, and disable APIs and services in your Google Cloud projects, and apply quota restrictions to services.

### Optimization and service health


Optimize your service usage, monitor application and resource health, and identify disruptive events.
![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/operations-color.svg)

#### [Personalized Service Health](https://docs.cloud.google.com/service-health/docs)

Gain visibility into disruptive events impacting Google Cloud products. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

#### [Cloud Hub](https://docs.cloud.google.com/hub/docs)

View centralized operations data and insights about the health of your Google Cloud applications and resources so that you can take action on issues, patterns, and trends. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

#### [Recommender](https://docs.cloud.google.com/recommender/docs)

Provides usage recommendations and insights for Cloud products and services to optimize usage for performance, security, cost, or manageability.

### Resource management


Expand this section to see relevant products and documentation.
![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

#### [Cloud APIs](https://docs.cloud.google.com/apis/docs/overview)

Manage Google Cloud resources programmatically. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Cloud Asset Inventory](https://docs.cloud.google.com/asset-inventory/docs)

Use inventory services based on a time series database. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

#### [Cloud Shell](https://docs.cloud.google.com/shell/docs)

Manage your Google Cloud resources using a command-line interface from any browser. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/developer-tools-color.svg)

#### [Config Connector](https://docs.cloud.google.com/config-connector/docs)

Manage Google Cloud resources, such as Spanner or Cloud Storage, through the Kubernetes Engine API.

#### [Organization Policy Service](https://docs.cloud.google.com/resource-manager/docs/organization-policy/overview)

Centralized and programmatic control over your organization's cloud resources. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Policy Intelligence](https://docs.cloud.google.com/policy-intelligence/docs)

Control resources and manage access through policies to proactively improve your security configuration. ![](https://docs.cloud.google.com/_static/clouddocs/images/icons/categories/security-and-identity-color.svg)

#### [Resource Manager](https://docs.cloud.google.com/resource-manager/docs)

View and manage your Google Cloud resources, grant Identity and Access Management (IAM) roles at the organization level, and manage organization resource billing accounts using the Google Cloud console.

### Related products, guides, and sites

#### [Authentication](https://docs.cloud.google.com/docs/authentication)

Explore methods to authenticate your applications to access Google APIs and services.

#### [Handling compromised Google Cloud credentials](https://docs.cloud.google.com/docs/security/compromised-credentials)

Monitor for credential compromise and take action to keep your data secure and protected from attackers.

#### [Data deletion on Google Cloud](https://docs.cloud.google.com/docs/security/deletion)

Review the secure process that occurs when you delete your customer data stored in Google Cloud.