Assign a role

Assign a role to a user, group, or service account to grant the permissions that role includes, either at system scope or within a specific project. The Assignments tab displays all role assignments with columns: Name, Type (user, group, or service account), and Scope (system or project name).

Before you begin

  • You have the role-assignment:assign permission. The admin and project-admin roles include this permission.

Procedure

  1. Navigate to Access Management > Assignments tab.
  2. Select Add assignment.
  3. Select the Principal type: User, Group, or Service Account.
  4. Select the Scope: System or Project.
  5. If the scope is Project, select the target project.
  6. Select the user, group, or service account.
    Note
    When you select Service Account as the principal type, the selection field displays only service accounts, not regular users.
  7. Select a Role from the role list.
  8. Select Add assignment.

Results

For project-scoped roles, you can also assign them from the project detail page. Navigate to Access Management > Projects, select the project name, open the Permissions tab, and select Assign role.