As an administrator you can grant users or groups eligible access to Google Cloud projects.
To grant eligible access, use the Cloud Console or gcloud
to create an IAM role binding for
a user or group, and make it eligible by adding a special IAM condition:
has({}.jitAccessConstraint)
You can create the IAM role binding for a specific project, or for an entire folder.
For example, the following gcloud
grants eligible access to a user:
gcloud projects add-iam-policy-binding PROJECT_ID \
--member user:USER \
--role ROLE \
--condition "title=Eligible access,expression=has({}.jitAccessConstraint)"