Task 5: Set Up Role Based Access Control

Sign in to the Google Cloud Admin console using the URL https://admin.google.com/ac/groups. The Groups list view page is displayed.

On the Groups list view page, click Create group.

In Group information tab, enter the following details for the group your are creating. For each row in the table in this topic, you will need to create a group using the steps in this task. Follow the steps in the task for a single group to create that group, then repeat the steps for the additional groups listed in the table.

• Group name: Use the "Google Cloud Group name" values from the table in this topic. For example: odbg-adbs-db-administrators.
• Group email: You can use the "Google Cloud Group email" values in the table in this topic, or create your own values, as needed. For example: odbg-adbs-db-administrators@example.com
• Group Description: You can use the descriptions found in the "Purpose" column in the table in this topic. For example: "This group is for administrators who need to manage all Oracle Autonomous Database resources in Google Cloud."

Before entering information:

After entering information:

After entering these values, click NEXT.

In the Group settings tab, update the access settings based on your company's security best practices, then click CREATE GROUP.

Click Create another group to begin creating the next group in the table of groups in this topic.

Assign roles to the Google Cloud groups you have just created in IAM & Admin. Search "IAM & Admin" in the Google Cloud console and click on the search result to navigate to this service in the console.

In the IAM & Admin navigation menu, click IAM, and then select Grant access.

On the Grant access to dialog, assign roles to the groups created in steps 2 to 5 of this task.

Enter the following, then click SAVE and repeat this step until you have assigned roles to all the groups listed in the table at the beginning of this topic.

• Add principals: In the New principals field, enter the Google Cloud group email for the group you are assigning roles to. In the table at the beginning of this topic, you can find a suggested naming pattern for the group email names. For example: odbg-adbs-db-administrators@example.com
• Assign roles: in the Role field, select the Google Group Role Assignment listed in the table at the beginning of this topic that corresponds to the group email you entered in the New principals field. For example: "Oracle Database@Google Cloud Autonomous Database Admin"

Sign in to the Google Cloud Admin console using the URL https://admin.google.com/ac/groups. The Groups list view page is displayed.

On the Groups list view page, click Create group.

In Group information tab, enter the following details for the group your are creating. For each row in the table in this topic, you will need to create a group using the steps in this task. Follow the steps in the task for a single group to create that group, then repeat the steps for the additional groups listed in the table.

• Group name: Use the "Google Cloud Group name" values from the table in this topic. For example: odbg-exa-infra-administrators.
• Group email: You can use the "Google Cloud Group email" values in the table in this topic, or create your own values, as needed. For example: odbg-exa-infra-administrators@example.com
• Group Description: You can use the descriptions found in the "Purpose" column in the table in this topic. For example: "This group is for administrators who need to manage all Oracle Exadata Database Service resources in Google Cloud."

Before entering information:

After entering information:

After entering these values, click NEXT.

In the Group settings tab, update the access settings based on your company's security best practices, then click CREATE GROUP.

Click Create another group to begin creating the next group in the table of groups in this topic.

Assign roles to the Google Cloud groups you have just created in IAM & Admin. Search "IAM & Admin" in the Google Cloud console and click on the search result to navigate to this service in the console.

In the IAM & Admin navigation menu, click IAM, and then select Grant access.

On the Grant access to dialog, assign roles to the groups created in steps 2 to 5 of this task.

Enter the following, then click SAVE and repeat this step until you have assigned roles to all the groups listed in the table at the beginning of this topic.

• Add principals: In the New principals field, enter the Google Cloud group email for the group you are assigning roles to. In the table at the beginning of this topic, you can find a suggested naming pattern for the group email names. For example: odbg-adbs-db-administrators@example.com
• Assign roles: in the Role field, select the Google Group Role Assignment listed in the table at the beginning of this topic that corresponds to the group email you entered in the New principals field. For example: "Oracle Database@Google Cloud Autonomous Database Admin"