Levels

Organisation — top; tied to your Google Workspace / Cloud Identity domain
Folders — group projects (by environment, business unit)
Projects — workload boundary; resources live here
Resources — buckets, instances, etc.

IAM inheritance

Roles granted at higher levels apply to all child resources. Org-level Owner = Owner everywhere. Use folder-level for tighter scoping.

Org Policy Service

Set guardrails enforced organisation-wide. Examples:

compute.disableSerialPortAccess
iam.disableServiceAccountKeyCreation
storage.publicAccessPrevention
compute.skipDefaultNetworkCreation

Constraints inherit; can be overridden at project level only with explicit org-admin permission.

🧠

Check your understanding

Module Quiz · 6 questions

Pass with 80%+ to mark this module complete. Unlimited retries. Each question shows an explanation.

Want this for your team?

Custom team training + practitioner advisory

Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.

Book team training call Replies in 4 working hrs · India-only · Senior consultants

Module 3 · GCP Organisation Hierarchy

Levels

IAM inheritance

Org Policy Service

Module Quiz · 6 questions

Custom team training + practitioner advisory

Other modules in this track