Roles and permissions
To use the Partner Sales Console, your team members need two roles.
- The Billing Account Administrator role, or both the billing.accounts.get and billing.accounts.update permissions on your reseller Cloud billing accounts. Your Billing Account Administrator role and permissions must be assigned at the Organizational level. If a user can't sign in to the Partner Sales Console, the role or permissions might be inherited through a project or resource.
- The Google Cloud Platform Reseller Admin role in the Partner Sales Console. Google Cloud Platform Reseller Admins can manage customer accounts/information, order Google Cloud Platform (create billing subaccount), assign roles to billing subaccounts, and link projects to billing subaccounts.
For resellers of both Google Cloud Platform and Google Workspace: Only your users who had admins roles for both Google Cloud Platform and Workspace were automatically granted the Google Cloud Platform Reseller Admin role.
Cloud Billing accounts
Reseller Cloud Billing accounts are Cloud Billing accounts provisioned by Google with resale features. For a customer, you create subaccounts associated with your Cloud Billing accounts. Each Cloud Billing Account creates a single invoice for all associated cloud usage.
Like a Cloud Billing account, a subaccount has linked projects, a unique ID, and sets of users with billing IAM roles and permissions. A subaccount lets you group charges from projects in separate section of your invoice. Charges for the billing subacccounts are paid for by the parent Cloud Billing account.
In the Partner Sales Console, placing an order for GCP creates a subaccount for a customer.
Using the Partner Sales Console and the Cloud Console
You can manage most customers' orders, billing, and permissions in the Partner Sales Console. Use the Cloud Console to manage customer's projects and create custom billing roles.
|Create and manage customers||✓|
|Assign GCP Reseller Admin role||✓|
|Create billing subaccounts||✓|
|Assign billing roles to billing subaccounts||✓||✓*|
|Assign permissions to Cloud Billing accounts||✓||✓|
|Create custom billing roles||✓|
|Create Cloud Billing accounts||✓|
|Manage settings and access to projects||✓|
* Not recommended.
Order Google Cloud Platform1. View your Cloud Billing accounts and assign GCP Administrator roles
- Sign in to the Partner Sales Console with your Cloud Identity or Google Workspace super admin account.
- In the top left, click Settings.
- Click Reseller roles.
- Click the Down arrow to view your Cloud Billing accounts and GCP Reseller Administrators.
- Click Add member.
- Enter a user or group email address.
- Select GCP Reseller Administrator.
- Click Google Cloud Platform Cloud Billing accounts.
Note: All the Cloud Billing accounts are shown unchecked, regardless of the user or group's permissions in the Cloud Console.
Select at least one billing account and click Save. The user's permissions appear in the Partner Sales Console within a minute.
The role assignments also appear in the Cloud Console Billing Account Administrator assignments.
- Sign in to the Partner Sales Console with your Google Cloud Identity or Google Workspace reseller account. Requires both the Billing Account Administrator and GCP Reseller Admin roles, and permissions on your Cloud Billing accounts. Learn more.
- On the Customers page, click Create customer.
- Add the customer's information:
- Domain: If you have multiple customers at
- Email: Contact address for the customer. For GCP orders, no confirmation messages or communications are sent to this address. For Google Workspace and other services, the address is used as the primary administrator account.
- Alternate address: Email address for receiving sign-in credentials for Google Workspace and other services that use the Google Admin console. For Google Cloud Platform orders, no confirmation or communications are sent to this address.
- Click Create.
- Click Purchase new service or click Close to place an order later.
|Ordering "Google Cloud Platform" creates a subaccount that's automatically connected to the customer. If you created a subaccount in the Cloud Console, you can still connect it to a customer. Learn how.|
- On the customer's account page, click New service.
- Below Google Cloud Platform, click Select.
- Choose the primary billing account.
- (Optional). Edit the name of subaccount. By default, the name for a new subaccount is
"Customer name - domain - incremental number of subaccounts"
Tip: Make a note of the subaccount name. Then you or your customer can identify the subaccount in the Google Cloud Console.
- Click Continue.
- Click Select plan. GCP is offered with the Flexible Plan, which is based on resource usage per month.
- Click Confirm order.
- On the order confirmation page, click Manage permissions. You can also set and edit permissions later.
- Click Add member.
- Enter an email address, Google group, or service account.
- Select one or more roles. Learn about creating and assigning roles.
- Click Save.
- Notify user about their role, and the billing subaccount name and ID.
- Go to the Cloud Console > Projects
- Add the information for the customer's project. In Billing Account, choose the billing subaccount you created in the Partner Sales Console.
- Click Create. Charges for the new project are billed to the subaccount.
After you create the project, you can create and manage resources (for example, create VMs, and use Google Cloud Storage and BigQuery).
Add your customer to the project
Let your customer manage resources by giving them a role on the project.
- In the Cloud Console, go to the IAM page.
- Click the project drop-down list at the top of the page.
- Select the project. View the role (including custom roles) that you can grant to the member on this resource.
- Click Add. Enter the email address and choose the level of access.
- I can’t move an existing project to a billing subaccount
To move a project, you need to be a project owner and a Billing Account User (or higher level) on the billing subaccount. You might contact the user who created the subaccount (the initial Billing Administrator) for assistance.
- If I move an existing project to a billing subaccount, what happens with billing?
Any usage incurred before the move is included in the project’s previous billing account and not the subaccount.
- I created a subaccount in the Cloud Console, but it doesn't appear in the Partner Sales Console.
Follow the steps to connect the subaccount to the customer (doesn't affect the subaccount's projects or permissions). Learn how