Roles & permissions
To use the Partner Sales Console, users need permissions on one or more of reseller billing accounts.
- The Billing Account Administrator role or a custom role with both the billing.accounts.get and billing.accounts.update permissions on one or more of your reseller Google Cloud Billing accounts.
In Google Cloud, assign the Billing Account Administrator role and permissions at the Organizational level. If a user can't sign in to the Partner Sales Console, the role or permissions might be inherited through a project or resource.
- The Google Cloud Reseller Admin role in the Partner Sales Console. Permissions for the role:
- Create customer accounts
- View and edit customer information
- Order Google Cloud (creates billing subaccount)
- Assign roles to billing subaccounts
- View Dashboard information
Google Cloud Billing accounts
Reseller Google Cloud Billing accounts are Cloud Billing accounts provisioned by Google with resale features. For a customer, you create subaccounts associated with your Google Cloud Billing accounts. Each Google Cloud Billing Account creates a single invoice for all associated cloud usage.
Like a Google Cloud Billing account, a subaccount has linked projects, a unique ID, and sets of users with billing IAM roles and permissions. A subaccount lets you group charges from projects in separate section of your invoice. Charges for the billing subacccounts are paid for by the parent Cloud Billing account.
In the Partner Sales Console, placing an order for Google Cloud creates a subaccount for a customer.
Using the Partner Sales Console & the Google Cloud console
You can manage most customers' orders, billing, and permissions in the Partner Sales Console. Use the Google Cloud console to manage customer's projects and create custom billing roles.
|Partner Sales Console||Google Cloud
|Google Cloud Billing Account API|
|Create and manage customers||✓|
|Assign Google Cloud Reseller Admin role||✓||✓*|
|Assign billing roles to subaccounts||✓||✓|
|Create Google Cloud Billing accounts||✓||✓|
|Assign permissions to Google Cloud Billing accounts||✓||✓|
|Manage access to projects||✓||✓|
|Create custom billing roles||✓|
* Users with the Billing Account Administrator role on one or more of your reseller billing accounts are automatically granted the Google Cloud Reseller Admin role.
Order Google CloudStep 1: View your Google Cloud Billing accounts & assign Google Cloud Admin roles
- Sign in to the Partner Sales Console with your Cloud Identity or Google Workspace super administrator account.
- At the top, click Menu Settings .
- Click Reseller roles.
- Click the Down arrow to view your Google Cloud Billing accounts and Google Cloud Reseller Administrators.
- Click Add member.
- Enter a user or group email address.
- Select Google Cloud Reseller Administrator.
- Click Google Cloud Platform billing accounts.
Note: All the Google Cloud Billing accounts are shown unchecked, regardless of the user or group's permissions in the Google Cloud console.
Select at least one billing account and click Save. The user's permissions appear in the Partner Sales Console within a minute.
The role assignments also appear in the Google Cloud console Billing Account Administrator assignments.
- Permissions required: The GCP Reseller administrator role and the billing.accounts.close permission on your reseller parent Cloud Billing accounts. Learn more.
- On the Customers page, click Create customer.
- Add the customer's information:
- Email: Contact address for the customer. For Google Cloud orders, no confirmation messages or communications are sent to this address. For Google Workspace and other services, the address is used as the primary administrator account.
- Alternate address: Email address for receiving sign-in credentials for Google Workspace and other services that use the Google Admin console. For Google Cloud orders, no confirmation or communications are sent to this address.
- Click Create.
- Click Purchase new service or click Close to place an order later.
|Ordering Google Cloud creates a subaccount that's automatically connected to the customer. If you created a subaccount in the Google Cloud console, you can still connect it to a customer. Learn how.|
- On the customer's account page, click New service.
- Next to Google Cloud Platform, click Select.
- Choose the primary billing account.
- (Optional). Edit the name of subaccount. By default, the name for a new subaccount is
"Customer name - domain - incremental number of subaccounts"
Tip: Make a note of the subaccount name. Then you or your customer can identify the subaccount in the Google Cloud console.
- Click Continue.
- Click Select plan. Google Cloud is offered with the Flexible Plan, which is based on resource usage per month.
- Click Confirm order.
- On the order confirmation page, click Manage permissions. You can also set and edit permissions later.
- Click Add member.
- Enter an email address, Google group, or service account.
- Select one or more roles. Learn about creating and assigning roles.
- Click Save.
- Notify user about their role, and the billing subaccount name and ID.
- Go to Google Cloud > Projects
- Add the information for the customer's project. In Billing Account, choose the billing subaccount you created in the Partner Sales Console.
- Click Create. Charges for the new project are billed to the subaccount.
After you create the project, you can create and manage resources (for example, create VMs, and use Google Cloud Storage and BigQuery).
Add your customer to the project
Let your customer manage resources by giving them a role on the project.
- In Google Cloud, go to the IAM page.
- Click the project drop-down list at the top of the page.
- Select the project. View the role (including custom roles) that you can grant to the member on this resource.
- Click Add. Enter the email address and choose the level of access.
I can’t move an existing project to a billing subaccount
To move a project, you need to be a project owner and a Billing Account User (or higher level) on the billing subaccount. You might contact the user who created the subaccount (the initial Billing Administrator) for assistance.
If I move an existing project to a billing subaccount, what happens with billing?
Any usage incurred before the move is included in the project’s previous billing account and not the subaccount.
I created a subaccount in the Google Cloud, but it doesn't appear in the Partner Sales Console.
Follow the steps to connect the subaccount to the customer (doesn't affect the subaccount's projects or permissions). Learn how