Manage Google Cloud Platform reseller roles & permissions

The GCP Reseller Administrator role gives your users access to the Partner Sales Console. Users with the Cloud IAM Billing Account Administrator role are automatically granted the GCP Reseller Administrator role.

In this article

 

GCP Reseller Administrator role

Users with the GCP Reseller Administrator role can manage all Google Cloud resale tasks in the Partner Sales Console.

Permissions in the Partner Sales Console

The permissions are limited to the reseller billing accounts on which the user has the Billing Account Administrator role.

  • View a customer's Google Cloud Platform subscriptions (billing subaccounts).
  • Place a Google Cloud Platform order (create billing subaccount).
  • Manage permissions to a subscription (billing subaccount).
  • Connect unassigned billing subaccounts to customers. Learn more
  • Close subscriptions in the Partner Sales Console. Learn more
  • View the Dashboard. Learn more
  • View and edit customer accounts that have both Google Cloud Platform and Google Workspace subscriptions, and customer accounts with no subscriptions.
  • View all Google Cloud Platform customers and edit account information (regardless of permissions on reseller billing accounts). 

Role assignment

The GCP Reseller Administrator role and Billing Account Administrator roles are linked. Users and groups are automatically granted the GCP Reseller Administrator role if they meet these requirements:

  1. A user account at your reseller domain, for example, user@reseller.your-domain.com. If a group contains users outside domain, those users aren't granted the GCP Reseller Administrator role.
  2. The Billing Account Administrator role on one or more of your reseller Cloud Billing accounts. Note: Your current Billing Account Administrators can assign the role to users in your organization. Learn how

To set up users who have a custom role or the Billing Account Administrator role at the Organization level, go to assign the GCP Reseller Administrator role.

How permissions work across the consoles

  • Permissions to reseller billing accounts are synced between the GCP Reseller Administrator and Billing Account Administrator roles. For example, removing a user's GCP Reseller Administrator role from a reseller billing account also removes the user's Billing Account Administrator role.

  • Changes to a user's GCP Reseller Administrator role don't affect the user's Billing Account Administrator permissions on their Organization or a billing subaccount.

  • To turn off a user's access to the Partner Sales Console but keep their permissions to the Cloud Console, super administrators can remove only the user's GCP Reseller Administrator role.

Help for new Partner Sales Console administrators

Recommended articles to share with users:

View and manage roles

Open all | Close all
View role assignments
  1. In the top left, click Menu and then SettingsSettings.
  2. Click Reseller roles.
  3. Click the Down arrow "" to view GCP administrators and their permissions on reseller billing accounts.

List of GCP reseller roles

Change GCP Reseller Administrator permissions to reseller billing accounts

Changing a user's GCP Reseller Administrator permissions on a reseller billing account also changes their Billing Account Administrator permissions.

  1. Sign in to the Partner Sales Console with your Cloud Identity or Google Workspace super administrator account.
  2. In the top left, click Menu and then SettingsSettings.
  3. Click Reseller roles.
  4. Click GCP Reseller Administrator to view roles and assignments.
  5. Next to a user or group, click Edit "".
  6. Check or uncheck the reseller billing accounts and click Save. The changes might take a few minutes to appear in the Google Cloud Console.

Assign the GCP Reseller Administrator to users with custom role

For users or groups with a custom billing role, you add or remove their GCP Reseller Administrator role in the Partner Sales Console.

Note: Permissions to reseller billing accounts are not synced between a custom billing role and the GCP Reseller Administrator role.

Requirement for users

  • The user has an account at your reseller domain, for example, user@reseller.your-domain.com.
  • The user's custom role has the billing.accounts.get and billing.accounts.update permissions on one or more of your reseller Cloud Billing accounts.

Assign the GCP Reseller Administrator role

  1. Sign in to the Partner Sales Console with your Cloud Identity or Google Workspace super administrator account.
  2. In the top left, click Menu and then SettingsSettings.
  3. Click Reseller roles.
  4. Click the Down arrow "" to view reseller roles and assignments.
  5. Assign the GCP Reseller Administrator role:
    1. Click Add member.
    2. Enter the user or group address in your reseller domain.
    3. Select GCP Reseller Administrator.
  6. Click Google Cloud Platform billing accounts. All accounts are shown unchecked, regardless of the user's or group's permissions in the Google Cloud Console.

Shows list of billing accounts

  1. Select the Cloud Billing accounts and click Save. The changes might take a few minutes to appear in the Google Cloud Console.
Remove only the GCP Reseller Administrator role from a user

Turn off a user's access to the Partner Sales Console without changing their permissions on reseller billing accounts.

  1. Sign in to the Partner Sales Console with your Cloud Identity or Google Workspace super administrator account.In the top left, click Menu and then SettingsSettings.
  2. Click Reseller roles.
  3. Click the Down arrow "" to view all GCP Reseller Administrators.
  4. Next to the user or group, click Edit "".
  5. Uncheck only the GCP Reseller Administrator box to remove the user's access to the Partner Sales Console.
  6. Click Save. The user keeps their Billing Account Administrator or custom role and permissions on reseller billing accounts.
Troubleshooting & FAQ
  • The user isn't automatically assigned a GCP admin role or the Partner Sales Console doesn't show any information

The user might have their Cloud Billing role assigned on the Organization. Assign the GCP Reseller Administrator role with permissions on one or more of your reseller billing accounts.

  • Error message "Logged in user is not authorized..."

The user can sign in to the Partner Sales Console but can't access any features. Assign the GCP Reseller Administrator role with permissions on one or more of your reseller billing accounts.

  • Error message "Can’t find email address in your Cloud Identity or Google Workspace account"

The user doesn't have an account in your reseller domain. Users outside of your domain can't be assigned the GCP Reseller Administrator role.

  • The console doesn't show all of my reseller billing accounts

You might be missing the Billing Account Administrator role on one of your reseller billing accounts. Check with another super administrator in your organization.

Related topics

Was this helpful?
How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
5117991
false