Assign Google Cloud Platform reseller permissions

To let your team use the Partner Sales Console, assign them the GCP Reseller Administrator role.

GCP Reseller Administrator permissions

GCP Reseller Administrators can manage the following tasks in the Partner Sales Console:

  • View all Google Cloud Platform customer accounts and edit account information
  • Place a Google Cloud Platform order (creates billing subaccount for the customer).
  • Assign permissions to a billing subaccount in the Partner Sales Console.
  • Connect unassigned billing subaccounts to customers. Learn more
  • Close billing subaccounts in the Partner Sales Console. Learn more
  • View and edit customer accounts that have no subscriptions.
  • View customer accounts that have both Google Cloud Platform and Google Workspace subscriptions.

In the Partner Sales Console, only super admins can add or remove users from GCP Reseller Administrator role. 

Assign the GCP Reseller Administrator role

If users and groups meet these requirements, they automatically granted the GCP Reseller Administrator role

  1. An account at your reseller domain, for example, user@reseller.your-domain.com or team@reseller.your-domain.com.
  2. Either of these Cloud IAM roles:

    • The Billing Account Administrator role on one or more of your reseller Cloud Billing accounts. Note: Your current Billing Account Administrators can assign the role to users in your organization. Learn how

    • A custom role with the billing.accounts.get and billing.accounts.update permissions on one or more of your reseller Cloud Billing accounts.

Manage permissions in both consoles 

  • You can set permissions to reseller billing accounts in either the Cloud Console or Partner Sales Console. For example, removing a user's GCP Reseller Administrator role from a reseller billing account also removes the user's Billing Administrator role. The changes may take a few minutes to appear in both consoles.
  • In the Partner Sales Console, only super administrators can assign or remove the GCP Reseller Administrator role from a user or group.   Reseller Administrator role.
  • In the Cloud Console, super administrators and Billing Account Administrators can assign or remove the Billing Account Administrator role from a user or group. 
  • To turn off a user's access to the Partner Sales Console but keep their permissions to the Cloud Console, super admins can remove only the user's GCP Reseller Administrator role.

 

Assign the GCP Reseller Administrator role in the Partner Sales Console
In your Google Admin console, the Admin roles settings include the "GCP Reseller Admin" role. The role isn't active and doesn't assign or remove permissions to the Partner Sales Console or Cloud Console.

Note: Users outside of your reseller domain can't be assigned the GCP Reseller Administrator role.

1. Assign the GCP Reseller Administrator role

  1. Sign in to the Partner Sales Console with your Cloud Identity or Google Workspace super admin account.
  2. In the top left, click Menu and then SettingsSettings.
  3. Click Reseller roles.
  4. Click the Down arrow "" to view GCP Reseller Administrators and their permissions to your  accounts.
  5. Click Add member.
  6. Enter a user or group email address.
  7. Select GCP Reseller Administrator.
  8. Click Google Cloud Platform billing accounts.

    Note: All billing accounts are shown unchecked, regardless of the user or group's permissions set in the Google Cloud Console.

  1. Select the Cloud Billing accounts and click Save. New and updated role assignments also appear in Google Cloud Console.
    For users already assigned permissions to billing accounts in the Google Cloud Console:
    Select at least one of the Cloud Billing accounts and click Save. Then the user's permissions to Cloud Billing account appear in the Partner Sales Console within a minute.
Remove only the GCP Reseller Administrator role from a user

Turn off a user's access to the Partner Sales Console without changing their permissions on reseller billing accounts.

  1. Sign in to the Partner Sales Console with your Cloud Identity or Google Workspace super admin account.In the top left, click Menu and then SettingsSettings.
  2. Click Reseller roles.
  3. Click the Down arrow "" to view all GCP Reseller Administrators.
  4. Next to the user or group, click Edit "".
  5. Uncheck only the GCP Reseller Administrator box to remove the user's access to the Partner Sales Console.
  6. Click Save. The user keeps their Billing Account Administrator or custom role and permissions on reseller billing accounts.
Troubleshooting & FAQ
  • Error message "Logged in user is not authorized..."

The user can sign in to the Partner Sales Console but can't access any features. Assign the user the GCP Reseller Administrator role with permissions on one or more of your reseller billing accounts.

  • Error message "Can’t find email address in your Cloud Identity or G Suite account"

A user or user in a group doesn't have an account in your reseller domain. You can assign external users an IAM role but not the GCP Reseller Administrator role.

  • The console doesn't show all of my reseller billing accounts

You might be missing the Billing Account Administrator role on one of your reseller billing accounts. Check with another super administrator in your organization.

  • The console is missing some billing subaccounts

The billing subaccounts might not be assigned to a customer in the Partner Sales Console. Learn about how to assign customers to their subaccounts. To check for unassigned subaccounts:

  1. Sign in to the Partner Sales Console with your Google Cloud Identity or Google Workspace reseller account. Requires both the Billing Account Administrator and GCP Reseller Admin roles, and permissions on your Cloud Billing accounts. Learn more.

  2. From the home page, click Billing > Unassigned subaccounts.

    The Unassigned Billing Subaccounts page lists billing subaccounts that aren't assigned to a customer account.

Related topics

Was this helpful?
How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
5117991
false