Assign Google Cloud Platform reseller administrator permissions

For resellers of Google Workspace, assign your users the Reseller Admin privileges.

To let your team use the Partner Sales Console, assign them the GCP Reseller Administrator role and permissions to your Google Cloud payments accounts.

 
Roles for GCP resellers Permissions in the Partner Sales Console

GCP Reseller Administrator
  • View all GCP customer accounts and edit account information.
  • Place a GCP order (creates billing subaccount for the customer).
  • Assign permissions to a billing subaccount in the Partner Sales Console.
  • Connect billing subaccounts to customers. Learn more
  • Close billing subaccounts in the Partner Sales Console. Learn more
  • View and edit customer accounts that have no subscriptions.
  • View accounts of customers who purchased both Google Cloud Platform and Google Workspace.

Super admin

Super admins have access to all settings and features in the Partner Sales Console. Only super admins can:

  • Assign the GCP Reseller Administrator role to users.
  • Grant GCP Reseller Administrators access to your Cloud Billing accounts.

Assign the GCP Reseller Administrator role

Permissions for this task: the Super administrator role on your Cloud Identity or Google Workspace reseller account, for example, at reseller.your-domain.com.

1. Create a user account

Each GCP Reseller Administrator needs a user account at your organization's Cloud Identity or Google Workspace reseller account, for example, at reseller.your-domain.com. Create a user account for each administrator.

How to add a user

2. Assign Google Cloud billing permissions

In the Google Cloud Console, assign the user the Billing Account Administrator role, or both the billing.accounts.get and billing.accounts.update permissions on your Cloud Billing accounts.

Be sure to assign roles or permissions at the Organizational level (roles aren't automatically inherited from your Google Cloud Organization).

3. Assign the GCP Reseller Administrator role

  1. Sign in to the Partner Sales Console with your Cloud Identity or Google Workspace super admin account.
  2. In the top left, click Menu and then SettingsSettings.
  3. Click Reseller roles.
  4. Click the Down arrow "" to view the current GCP Reseller Administrators and billing accounts.
  5. Click Add member.
  6. Enter a user or group email address.
  7. Select GCP Reseller Administrator.
  8. Click Google Cloud Platform billing accounts.

    Note: All Cloud Billing accounts are shown unchecked, regardless of the user or group's permissions set in the Google Cloud Console.

  1. Select the Cloud Billing accounts and click Save. New and updated role assignments also appear in Google Cloud Console.
    For users already assigned permissions to billing accounts in the Google Cloud Console:
    Select at least one of the Cloud Billing accounts and click Save. Then the user's permissions to Cloud Billing account appear in the Partner Sales Console within a minute.

Manage GCP Reseller Administrator permissions to parent Cloud Billing accounts

View and edit a user or group's Cloud Billing account permissions in either the Partner Sales Console or Cloud Console.

  1. Sign in to the Partner Sales Console with your Cloud Identity or Google Workspace super admin account.
  2. In the top left, click Menu and then SettingsSettings.
  3. Click Reseller roles.
  4. Click the Down arrow "" to view the GCP Reseller Administrators and billing accounts.
  5. Enter a user or group email address. Users must have accounts in your Cloud Identity or Google Workspace reseller account.
  6. Select GCP Reseller Administrator.
  7. Click the list in Google Cloud Platform billing accounts.
  8. Select the billing accounts.
  9. Click Save.

View or remove GCP Reseller Administrators

Removing the GCP Reseller Administrator role doesn't change the user's Billing Account Administrator role or permissions to billing accounts in the Google Cloud Console.
  1. Sign in to the Partner Sales Console with your Cloud Identity or Google Workspace super admin account.
  2. In the top left, click Menu and then SettingsSettings.
  3. Click Reseller roles.
  4. Click the Down arrow "" to view all GCP Reseller Administrators.
  5. Next to the user or group, click Edit ""
  6. Uncheck GCP Reseller Administrator to remove the user's permissions to the Partner Sales Console.
  7. Click Save.

Troubleshooting

  • The console doesn't show all of my reseller billing accounts

You might be missing the Billing Account Viewer or Billing Account Administrator role on one of your reseller parent billing accounts. If a user can't sign in to the Partner Sales Console, the role or permissions might be inherited through a project or resource. Learn moreCheck with another super administrator in your organization.

  • The console is missing some billing subaccounts

The billing subaccounts might not be assigned to a customer in the Partner Sales Console. Learn about how to assign customers to their subaccounts. To check for unassigned subaccounts:

  1. Sign in to the Partner Sales Console with your Google Cloud Identity or Google Workspace reseller account. Requires both the Billing Account Administrator and GCP Reseller Admin roles, and permissions on your Cloud Billing accounts. Learn more.

  2. From the home page, click Billing > Unassigned subaccounts.

    The Unassigned Billing Subaccounts page lists billing subaccounts that aren't assigned to a customer account.

Related topics

Was this helpful?
How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
5117991
false