René's URL Explorer Experiment


Title: Overview of role recommendations  |  Policy Intelligence  |  Google Cloud Documentation

Open Graph Title: Overview of role recommendations  |  Policy Intelligence  |  Google Cloud Documentation

Description: An overview of role recommendations, which help you identify and remove excess IAM permissions.

Open Graph Description: An overview of role recommendations, which help you identify and remove excess IAM permissions.

Opengraph URL: https://docs.cloud.google.com/policy-intelligence/docs/role-recommendations-overview

direct link

Domain: cloud.google.com


Hey, it has json ld scripts:
  {
    "@context": "https://schema.org",
    "@type": "Article",
    
    "headline": "Overview of role recommendations"
  }
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [{
      "@type": "ListItem",
      "position": 1,
      "name": "Security",
      "item": "https://docs.cloud.google.com/docs/security"
    },{
      "@type": "ListItem",
      "position": 2,
      "name": "Policy Intelligence",
      "item": "https://docs.cloud.google.com/policy-intelligence/docs"
    },{
      "@type": "ListItem",
      "position": 3,
      "name": "Overview of role recommendations",
      "item": "https://docs.cloud.google.com/policy-intelligence/docs/role-recommendations-overview"
    }]
  }
  

google-signin-client-id721724668570-nbkv1cfusk7kk4eni4pjvepaus73b13t.apps.googleusercontent.com
google-signin-scopeprofile email https://www.googleapis.com/auth/developerprofiles https://www.googleapis.com/auth/developerprofiles.award https://www.googleapis.com/auth/devprofiles.full_control.firstparty
og:site_nameGoogle Cloud Documentation
og:typewebsite
theme-color#1a73e8
NoneIE=Edge
og:imagehttps://docs.cloud.google.com/_static/cloud/images/social-icon-google-cloud-1200-630.png
og:image:width1200
og:image:height630
og:localeen
twitter:cardsummary_large_image

Links:

Skip to main content https://cloud.google.com/iam/docs/recommender-overview#main-content
https://cloud.google.com/
Documentation https://docs.cloud.google.com/docs
Get Started with Google Cloud https://docs.cloud.google.com/docs/get-started
Product List https://docs.cloud.google.com/docs/product-list
Cloud Customer Care https://docs.cloud.google.com/support/docs
Agent Platform https://docs.cloud.google.com/products/gemini-enterprise-agent-platform
Apigee API Management https://docs.cloud.google.com/apigee
BigQuery https://docs.cloud.google.com/bigquery
Compute Engine https://docs.cloud.google.com/products/compute
Cloud CDN https://docs.cloud.google.com/cdn
Cloud Run https://docs.cloud.google.com/run
Cloud Storage https://docs.cloud.google.com/storage
Cloud SQL https://docs.cloud.google.com/sql
Gemini Enterprise https://docs.cloud.google.com/gemini/enterprise/docs
Google Kubernetes Engine https://docs.cloud.google.com/kubernetes-engine
Looker https://docs.cloud.google.com/looker
Access and resources management https://docs.cloud.google.com/docs/access-resources
Costs and usage management https://docs.cloud.google.com/docs/costs-usage
Infrastructure as code https://docs.cloud.google.com/docs/iac
SDK, languages, frameworks, and tools https://docs.cloud.google.com/docs/devtools
AI and ML https://docs.cloud.google.com/docs/ai-ml
Application development https://docs.cloud.google.com/docs/application-development
Application hosting https://docs.cloud.google.com/docs/application-hosting
Compute https://docs.cloud.google.com/docs/compute-area
Data analytics and pipelines https://docs.cloud.google.com/docs/data
Databases https://docs.cloud.google.com/docs/databases
Distributed, hybrid, and multicloud https://docs.cloud.google.com/docs/dhm-cloud
Industry solutions https://docs.cloud.google.com/docs/industry
Migration https://docs.cloud.google.com/docs/migration
Networking https://docs.cloud.google.com/docs/networking
Observability and monitoring https://docs.cloud.google.com/docs/observability
Security https://docs.cloud.google.com/docs/security
Storage https://docs.cloud.google.com/docs/storage
Console https://console.cloud.google.com/
https://docs.cloud.google.com/policy-intelligence/docs
Security https://docs.cloud.google.com/docs/security
Policy Intelligence https://docs.cloud.google.com/policy-intelligence/docs
Start freehttps://console.cloud.google.com/freetrial
Overview https://docs.cloud.google.com/policy-intelligence/docs
Guides https://docs.cloud.google.com/policy-intelligence/docs/overview
Reference https://docs.cloud.google.com/policy-intelligence/docs/apis
Resources https://docs.cloud.google.com/policy-intelligence/docs/resources
https://cloud.google.com/
Documentation https://cloud.google.com/docs
Overview https://cloud.google.com/policy-intelligence/docs
Guides https://cloud.google.com/policy-intelligence/docs/overview
Reference https://cloud.google.com/policy-intelligence/docs/apis
Resources https://cloud.google.com/policy-intelligence/docs/resources
Console https://console.cloud.google.com/
Product overviewhttps://cloud.google.com/policy-intelligence/docs/overview
Policy Analyzer for allow policieshttps://cloud.google.com/policy-intelligence/docs/policy-analyzer-overview
Analyze allow policieshttps://cloud.google.com/policy-intelligence/docs/analyze-iam-policies
Analyze organization policieshttps://cloud.google.com/policy-intelligence/docs/analyze-organization-policies
Manage saved querieshttps://cloud.google.com/policy-intelligence/docs/policy-analyzer-saved-queries
Write policy analysis to BigQueryhttps://cloud.google.com/policy-intelligence/docs/policy-analyzer-write-to-bigquery
Write policy analysis to Cloud Storagehttps://cloud.google.com/policy-intelligence/docs/policy-analyzer-write-to-gcs
Access-related troubleshootershttps://cloud.google.com/policy-intelligence/docs/access-troubleshooters
Troubleshoot IAM permissionshttps://cloud.google.com/policy-intelligence/docs/troubleshoot-access
Remediate access issueshttps://cloud.google.com/policy-intelligence/docs/remediate-requests
Tools to understand service account usagehttps://cloud.google.com/policy-intelligence/docs/service-account-usage-tools
View recent usage for service accounts and keyshttps://cloud.google.com/policy-intelligence/docs/activity-analyzer-service-account-authentication
Find unused service accountshttps://cloud.google.com/policy-intelligence/docs/service-account-insights
Find service accounts with lateral movement permissionshttps://cloud.google.com/policy-intelligence/docs/lateral-movement-insights
Role recommendations overviewhttps://cloud.google.com/policy-intelligence/docs/role-recommendations-overview
Role recommendations best practiceshttps://cloud.google.com/policy-intelligence/docs/role-recommendations-best-practices
Configure role recommendation generationhttps://cloud.google.com/policy-intelligence/docs/configure-role-recommendations
Projects, folders, and organizationshttps://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations
Cloud Storage bucketshttps://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-buckets
BigQuery datasetshttps://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-datasets
Projects, folders, and organizationshttps://cloud.google.com/policy-intelligence/docs/policy-insights
Cloud Storage bucketshttps://cloud.google.com/policy-intelligence/docs/policy-insights-buckets
BigQuery datasetshttps://cloud.google.com/policy-intelligence/docs/policy-insights-datasets
Export recommendations to BigQueryhttps://cloud.google.com/policy-intelligence/docs/export-recommendations
Export data for role recommendationshttps://cloud.google.com/policy-intelligence/docs/export-role-recommendations-data
Review and manage identity riskshttps://cloud.google.com/policy-intelligence/docs/manage-identity-risks
Organization policy recommendations overviewhttps://cloud.google.com/policy-intelligence/docs/organization-policy-recommendations-overview
Review and apply organization policy recommendationshttps://cloud.google.com/policy-intelligence/docs/review-apply-organization-policy-recommendations
Review organization policy insightshttps://cloud.google.com/policy-intelligence/docs/organization-policy-insights
Policy Simulator for allow policieshttps://cloud.google.com/policy-intelligence/docs/iam-simulator-overview
Test role changes with Policy Simulatorhttps://cloud.google.com/policy-intelligence/docs/simulate-iam-policies
Policy simulator for deny policieshttps://cloud.google.com/policy-intelligence/docs/deny-simulator-overview
Test deny policy changes with Policy Simulatorhttps://cloud.google.com/policy-intelligence/docs/simulate-deny-policies
Policy simulator for Principal Access Boundary policieshttps://cloud.google.com/policy-intelligence/docs/pab-simulator-overview
Test Principal Access Boundary policy changes with Policy Simulatorhttps://cloud.google.com/policy-intelligence/docs/simulate-pab-policies
Test organization policy changes with Policy Simulatorhttps://cloud.google.com/policy-intelligence/docs/test-organization-policies
Audit logging for Policy Simulatorhttps://cloud.google.com/policy-intelligence/docs/audit-logging/simulator-audit-logging
Audit logging for Policy Analyzerhttps://cloud.google.com/policy-intelligence/docs/audit-logging/policyanalyzer-audit-logging
Get Started with Google Cloud https://cloud.google.com/docs/get-started
Product List https://cloud.google.com/docs/product-list
Cloud Customer Care https://cloud.google.com/support/docs
Agent Platform https://cloud.google.com/products/gemini-enterprise-agent-platform
Apigee API Management https://cloud.google.com/apigee
BigQuery https://cloud.google.com/bigquery
Compute Engine https://cloud.google.com/products/compute
Cloud CDN https://cloud.google.com/cdn
Cloud Run https://cloud.google.com/run
Cloud Storage https://cloud.google.com/storage
Cloud SQL https://cloud.google.com/sql
Gemini Enterprise https://cloud.google.com/gemini/enterprise/docs
Google Kubernetes Engine https://cloud.google.com/kubernetes-engine
Looker https://cloud.google.com/looker
Access and resources management https://cloud.google.com/docs/access-resources
Costs and usage management https://cloud.google.com/docs/costs-usage
Infrastructure as code https://cloud.google.com/docs/iac
SDK, languages, frameworks, and tools https://cloud.google.com/docs/devtools
AI and ML https://cloud.google.com/docs/ai-ml
Application development https://cloud.google.com/docs/application-development
Application hosting https://cloud.google.com/docs/application-hosting
Compute https://cloud.google.com/docs/compute-area
Data analytics and pipelines https://cloud.google.com/docs/data
Databases https://cloud.google.com/docs/databases
Distributed, hybrid, and multicloud https://cloud.google.com/docs/dhm-cloud
Industry solutions https://cloud.google.com/docs/industry
Migration https://cloud.google.com/docs/migration
Networking https://cloud.google.com/docs/networking
Observability and monitoring https://cloud.google.com/docs/observability
Security https://cloud.google.com/docs/security
Storage https://cloud.google.com/docs/storage
Home https://docs.cloud.google.com/
Documentation https://docs.cloud.google.com/docs
Security https://docs.cloud.google.com/docs/security
Policy Intelligence https://docs.cloud.google.com/policy-intelligence/docs
Guides https://docs.cloud.google.com/policy-intelligence/docs/overview
Recommenderhttps://cloud.google.com/recommender/docs
How lateral movement insights are generatedhttps://cloud.google.com/iam/docs/recommender-overview#lateral-movement-insights
roles.list methodhttps://cloud.google.com/iam/docs/reference/rest/v1/roles/list
Export data for role recommendationshttps://cloud.google.com/policy-intelligence/docs/export-role-recommendations-data
Machine learning for policy insightshttps://cloud.google.com/iam/docs/recommender-overview#ml
Availabilityhttps://cloud.google.com/iam/docs/recommender-overview#availability
Manage policy insights for projects, folders, and organizationshttps://cloud.google.com/policy-intelligence/docs/policy-insights
Manage policy insights for Cloud Storage bucketshttps://cloud.google.com/policy-intelligence/docs/policy-insights-buckets
word embeddinghttps://developers.google.com/machine-learning/crash-course/embeddings/video-lecture
k-anonymityhttps://cloud.google.com/sensitive-data-protection/docs/concepts-risk-analysis#about-k-anonymity
federated learninghttps://federated.withgoogle.com/
new custom rolehttps://cloud.google.com/iam/docs/recommender-overview#custom-roles
predefined roleshttps://cloud.google.com/iam/docs/understanding-roles
recommendations for service agentshttps://cloud.google.com/iam/docs/recommender-overview#service-agents
access control lists (ACLs)https://cloud.google.com/storage/docs/access-control/lists
role-based access control (RBAC)https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control
Availabilityhttps://cloud.google.com/iam/docs/recommender-overview#availability
Configure role recommendation generationhttps://cloud.google.com/policy-intelligence/docs/configure-role-recommendations
custom rolehttps://cloud.google.com/iam/docs/understanding-custom-roles
permissions change loghttps://cloud.google.com/iam/docs/permissions-change-log
Manage lateral movement insightshttps://cloud.google.com/policy-intelligence/docs/lateral-movement-insights
Service Specific Termshttps://cloud.google.com/terms/service-terms#1
launch stage descriptionshttps://cloud.google.com/products/#product-launch-stages
conditional role bindingshttps://cloud.google.com/iam/docs/conditions-overview
Cloud Storage convenience valueshttps://cloud.google.com/storage/docs/access-control/iam#convenience-values
BigQuery special group membershiphttps://cloud.google.com/bigquery/docs/access-control-basic-roles
Reference Kubernetes resources in IAM policieshttps://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity#kubernetes-resources-iam-policies
Principal identifiershttps://cloud.google.com/iam/docs/principal-identifiers
minimum observation periodhttps://cloud.google.com/iam/docs/recommender-overview#observation-period
Configure role recommendation generationhttps://cloud.google.com/policy-intelligence/docs/configure-role-recommendations
service agenthttps://cloud.google.com/iam/docs/service-account-types#service-agents
Role recommendations for service agentshttps://cloud.google.com/iam/docs/recommender-overview#service-agents
custom rolehttps://cloud.google.com/iam/docs/understanding-custom-roles
service agenthttps://cloud.google.com/iam/docs/service-account-types#service-agents
Role recommendations for service agentshttps://cloud.google.com/iam/docs/recommender-overview#service-agents
Review and apply role recommendations for projects, folders, and organizationshttps://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations
Review and apply role recommendations for Cloud Storage bucketshttps://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-buckets
Review and apply role recommendations for BigQuery datasetshttps://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-datasets
Remediate excessive permissions with Privileged Access Managerhttps://cloud.google.com/iam/docs/pam-remediate-iam-recommendations
Previewhttps://cloud.google.com/products#product-launch-stages
view these entries in your recommendations historyhttps://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations#history
view them in your Google Cloud audit logshttps://cloud.google.com/recommender/docs/viewing-logs
Service Specific Termshttps://cloud.google.com/terms/service-terms#1
launch stage descriptionshttps://cloud.google.com/products/#product-launch-stages
custom rolehttps://cloud.google.com/iam/docs/recommender-overview#custom-roles
Role recommendations for service agentshttps://cloud.google.com/iam/docs/recommender-overview#service-agents
Role recommendations for service agentshttps://cloud.google.com/iam/docs/recommender-overview#service-agents
service agentshttps://cloud.google.com/iam/docs/service-account-types#service-agents
basic roleshttps://cloud.google.com/iam/docs/roles-overview#basic
service agent rolehttps://cloud.google.com/iam/docs/service-account-types#roles
IAM recommenderhttps://cloud.google.com/security-command-center/docs/concepts-security-sources#iamrec-source
the Premium or Enterprise tier of Security Command Centerhttps://cloud.google.com/security-command-center/pricing#security-command-center-pricing
Billing questionshttps://cloud.google.com/policy-intelligence/docs/billing-questions
get the associated policy insighthttps://cloud.google.com/policy-intelligence/docs/policy-insights
get the associated policy insighthttps://cloud.google.com/policy-intelligence/docs/policy-insights
machine learninghttps://cloud.google.com/iam/docs/recommender-overview#ml
Review policy insights for projects, folders, and organizationshttps://cloud.google.com/policy-intelligence/docs/policy-insights
Review policy insights for Cloud Storage bucketshttps://cloud.google.com/policy-intelligence/docs/policy-insights-buckets
Review policy insights for BigQuery datasetshttps://cloud.google.com/policy-intelligence/docs/policy-insights-datasets
Review policy insights for projects, folders, and organizationshttps://cloud.google.com/policy-intelligence/docs/policy-insights
Review policy insights for Cloud Storage bucketshttps://cloud.google.com/policy-intelligence/docs/policy-insights-buckets
Review policy insights for BigQuery datasetshttps://cloud.google.com/policy-intelligence/docs/policy-insights-datasets
best practices for using role recommendationshttps://cloud.google.com/policy-intelligence/docs/role-recommendations-best-practices
Review and apply role recommendations for projects, folders, and organizationshttps://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations
Review and apply your role recommendations for Cloud Storage bucketshttps://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-buckets
Review and apply your role recommendations for BigQuery datasetshttps://cloud.google.com/policy-intelligence/docs/review-apply-role-recommendations-datasets
Recommenderhttps://cloud.google.com/recommender/docs/overview
predefined roleshttps://cloud.google.com/iam/docs/understanding-roles
custom roleshttps://cloud.google.com/iam/docs/understanding-custom-roles
Creative Commons Attribution 4.0 Licensehttps://creativecommons.org/licenses/by/4.0/
Apache 2.0 Licensehttps://www.apache.org/licenses/LICENSE-2.0
Google Developers Site Policieshttps://developers.google.com/site-policies
See all products https://cloud.google.com/products/
Google Cloud pricing https://cloud.google.com/pricing/
Google Cloud Marketplace https://cloud.google.com/marketplace/
Contact sales https://cloud.google.com/contact/
Community forums https://discuss.google.dev/c/google-cloud/14/
Support https://cloud.google.com/support-hub/
Release Notes https://docs.cloud.google.com/release-notes
System status https://status.cloud.google.com
GitHub https://github.com/googlecloudPlatform/
Getting Started with Google Cloud https://cloud.google.com/docs/get-started/
Code samples https://cloud.google.com/docs/samples
Cloud Architecture Center https://cloud.google.com/architecture/
Training and Certification https://cloud.google.com/learn/training/
Builders Hub https://me.developers.google.com/
Blog https://cloud.google.com/blog/
Events https://cloud.google.com/events/
X (Twitter) https://x.com/googlecloud
Google Cloud on YouTube https://www.youtube.com/googlecloud
Google Cloud Tech on YouTube https://www.youtube.com/googlecloudplatform
https://developers.google.com/
Android https://developer.android.com/
Chrome https://developer.chrome.com/
Firebase https://firebase.google.com/
Google AI https://ai.google.com/
About Google https://about.google/
Privacy https://policies.google.com/privacy
Site terms https://policies.google.com/terms?hl=en
Google Cloud terms https://cloud.google.com/product-terms
Manage cookies https://cloud.google.com/iam/docs/recommender-overview
Our third decade of climate action: join us https://cloud.google.com/sustainability
Subscribe https://cloud.google.com/newsletter/

Viewport: width=device-width, initial-scale=1


URLs of crawlers that visited me.