# Projects & RBAC

Organize resources with **projects** and control access with **roles**.

<figure><img src="https://1802641068-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAChv0b03d6kwjavnnWlJ%2Fuploads%2Fgit-blob-c1f0bfaf3d8d6b6a83894fa106f205b0b1581b5b%2FScreenshot%202025-08-17%20at%206.47.46%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

Click on "Create New Project" and enter **project name, project description, and project purpose.** Then click on "Create Project" and the new project will be created.

<figure><img src="https://1802641068-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAChv0b03d6kwjavnnWlJ%2Fuploads%2Fgit-blob-bc58da91d9e72fdd9138a9c5340197e8030aa2ba%2FScreenshot%202025-08-17%20at%206.48.03%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

This is your default project homepage where you can see all active services within that project, view/add/remove users in the project, and see the resource quota assigned to the project.

<figure><img src="https://1802641068-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAChv0b03d6kwjavnnWlJ%2Fuploads%2Fgit-blob-052f8cba2bc4ebc14ef322ecb20fb96f4dc826e2%2FScreenshot%202025-08-17%20at%206.48.55%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

## Projects vs. Account

* **Account:** Your identity, billing, and security context
* **Project:** Isolation boundary for resources, quotas, and RBAC

## Users

Navigate to **Profile** → **Users** and you can create/modify/delete users here and assign them to projects.

<figure><img src="https://1802641068-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAChv0b03d6kwjavnnWlJ%2Fuploads%2Fgit-blob-2f3f341e6c380fb4af21a36dfd395774397179bc%2FScreenshot%202025-08-17%20at%207.09.45%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

## Roles & Permissions (RBAC)

Navigate to **Profile** → **Roles** and you can create new roles, modify/delete existing ones, and assign these roles and permissions to users.

<figure><img src="https://1802641068-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAChv0b03d6kwjavnnWlJ%2Fuploads%2Fgit-blob-f5e572ab73fb6b5efd95386ff5c75de3fa5b44dd%2FScreenshot%202025-08-17%20at%207.09.54%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

When adding a new role, you can choose specific services, features, and permissions you want to assign to users in this role.

<figure><img src="https://1802641068-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAChv0b03d6kwjavnnWlJ%2Fuploads%2Fgit-blob-cb9c0cd246ffe33b7d578380c71a12408406791f%2FScreenshot%202025-08-17%20at%207.10.05%E2%80%AFPM.png?alt=media" alt=""><figcaption></figcaption></figure>

These are typical roles and permissions you can assign to you team members. *Please note these are suggestions and may vary based on industry, team size, use case, etc.*

| Role               | Scope           | Permissions                         |
| ------------------ | --------------- | ----------------------------------- |
| Owner              | Project         | Full control, manage roles/quotas   |
| Contributor        | Project         | Create/update/delete most resources |
| Viewer             | Project         | Read-only access                    |
| Billing (optional) | Account/Project | Invoices, transactions              |

## Best practices ✅

* Least-privilege roles; **Viewer** by default
* Separate **billing** from **ops** access
* Review **members** quarterly and rotate credentials