Google Cloud IAM
Manage service accounts and project IAM policy (Google OAuth2).
OCNORA ships 5 typed Google Cloud IAM operations. Each node has a schema-driven form, input and output tables beside its settings, and is pre-flighted by Workflow Health before your first real run.
Before you connect Google Cloud IAM
- Authentication
- OAuth 2.0
- Credential
- {"client_id", "client_secret", "refresh_token"}
- Connection test
- Available: the stored credential can be checked against the provider when you add it. This is not a record that a test was run or passed.
What you can do with Google Cloud IAM
Operations, grouped by what they do to your data.
Create and send 2
Read and search 2
Other operations 1
A sample Google Cloud IAM workflow
- 1A core triggerStart the run from a chat, form, manual, schedule, webhook, workflow trigger — no Google Cloud IAM trigger is needed.
- 2Get Project IAM Policycloud_iam.get_project_iam_policyFetch a project's IAM policy bindings.
- 3Add IAM Bindingcloud_iam.add_iam_bindingAdd a member to a role on the project IAM policy (read-modify-write).
An outline built from this provider’s node contracts, not a recorded run. Each step’s output fields are available to the next in the field picker.
Every node below has a reference page: what it does, the connection it needs, its config fields with types, constraints and examples, and the shapes it emits.
Operations 5
- Add IAM BindingAdd a member to a role on the project IAM policy (read-modify-write).cloud_iam.add_iam_binding
- Create Service AccountCreate a service account in a GCP project.cloud_iam.create_service_account
- Get Project IAM PolicyFetch a project's IAM policy bindings.cloud_iam.get_project_iam_policy
- List Service AccountsList the service accounts in a GCP project.cloud_iam.list_service_accounts
- Test PermissionsTest which of the given IAM permissions the caller has on the project.cloud_iam.test_permissions
Google Cloud IAM questions
- How does OCNORA authenticate with Google Cloud IAM?
- With a stored OAuth 2.0 credential, shaped {"client_id", "client_secret", "refresh_token"}. A connection test can check it when you add it.
- What can I automate with Google Cloud IAM?
- 5 typed operations, each with a reference page listing its config fields and the shapes it emits.
- What if the Google Cloud IAM operation I need is not listed?
- Where Google Cloud IAM has an HTTP API, call it from the HTTP node with the same credential, or describe the step to the AI builder, which asks our team for a typed node when one is missing.
- Are there templates that use Google Cloud IAM?
- Not yet. Start from a blank workflow, or describe the workflow to Build with AI.
- How are Google Cloud IAM calls controlled?
- Every call and every run step is audited, runs count against the execution budget, and Workflow Health pre-flights the workflow when you save it.
See your first Google Cloud IAM workflow run.
Book a technical demo. We add the connection, pick a template or describe the workflow to Build with AI, and Workflow Health checks it before it runs.