0

Is it possible to control which users/groups get which sudo privileges? Or is it an all-or-nothing proposition?

Improve this question

1 Answer 1

Reset to default
0

Yes, it is possible to give fine grained authorization to users using Google IAM.

Project and instance-level administrators can use IAM to grant SSH access to a user's Google identity without granting a broader set of privileges. For example, you can grant a user permissions to log into the system, but not the ability to run commands such as sudo. Google checks these permissions to determine whether a user can log into a VM instance.

If you want to know more about the roles you can configure in a GCE instance, here is the material you could use.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .