Search code examples
google-cloud-platformoauthgoogle-oauth

Permissions to create OAuth client ID in Google Cloud


I'd like to create some OAuth client IDs in the GCP but I do not have some permissions for that. I got a warning "You don't have permission to create an OAuth client"

enter image description here

I can simply add me to the role roles/owner and do it, but I'd like to have something like a minimal permission/role to create OAuth client IDs. What permissions/roles from this list should I use?

https://cloud.google.com/iam/docs/understanding-roles#service_account_roles

I tried roles/iam.serviceAccountTokenCreator but it doesn't work.


Solution

  • You can try to create a custom role which has permissions clientauthconfig.*

    Note: As per https://cloud.google.com/iam/docs/custom-roles-permissions-support, these permissions are in testing phase so please try them out thorougly before putting in production.

    Hope this helps.