The IAM & Admin page in the Google Cloud Console provides a comprehensive view of the Identity and Access Management (IAM) policy for a specific resource, such as a project. This page lists all principals (members like users, groups, and service accounts) and the specific roles granted to them for that project. This directly allows an administrator to verify who has what level of access, fulfilling the question's requirement to check assigned users and roles. The gcloud projects get-iam-policy [PROJECTID] command provides the same information via the command line.

A. gcloud iam roles list only lists the available IAM roles in a project or organization; it does not show which members are assigned to those roles.

B. gcloud iam service-accounts list only lists the service accounts within a project. It does not show other member types (like users or groups) or their role assignments.

D. The "Roles" section in the GCP Console lists available roles and their associated permissions, similar to option A. It does not display the bindings of these roles to members.

---

1. Google Cloud Documentation - View access to a project

folder

or organization: "You can get a list of principals who have access to a project... using the Google Cloud console... In the Google Cloud console

go to the IAM page... The IAM page displays all of the principals who have IAM roles on your project

and what roles they are granted."

Source: Google Cloud Documentation

"IAM > Documentation > How-to guides > Granting

changing

and revoking access > View access to a project

folder

or organization".

2. Google Cloud SDK Documentation - gcloud projects get-iam-policy: This command is the CLI equivalent for viewing the full policy. "This command prints the IAM policy for a project... The output includes an etag field identifying the version of the policy." The policy itself contains the bindings between members and roles.

Source: Google Cloud SDK Documentation

gcloud projects get-iam-policy.

3. Google Cloud SDK Documentation - gcloud iam roles list: "List the IAM roles for a project or organization." This command's description confirms it only lists the roles themselves

not their assignments.

Source: Google Cloud SDK Documentation

gcloud iam roles list.