Skip to main content

GroupRole

The access level assigned to a group within an organization.

Every group has exactly one role that determines what its members can do:

  • ORGANIZATION_ADMIN — Full administrative access across all projects.
  • CUSTOM — Fine-grained, project-level access grants. Use this when you need to give a team access to specific projects without organization-wide permissions.
enum GroupRole {
  ORGANIZATION_ADMIN
  CUSTOM
}

Values​

GroupRole.ORGANIZATION_ADMIN {#organization-admin}​

Full administrative access to all projects and settings in the organization. Members can manage groups, service accounts, billing, and all infrastructure.

GroupRole.CUSTOM {#custom}​

Project-level access grants. Members only see projects explicitly assigned to this group, with either project_admin or project_viewer permissions per project.

Member Of​

Group object ● GroupViewer object