From e6e682f54d0343e794ea5c788f0fbe43fa9a1587 Mon Sep 17 00:00:00 2001 From: Zhanghao Wu Date: Thu, 12 Oct 2023 18:17:26 -0700 Subject: [PATCH] [GCP] Fix minimal roles for users (#2704) Fix GCP minimal roles for users --- docs/source/cloud-setup/cloud-permissions/gcp.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/source/cloud-setup/cloud-permissions/gcp.rst b/docs/source/cloud-setup/cloud-permissions/gcp.rst index a92d73491d4..fa75750e711 100644 --- a/docs/source/cloud-setup/cloud-permissions/gcp.rst +++ b/docs/source/cloud-setup/cloud-permissions/gcp.rst @@ -28,7 +28,7 @@ The easiest way to grant permissions to a user access your GCP project without t roles/iam.securityAdmin .. note:: - If the ``roles/iam.securityAdmin`` role is undesirable, you can do the following. First, include the role and have any user (e.g., the admin) run ``sky launch --cloud gcp`` successfully once. This is to create the necessary service account. Then, remove the role from the list above. + If the ``roles/iam.securityAdmin`` role is undesirable, you can do the following. First, include the role and have any user (e.g., the admin) run ``sky launch --cloud gcp`` successfully once. This is to create the necessary service account. Then, replace the role ``roles/iam.securityAdmin`` with ``roles/iam.roleViewer`` in the list above. Optionally, to use TPUs, add the following role: