Cloud Billing 账号在 Google Cloud 中设置，用于定义一组给定 Google Cloud 资源和 Google Maps Platform API 的付款方。Cloud Billing 账号与 Google 付款资料相关联。Cloud Billing 和 Google 付款的访问权限在两个不同的系统中进行配置，具体取决于您想要提供的访问权限类型。
[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-18。"],[[["\u003cp\u003eThis document outlines how to configure access permissions for Cloud Billing accounts, which determine who pays for Google Cloud and Google Maps Platform resources.\u003c/p\u003e\n"],["\u003cp\u003eCloud Billing access is managed via roles, and each account should have at least one Billing Account Administrator, with the recommendation to have multiple for redundancy.\u003c/p\u003e\n"],["\u003cp\u003eUsers can be granted different access levels based on their required tasks, such as tracking spend or reviewing invoices, by assigning them predefined or custom roles.\u003c/p\u003e\n"],["\u003cp\u003eAccess to Cloud Billing can be managed at the organization, Cloud Billing account, folder, or project level, offering flexibility in controlling who can manage billing.\u003c/p\u003e\n"],["\u003cp\u003eManaging user permissions involves reviewing, adding, or removing roles through the Google Cloud console's "Manage billing accounts" or "Account management" pages.\u003c/p\u003e\n"]]],[],null,["# Manage access to Cloud Billing accounts\n\n\u003cbr /\u003e\n\nThis document describes how to configure access permissions for\nCloud Billing accounts.\n\nA Cloud Billing account is set up in Google Cloud and defines who\npays for a given set of Google Cloud resources and\nGoogle Maps Platform APIs. A Cloud Billing account is connected to a\nGoogle payments profile. Access permissions for Cloud Billing and\nGoogle payments are configured in two different systems depending on what type\nof access you want to provide.\n\nIf you need to configure access permissions\nfor a Google payments profile, see\n[Manage Google payments users, permissions, and notification settings](/billing/docs/how-to/modify-contacts).\n| **Note:** Changing access permissions for Cloud Billing accounts is considered a sensitive action; in some cases, you might need to reauthenticate before you can initiate the action. For more information, see [Sensitive actions](/docs/authentication/reauthentication#sensitive-actions).\n\nCloud Billing account user permissions\n--------------------------------------\n\nEach Cloud Billing account needs at least one\n[Billing Account Administrator](/billing/docs/how-to/billing-access#overview_of_billing_roles_in).\nBy default, the person who creates the Cloud Billing account is a\nBilling Account Administrator for that billing account. For redundancy, we\nrecommend that you configure more than one administrator on each\nCloud Billing account.\n\nYou can grant different levels of access to billing accounts to your users,\ndepending on what they need to do (for example, track spend, review cost\nanomalies, manage budgets, optimize costs, or review and pay invoices).\n\nYou don't directly give users permissions; instead, you grant them *roles*,\nwhich have one or more permissions bundled within them. You can grant one or\nmore roles on the same resource.\n\nIf you have an organization associated with your Google Cloud account,\nyou can grant or limit access to Cloud Billing by setting an\nIAM policy at the organization level. You can also set\nCloud Billing IAM policy on the Cloud Billing\naccount level or limit billing access to a folder or project level.\n\n### Before you begin\n\nFamiliarize yourself with the roles and permissions available in\nCloud Billing.\n\n- For information on predefined billing roles and their permissions, see [Cloud Billing access control \\& permissions](/billing/docs/how-to/billing-access).\n- If the permissions available in the [predefined roles](/billing/docs/how-to/billing-access) don't fit your needs, create and use custom roles that grant more specific sets of permissions. For more information, see [Create custom roles for billing](/billing/docs/how-to/custom-roles).\n\n### Permissions required for this task\n\nTo manage user permissions on a Cloud Billing account, you need a\nrole that includes the following\n[permissions](/iam/docs/understanding-roles#billing-roles)\non your Cloud Billing account:\n\n- [`billing.accounts.getIamPolicy`](/billing/docs/how-to/custom-roles#policy) - To view roles on account, including associated usernames.\n- [`billing.accounts.setIamPolicy`](/billing/docs/how-to/custom-roles#policy) - To grant roles to principals on a Cloud Billing account.\n\nTo gain this permission using a predefined role, ask your administrator to\ngrant you the following role on the Cloud Billing account:\n\n- [Billing Account Administrator](/billing/docs/how-to/billing-access)\n\n### Update user permissions for a Cloud Billing account\n\nTo review, add, or remove Cloud Billing permissions:\n\n1. Sign in to the **Manage billing accounts** page in the Google Cloud console.\n\n [Sign in to Manage billing accounts](https://console.cloud.google.com/billing)\n2. Select the row of a Cloud Billing account to view the principals\n and permissions for the billing account in the info panel. If\n the panel isn't already visible, click **Show info panel** to open it.\n\nAlternatively, you can access a Cloud Billing account's permissions\non its **Account management** page:\n\n1. In the Google Cloud console, go to the **Account management** page for\n the Cloud Billing account.\n\n [Go to Account management in Cloud Billing](https://console.cloud.google.com/billing/manage)\n2. At the prompt, choose the Cloud Billing account that\n you want to view.\n\n3. In the **Info** panel, review and edit the **Principals** and\n **Permissions** for the selected Cloud Billing account. If\n the panel isn't already visible, click **Show info panel** to open it.\n\nThe **Permissions** panel is organized by role, along with the number of\nprincipals that have each role. For example, in your permissions panel, you\nmight see\n\n- Billing Account Administrator (2 principals)\n- Billing Account User (6 principals)\n- Billing Account Viewer (10 principals)\n\nYou can grant multiple roles to the same principal.\n\nTo view the list of principals assigned to a role, expand the **role\nnode**.\n\nTo find a specific principal and see which roles are granted to that\nprincipal, use the filter_list **Filter** and enter the email address of the principal.\n\nTo update Cloud Billing permissions, in the **Permissions** panel,\ndo any of the following:\n\n- To add new principals and assign permissions:\n\n 1. Click **Add principal**.\n 2. In the **New principals** field, enter one or more email addresses for the principals you want to add. You can add individuals, service accounts, or Google Groups as principals.\n 3. Select a permission for the principals from **Select a role**.\n 4. If needed, you can **Add another role** to grant additional permissions to the principals.\n 5. When done, click **Save**.\n- To edit a principal's billing permissions:\n\n 1. Use the filter_list **Filter** to locate a specific principal or role.\n 2. In the list, locate the principal you want to edit.\n 3. In the principal's row, click **Edit**\n edit.\n\n The **Edit permissions** panel opens, specific to the selected principal\n and resource (Cloud Billing account) that you're viewing.\n 4. In the **Edit permissions** panel, add, edit, and delete roles for the\n selected principal and resource.\n\n 5. When done, click **Save**.\n\n- To revoke a role from a principal:\n\n 1. Use the filter_list **Filter** to locate a specific principal or role.\n 2. In the list, locate the principal whose role you want to revoke.\n 3. In the principal's row, click **Delete** delete.\n 4. Confirm your action.\n\n | **Note:** This action revokes only a single role. The principal retains their other roles.\n\nGoogle payments user permissions\n--------------------------------\n\nEach Google payments account needs at least one\n[*Admin with all permissions*](/billing/docs/how-to/modify-contacts#permissions),\nand one\n[*Primary Contact*](/billing/docs/how-to/modify-contacts#primary-contact)\n(the person Google will contact with any payments-related\nalerts or questions). By default, the person who creates the Google payments\naccount is both the *Admin with all permissions* , and the *Primary Contact*.\nFor redundancy, we recommend that you set more than one Google payments\nadministrator.\n\nYou can add users to any Google payments *business* profile\nyou manage, and grant different levels of access to your users depending on\nwhat they need to do (for example, manage payment methods or\npayments profile details). You can also configure user email\npreferences for receiving billing and payments emails.\n\nFor more information, see\n[Manage Google payments users, permissions, and notification settings](/billing/docs/how-to/modify-contacts).\n\nRelated topics\n--------------\n\n- [Manage Google payments users, permissions, and notification settings](/billing/docs/how-to/modify-contacts)\n- [Create custom roles for Cloud Billing](/billing/docs/how-to/custom-roles)\n- [Cloud Billing API access control](/billing/v1/how-tos/access-control)\n- [Granting, changing, and revoking Access](/iam/docs/granting-changing-revoking-access)\n\nTry it for yourself\n-------------------\n\n\nIf you're new to Google Cloud, create an account to evaluate how our\nproducts perform in real-world scenarios. New customers also get $300 in\nfree credits to run, test, and deploy workloads.\n[Get started for free](https://console.cloud.google.com/freetrial)"]]
