Stay organized with collections
Save and categorize content based on your preferences.
Google Cloud Private Marketplace contains curated lists of products, called collections, that have
met your organization's requirements for use and that are available to either
specified projects and folders or to your entire organization.
When you turn Private Marketplace on for your organization, your users can only
access the products in the collections that you've shared with them, and they
can't deploy products that you haven't shared with them. Private Marketplace uses
a fail open governance model, with an estimated 99.994% reliability.
We recommend that you turn on
Product Requests to allow
your users to request access to specific Google Cloud Marketplace products.
Required IAM roles
To manage your private marketplace as an administrator, you must have the
following roles for your Google Cloud organization:
Action
Roles
Level at which role is assigned
Turn on Private Marketplace
Commerce Organization Governance Admin (roles/commerceorggovernance.admin) AND
Organization Viewer (roles/resourcemanager.organizationViewer) roles
Organization level
Manage collections
Commerce Organization Governance Admin (roles/commerceorggovernance.admin) AND
Organization Viewer (roles/resourcemanager.organizationViewer) roles
Organization level
Supported products
Private Marketplace supports third-party Cloud Marketplace product listings
that are sold by independent software vendors (ISVs) and governed by the
Google Cloud Marketplace Terms of Service.
For the following types of products, if they aren't approved for your users,
Private Marketplace blocks your users from using the API to deploy them:
Kubernetes apps and container images deployed onto Google Kubernetes Engine (GKE)
clusters that are version 1.32.1-gke.1376000 or later
Container images deployed to Cloud Run
Virtual image disk creations
Procurable Vertex AI models
Procurable BigQuery datasets
For VMs deployed to Compute Engine, Private Marketplace identifies VMs by their
product service name. For container images, Private Marketplace identifies images
as follows:
For images referenced directly in Cloud Marketplace listings,
Private Marketplace identifies the container images by the URL that links to
them.
For images that match images available through Cloud Marketplace,
Private Marketplace identifies the container images by their Secure Hash
Algorithm (SHA) value.
For images deployed to Cloud Run, Private Marketplace identifies
images by checking their metadata for Cloud Marketplace annotations.
Unsupported products
Private Marketplace doesn't support the following types of products:
Products owned and managed by Google, such as Maps, Firebase, Mandiant, or
Kubeflow
Products listed as offered by:
Google
Google Enterprise API
Google Cloud Platform
Third-party and open source datasets and AI models that require you to have
BigQuery or Vertex AI Identity and Access Management (IAM)
permissions to access them
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[],[],null,["# Private Marketplace\n\nGoogle Cloud Private Marketplace contains curated lists of products, called *collections*, that have\nmet your organization's requirements for use and that are available to either\nspecified projects and folders or to your entire organization.\n| **Note:** When you turn on and turn off Google Cloud Private Marketplace, you turn it on and off at the organization level.\n\nWhen you turn Private Marketplace on for your organization, your users can only\naccess the products in the collections that you've shared with them, and they\ncan't deploy products that you haven't shared with them. Private Marketplace uses\na fail open governance model, with an estimated 99.994% reliability.\n| **Note:** Starting March 26, 2025, Google Cloud Private Marketplace can block new API deployments of third-party Cloud Marketplace products that aren't in a shared collection. After March 26, 2025, if you turn on Private Marketplace for the first time, it blocks these deployments by default. However, if you've previously turned on Private Marketplace at any point, you must upgrade Private Marketplace to ensure that it properly blocks API deployments of unapproved products. For more information, see [Upgrade Google Cloud Private Marketplace's enforcement capabilities](/marketplace/docs/migrations/private-marketplace-api-enforcement).\n\nWe recommend that you turn on\n[Product Requests](/marketplace/docs/governance/procurement-requests) to allow\nyour users to request access to specific Google Cloud Marketplace products.\n\nRequired IAM roles\n------------------\n\nTo manage your private marketplace as an administrator, you must have the\nfollowing roles for your Google Cloud organization:\n\nSupported products\n------------------\n\nPrivate Marketplace supports third-party Cloud Marketplace product listings\nthat are sold by independent software vendors (ISVs) and governed by the\n[Google Cloud Marketplace Terms of Service](/terms/marketplace/launcher).\n\nFor the following types of products, if they aren't approved for your users,\nPrivate Marketplace blocks your users from using the API to deploy them:\n\n- Kubernetes apps and container images deployed onto Google Kubernetes Engine (GKE) clusters that are version 1.32.1-gke.1376000 or later\n- Container images deployed to Cloud Run\n- Virtual image disk creations\n- Procurable Vertex AI models\n- Procurable BigQuery datasets\n\n| **Note:** After you've approved a procurable Vertex AI model through Private Marketplace, you can't revoke that approval. If you use Private Marketplace to attempt to revoke approval for a procurable Vertex AI model, the model no longer appears as approved to your users in Private Marketplace, but they're still able to procure it.\n\nFor VMs deployed to Compute Engine, Private Marketplace identifies VMs by their\nproduct service name. For container images, Private Marketplace identifies images\nas follows:\n\n- For images referenced directly in Cloud Marketplace listings, Private Marketplace identifies the container images by the URL that links to them.\n- For images that match images available through Cloud Marketplace, Private Marketplace identifies the container images by their Secure Hash Algorithm (SHA) value.\n- For images deployed to Cloud Run, Private Marketplace identifies images by checking their metadata for Cloud Marketplace annotations.\n\n| **Note:** Private Marketplace doesn't block Google Kubernetes Engine images that are deployed to non-Cloud Marketplace repositories and referenced by tag. To block these images, use [Binary Authorization](/binary-authorization/docs/overview).\n\n### Unsupported products\n\nPrivate Marketplace doesn't support the following types of products:\n\n- Google-provided [public OS images](/compute/docs/images#os-compute-support)\n- Google-provided [public datasets](https://console.cloud.google.com/marketplace/browse?filter=partner:BigQuery%20Public%20Data)\n- Products owned and managed by Google, such as Maps, Firebase, Mandiant, or Kubeflow\n- Products listed as offered by:\n - Google\n - Google Enterprise API\n - Google Cloud Platform\n- Third-party and open source datasets and AI models that require you to have BigQuery or Vertex AI Identity and Access Management (IAM) permissions to access them\n- [The API Library](https://console.cloud.google.com/apis/library)\n\nGet started with Google Cloud Private Marketplace\n-------------------------------------------------\n\nTo set up your organization with Private Marketplace, complete the following\nsteps:\n\n1. [Create and publish a default collection](/marketplace/docs/governance/create-default-collection)\n for your organization.\n\n2. Optionally, to share additional Cloud Marketplace products with specific\n folders or projects, you can\n [create additional collections](/marketplace/docs/governance/curate-collection)\n and [share them](/marketplace/docs/governance/share-collection).\n\n3. Optionally,\n [turn on Product Requests](/marketplace/docs/governance/procurement-requests).\n\n4. [Turn on Google Cloud Private Marketplace](/marketplace/docs/governance/enable-private-marketplace)."]]