Policy Intelligence

Permissions management can be a time-consuming task without the right tools in place. IAM Recommender helps admins remove unwanted access to Google Cloud resources by using machine learning to make smart access control recommendations. With Recommender, security teams can automatically detect overly permissive access and rightsize them based on similar users in the organization and their access patterns. For example, if a set of permissions hasn’t been used in 90 days, the tool will recommend that you revoke the role. And, if only a subset of a role's permissions hasn’t been used in 90 days, the feature will recommend that you grant a specific, less-permissive role that best fits the access pattern. This results in a smaller attack surface and reduces risk.

When running compliance reports or doing security checks, it can be hard to quickly find answers to important questions around access. But with a few simple clicks in Policy Analyzer, you can answer access questions such as, “Who has access to this resource and what can they do?” Policy Analyzer automates challenging tasks like group expansion and role to permission expansion while accounting for the resource and policy hierarchy.