Creating a Custom Role in GCP
Complete the following steps to create a custom role in GCP:
Go to GCP Console & search for IAM & Admin and click Roles.
Click on Create Role.
Create Custom Role for Storage Buckets.
Add title for the role and click Add Permission.
Search for Storage Admin. Select the checkbox and click OK.
Search for buckets in the filter and select two required permissions:
storage.buckets.list
Storage.buckets.getIamPolicy
Click Add.
Click Create.
Role would have been created now.
Create Custom Role for internal ranges.
Add title for the role and click Add Permission.
Search for Storage Admin and click the checkbox and click OK.
Search for networkconnectivity in the filter and select 13 needed permissions:
networkconnectivity.internalRanges.create
networkconnectivity.internalRanges.delete
networkconnectivity.internalRanges.get
Networkconnectivity.internalRanges.getIamPolicy
networkconnectivity.internalRanges.list
networkconnectivity.internalRanges.setIamPolicy
networkconnectivity.internalRanges.update
networkconnectivity.locations.get
networkconnectivity.locations.list
networkconnectivity.operations.cancel
networkconnectivity.operations.delete
networkconnectivity.operations.get
networkconnectivity.operations.list
Click Create
The role is created.