Assign roles to a billing subaccount

You can use the Partner Sales Console to grant roles to your team and customers that allow them to access billing subaccounts. Or, if you're no longer working with a customer, you can remove their role and access.

What roles can you assign?

Role	What the role allows
Billing Account Creator	Create new primary billing accounts.
Billing Account Administrator	Manage billing accounts (but not create them).
Billing Account Costs Manager	Manage budgets and view, analyze, and export cost information of a billing account.
Billing Account Viewer	View billing account cost information and transactions.
Billing Account User	Link projects to billing accounts.

You can also assign custom roles that you create in Google Cloud. For details about custom roles, go to Create Custom Roles for Billing.

Give a user a role for a billing subaccount

Before you begin: You must have the billing.accounts.getSpendingInformation permission on the reseller Cloud Billing account or a subaccount. Learn more

1. Sign in to the Partner Sales Console.
2. Click Customers and select the customer that you want to update.
3. For Quick links, click Configure billing subaccounts.
4. Click Subaccounts and select the billing subaccount.
5. Click Add member.
6. Enter the user's email address.

   If the email address is rejected, review the troubleshooting tips later on this page.

7. Select the role or roles that you want to assign to the user and click Save.

Remove a user's role & access

Before you begin: You must have the billing.accounts.getSpendingInformation permission on the reseller Cloud Billing account or a subaccount. Learn more

1. Sign in to the Partner Sales Console.
2. Click Customers and select the customer you want to update.
3. For Quick links, click Configure billing subaccounts.
4. Click Subaccounts and select the billing subaccount.
5. Next to the role that you want to change, click the Down arrow  and next to the user, click Edit .
6. Uncheck the boxes next to the roles that you want to remove and click Save.

Troubleshooting

If an email address is rejected, make sure that you're using one of the following addresses:

• A Google Workspace or Cloud Identity account.
• A free account used to sign in to Google products, such as YouTube or Google Drive.
• A service account. For details, go to Service accounts overview.
• A group in Google Groups.

If you still have issues, ask the user to create a new Google Account using the email address that you're trying to add. For details, go to How do I create a new Google Account?.