I want to provide a self-service portal for our developers where they can request a new GCP project. Can I use Terraform to programmatically create a project and set up the billing and initial APIs?
I am concerned about the permissions required to create projects. Does the Terraform service account need to be an organization-level admin for this to work?
Terraform creates Google Cloud projects via the google_project resource, requiring a service account with the Project Creator IAM role assigned at the organization level.
1 answer
Yes, Terraform is fully capable of provisioning GCP projects programmatically using the google_project resource. However, to execute this successfully, your service account must be granted the Project Creator role at the organization level, as project creation is an administrative function that exists outside the scope of individual folder or project-level permissions.
