I've been attempting to understand this but have had no luck. Surprisingly challenging to accomplish compared to AWS.
I'm working on a Google Cloud Platform (GCP) project that includes several active Compute Instances and other services.
I must grant an outside development team root access to just one compute instance, but not to any other services.
When I choose the instance and add the user as Compute Admin (Full control of all Compute Engine resources) in the "Compute Engine" view, he is still unable to ssh into the instance.
Got a bug: "compute.instance is necessary.
I then went ahead and assigned that person a Role that contained that permission.
I received the error message "User does not have access to service account."
What on earth must be done in order to grant a role access to just one Compute Instance in GCP?
On AWS, there is a certain Role that can be granted access to a single resource, however in this instance, it appears that this is the case.
Concerns #2 Moreover, if the "Permissions" sidebar in the "Compute Engine" view doesn't actually grant any permissions, what is its purpose?