The IAM permissions required for purchasing the following solutions from Google
Share
Services
## Change
The IAM permissions required for purchasing the following solutions from Google Cloud Marketplace have changed:
* Apache Kafka® on Confluent Cloud™
* DataStax Astra for Apache Cassandra
* Elasticsearch Service on Elastic Cloud
* NetApp Cloud Volumes Service
* Redis Enterprise Cloud
If you use [custom roles](https://cloud.google.com/iam/docs/understanding-custom-roles) to purchase these solutions, you must update the custom roles to include the permissions described in[Access Control for Google Cloud Marketplace](https://cloud.google.com/marketplace/docs/access-control).
Specifically, if your custom role includes the `billing.subscriptions.create` permission, you must update it to include the `consumerprocurement.orders.place` and the `consumerprocurement.accounts.create` permissions.
If you use the[Billing Administrator](https://cloud.google.com/iam/docs/understanding-roles#billing-roles)role to purchase these solutions, you don't need to take any action.