Maintained with ☕️ by
IcePanel logo

Billing account permissions now streamline access to Google payments profiles and payments accounts

Share

Services

## Change Change **Billing account permissions now streamline access to Google payments profiles and payments accounts** We've launched a billing IAM permissions update that simplifies and streamlines Cloud Billing account access to the associated[Google payments profiles and accounts](https://cloud.google.com/billing/docs/concepts#billing%5Faccount), for users who have the `billing.accounts.updatePaymentInfo` permission on their Cloud Billing account. **Prior to this update**: _While working in the Cloud Billing console_, to access and edit the associated Google payments profile and account information, all Cloud Billing account users **needed _two_ sets of permissions**: * Identity and Access Management (IAM)[permissions on the Cloud Billing account](https://cloud.google.com/billing/docs/how-to/billing-access)to access and manage the billing account. * Edit or Admin[access permissions on the associated Google payments profile](https://cloud.google.com/billing/docs/how-to/modify-contacts#permissions)in order to add and edit payment methods, make a manual payment, and update payments profile info such as the business name, address, tax info, and payments account settings. **After this permissions update**: Cloud Billing account users with the `billing.accounts.updatePaymentInfo` permission on the billing account can access and edit Google payments profile and account information directly from the Cloud Billing console, without needing additional permissions on the payments profile itself. This includes users with the[Billing Account Administrator role](https://cloud.google.com/billing/docs/how-to/billing-access#billing.admin)(`roles/billing.admin`) and those granted this permission via a[custom role](https://cloud.google.com/billing/docs/how-to/custom-roles#payment%5Finformation). Note that this permissions update applies only to Cloud Billing accounts associated with an[Organization (or Business)](https://cloud.google.com/billing/docs/concepts#payments%5Fprofile%5Ftypes)Google payments profile type. You can verify your account type on the[Payment settings](https://console.cloud.google.com/billing/profile)page in the Cloud Billing console. With the `billing.accounts.updatePaymentInfo` permission on the billing account, users can do the following: * [View payments history](https://cloud.google.com/billing/docs/how-to/view-history) and[documents](https://cloud.google.com/billing/docs/how-to/get-invoice) related to the associated Google payments profile. * [Add and edit payment methods](https://cloud.google.com/billing/docs/how-to/payment-methods) on a self-serve (online) billing account. * [Make a manual payment](https://cloud.google.com/billing/docs/how-to/manual-payment) to a self-serve (online) billing account. * [Update payments profile info](https://cloud.google.com/billing/docs/how-to/modify-billing-account)such as the business name, address, tax info, and payments account settings. Billing account users with the `billing.accounts.updatePaymentInfo` permission won't have the _Manage users_ or _Admin with all permissions_ level of access on the Google payments profile. To _fully manage_ a payments profile and gain[_Manage users_ and _Admin_ permissions](https://cloud.google.com/billing/docs/how-to/modify-contacts#permissions), billing account users still require additional[_Google payments user permissions_](https://cloud.google.com/billing/docs/how-to/modify-contacts)granted on the associated payments profile.