// Module included in the following assemblies:
//
// * osd_planning/gcp-ccs.adoc
:_mod-docs-content-type: CONCEPT
[id="ccs-gcp-permissions-marketplace-billing_{context}"]

= Roles required for {GCP} Marketplace billing

[role="_abstract"]
To deploy an {product-title} cluster using {GCP} Marketplace-based billing, your {GCP} account must first be prepared. This involves accepting the {GCP} Marketplace terms and agreements for the OpenShift Dedicated product listing. Contact your {GCP} administrator who has the `Consumer Procurement Entitlement Manager` role to enable {product-title} cluster deployments in your {GCP} project.

To automate the checking and acceptance of these terms and agreements during OpenShift Dedicated cluster creation, you must grant the `Consumer Procurement Entitlement Viewer` role to the {GCP} identity (user or service account) that is creating the cluster. The `Consumer Procurement Entitlement Viewer` role includes the necessary permissions to check for existing consent to the {GCP} terms and agreements.

The following table lists the permissions that are included in the `Consumer Procurement Entitlement Viewer` role.

.Required permissions in the Consumer Procurement Entitlement Viewer role
[cols="2a,3a,3a",options="header"]
|===

|Role and description|Console role name|Permissions

|link:https://docs.cloud.google.com/iam/docs/roles-permissions/consumerprocurement[Consumer Procurement Entitlement Viewer]

Allows for the inspecting of entitlements and service states for a consumer project.
|`consumerprocurement.entitlementViewer`
|commerceoffercatalog.offers.get
consumerprocurement.consents.check
consumerprocurement.consents.list
consumerprocurement.entitlements.get
consumerprocurement.entitlements.list
consumerprocurement.freeTrials.get
consumerprocurement.freeTrials.list
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.consumerpolicy.analyze
serviceusage.consumerpolicy.get
serviceusage.effectivepolicy.get
serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers
serviceusage.services.get
serviceusage.services.list
serviceusage.values.test

|===

For more information about {GCP} Marketplace roles and permissions, see link:https://docs.cloud.google.com/marketplace/docs/access-control[Access control with IAM] in the {GCP} documentation.



