In this Article
This article explains how to create a custom role, assign reseller permissions to it, and configure the SaaSify seller account for reseller setup.
Prerequisites
Make sure the user should have Google Cloud Organization Administrator permissions assigned
Create a Custom Role and Assign Reseller Permissions
To create a Custom Role in GCP producer potal, Please follow the below steps:
In the Google Cloud Console, go to the Roles page.
Use the drop-down list at the top to select the organization where you want to create the role.
Click Create Role.
Provide a title for the Custom Role: “GCP Reseller Admin”
If required, provide a Description.
ID will automatically generate. If not Provide the ID: “GCPResellerAdmin”
Select the Role launch stage as General Availability.
Click on + Add Permissions:
commercebusinessenablement.leadgenConfig.get
commercebusinessenablement.leadgenConfig.update
commercebusinessenablement.partnerAccounts.get
commercebusinessenablement.partnerAccounts.list
commercebusinessenablement.partnerInfo.get
commercebusinessenablement.resellerConfig.get
commercebusinessenablement.resellerConfig.update
commercebusinessenablement.resellerPrivateOfferPlans.cancel
commercebusinessenablement.resellerPrivateOfferPlans.create
commercebusinessenablement.resellerPrivateOfferPlans.delete
commercebusinessenablement.resellerPrivateOfferPlans.get
commercebusinessenablement.resellerPrivateOfferPlans.list
commercebusinessenablement.resellerPrivateOfferPlans.publish
commercebusinessenablement.resellerPrivateOfferPlans.update
commercebusinessenablement.resellerRestrictions.list
commercebusinessenablement.resellerRestrictions.update
Click Create.
Assign the Custom Role to service accounts
To assign Custom Role to service accounts, Please follow the below steps:
Note:
Before proceeding with the steps below, please ensure that you have received both service accounts from the SaaSify PSM for example:
• SVC account/ Automation user account- saasify-pvtoffer-svc@spektrasystems.com
• Service account - saasify@spektrasystems-public.iam.gserviceaccount.com)
Go to the IAM section in the Google Cloud Console.
Use the drop-down list at the top of the page to ensure you’ve selected the correct organization where the custom role was created.
Grant Access to the First Service Account
Click Grant Access.
Under Add principals, enter the first service account provided by the SaaSify PSM.
Under Assign roles, search for and select the custom role you created in the previous step.
Click Save.
Grant Access to the Second Service Account
Click Grant Access again.
Under Add principals, enter the second service account provided by the SaaSify PSM.
Under Assign roles, search for and select the custom role you created in the previous step.
Click Save.
SaaSify GCP Seller Account Configuration for Reseller
Log in to your SaaSify Tenant with the Publisher Admin Role.
Navigate to Seller Accounts under Providers in SaaSify.
Select the Seller Account configured for GCP.
On the GCP Seller Account list view, click on the Edit option under the Actions menu.
Open the existing configuration by clicking Edit under the Actions column.
Enter the Organization ID and Partner ID.
Note:
To retrieve Organization & Partner Account ID from GCP Portal
• Navigate to GCP Portal and go to Reseller private offer plans from left menu
• Copy Organization ID and Partner Account ID from the URL
Click on Validate.
Click Save after validation is successful.