---
id: google-cloud-iam
version: "2.24.1"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# google-cloud-iam — Google Cloud Iam API client library

License: permissive · Maintenance: active · Downloads: 11.9M/mo

## What it is and what it does

This package is the official Python client for Google Cloud IAM, a managed service that controls who (identity) has what access (roles) to which resources in Google Cloud. It wraps the IAM API behind a Pythonic interface, letting you create and manage service accounts, assign roles to principals, and query access policies programmatically rather than through the console.

The library is built on top of google-api-core and google-auth, which handle the gRPC transport and credential management. It's part of the broader google-cloud-python ecosystem and is actively maintained by Google. The package supports current Python versions (3.10 and later) and carries no known security vulnerabilities.

Use it for:

- Automate service account creation and lifecycle management in CI/CD pipelines or infrastructure-as-code workflows.
- Programmatically grant and revoke IAM roles for users, groups, or service accounts across multiple projects.
- Query and audit access policies to verify who has permissions to specific resources.
- Integrate IAM operations into custom tooling or multi-cloud orchestration platforms.
- Manage authentication credentials for applications running on Google Cloud by creating and rotating service account keys.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Provides a Python client library for Google Cloud Identity and Access Management (IAM), enabling programmatic management of service accounts, roles, and access control policies for Google Cloud resources.

Yes. This is the official, actively maintained Python client for Google Cloud IAM with low install friction, no known vulnerabilities, and a permissive license. Install it if you need to manage IAM resources programmatically in Google Cloud—it's the standard choice for this task.

## Install

pip install google-cloud-iam
uv add google-cloud-iam
poetry add google-cloud-iam

## Installing google-cloud-iam

Before you install: Low install friction with a pure-wheel distribution. Actively maintained as of 8 days ago with recent commits. Requires 6 runtime dependencies including google-api-core, google-auth, grpcio, and protobuf—all standard Google Cloud client library components.

License in practice: Apache-2.0 permissive license allows commercial use, modification, and distribution with minimal restrictions, making it suitable for most projects.

Quickstart:

pip install google-cloud-iam

from google.cloud import iam_v1

client = iam_v1.IAMClient()
resource = "projects/PROJECT_ID"
policy = client.get_iam_policy(request={"resource": resource})

Requires Python >= 3.10; Google Cloud project setup and authentication credentials (via google-auth) must be configured before making API calls.

Verify before relying:

- Specific IAM operations supported (e.g., service account creation, role binding, policy updates) beyond the generic client interface.
- Performance characteristics and rate limits for bulk IAM operations.
- Integration patterns with other Google Cloud client libraries in the same ecosystem.

## Package facts

- License: Apache-2.0 (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 11.9M/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

google cloud iam client, service account management python, google cloud access control, iam roles and permissions api, google cloud authentication service accounts, identity access management google cloud, python iam api client, google-cloud, iam-access-control, service-accounts

[View on SkillFed](https://skillfed.io/packages/google-cloud-iam) · [View on PyPI](https://pypi.org/project/google-cloud-iam/)