Enable Compute OS login

[arun kumar]

Hello Team,

Good Morning,

I need you help on the below queries 

What is the difference between compute os-login and Compute os-login admin?

How do i limit user access to particular instance only using OSLOGIN.

Is there any way to limit the user access to sudo with OSLOGIN/any IAM Compute permission for set of instances.

Thanks in advance .

Thanks,

Arun J 

[Max Illfelder]

Granting roles/compute.osAdminLogin provides the permission to log in to a VM and also to run sudo. Granting roles/compute.osLogin provides login permissions to the VM without administrative access. To provide access to a user without granting sudo, you can grant the osLogin role on the instance along with permission to act as the service account the VM is running as.

Note that users granted the owner, editor, or instance admin roles have the osAdminLogin role included. You can see more documentation about the OS Login specific permissions here: https://cloud.google.com/compute/docs/instances/managing-instance-access#configure_users