Restricts admin access to one or more billing profiles
We are a group of companies sharing a common DoIT console space.
Each company has a unique billing profile. Each company has one or more Google billing accounts associated with its billing profile.
We need the administrators of each company to be able to view and configure their own invoices, billing profiles, etc., but not those of other companies.
They currently have administrator privileges and can view and modify the invoices and all settings for all companies. We would like to associate administrator rights with a specific billing profile so that administrators can only view and modify what is linked to that profile.
Samuel Delplace
shared this idea
-
Luis Andres Mendez Miranda commented
We have the exact same setup: a group of companies (multiple organizations) sharing one DoiT console, each with its own billing profile. Admins/users scoped to one organization currently see ALL invoices in the tenant, including other entities' — a confidentiality problem, especially for external staff. Two things we need: (1) invoice visibility scoped by organization/billing profile (this idea); (2) an "Invoices Read Only" permission — today the only option is "Invoice Viewer" which also grants payment capability, so we can't give view-only access. Please include both.