All users have G Suite accounts. You want to grant some G Suite users access to your Cloud project. What should you do?

The most straightforward and correct method is to grant IAM roles directly to each user's G Suite email address. Google Cloud's Identity and Access Management (IAM) integrates seamlessly with G Suite (now Google Workspace) identities. When you assign a role to a G Suite email, that user immediately gains the specified permissions in your Cloud project. Enabling Cloud Identity is unnecessary here because the users already have G Suite accounts, which are managed identities. Creating a CSV and using gcloud to convert them into Google Cloud accounts is not a standard or required step; G Suite users are already recognized identities. Adding users to a specific email group like cloud-console-users@yourdomain.com in the G Suite console does not automatically grant Cloud Platform access; IAM roles must still be explicitly assigned.