GCP Folder & Project Creation

Audience: Cloud Operations and Platform Engineering teams.

Purpose: Standard operating procedure for creating new GCP folders and projects.

---

Overview

This guide covers the manual process for creating folders and projects for new customers in Google Cloud, including group creation, permission assignment, and repository updates.

---

Prerequisites

Requirement	Description
Google Workspace Admin	Access to admin.google.com
GCP Resource Manager	Access to Resource Manager
Billing Permissions	Burwood billing account administrator role

---

Procedure

Step 1: Create Google Workspace Group

Group Creation Steps

1. Log into admin.google.com

2. Navigate to Directory → Groups → Create Group

3. Configure the group:

Field	Value
Group Name	Descriptive name
Group Email	gcp-[groupname]-admins@tamu.edu
Group Owners	Search and select project admins
Type	✓ Security

4. Click Next

5. Configure access:

Setting	Value
Access Type	Restricted
Who can join	Only invited users

6. Click Next → Create Group

Step 2: Create Folder (if needed)

Folder Creation Steps

1. Log into Resource Manager

2. For a top-level folder:

   • Click Create Folder
   • Enter folder name
   • Confirm Organization: tamu.edu
   • Confirm Location: organization root

3. For a subfolder:

   • Click Create Folder
   • Enter folder name
   • Confirm Organization: tamu.edu
   • Click Browse to select parent folder

4. Click Create

Step 3: Create Project

Project Creation Steps

1. Click Create Project

2. Configure project:

Field	Value
Project Name	4-30 characters (e.g., college-dept-netid-desc-001)
Billing Account	TAMUNI-i2-Primary-Burwood
Organization	tamu.edu
Location	Browse to select parent folder

Billing Permissions

To assign the billing account, you must be added as a Burwood Reseller Client Billing Account Administrator. Contact Burwood if you receive permission errors.

3. Click Create

Step 4: Assign Permissions

Permission Assignment Steps

1. Select the folder or project in Resource Manager

2. Click the menu (⋮) → Settings

3. Select IAM from the left menu

4. Click Grant Access

5. Configure access:

Field	Value
Principals	Enter the Google Group email from Step 1
Role	Basic → Owner

Group Email

The group email won't auto-fill. Enter the complete address: gcp-[groupname]-admins@tamu.edu

6. Click Save

Step 5: Add Labels

Add required labels to the project for tracking and governance:

Label Key	Example Value
famis-account	02-000000-00000
data-classification	public
request-number	REQ12345678

Navigate to the project → IAM and Admin → Labels

---

Step 6: Update Repository

Update the it-cloud-kion-account-hub GitHub repository.

See Kion Account Workflow for details on the account lifecycle pipeline.

---

ServiceNow Response Template

Use this template when closing the ServiceNow request:

Your Google project(s) has been created with the following information:

Name: [4-30 characters, e.g., "business-unit-netid-desc-001"]
Project ID: [4-30 characters, e.g., "business-unit-netid-desc-001"]
Project number: [12-digit number]
Folder: [college/department path]
Ownership assignment: [netid@tamu.edu, othernetid@tamu.edu]

You may access your Folder and Projects via: https://console.cloud.google.com 
with your NetID. Once in the GCP Portal, the folder should be visible under 
the organization "tamu.edu"

Please reach out to aip@tamu.edu if you run into any issues or have questions.

---

Billing Account Permissions

To assign the "TAMUNI-i2-Primary-Burwood" billing account to a project, you must be added as a Burwood Reseller Client Billing Account Administrator.

Contact Burwood to request this permission:

Contact	Email
Mark Heil	Mark.Heil@Burwood.com
Sean Peralta	speralta@burwood.com
Support	AppModCloudSupport@burwood.com

Billing Console Note

The billing account is not in the tamu.edu organization, so you'll need to clear the organization filter to see it in the Billing console.