Roles and permissions

Billing service roles control access to billing-related features such as payments, invoices, and estimated cost management.

Role types

To use the Billing service, users must have one of the following roles: Billing Admin, Billing Manager, or Billing Viewer.
Billing-related roles can be assigned by an Organization Admin.

The Billing service provides organization-level features for managing payment methods, billing groups, and invoices, and project-level features for checking resource usage costs.

Role	Permissions	Included sub-roles
Billing Admin	Manage billing groups and payment methods, register credits, and access all invoice and billing information	Billing Manager, Billing Viewer
Billing Manager	View invoices and estimated costs	Billing Viewer
Billing Viewer	View estimated costs for assigned projects	-

Permissions by feature

The following table summarizes access permissions for key features in the Billing service.

Feature / Role	Billing Admin	Billing Manager	Billing Viewer
Create and manage billing groups	✓
Manage payment methods	✓
Manage credits	✓
View invoices	✓	✓
View estimated costs	✓	✓	✓

Billing Access Condition — Billing Groups

Even if a user has a Billing-related role, they cannot access Billing features unless the project is registered in a billing group.

The Billing service manages payment and cost data at the billing group level.
Therefore, menus are hidden for projects that are not part of any billing group.
However, a Billing Admin of the main billing group can access Billing features across all sub-groups.
For details, see How to manage billing groups.

Role design guide

Billing roles are typically assigned to users such as finance teams or accounting staff responsible for payment and billing operations. Each role can be designed according to its scope of responsibility as follows:

• Billing Admin – Suitable for those managing organization-wide billing policies, credits, and payment methods.
• Billing Manager – Recommended for users who handle operational billing tasks such as reviewing invoices, checking monthly budgets, and monitoring usage.
• Billing Viewer – Ideal for users or team leaders who only need to monitor project costs.

tip

It is recommended to separate Billing roles from IAM Admin or Organization Admin roles.
This separation ensures clear boundaries between billing management and account/security administration.