title: How to give access to single Compute Instance on GCP?
body: <p>Been trying to figure this out but no luck thus far. Suprisingly difficult to achieve when compared to AWS.</p>
  
  <p>I have a Google Cloud Platform (GCP) project with multiple Compute Instances and other services running.</p>
  
  <p>I need to give root access to a single compute instance but not any other service to an external development team.</p>
  
  <p>In the "Compute Engine" view when I select the instance and add the user as  Compute Admin (Full control of all Compute Engine resources) but he still cannot <code>ssh</code> into the instance.</p>
  
  <p><strong>Try #1:</strong></p>
  
  <p>Got error: "Require <code>compute.instance.get</code> permission."</p>
  
  <p>So I went and gave that user a Role which included that permission.</p>
  
  <p><strong>Try #2:</strong></p>
  
  <p>Got error "User does not have access to service account..."</p>
  
  <p><strong>Questions #1</strong>
  What on earth needs to be done to just give a role access to single Compute Instance in GCP?</p>
  
  <p>On AWS there is a specific Role that can be given a single resource access but this does seem to be the case here. </p>
  
  <p><strong>Questions #2</strong>
  Also what is the purpose of the "Permissions" right sidebar in "Compute Engine" view if that doesn't actually give any permissions.</p>
  
  <p>Thanks!</p>