In Google Cloud VMware Engine, a user is given access to VMware Engine resources by being given a specific IAM role through an IAM policy.
A user may be given one or more IAM roles. Each IAM role contains a set of permissions that allow its member to interact with certain VMware Engine resources. Google Cloud VMware engine IAM roles are assigned as part of the native Google Cloud Platform UI.