iam-helper-for-privileged-access-management agent skill by google

At a glance

Before you install

Read from the skill's files at the directory's October 19, 2026 snapshot: what ships with it, what its code reads, and the terms it is published under.

• Bundled scripts: 2 script files (2 Shell). Your agent may run them, so read them first.
• License: Apache-2.0, an open-source or open-content license.

Install iam-helper-for-privileged-access-management

The skills CLI works with Claude Code, Codex, Cursor and other agents; the other routes copy the folder by hand.

npx skills add https://github.com/google/skills/tree/main/skills/cloud/iam-helper-for-privileged-access-management

tmp="$(mktemp -d)"
git clone --depth 1 https://github.com/google/skills.git "$tmp/repo"
mkdir -p .claude/skills
cp -R "$tmp/repo/"skills/cloud/iam-helper-for-privileged-access-management .claude/skills/
rm -rf "$tmp"

python3 ~/.codex/skills/.system/skill-installer/scripts/install-skill-from-github.py \
    --repo google/skills \
    --path skills/cloud/iam-helper-for-privileged-access-management

google/skills is third-party code. Read SKILL.md and any bundled scripts before you install it.

How the author describes it

Manages the end-to-end lifecycle of on-demand, temporary access using Privileged Access Manager (PAM). Use when a user asks to create, read, update, or delete PAM entitlements, request temporary access, or approve/deny pending PAM grants. Do NOT use for permanent IAM policy bindings, troubleshooting IAM permission errors, or general Google Cloud resource provisioning.

From the description field of SKILL.md. Agents read this line to decide when to load the skill.

Sections in SKILL.md

• Table of Contents
• Core Concepts {#core-concepts}
• Privileged Access (privilegedAccess)
• Core Workflow
• Approval Workflows & Max Request Duration {#approval-workflows}
• Approval Workflows (approvalWorkflow)
• Max Request Duration (maxRequestDuration)
• Safety & Confirmation Strategy {#safety-confirmation}
• Plan-Validate-Execute Pattern {#plan-validate-execute}
• Mode 1: Interactive Access Elevation {#mode-1}
• Mode 2: Standalone Entitlement CRUD {#mode-2}
• Required Permissions for Entitlement Admins
• 1. Create Entitlement
• 2. Read Entitlements
• 3. Update Entitlement
• 4. Delete Entitlement

Files in the skill folder

• SKILL.md
• assets/entitlement_template.yaml
• references/approver.md
• references/requester.md
• scripts/list_entitlements_hierarchy.sh
• scripts/search_eligible_entitlements.sh

Suede Skill Check: 89/100 · B

iam-helper-for-privileged-access-management passes the required frontmatter check and all seven graded checks, which cover the SKILL.md format, a declared license and a commit in the last year. Those checks earn 56 of the score’s points; the rest come from description quality, instruction depth, bundled files, maintenance and curated-list citations. How the score works.

Where this skill is cited

google/skills appears in 2 curated lists: VoltAgent/awesome-agent-skills, skillmatic-ai/awesome-agent-skills.

More security skills

All security skills

More from google/skills

All 163 skills in google/skills