Manages the end-to-end lifecycle of on-demand, temporary access using Privileged Access Manager (PAM). Use when a user asks to create, read, update, or delete PAM entitlements, request temporary access, or approve/deny pending PAM grants. Do NOT use for permanent IAM policy bindings, troubleshooting IAM permission errors, or general Google Cloud resource provisioning.
Install
npx skills add google/skills --skill iam-helper-for-privileged-access-managementnpx skills add google/skills --skill iam-helper-for-privileged-access-management -a claude-code -gnpx skills add google/skills --skill iam-helper-for-privileged-access-management -a codex -ggemini skills install https://github.com/google/skills.git --path skills/cloud/iam-helper-for-privileged-access-managementgh skill install google/skills iam-helper-for-privileged-access-managementgit clone --depth 1 https://github.com/google/skills /tmp/google__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/google__skills/skills/cloud/iam-helper-for-privileged-access-management ~/.claude/skills/iam-helper-for-privileged-access-management # Claude Code
cp -R /tmp/google__skills/skills/cloud/iam-helper-for-privileged-access-management ~/.agents/skills/iam-helper-for-privileged-access-management # Codex, Cursor, Gemini CLI, Copilot, OpenCode