custom roles required access for accessing VM instances across organization

[gcloudLearning]

I need to create a role for viewing all the vm instances in an organization(including projects , folder).

also I need the access in order to install the patches or os config agent(if not installed) in all the vms , taking the vm machine backup and restoring it. creating/listing storage bucket and objects.

Please suggest me minimum roles for the operation .

and will it be fine to create a group --> add members and then assign the roles in organization level to achieve this

[Willbin]

Hello @gcloudLearning,

Welcome to Google Cloud Community!

There are basic and predefined roles that you can apply. 
Full control of Compute Engine instances, instance groups, disks, snapshots and images, you may use Compute Instance Admin (v1) role.

roles/compute.instanceAdmin.v1

Please note this is only at an instance level and the user cannot create new instances.

For other roles like Backup and DR admin you may use IAM basic and predefined roles.

I hope this helps.