You are managing a fleet of Compute Engine Linux instances in a Google Cloud project.

The requirement is to manage SSH access for a team with minimal operational overhead when team members change.

OS Login: OS Login is the Google-recommended method for managing SSH access to Compute Engine instances. It centralizes control by linking Linux user accounts to Google identities and IAM. It eliminates the need to manually manage SSH keys in instance or project metadata.

Google Groups: Managing access through a Google Group minimizes overhead. By granting the necessary OS Login IAM roles (e.g., roles/compute.osLogin or roles/compute.osAdminLogin) to the Google Group at the project level, you only need to add or remove members from the Google Group when an engineer joins or leaves, and the access rights are automatically updated across all instances.