Membuat tingkat akses untuk akses berbasis sertifikat
Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Untuk mengamankan resource dengan akses berbasis sertifikat, buat tingkat akses yang memerlukan sertifikat saat menentukan akses ke resource. Untuk membuat tingkat akses, lihat
Membuat tingkat akses kustom.
Nilai yang Anda gunakan saat membuat tingkat akses kustom dapat berupa apa pun yang sesuai untuk Anda, tetapi ekspresi untuk tingkat akses kustom harus:
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-09-01 UTC."],[],[],null,["# Create access levels for certificate-based access\n\nTo secure your resources with certificate-based access, create an access level that requires certificates when\ndetermining access to resources. To create access levels, see\n[Creating a custom access level](/access-context-manager/docs/create-custom-access-level).\n\nThe values you use when creating a custom access level can be whatever makes\nsense for you, but the expression for the custom access level must be: \n\n certificateBindingState(origin, device) == CertificateBindingState.CERT_MATCHES_EXISTING_DEVICE\n\nFor example, you can use the gcloud CLI to create your custom\naccess level by running the following command: \n\n gcloud access-context-manager levels create \u003cvar translate=\"no\"\u003eLEVEL_NAME\u003c/var\u003e \\\n --title=\u003cvar translate=\"no\"\u003eTITLE\u003c/var\u003e \\\n --custom-level-spec=\u003cvar translate=\"no\"\u003eFILE\u003c/var\u003e \\\n --description=\u003cvar translate=\"no\"\u003eDESCRIPTION\u003c/var\u003e \\\n --policy=\u003cvar translate=\"no\"\u003ePOLICY_NAME\u003c/var\u003e\n\nThe content of the .yaml file referenced by \u003cvar translate=\"no\"\u003eFILE\u003c/var\u003e is the\nfollowing custom expression: \n\n expression: \"certificateBindingState(origin, device) == CertificateBindingState.CERT_MATCHES_EXISTING_DEVICE\"\n\nWhat's next\n-----------\n\n- [Enable CBA with VPC Service Controls](/chrome-enterprise-premium/docs/enable-cba-vpcsc)\n- [Enable CBA with user groups](/chrome-enterprise-premium/docs/enable-cba-user-groups)"]]
