Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Halaman ini menjelaskan peran Cloud Domains API dan opsi kontrol akses yang
tersedia untuk Anda di Cloud Domains.
Google Cloud menawarkan Identity and Access Management (IAM), yang memungkinkan Anda memberikan
akses yang lebih terperinci ke resource Google Cloud tertentu dan mencegah
akses yang tidak diinginkan ke resource lain. IAM memungkinkan Anda menerapkan
prinsip keamanan dengan hak istimewa terendah
sehingga Anda hanya memberikan akses yang diperlukan ke resource Anda.
Dengan IAM, Anda dapat mengontrol siapa yang memiliki izin untuk
resource mana dengan menetapkan kebijakan IAM.
Kebijakan IAM memberikan peran tertentu kepada pengguna, yang memberikan izin tertentu kepada pengguna.
Misalnya, pengguna tertentu mungkin perlu membuat dan mengubah setelan
kontak untuk domain, sehingga Anda akan memberi pengguna tersebut
peran Cloud Domains Admin (roles/domains.admin). Di sisi lain,
pengguna mungkin hanya perlu melihat domain resource yang ada, sehingga mereka akan mendapatkan
peran Cloud Domains Viewer (roles/domains.viewer). Untuk
Cloud Domains, Anda dapat mengonfigurasi akses tingkat project dan
tingkat resource.
Berikut adalah beberapa contoh izin untuk peran Pelihat:
Melihat semua domain yang terdaftar dalam project.
Melihat detail pendaftaran seperti DNS atau waktu habis masa berlaku.
Menelusuri ketersediaan domain dan mendapatkan parameter pendaftaran.
Berikut adalah beberapa contoh izin untuk peran Admin:
Daftarkan domain baru.
Memperbarui setelan pendaftaran, termasuk setelan DNS dan setelan kontak.
Untuk melihat dan menetapkan peran IAM Cloud Domains, Anda harus mengaktifkan Cloud Domains API untuk project Anda. Anda tidak dapat melihat peran Cloud Domains di konsol Google Cloud hingga mengaktifkan API.
Untuk mengetahui daftar peran dan izin yang didukung Cloud Domains, lihat bagian berikut.
Peran
Tabel berikut mencantumkan peran IAM Cloud Domains API
dengan daftar terkait semua izin yang
disertakan dalam setiap peran. Setiap izin berlaku untuk jenis resource
tertentu. Untuk mengetahui detail selengkapnya tentang setiap izin, lihat
bagian Izin.
Role
Permissions
Cloud Domains Admin
(roles/domains.admin)
Full access to Cloud Domains Registrations and related resources.
domains.*
domains.locations.get
domains.locations.list
domains.operations.cancel
domains.operations.get
domains.operations.list
domains.registrations.configureContact
domains.registrations.configureDns
domains.registrations.configureManagement
domains.registrations.create
domains.registrations.createTagBinding
domains.registrations.delete
domains.registrations.deleteTagBinding
domains.registrations.get
domains.registrations.getIamPolicy
domains.registrations.list
domains.registrations.listEffectiveTags
domains.registrations.listTagBindings
domains.registrations.setIamPolicy
domains.registrations.update
resourcemanager.projects.get
resourcemanager.projects.list
Cloud Domains Viewer
(roles/domains.viewer)
Read-only access to Cloud Domains Registrations and related resources.
domains.locations.*
domains.locations.get
domains.locations.list
domains.operations.get
domains.operations.list
domains.registrations.get
domains.registrations.getIamPolicy
domains.registrations.list
domains.registrations.listEffectiveTags
domains.registrations.listTagBindings
resourcemanager.projects.get
resourcemanager.projects.list
Izin
Tabel berikut mencantumkan izin yang harus dimiliki pemanggil untuk memanggil
setiap metode.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-29 UTC."],[[["\u003cp\u003eCloud Domains uses Identity and Access Management (IAM) to control who has what permissions to which resources, ensuring the security principle of least privilege is enforced.\u003c/p\u003e\n"],["\u003cp\u003eThere are two primary roles within Cloud Domains: Admin, which provides full access to domain registrations and related resources, and Viewer, which allows read-only access.\u003c/p\u003e\n"],["\u003cp\u003eTo manage Cloud Domains IAM roles, you must enable the Cloud Domains API for your project, after which you will be able to see these roles within the Google Cloud console.\u003c/p\u003e\n"],["\u003cp\u003eThe Admin role can register new domains, update domain registration settings, while the Viewer role can view existing domains and their registration details, including DNS and expiry information.\u003c/p\u003e\n"],["\u003cp\u003eThe page provides detailed tables listing the permissions included with each role and the specific permissions required to perform different methods related to domain registrations.\u003c/p\u003e\n"]]],[],null,["# Roles and permissions\n\n| **Note:** On September 7, 2023 Squarespace acquired all domain registrations and related customer accounts from Google Domains. For more information about how this change affects Cloud Domains, see [Cloud Domains feature deprecations](/domains/docs/deprecations/feature-deprecations), [Renew an expired domain registration](https://support.google.com/a/answer/6152355), and [Squarespace purchase of Google Domains FAQ](/domains/docs/faq).\n\n\u003cbr /\u003e\n\nThis page describes the Cloud Domains API roles and the access control options that\nare available to you in Cloud Domains.\n\nGoogle Cloud offers Identity and Access Management (IAM), which lets you give\nmore granular access to specific Google Cloud resources and prevents\nunwanted access to other resources. IAM lets you adopt the\n[security principle of least privilege](https://wikipedia.org/wiki/Principle_of_least_privilege)\nso that you grant only the necessary access to your resources.\nIAM lets you control *who* has *what* permissions to\n*which* resources by setting IAM policies.\nIAM policies grant specific roles to a user, which gives the user\ncertain permissions.\n\nFor example, a particular user might need to create and modify the contact\nsettings for a domain, so you would give that user the\nCloud Domains Admin role (`roles/domains.admin`). On the other hand,\na user might need to only view existing resource domains, so they would get a\nCloud Domains Viewer role (`roles/domains.viewer`). For\nCloud Domains, you can configure both project-level and\nresource-level access.\n\nFollowing are some examples of permissions for the Viewer role:\n\n- View all domains registered in a project.\n- View registration details such as DNS or expiry time.\n- Search domain availability and get registration parameters.\n\nFollowing are some examples of permissions for the Admin role:\n\n- Register a new domain.\n- Update registration settings, including DNS settings and contact settings.\n\nTo understand role types, see the\n[IAM basic and predefined roles reference](/iam/docs/understanding-roles).\n\nEnable the Cloud Domains API\n----------------------------\n\nTo view and assign Cloud Domains IAM roles,\nyou must enable the Cloud Domains API for your project. You cannot see the\nCloud Domains roles in the Google Cloud console until you\nenable the API.\n\n[Enable the API](https://console.cloud.google.com/apis/library/domains.googleapis.com)\n\nFor lists of the roles and permissions that Cloud Domains\nsupports, see the following sections.\n\nRoles\n-----\n\nThe following table lists the Cloud Domains API\nIAM roles with a corresponding list of all the permissions that\neach role includes. Each permission is applicable to a particular resource\ntype. For more details about each permission, see the\n[Permissions](#permissions) section.\n\nPermissions\n-----------\n\nThe following table lists the permissions that the caller must have to call\neach method.\n\nAccess control using the Google Cloud console\n---------------------------------------------\n\nYou can use the Google Cloud console to manage access control for your\nprojects.\n\nFor detailed instructions, see\n[Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access).\n\nWhat's next\n-----------\n\n- To get started using Cloud Domains, see the [Quickstart](/domains/docs/buy-register-domain).\n- To improve the security of your Cloud Domains configuration, see [VPC Service Controls support](/domains/docs/vpc-sc-support).\n- To find solutions for common issues that you might encounter when using Cloud Domains, see [Troubleshooting](/domains/docs/troubleshooting)."]]
