Halaman ini menjelaskan opsi kontrol akses API yang tersedia untuk Anda di Cloud Endpoints.
Ringkasan
Endpoints menggunakan
Identity and Access Management (IAM)
untuk mengontrol akses ke API Anda. Anda dapat memberikan akses ke API di level project dan di level layanan Endpoint individual. Misalnya,
Anda dapat:
Memberikan akses ke akun utama per layanan.
Berikan izin kepada pengguna atau akun layanan untuk men-deploy konfigurasi Endpoints yang diperbarui.
Berikan akses kepada pengguna API Anda agar mereka dapat mengaktifkan API Anda di projectGoogle Cloud mereka sendiri.
Peran yang mengontrol akses ke layanan
Anda dapat memberikan peran berikut untuk layanan tertentu di halaman Endpoints > Services di konsol Google Cloud , dengan menggunakan API, atau dengan menggunakan Google Cloud CLI.
Nama peran IAM
Jabatan Peran
Deskripsi
roles/servicemanagement.serviceConsumer
Pelanggan Layanan
Izin bagi akun utama untuk melihat dan mengaktifkan API di projectnya sendiri. Anda dapat memberikan peran Service Consumer hanya ke Akun Google, Google Grup, atau akun layanan.
roles/servicemanagement.serviceController
Pengontrol Layanan
Izin untuk melakukan panggilan ke metode check dan
report di
Service Infrastructure
API selama runtime. Peran ini biasanya diberikan ke akun layanan. Lihat topik Kontrol akses Service Management API untuk mengetahui informasi tentang peran ini.
roles/servicemanagement.configEditor
Service Config Editor
Izin untuk men-deploy konfigurasi Endpoint. Peran ini lebih ketat daripada peran Project Editor yang diberikan pada layanan.
roles/servicemanagement.admin
Administrator Pengelolaan Layanan
Semua izin Service Config Editor dan izin untuk mengelola
akses ke API. Sebanding dengan peran Project Owner yang diberikan pada layanan.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-18 UTC."],[[["\u003cp\u003eCloud Endpoints utilizes Identity and Access Management (IAM) to manage access to APIs at both the project and individual service levels.\u003c/p\u003e\n"],["\u003cp\u003ePermissions can be assigned on a per-service basis, allowing for granular control over who can deploy configurations or access the API.\u003c/p\u003e\n"],["\u003cp\u003eThe Service Consumer role enables principals to view and enable an API in their own Google Cloud project.\u003c/p\u003e\n"],["\u003cp\u003eThe Service Controller role grants permissions to make calls to the \u003ccode\u003echeck\u003c/code\u003e and \u003ccode\u003ereport\u003c/code\u003e methods in the Service Infrastructure API during runtime.\u003c/p\u003e\n"],["\u003cp\u003eThe Service Config Editor and Service Management Administrator roles provide varying levels of permissions for deploying configurations and managing API access, with the latter comparable to the Project Owner role.\u003c/p\u003e\n"]]],[],null,["# Overview of API access\n\nOpenAPI \\| [gRPC](/endpoints/docs/grpc/api-access-overview \"View this page for the Cloud Endpoints gRPC docs\")\n\n\u003cbr /\u003e\n\nThis page describes the API access control options available to you in\nCloud Endpoints.\n\nOverview\n--------\n\nEndpoints uses\n[Identity and Access Management (IAM)](/iam/docs)\nto control access to your API. You can grant access to your API at the project\nlevel and at the individual Endpoints service level. For example,\nyou can:\n\n- Grant access to principals on a per-service basis.\n- Grant permission to a user or service account to deploy an updated Endpoints configuration.\n- Grant access to your API users so they can enable your API in their own Google Cloud project.\n\nRoles that control access to services\n-------------------------------------\n\nYou can grant the following roles for a specific service on the **Endpoints** \\\u003e\n**Services** page in the Google Cloud console, by using the API, or by\nusing the Google Cloud CLI.\n\n| **Note:** Although you can grant other roles at the service level, we recommend that you use the roles listed in the previous table to manage your API.\n\nWhat's next\n-----------\n\n- [Controlling who can enable your API](/endpoints/docs/openapi/control-api-callers).\n- [Granting and revoking access to the API](/endpoints/docs/openapi/control-api-access)."]]
