使用集合让一切井井有条
根据您的偏好保存内容并对其进行分类。
Identity and Access Management 文档
通过 Identity and Access Management (IAM)，您可以为 Google Cloud 资源创建和管理权限。IAM 会将 Google Cloud 服务的访问权限控制整合到单个系统中，并提供一套统一的操作。了解详情
免费开始使用
利用 $300 免费赠金开始您的下一个项目
获享免费试用赠金和 20 多种产品的每月免费用量，构建和测试概念验证。
查看免费产品优惠
继续探索 20 多种提供“始终免费”用量的产品
使用适用于常见应用场景（包括 AI API、虚拟机、数据仓库等）的 20 多种免费产品。
自行试用 Google Cloud
创建一个账号，以评估我们的产品在实际场景中的表现。
新客户还可获享 $300 赠金，用于运行、测试和部署工作负载。
免费开始使用
如未另行说明，那么本页面中的内容已根据知识共享署名 4.0 许可获得了许可，并且代码示例已根据 Apache 2.0 许可获得了许可。有关详情，请参阅 Google 开发者网站政策。Java 是 Oracle 和/或其关联公司的注册商标。
最后更新时间 (UTC)：2025-08-28。
[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-28。"],[[["\u003cp\u003eIdentity and Access Management (IAM) provides a unified system for creating and managing permissions across Google Cloud resources.\u003c/p\u003e\n"],["\u003cp\u003eIAM documentation includes guides for managing access, creating service accounts, and configuring temporary access to resources.\u003c/p\u003e\n"],["\u003cp\u003eReference materials include permissions, client libraries, the REST API, understanding different roles, and resource-specific attributes for conditions.\u003c/p\u003e\n"],["\u003cp\u003eResources are available such as release notes, permissions change logs, support information, quotas and limits, as well as billing questions.\u003c/p\u003e\n"],["\u003cp\u003eTraining resources are available to provide an overview of Google Cloud, architecture and design, and security for IAM.\u003c/p\u003e\n"]]],[],null,["# Identity and Access Management documentation\n============================================\n\n[Read product documentation](/iam/docs/overview)\nIdentity and Access Management (IAM) lets you create and manage permissions for\nGoogle Cloud resources. IAM unifies access control for\nGoogle Cloud services into a single system and presents a consistent set of operations.\n[Learn more](/iam/docs/overview)\n[Get started for free](https://console.cloud.google.com/freetrial) \n\n#### Start your proof of concept with $300 in free credit\n\n- Get access to Gemini 2.0 Flash Thinking\n- Free monthly usage of popular products, including AI APIs and BigQuery\n- No automatic charges, no commitment \n[View free product offers](/free/docs/free-cloud-features#free-tier) \n\n#### Keep exploring with 20+ always-free products\n\n\nAccess 20+ free products for common use cases, including AI APIs, VMs, data warehouses,\nand more.\n\nDocumentation resources\n-----------------------\n\nFind quickstarts and guides, review key references, and get help with common issues. \nformat_list_numbered\n\n### Guides\n\n-\n\n\n Quickstarts:\n [Quickstart: Grant an IAM role by using the Google Cloud console](/iam/docs/grant-role-console)\n or\n [Quickstart: Write an IAM policy by using client libraries](/iam/docs/write-policy-client-libraries)\n\n\n-\n\n [Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access)\n\n-\n\n [Manage access to other resources](/iam/docs/manage-access-other-resources)\n\n-\n\n [Roles overview](/iam/docs/roles-overview)\n\n-\n\n [Service account overview](/iam/docs/service-account-overview)\n\n-\n\n [Create service accounts](/iam/docs/service-accounts-create)\n\n-\n\n [Attach service accounts to resources](/iam/docs/attach-service-accounts)\n\n-\n\n [Creating and managing custom roles](/iam/docs/creating-custom-roles)\n\n-\n\n [Configure temporary access](/iam/docs/configuring-temporary-access)\n\nfind_in_page\n\n### Reference\n\n-\n\n [Permissions reference](/iam/docs/permissions-reference)\n\n-\n\n [Client libraries](/iam/docs/client-libraries)\n\n-\n\n [IAM REST API](/iam/docs/reference/rest)\n\n-\n\n [Basic and predefined roles](/iam/docs/understanding-roles)\n\n-\n\n [Full resource names](/iam/docs/full-resource-names)\n\n-\n\n [Attribute reference for IAM Conditions](/iam/docs/conditions-attribute-reference)\n\n-\n\n [Resource attributes for IAM Conditions](/iam/docs/conditions-resource-attributes)\n\n-\n\n [Support levels for permissions in custom roles](/iam/docs/custom-roles-permissions-support)\n\n-\n\n [Resource types that accept IAM policies](/iam/docs/resource-types-with-policies)\n\n-\n\n [Service agents](/iam/docs/service-agents)\n\ninfo\n\n### Resources\n\n-\n\n [Release notes](/iam/docs/release-notes)\n\n-\n\n [Permissions change log](/iam/docs/permissions-change-log)\n\n-\n\n [Getting support](/iam/docs/getting-support)\n\n-\n\n [Quotas and limits](/iam/quotas)\n\n-\n\n [Billing questions](/iam/docs/billing-questions)\n\n-\n\n [Troubleshooting \"withcond\" in policies and role bindings](/iam/docs/troubleshooting-withcond)\n\n-\n\n [Pricing](/iam/pricing)\n\nRelated resources\n-----------------\n\nTraining and tutorials \nUse cases \nCode samples \nExplore self-paced training, use cases, reference architectures, and code samples with examples of how to use and connect Google Cloud services. Training \nTraining and tutorials\n\n### Google Cloud Fundamentals: Core Infrastructure\n\n\nThese lectures, demos, and hands-on labs give you an overview of Google Cloud products and services so that you can learn the value of Google Cloud and how to incorporate cloud-based solutions into your business strategies.\n\n\n[Learn more](/training/course/core-infrastructure) \nTraining \nTraining and tutorials\n\n### Architecting with Google Cloud: Design and Process\n\n\nThis course features a combination of lectures, design activities, and hands-on labs to show you how to use proven design patterns on Google Cloud to build highly reliable and efficient solutions and operate deployments that are highly available and cost-effective.\n\n\n[Learn more](/training/course/architecting-design-process) \nTraining \nTraining and tutorials\n\n### Security in Google Cloud\n\n\nIn this training course, you will learn about a variety of Google Cloud security controls and techniques. You'll explore the components of Google Cloud and deploy a secure solution on the platform. You'll also learn how to mitigate attacks at several points in a Google Cloud-based infrastructure, including distributed denial-of-service attacks, phishing attacks, and threats involving content classification and use.\n\n\n[Learn more](/training/course/security-in-google-cloud-platform) \nUse case \nUse cases\n\n### Identity and authentication in Google Cloud\n\n\nBook-length deep dive into IAM, including corporate, consumer, and service identities; best practices, and how to assess, plan, and deploy.\n\nPolicies Access Resource hierarchy\n\n\u003cbr /\u003e\n\n[Learn more](/architecture/identity) \nUse case \nUse cases\n\n### Help secure the pipeline from your data lake to your data warehouse\n\n\nDiscusses the security controls designed to help manage data access to and prevent data exfiltration of the pipeline from your data lake to your data warehouse.\n\nKMS Organization Policy Service\n\n\u003cbr /\u003e\n\n[Learn more](/solutions/help-secure-the-pipeline-from-your-data-lake-to-your-data-warehouse) \nUse case \nUse cases\n\n### Migration to Google Cloud: Getting started\n\n\nHelps you with planning, designing, and implementing your migration process to Google Cloud.\n\nPlanning Migration\n\n\u003cbr /\u003e\n\n[Learn more](/solutions/migration-to-gcp-getting-started) \nCode sample \nCode Samples\n\n### Java IAM client library samples\n\n\nSee how to perform common IAM actions using the Java IAM client library.\n\n\n[Open GitHub\narrow_forward](https://github.com/GoogleCloudPlatform/java-docs-samples/tree/master/iam/api-client) \nCode sample \nCode Samples\n\n### Python IAM client library samples\n\n\nSee how to perform common IAM actions using the Python IAM client library.\n\n\n[Open GitHub\narrow_forward](https://github.com/GoogleCloudPlatform/python-docs-samples/tree/master/iam/api-client) \nCode sample \nCode Samples\n\n### Go IAM client library samples\n\n\nSee how to perform common IAM actions using the Go IAM client library.\n\n\n[Open GitHub\narrow_forward](https://github.com/GoogleCloudPlatform/golang-samples/tree/master/iam) \nCode sample \nCode Samples\n\n### .NET IAM client library samples\n\n\nSee how to perform common IAM actions using the .NET IAM client library.\n\n\n[Open GitHub\narrow_forward](https://github.com/GoogleCloudPlatform/dotnet-docs-samples/tree/master/iam/api)\n\nRelated videos\n--------------\n\n### Try Google Cloud for yourself\n\nCreate an account to evaluate how our products perform in real-world scenarios. \nNew customers also get $300 in free credits to run, test, and deploy workloads. \n[Get started for free](https://console.cloud.google.com/freetrial)"]]
