To manage access and privileges for your Knative serving services, you have the
following options for managing permissions and authenticating your
Knative serving services to Google Cloud APIs:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[],[],null,["# Managing access\n\nKnative serving manages access through\n[Identity and Access Management permissions](/kubernetes-engine/docs/reference/api-permissions)\nand\n[Kubernetes role based access control (RBAC)](/kubernetes-engine/docs/how-to/role-based-access-control).\n\nTo manage access and privileges for your Knative serving services, you have the\nfollowing options for managing permissions and authenticating your\nKnative serving services to Google Cloud APIs:\n\n- Use [Workload Identity Federation for GKE](/kubernetes-engine/enterprise/knative-serving/docs/securing/workload-identity) for your Knative serving services across your fleet.\n- Use [service accounts](/kubernetes-engine/enterprise/knative-serving/docs/securing/service-accounts) for specific Knative serving services.\n- Use short lived OAuth2 [access tokens](/kubernetes-engine/enterprise/knative-serving/docs/securing/service-identity) if required."]]