[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-11。"],[],[],null,["# Controlling access to Cloud Service Mesh in the Google Cloud console\n====================================================================\n\nAccess to Cloud Service Mesh in the Google Cloud console is controlled by\n[Identity and Access Management (IAM)](/iam/docs/overview).\nTo get access, a Project Owner must grant users the Project Editor or Viewer\nrole, or the more restrictive roles described in the following tables. For\ninformation about how to grant roles to users, see\n[Granting, changing, and revoking access to resources](/iam/docs/granting-changing-revoking-access).\n\nMinimum read-only roles\n-----------------------\n\nUsers with the following roles can access the Cloud Service Mesh pages for\nmonitoring purposes only. Users with these roles can't create or modify service\nlevel objects (SLOs) or make changes to the GKE\ninfrastructure.\n\nMinimum write roles\n-------------------\n\nUsers with the following roles can create or modify SLOs in the Cloud Service Mesh\npages and create or modify alerting policies based on the SLOs. Users with\nthese roles can't make changes to the GKE infrastructure.\n\nSpecial cases\n-------------\n\nThe following roles are required for particular mesh configurations.\n\nAdditional roles and permissions\n--------------------------------\n\nIAM has additional roles and granular permissions if the above roles\ndon't meet your needs. For example, you might want to grant the Kubernetes\nEngine Admin role or the Kubernetes Engine Cluster Admin role to let a user\nadminister your GKE infrastructure.\n\nFor more information see the following:\n\n- [Understanding roles](/iam/docs/understanding-roles)\n- [Kubernetes Engine roles](/iam/docs/understanding-roles#kubernetes-engine-roles)\n- [Monitoring roles](/iam/docs/understanding-roles#monitoring-roles)\n\nWhat's next\n-----------\n\n- [Explore Cloud Service Mesh in the Google Cloud console](/service-mesh/docs/observability/explore-dashboard)\n- [Service level objectives overview](/service-mesh/docs/observability/slo-overview)"]]
