Stay organized with collections
Save and categorize content based on your preferences.
The Google Spectrum Access System (SAS) Portal API user roles
allow a user to make certain API calls based on their scope. These roles are
assigned to the user's Google Account.
User roles
The roles assigned to a user are role_admin
and role_cpi.
Each user can be assigned to one or more roles.
role_admin
The first user of a SAS customer's organization is the
administrator. The administrator is automatically added during the sign-up
process. The administrators can then add other users and assign them roles,
including the administrator role.
The administrator role has full administrative permissions for all of the child
resources under the parent
resource to which it has been granted access. The administrator sets up the
organization's structure within the SAS Portal and manages user
access.
role_cpi
The CPI role is for users who are
Certified Professional Installers. To be assigned this role, users need to
have an active CPI certification. To validate if a user has this certification,
use the ValidateInstaller() method.
Only users with a validated role_cpi role can use the
SignDevice() method
to submit the installation parameters of CBSDs that
require CPI installation.
Methods
The following table shows which roles can use each type of method.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[],[],null,["# Roles and permissions\n\nThe Google Spectrum Access System (SAS) Portal API [user roles](/spectrum-access-system/docs/roles-and-permissions#user-roles)\nallow a user to make certain API calls based on their scope. These roles are\nassigned to the user's Google Account.\n\nUser roles\n----------\n\nThe roles assigned to a user are [`role_admin`](/spectrum-access-system/docs/roles-and-permissions#admin)\nand [`role_cpi`](/spectrum-access-system/docs/guides/roles-and-permissions#cpi).\nEach user can be assigned to one or more roles.\n\n### role_admin\n\nThe first user of a SAS customer's organization is the\n*administrator*. The administrator is automatically added during the sign-up\nprocess. The administrators can then add other users and assign them roles,\nincluding the administrator role.\n\nThe administrator role has full administrative permissions for all of the child\n[resources](/spectrum-access-system/docs/manage-resources) under the parent\nresource to which it has been granted access. The administrator sets up the\norganization's structure within the SAS Portal and manages user\naccess.\n\n### role_cpi\n\nThe [CPI](/spectrum-access-system/docs/key-terms) role is for users who are\n*Certified Professional Installers* . To be assigned this role, users need to\nhave an active CPI certification. To validate if a user has this certification,\nuse the [`ValidateInstaller()` method](/spectrum-access-system/docs/reference/rest/v1alpha1/installer/validate#spectrum.sas.portal.v1alpha1.DeviceManager.ValidateInstaller).\n\nOnly users with a validated `role_cpi` role can use the\n[`SignDevice()` method](/spectrum-access-system/docs/reference/rest/v1alpha1/deployments.devices/signDevice)\nto submit the installation parameters of CBSDs that\nrequire CPI installation.\n\nMethods\n-------\n\nThe following table shows which roles can use each type of method.\n\nWhat's next\n-----------\n\n- To get an overview of the SAS Portal API, see [Google SAS Portal API overview](/spectrum-access-system/docs/overview-api).\n- For information about each API, see [Customers API](/spectrum-access-system/docs/customers-api) and [Device Manager API](/spectrum-access-system/docs/device-manager-api).\n- For examples of how to use the API, see [API code samples](/spectrum-access-system/docs/samples).\n- For reference documentation, see [APIs and reference](/spectrum-access-system/docs/apis)."]]
