IAM によるアクセス制御

Cloud Translation - Advanced API（v3）は、Identity and Access Management（IAM）を使用してアクセスを制御します。権限を付与するには、プリンシパルに IAM ロールを割り当てます。詳細については、IAM の基本ロールと事前定義ロールをご覧ください。

v3 の事前定義された Cloud Translation ロール

次の表に、Cloud Translation リソースへのアクセス権を付与する事前定義ロールを示します。

Role Permissions

(roles/cloudtranslate.admin)

Full access to all Cloud Translation resources

automl.models.get

automl.models.predict

cloudtranslate.*

  • cloudtranslate.adaptiveMtDatasets.create
  • cloudtranslate.adaptiveMtDatasets.delete
  • cloudtranslate.adaptiveMtDatasets.get
  • cloudtranslate.adaptiveMtDatasets.import
  • cloudtranslate.adaptiveMtDatasets.list
  • cloudtranslate.adaptiveMtDatasets.predict
  • cloudtranslate.adaptiveMtFiles.delete
  • cloudtranslate.adaptiveMtFiles.get
  • cloudtranslate.adaptiveMtFiles.list
  • cloudtranslate.adaptiveMtSentences.list
  • cloudtranslate.customModels.create
  • cloudtranslate.customModels.delete
  • cloudtranslate.customModels.get
  • cloudtranslate.customModels.list
  • cloudtranslate.customModels.predict
  • cloudtranslate.datasets.create
  • cloudtranslate.datasets.delete
  • cloudtranslate.datasets.export
  • cloudtranslate.datasets.get
  • cloudtranslate.datasets.import
  • cloudtranslate.datasets.list
  • cloudtranslate.generalModels.batchDocPredict
  • cloudtranslate.generalModels.batchPredict
  • cloudtranslate.generalModels.docPredict
  • cloudtranslate.generalModels.get
  • cloudtranslate.generalModels.predict
  • cloudtranslate.glossaries.batchDocPredict
  • cloudtranslate.glossaries.batchPredict
  • cloudtranslate.glossaries.create
  • cloudtranslate.glossaries.delete
  • cloudtranslate.glossaries.docPredict
  • cloudtranslate.glossaries.get
  • cloudtranslate.glossaries.list
  • cloudtranslate.glossaries.predict
  • cloudtranslate.glossaries.update
  • cloudtranslate.glossaryentries.create
  • cloudtranslate.glossaryentries.delete
  • cloudtranslate.glossaryentries.get
  • cloudtranslate.glossaryentries.list
  • cloudtranslate.glossaryentries.update
  • cloudtranslate.languageDetectionModels.predict
  • cloudtranslate.locations.get
  • cloudtranslate.locations.list
  • cloudtranslate.operations.cancel
  • cloudtranslate.operations.delete
  • cloudtranslate.operations.get
  • cloudtranslate.operations.list
  • cloudtranslate.operations.wait

resourcemanager.projects.get

resourcemanager.projects.list

(roles/cloudtranslate.editor)

Editor of all Cloud Translation resources

automl.models.get

automl.models.predict

cloudtranslate.*

  • cloudtranslate.adaptiveMtDatasets.create
  • cloudtranslate.adaptiveMtDatasets.delete
  • cloudtranslate.adaptiveMtDatasets.get
  • cloudtranslate.adaptiveMtDatasets.import
  • cloudtranslate.adaptiveMtDatasets.list
  • cloudtranslate.adaptiveMtDatasets.predict
  • cloudtranslate.adaptiveMtFiles.delete
  • cloudtranslate.adaptiveMtFiles.get
  • cloudtranslate.adaptiveMtFiles.list
  • cloudtranslate.adaptiveMtSentences.list
  • cloudtranslate.customModels.create
  • cloudtranslate.customModels.delete
  • cloudtranslate.customModels.get
  • cloudtranslate.customModels.list
  • cloudtranslate.customModels.predict
  • cloudtranslate.datasets.create
  • cloudtranslate.datasets.delete
  • cloudtranslate.datasets.export
  • cloudtranslate.datasets.get
  • cloudtranslate.datasets.import
  • cloudtranslate.datasets.list
  • cloudtranslate.generalModels.batchDocPredict
  • cloudtranslate.generalModels.batchPredict
  • cloudtranslate.generalModels.docPredict
  • cloudtranslate.generalModels.get
  • cloudtranslate.generalModels.predict
  • cloudtranslate.glossaries.batchDocPredict
  • cloudtranslate.glossaries.batchPredict
  • cloudtranslate.glossaries.create
  • cloudtranslate.glossaries.delete
  • cloudtranslate.glossaries.docPredict
  • cloudtranslate.glossaries.get
  • cloudtranslate.glossaries.list
  • cloudtranslate.glossaries.predict
  • cloudtranslate.glossaries.update
  • cloudtranslate.glossaryentries.create
  • cloudtranslate.glossaryentries.delete
  • cloudtranslate.glossaryentries.get
  • cloudtranslate.glossaryentries.list
  • cloudtranslate.glossaryentries.update
  • cloudtranslate.languageDetectionModels.predict
  • cloudtranslate.locations.get
  • cloudtranslate.locations.list
  • cloudtranslate.operations.cancel
  • cloudtranslate.operations.delete
  • cloudtranslate.operations.get
  • cloudtranslate.operations.list
  • cloudtranslate.operations.wait

resourcemanager.projects.get

resourcemanager.projects.list

(roles/cloudtranslate.user)

User of Cloud Translation and AutoML models

automl.models.get

automl.models.predict

cloudtranslate.adaptiveMtDatasets.get

cloudtranslate.adaptiveMtDatasets.list

cloudtranslate.adaptiveMtDatasets.predict

cloudtranslate.adaptiveMtFiles.get

cloudtranslate.adaptiveMtFiles.list

cloudtranslate.adaptiveMtSentences.list

cloudtranslate.customModels.get

cloudtranslate.customModels.list

cloudtranslate.customModels.predict

cloudtranslate.datasets.get

cloudtranslate.datasets.list

cloudtranslate.generalModels.*

  • cloudtranslate.generalModels.batchDocPredict
  • cloudtranslate.generalModels.batchPredict
  • cloudtranslate.generalModels.docPredict
  • cloudtranslate.generalModels.get
  • cloudtranslate.generalModels.predict

cloudtranslate.glossaries.batchDocPredict

cloudtranslate.glossaries.batchPredict

cloudtranslate.glossaries.docPredict

cloudtranslate.glossaries.get

cloudtranslate.glossaries.list

cloudtranslate.glossaries.predict

cloudtranslate.glossaryentries.get

cloudtranslate.glossaryentries.list

cloudtranslate.languageDetectionModels.predict

cloudtranslate.locations.*

  • cloudtranslate.locations.get
  • cloudtranslate.locations.list

cloudtranslate.operations.get

cloudtranslate.operations.list

cloudtranslate.operations.wait

resourcemanager.projects.get

resourcemanager.projects.list

(roles/cloudtranslate.viewer)

Viewer of all Translation resources

automl.models.get

cloudtranslate.adaptiveMtDatasets.get

cloudtranslate.adaptiveMtDatasets.list

cloudtranslate.adaptiveMtFiles.get

cloudtranslate.adaptiveMtFiles.list

cloudtranslate.adaptiveMtSentences.list

cloudtranslate.customModels.get

cloudtranslate.customModels.list

cloudtranslate.datasets.get

cloudtranslate.datasets.list

cloudtranslate.generalModels.get

cloudtranslate.glossaries.get

cloudtranslate.glossaries.list

cloudtranslate.glossaryentries.get

cloudtranslate.glossaryentries.list

cloudtranslate.locations.*

  • cloudtranslate.locations.get
  • cloudtranslate.locations.list

cloudtranslate.operations.get

cloudtranslate.operations.list

cloudtranslate.operations.wait

resourcemanager.projects.get

resourcemanager.projects.list

カスタムロール

事前定義ロールで提供される権限セットがユースケースに適さない場合は、カスタムロールを作成してください。カスタムロールには、指定した権限を含めることができます。たとえば、用語集の作成やカスタムモデルの管理など、特定の管理オペレーション用のカスタムロールを作成できます。カスタムロールを作成するには、カスタムロールの作成と管理をご覧ください。

次のステップ

  • プロジェクトに対するロールの付与については、ロールの付与をご覧ください。 この方法を使用して事前定義ロールまたはカスタムロールを付与できます。
  • IAM について詳しくは、IAM の概要をご覧ください。