When you use a service account for authentication and authorization, you grant
roles to the service account, which enables code using that service account to
access resources. Always grant roles with only the permissions your code
requires; granting broader roles, such as basic roles, violates the principle of
least privilege.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[],[],null,["# Authenticate requests to the VMware Engine API\n==============================================\n\n|\n| **Preview**\n|\n|\n| This product or feature is subject to the \"Pre-GA Offerings Terms\" in the General Service Terms section\n| of the [Service Specific Terms](/terms/service-terms#1).\n|\n| Pre-GA products and features are available \"as is\" and might have limited support.\n|\n| For more information, see the\n| [launch stage descriptions](/products#product-launch-stages).\n\nThis document describes authentication for Google Cloud VMware Engine.\n\nFor more information about Google Cloud authentication, see the\n[Google Cloud authentication overview](/docs/authentication).\n\nAuthentication to the API\n-------------------------\n\nVMware Engine provides an API for programmatic access, and you must\nauthenticate to the API to use features of VMware Engine\nprogrammatically.\n\nFor more information, see\n[Set up Application Default Credentials](/docs/authentication/provide-credentials-adc).\n\nAuthorization with IAM\n----------------------\n\nWhen you use a service account for authentication and authorization, you grant\nroles to the service account, which enables code using that service account to\naccess resources. Always grant roles with only the permissions your code\nrequires; granting broader roles, such as basic roles, violates the principle of\nleast privilege.\n\nFor more information about IAM and authorization, see\n[VMware Engine IAM roles and permissions](/vmware-engine/docs/iam)."]]
