Control de acceso con la IAM

En esta página, se describen los roles y permisos del Centro de diseño de aplicaciones. Para controlar el acceso a App Design Center, usa Identity and Access Management (IAM) para asignar roles a usuarios, grupos y cuentas de servicio.

Roles predefinidos de Application Design Center

Para otorgar acceso a recursos Google Cloud específicos y evitar el acceso no autorizado a otros recursos, asigna las funciones predefinidas del Centro de diseño de aplicaciones en la carpeta habilitada para la app o en el proyecto de administración.

Usa los siguientes roles de IAM para administrar espacios y crear plantillas:

• Administrador de App Design Center (roles/designcenter.admin)
• Usuario de App Design Center (roles/designcenter.user)
• Visualizador del Centro de diseño de aplicaciones (roles/designcenter.viewer)

Usa los siguientes roles de IAM para crear configuraciones de aplicaciones y administrar los ciclos de vida de la implementación:

• Administrador de aplicaciones (roles/designcenter.applicationAdmin)
• Editor de la aplicación (roles/designcenter.applicationEditor)
• Visualizador de aplicaciones (roles/designcenter.applicationViewer)

El rol de administrador de App Design Center incluye todos los permisos de los demás roles de App Design Center.

Descripciones de los roles de Application Design Center

En la siguiente tabla, se describen los roles de App Design Center y sus responsabilidades típicas.

Función	Descripción	Purpose
Administrador de Application Design Center	Crear y administrar todos los artefactos del App Design Center, y delegar el control de la aplicación a otros usuarios	Administrar el ciclo de vida completo de una aplicación Para los administradores de la plataforma, que tienen permisos administrativos y visibilidad total de la arquitectura de extremo a extremo.
Usuario de Application Design Center	Crear y actualizar plantillas de aplicaciones	Ampliar la capacidad de crear, actualizar o borrar plantillas de aplicaciones para reducir la carga de trabajo de los administradores de la plataforma Para ingenieros de plataformas que crean y administran plantillas de aplicaciones
Visualizador de Application Design Center	Consulta espacios, catálogos, plantillas, aplicaciones y sus atributos.	Ver los espacios, catálogos, plantillas, aplicaciones y sus dependencias de App Design Center Para la mayoría del personal de la organización Otorga este rol a quienes solo necesiten ver espacios, catálogos, plantillas y aplicaciones.
Administrador de aplicaciones	Crear, administrar e implementar aplicaciones, y delegar el control de las aplicaciones a otros desarrolladores	Administrar borradores y la implementación de aplicaciones, y adjuntar los proyectos de servicio necesarios para almacenar recursos individuales Para administradores y desarrolladores responsables de la creación de aplicaciones.
Editor de aplicaciones	Crear, administrar e implementar aplicaciones	Administrar borradores e implementaciones, y reducir la carga de trabajo de los administradores de aplicaciones Para operadores de aplicaciones que comprenden las implementaciones.
Visualizador de la aplicación	Ver aplicaciones	Para ver plantillas, aplicaciones y sus dependencias Para la mayoría del personal de la organización Otorga este rol a los usuarios que solo necesiten ver plantillas y aplicaciones.

Permisos de Application Design Center

En la siguiente tabla, se enumeran los roles de IAM de App Design Center y sus permisos.

Administrador del Centro de diseño de aplicaciones Usuario del Centro de diseño de aplicaciones Visualizador del Centro de diseño de aplicaciones Administrador de aplicaciones Editor de aplicaciones Visualizador de aplicaciones Borrar todo

Administrador del Centro de diseño de aplicaciones (roles/designcenter.admin) Tiene acceso completo a los recursos de App Design Center.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.boundaries.attach apphub.boundaries.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list cloudbuild.builds.get cloudbuild.builds.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deployments.get config.deployments.getIamPolicy config.deployments.list config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.catalogTemplateRevisions.create designcenter.catalogTemplateRevisions.delete designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.create designcenter.catalogTemplates.delete designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogTemplates.update designcenter.catalogs.create designcenter.catalogs.delete designcenter.catalogs.get designcenter.catalogs.list designcenter.catalogs.update designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.get designcenter.locations.list designcenter.operations.cancel designcenter.operations.delete designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.create designcenter.shares.delete designcenter.shares.get designcenter.shares.list designcenter.spaces.create designcenter.spaces.delete designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list designcenter.spaces.setIamPolicy designcenter.spaces.update developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.delete developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.update storage.objects.updateContext
Usuario del Centro de diseño de aplicaciones (roles/designcenter.user) Tiene acceso de solo lectura a los recursos del App Design Center.	apphub.serviceProjectAttachments.list container.clusters.list designcenter.applicationTemplateRevisions.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.* designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.get designcenter.applications.list designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogs.get designcenter.catalogs.list designcenter.components.* designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.* designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.update storage.objects.updateContext
Visualizador del Centro de diseño de aplicaciones (roles/designcenter.viewer) Tiene acceso de solo lectura a los recursos del App Design Center.	container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.get designcenter.applications.list designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogs.get designcenter.catalogs.list designcenter.components.get designcenter.components.list designcenter.connections.get designcenter.connections.list designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list storage.folders.get storage.folders.list storage.managedFolders.get storage.managedFolders.list storage.objects.get storage.objects.list
Administrador de aplicaciones (roles/designcenter.applicationAdmin) Acceso de administrador a la aplicación.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list cloudbuild.builds.get cloudbuild.builds.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deployments.get config.deployments.getIamPolicy config.deployments.list config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.delete developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
Editor de aplicaciones (roles/designcenter.applicationEditor) Tiene acceso de lectura y escritura a la aplicación.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list cloudbuild.builds.get cloudbuild.builds.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deployments.get config.deployments.getIamPolicy config.deployments.list config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list
Visualizador de aplicaciones (roles/designcenter.applicationViewer) Acceso de solo lectura a la aplicación.	apphub.applications.get apphub.applications.list apphub.locations.* apphub.locations.get apphub.locations.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deployments.get config.deployments.getIamPolicy config.deployments.list config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.get config.previews.list config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.get designcenter.applications.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list

¿Qué sigue?

• Otorga roles a tu cuenta de servicio.
• Administrar y asignar espacios