Kontrol akses dengan IAM

Penggunaan Layanan menggunakan Identity and Access Management (IAM) untuk mengontrol akses ke layanan. Halaman ini menjelaskan peran dan izin IAM yang terkait dengan Service Usage serta cara menggunakannya untuk mengontrol akses.

Model resource

Untuk Penggunaan Layanan, ada tiga referensi yang relevan:

1. Layanan yang Anda gunakan.

2. Project tempat Anda menggunakan layanan.

3. Operasi atau operasi yang berjalan lama yang ditampilkan oleh metode tertentu.

Setiap metode Penggunaan Layanan memerlukan izin pada satu atau beberapa resource ini.

Izin IAM

Tabel berikut menunjukkan izin yang diperlukan untuk setiap metode Service Usage API. Anda juga dapat menemukan informasi ini di referensi API.

Metode	Izin yang diperlukan
services.batchEnable	Di project: serviceusage.services.enable Di layanan: servicemanagement.services.bind
services.enable	Di project: serviceusage.services.enable Di layanan: servicemanagement.services.bind
services.disable	Di project: serviceusage.services.disable
services.get	Di project: serviceusage.services.get
services.list	Di project: serviceusage.services.list
services.consumerQuotaMetrics.list services.consumerQuotaMetrics.get services.consumerQuotaMetrics.limits.get services.consumerQuotaMetrics.limits.consumerOverrides.list services.consumerQuotaMetrics.limits.adminOverrides.list services.consumerQuotaMetrics.limits.producerOverrides.list	Di project: serviceusage.quota.get Di layanan: servicemanagement.services.bind
services.consumerQuotaMetrics.consumerOverrides.create services.consumerQuotaMetrics.consumerOverrides.patch services.consumerQuotaMetrics.consumerOverrides.delete services.adminQuotaMetrics.adminOverrides.create services.adminQuotaMetrics.adminOverrides.patch services.adminQuotaMetrics.adminOverrides.delete	Di project: serviceusage.quota.update Di layanan: servicemanagement.services.bind
Untuk menggunakan project untuk tujuan kuota dan penagihan. Untuk mengetahui informasi selengkapnya, lihat Parameter sistem.	Di project: serviceusage.services.use

Peran IAM

Dengan IAM, Anda memberikan izin kepada pengguna dengan memberikan peran kepada mereka. Tabel berikut mencantumkan peran dasar dan bawaan IAM, serta izin terkait Penggunaan Layanan yang disertakan dalam peran tersebut.

Untuk mengetahui informasi selengkapnya tentang peran, lihat Memahami peran.

Peran dasar

Nama	Judul	Izin
roles/viewer	Pelihat	serviceusage.services.get serviceusage.services.list serviceusage.quotas.get
roles/editor roles/owner	Editor Pemilik	serviceusage.services.get serviceusage.services.list serviceusage.services.disable serviceusage.services.enable serviceusage.services.use serviceusage.quotas.get serviceusage.quotas.update

Peran yang telah ditetapkan

Role	Permissions
API Keys Admin (roles/serviceusage.apiKeysAdmin) Ability to create, delete, update, get and list API keys for a project.	apikeys.* apikeys.keys.create apikeys.keys.delete apikeys.keys.get apikeys.keys.getKeyString apikeys.keys.list apikeys.keys.lookup apikeys.keys.undelete apikeys.keys.update orgpolicy.policy.get serviceusage.apiKeys.* serviceusage.apiKeys.regenerate serviceusage.apiKeys.revert serviceusage.operations.get
API Keys Viewer (roles/serviceusage.apiKeysViewer) Ability to get and list API keys for a project.	apikeys.keys.get apikeys.keys.getKeyString apikeys.keys.list apikeys.keys.lookup
Service Usage Admin (roles/serviceusage.serviceUsageAdmin) Ability to enable, disable, and inspect service states, inspect operations, and consume quota and billing for a consumer project.	monitoring.timeSeries.list serviceusage.operations.get serviceusage.quotas.* serviceusage.quotas.get serviceusage.quotas.update serviceusage.services.* serviceusage.services.disable serviceusage.services.enable serviceusage.services.get serviceusage.services.list serviceusage.services.use
Service Usage Consumer (roles/serviceusage.serviceUsageConsumer) Ability to inspect service states and operations, and consume quota and billing for a consumer project.	monitoring.timeSeries.list serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list serviceusage.services.use
Service Usage Viewer (roles/serviceusage.serviceUsageViewer) Ability to inspect service states and operations for a consumer project.	monitoring.timeSeries.list serviceusage.operations.get serviceusage.quotas.get serviceusage.services.get serviceusage.services.list