IAM으로 액세스 제어

Cloud Translation - Advanced API(v3)는 Identity and Access Management(IAM)를 사용하여 액세스를 제어합니다. 주 구성원에게 하나 이상의 IAM 역할을 할당하여 권한을 부여합니다. 자세한 내용은 IAM 기본 및 사전 정의된 역할을 참조하세요.

참고: Cloud Translation - Basic(v2)은 IAM을 통한 인증을 지원하지만 승인은 지원하지 않습니다. Cloud Translation - Basic에 대해 세분화된 IAM 권한을 지정할 수 없습니다.

v3용 사전 정의된 Cloud Translation 역할

다음 표에는 Cloud Translation 리소스에 대한 액세스 권한을 부여하는 사전 정의된 역할이 나열되어 있습니다.

Role	Permissions
Cloud Translation API Admin (roles/cloudtranslate.admin) Full access to all Cloud Translation resources	automl.models.get automl.models.predict cloudtranslate.* cloudtranslate.adaptiveMtDatasets.create cloudtranslate.adaptiveMtDatasets.delete cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.import cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.adaptiveMtFiles.delete cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.create cloudtranslate.customModels.delete cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.datasets.create cloudtranslate.datasets.delete cloudtranslate.datasets.export cloudtranslate.datasets.get cloudtranslate.datasets.import cloudtranslate.datasets.list cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.get cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.create cloudtranslate.glossaries.delete cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict cloudtranslate.glossaries.update cloudtranslate.glossaryentries.create cloudtranslate.glossaryentries.delete cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.glossaryentries.update cloudtranslate.languageDetectionModels.predict cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.cancel cloudtranslate.operations.delete cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Cloud Translation API Editor (roles/cloudtranslate.editor) Editor of all Cloud Translation resources	automl.models.get automl.models.predict cloudtranslate.* cloudtranslate.adaptiveMtDatasets.create cloudtranslate.adaptiveMtDatasets.delete cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.import cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.adaptiveMtFiles.delete cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.create cloudtranslate.customModels.delete cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.datasets.create cloudtranslate.datasets.delete cloudtranslate.datasets.export cloudtranslate.datasets.get cloudtranslate.datasets.import cloudtranslate.datasets.list cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.get cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.create cloudtranslate.glossaries.delete cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict cloudtranslate.glossaries.update cloudtranslate.glossaryentries.create cloudtranslate.glossaryentries.delete cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.glossaryentries.update cloudtranslate.languageDetectionModels.predict cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.cancel cloudtranslate.operations.delete cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Cloud Translation API User (roles/cloudtranslate.user) User of Cloud Translation and AutoML models	automl.models.get automl.models.predict cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.datasets.get cloudtranslate.datasets.list cloudtranslate.generalModels.* cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.get cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.languageDetectionModels.predict cloudtranslate.locations.* cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Cloud Translation API Viewer (roles/cloudtranslate.viewer) Viewer of all Translation resources	automl.models.get cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.datasets.get cloudtranslate.datasets.list cloudtranslate.generalModels.get cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.locations.* cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent) Gives Cloud Translation Service Account access to consumer resources. Warning: Do not grant service agent roles to any principals except service agents.	automl.datasets.export automl.datasets.get automl.datasets.list automl.models.get automl.models.list automl.operations.get storage.buckets.get storage.objects.create storage.objects.get storage.objects.list

커스텀 역할

사전 정의된 역할이 사용 사례에 적합한 권한 집합을 제공하지 않는 경우 커스텀 역할을 만듭니다. 커스텀 역할에는 사용자가 지정하는 모든 권한이 포함될 수 있습니다. 예를 들어 용어집 만들기 또는 커스텀 모델 관리와 같은 특정 관리 작업으로 커스텀 역할을 만들 수 있습니다. 커스텀 역할을 만들려면 커스텀 역할 만들기 및 관리를 참조하세요.

다음 단계

• 프로젝트에 역할을 부여하는 방법에 대한 자세한 내용은 역할 부여를 참조하세요. 이렇게 하면 사전 정의된 역할 또는 커스텀 역할을 부여할 수 있습니다.
• IAM에 대한 자세한 내용은 IAM 개요를 참조하세요.