Controlla l'accesso con IAM

L'API Cloud Translation - Advanced (v3) utilizza Identity and Access Management (IAM) per controllare l'accesso. Assegna uno o più ruoli IAM a un'entità per concedere le autorizzazioni. Per saperne di più, consulta Ruoli IAM di base e predefiniti.

Nota: Cloud Translation - Basic (v2) supporta l'autenticazione tramite IAM, ma non l'autorizzazione; non puoi specificare autorizzazioni IAM granulari per Cloud Translation - Basic.

Ruoli Cloud Translation predefiniti per la v3

La tabella seguente elenca i ruoli predefiniti che ti danno accesso alle risorse di Cloud Translation:

Role	Permissions
Cloud Translation API Admin (roles/cloudtranslate.admin) Full access to all Cloud Translation resources	automl.models.get automl.models.predict cloudtranslate.* cloudtranslate.adaptiveMtDatasets.create cloudtranslate.adaptiveMtDatasets.delete cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.import cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.adaptiveMtFiles.delete cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.create cloudtranslate.customModels.delete cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.datasets.create cloudtranslate.datasets.delete cloudtranslate.datasets.export cloudtranslate.datasets.get cloudtranslate.datasets.import cloudtranslate.datasets.list cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.get cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.create cloudtranslate.glossaries.delete cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict cloudtranslate.glossaries.update cloudtranslate.glossaryentries.create cloudtranslate.glossaryentries.delete cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.glossaryentries.update cloudtranslate.languageDetectionModels.predict cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.cancel cloudtranslate.operations.delete cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Cloud Translation API Editor (roles/cloudtranslate.editor) Editor of all Cloud Translation resources	automl.models.get automl.models.predict cloudtranslate.* cloudtranslate.adaptiveMtDatasets.create cloudtranslate.adaptiveMtDatasets.delete cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.import cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.adaptiveMtFiles.delete cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.create cloudtranslate.customModels.delete cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.datasets.create cloudtranslate.datasets.delete cloudtranslate.datasets.export cloudtranslate.datasets.get cloudtranslate.datasets.import cloudtranslate.datasets.list cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.get cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.create cloudtranslate.glossaries.delete cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict cloudtranslate.glossaries.update cloudtranslate.glossaryentries.create cloudtranslate.glossaryentries.delete cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.glossaryentries.update cloudtranslate.languageDetectionModels.predict cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.cancel cloudtranslate.operations.delete cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Cloud Translation API User (roles/cloudtranslate.user) User of Cloud Translation and AutoML models	automl.models.get automl.models.predict cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.datasets.get cloudtranslate.datasets.list cloudtranslate.generalModels.* cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.get cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.languageDetectionModels.predict cloudtranslate.locations.* cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Cloud Translation API Viewer (roles/cloudtranslate.viewer) Viewer of all Translation resources	automl.models.get cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.datasets.get cloudtranslate.datasets.list cloudtranslate.generalModels.get cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.locations.* cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent) Gives Cloud Translation Service Account access to consumer resources. Warning: Do not grant service agent roles to any principals except service agents.	automl.datasets.export automl.datasets.get automl.datasets.list automl.models.get automl.models.list automl.operations.get storage.buckets.get storage.objects.create storage.objects.get storage.objects.list

Ruoli personalizzati

Se un ruolo predefinito non offre il giusto insieme di autorizzazioni per il tuo caso d'uso, crea un ruolo personalizzato. I ruoli personalizzati possono includere qualsiasi autorizzazione specificata. Ad esempio, puoi creare un ruolo personalizzato con operazioni amministrative specifiche, come la creazione di glossari o la gestione di modelli personalizzati. Per creare ruoli personalizzati, vedi Creazione e gestione di ruoli personalizzati.

Passaggi successivi

• Per saperne di più sulla concessione di un ruolo in un progetto, consulta Concedi un ruolo. In questo modo, puoi concedere ruoli predefiniti o personalizzati.
• Per saperne di più su IAM, consulta Panoramica di IAM.