Restez organisé à l'aide des collections
Enregistrez et classez les contenus selon vos préférences.
Créer un niveau d'accès pour Access Context Manager
Découvrez comment créer un niveau d'accès pour Access Context Manager à l'aide de la consoleGoogle Cloud .
Pour suivre ce guide de démarrage rapide, vous devez disposer de l'autorisation accesscontextmanager.policies.create, qui nécessite le rôle Administrateur Access Context Manager au niveau de l'organisation. Pour en savoir plus, consultez Contrôle des accès avec IAM.
Pour obtenir des instructions détaillées sur cette tâche directement dans la console Google Cloud , cliquez sur Visite guidée :
Sign in to your Google Cloud account. If you're new to
Google Cloud,
create an account to evaluate how our products perform in
real-world scenarios. New customers also get $300 in free credits to
run, test, and deploy workloads.
In the Google Cloud console, on the project selector page,
select or create a Google Cloud project.
Dans le volet Ajouter des comptes principaux, procédez comme suit :
Dans le champ Nouveaux comptes principaux, saisissez l'adresse e-mail de votre utilisateur.
Pour Sélectionner un rôle, sélectionnez Access Context Manager, puis Administrateur Access Context Manager.
Cliquez sur Enregistrer.
Créer un niveau d'accès
Ce guide de démarrage rapide fournit des exemples de valeurs pour créer un exemple de niveau d'accès de base.
Pour créer un niveau d'accès spécifique à votre environnement, consultez Créer un niveau d'accès de base.
Dans la console Google Cloud , accédez à la page Access Context Manager.
Sauf indication contraire, le contenu de cette page est régi par une licence Creative Commons Attribution 4.0, et les échantillons de code sont régis par une licence Apache 2.0. Pour en savoir plus, consultez les Règles du site Google Developers. Java est une marque déposée d'Oracle et/ou de ses sociétés affiliées.
Dernière mise à jour le 2025/09/04 (UTC).
[[["Facile à comprendre","easyToUnderstand","thumb-up"],["J'ai pu résoudre mon problème","solvedMyProblem","thumb-up"],["Autre","otherUp","thumb-up"]],[["Difficile à comprendre","hardToUnderstand","thumb-down"],["Informations ou exemple de code incorrects","incorrectInformationOrSampleCode","thumb-down"],["Il n'y a pas l'information/les exemples dont j'ai besoin","missingTheInformationSamplesINeed","thumb-down"],["Problème de traduction","translationIssue","thumb-down"],["Autre","otherDown","thumb-down"]],["Dernière mise à jour le 2025/09/04 (UTC)."],[[["\u003cp\u003eThis guide provides steps to create an access level within Access Context Manager using the Google Cloud console.\u003c/p\u003e\n"],["\u003cp\u003eYou must have the \u003ccode\u003eaccesscontextmanager.policies.create\u003c/code\u003e permission, typically granted through the Access Context Manager Admin role at the organization level, to create an access level.\u003c/p\u003e\n"],["\u003cp\u003eThe process involves setting the necessary permissions in the IAM page, navigating to the Access Context Manager page, and configuring the new access level with a title and conditions, such as an IP subnet.\u003c/p\u003e\n"],["\u003cp\u003eThe guide includes instructions on how to clean up resources by deleting the entire project or just the created access level.\u003c/p\u003e\n"],["\u003cp\u003eFurther information about Access Context Manager and additional access level attributes are available for further reading.\u003c/p\u003e\n"]]],[],null,["# Create an access level for Access Context Manager\n=================================================\n\nLearn how to create an access level for Access Context Manager by using the\nGoogle Cloud console.\n\nTo complete this quickstart, you must have the\n`accesscontextmanager.policies.create` permission, which requires the\nAccess Context Manager Admin role at the organization level. For more\ninformation, see [Access control with IAM](/access-context-manager/docs/access-control).\n\n*** ** * ** ***\n\nTo follow step-by-step guidance for this task directly in the\nGoogle Cloud console, click **Guide me**:\n\n[Guide me](https://console.cloud.google.com/freetrial?redirectPath=/?walkthrough_id=access-context-manager--create-access-level)\n\n*** ** * ** ***\n\nBefore you begin\n----------------\n\n- Sign in to your Google Cloud account. If you're new to Google Cloud, [create an account](https://console.cloud.google.com/freetrial) to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.\n- In the Google Cloud console, on the project selector page,\n select or create a Google Cloud project.\n\n | **Note**: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.\n\n [Go to project selector](https://console.cloud.google.com/projectselector2/home/dashboard)\n-\n [Verify that billing is enabled for your Google Cloud project](/billing/docs/how-to/verify-billing-enabled#confirm_billing_is_enabled_on_a_project).\n\n-\n\n\n Enable the Access Context Manager and the Cloud Resource Manager APIs.\n\n\n [Enable the APIs](https://console.cloud.google.com/flows/enableapi?apiid=accesscontextmanager.googleapis.com, cloudresourcemanager.googleapis.com)\n\n- In the Google Cloud console, on the project selector page,\n select or create a Google Cloud project.\n\n | **Note**: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.\n\n [Go to project selector](https://console.cloud.google.com/projectselector2/home/dashboard)\n-\n [Verify that billing is enabled for your Google Cloud project](/billing/docs/how-to/verify-billing-enabled#confirm_billing_is_enabled_on_a_project).\n\n-\n\n\n Enable the Access Context Manager and the Cloud Resource Manager APIs.\n\n\n [Enable the APIs](https://console.cloud.google.com/flows/enableapi?apiid=accesscontextmanager.googleapis.com, cloudresourcemanager.googleapis.com)\n\n\u003cbr /\u003e\n\nSet permissions\n---------------\n\n1. At the top of the Google Cloud console, click the\n arrow_drop_down\n project selector, and then select your organization.\n\n2. Go to the **IAM** page.\n\n [Go to IAM](https://console.cloud.google.com/iam-admin/iam)\n3. Click person_add **Grant access**.\n\n4. In the **Add principals** pane, do the following:\n\n 1. For **New principals**, enter your user email.\n\n 2. For **Select a role** , select **Access Context Manager** , and then\n select **Access Context Manager Admin**.\n\n 3. Click **Save**.\n\nCreate an access level\n----------------------\n\nThis quickstart provides sample values to create an example basic access level.\nTo create an access level specific to your environment, see\n[Creating a basic access level](/access-context-manager/docs/create-basic-access-level).\n\n1. In the Google Cloud console, go to the **Access Context Manager** page.\n\n [Go to Access Context Manager](https://console.cloud.google.com/security/access-level)\n\n If you are prompted, select a project.\n2. Click **Create access level**.\n\n3. In the **New access level** pane, do the following:\n\n 1. In the **Access level title** field, enter `quickstart-access-level`.\n\n 2. In the **Conditions** section, expand **IP subnetworks** , and then enter\n `203.0.113.0/24`.\n\n 3. Click **Save**.\n\nClean up\n--------\n\n\nTo avoid incurring charges to your Google Cloud account for\nthe resources used on this page, follow these steps.\n\n### Delete the project\n\n\nThe easiest way to eliminate billing is to delete the project that you\ncreated for the tutorial.\n\nTo delete the project:\n\n| **Caution** : Deleting a project has the following effects:\n|\n| - **Everything in the project is deleted.** If you used an existing project for the tasks in this document, when you delete it, you also delete any other work you've done in the project.\n| - **Custom project IDs are lost.** When you created this project, you might have created a custom project ID that you want to use in the future. To preserve the URLs that use the project ID, such as an `appspot.com` URL, delete selected resources inside the project instead of deleting the whole project.\n|\n|\n| If you plan to explore multiple architectures, tutorials, or quickstarts, reusing projects\n| can help you avoid exceeding project quota limits.\n1. In the Google Cloud console, go to the **Manage resources** page.\n\n [Go to Manage resources](https://console.cloud.google.com/iam-admin/projects)\n2. In the project list, select the project that you want to delete, and then click **Delete**.\n3. In the dialog, type the project ID, and then click **Shut down** to delete the project.\n\n\u003cbr /\u003e\n\n\u003cbr /\u003e\n\n### Delete the access level\n\nThere are no costs associated with creating access levels. However, if you want\nto delete an access level, follow these steps:\n\n1. In the row for the access level you want to delete, click the trigger actions\n menu (more_vert), and then click **Delete**.\n\n2. To confirm, click **Delete**.\n\nWhat's next\n-----------\n\n- Read an [overview of Access Context Manager](/access-context-manager/docs/overview).\n\n- To add more attributes to your access level, see\n [Access Level attributes](/access-context-manager/docs/access-level-attributes)."]]
