API hub provisioning permissions

This page applies to Apigee and Apigee hybrid.

Preview — Apigee API hub

This feature is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of the Service Specific Terms. Pre-GA features are available "as is" and might have limited support. For more information, see the launch stage descriptions.

Roles

The following user roles provide permissions that control access to the API hub functions:

Note: The preview release provides coarse-grained access control and four basic roles. Fine-grained access control and integrations with other parts of Apigee are planned for the GA release.

• Admin: Full access to all the resources in the Registry plus planned features for automated provisioning and instance management
• Editor: Edit access to API hub and Registry resources.
• Viewer: Read-only access to API hub and Registry resources.
• Worker: Predefined role for Apigee Registry application workers to read and update API Registry resources.

Set up IAM permissions

See IAM roles for detailed permissions information.

To add users and roles:

1. In the Google Cloud console, go to IAM & Admin for your project.

   Go to the IAM/Iam page

2. To add a new user:
   1. Click Add.
   2. Type a new Principal name.
   3. Click the Select a role menu, click Apigee Registry, and then click one of the following:
      • Cloud Apigee Registry Admin
      • Cloud Apigee Registry Editor
      • Cloud Apigee Registry Viewer
      • Cloud Apigee Registry Worker
   4. Click Save.
3. To edit an existing user:
   1. Click Edit.
   2. To change an existing role, click the Role menu and then select a different role.
   3. To add another role, click Add another role.
   4. Click the Select a role menu, click Apigee Registry, and then click one of the following:
      • Cloud Apigee Registry Admin
      • Cloud Apigee Registry Editor
      • Cloud Apigee Registry Viewer
      • Cloud Apigee Registry Worker
   5. Click Save.