Ruoli e autorizzazioni IAM

Questa pagina si applica ad Apigee e Apigee hybrid.

Puoi visualizzare e concedere i ruoli utilizzando il riquadro delle autorizzazioni nella pagina IAM e amministrazione > IAM del progetto Google Cloud.

Vai a IAM e amministrazione

La seguente tabella elenca i ruoli e le autorizzazioni corrispondenti necessarie per creare e gestire le risorse hub API.

Nome ruolo IAM Descrizione Autorizzazioni obbligatorie
Cloud API hub Viewer Questo ruolo può visualizzare tutte le risorse nell'hub API
  • apihub.googleapis.com/locations.searchResources
  • apihub.googleapis.com/apis.list
  • apihub.googleapis.com/apis.get
  • apihub.googleapis.com/specs.list
  • apihub.googleapis.com/specs.get
  • apihub.googleapis.com/apiOperations.list
  • apihub.googleapis.com/apiOperations.get
  • apihub.googleapis.com/versions.list
  • apihub.googleapis.com/versions.get
  • apihub.googleapis.com/deployments.list
  • apihub.googleapis.com/deployments.get
  • apihub.googleapis.com/attributes.list
  • apihub.googleapis.com/attributes.get
  • apihub.googleapis.com/definitions.list
  • apihub.googleapis.com/definitions.get
  • apihub.googleapis.com/definitions.get
  • apihub.googleapis.com/externalApis.get
  • apihub.googleapis.com/externalApis.list
  • apihub.googleapis.com/dependencies.get
  • apihub.googleapis.com/dependencies.list
  • apihub.googleapis.com/plugins.get
  • apihub.googleapis.com/plugins.list
  • apihub.googleapis.com/runTimeProjectAttachments.get
  • apihub.googleapis.com/runTimeProjectAttachments.list
  • apihub.googleapis.com/hostProjectRegistrations.list
  • apihub.googleapis.com/hostProjectRegistrations.get
  • apihub.googleapis.com/apiHubInstances.get
  • apihub.googleapis.com/apiHubInstances.list
  • apihub.googleapis.com/styleGuides.get
  • cloudresourcemanager.googleapis.com/projects.get
  • cloudresourcemanager.googleapis.com/projects.list
Cloud API hub Plugins Admin Tutte le autorizzazioni relative ai plug-in
  • cloudresourcemanager.googleapis.com/projects.get
  • cloudresourcemanager.googleapis.com/projects.list
  • apihub.googleapis.com/plugins.get
  • apihub.googleapis.com/plugins.list
  • apihub.googleapis.com/plugins.enable
  • apihub.googleapis.com/plugins.disable
  • apihub.googleapis.com/specs.lint
  • apihub.googleapis.com/styleGuides.get
  • apihub.googleapis.com/styleGuides.update
Editor hub API Cloud Ruolo Editor per le risorse Oltre alle autorizzazioni del ruolo Cloud API hub viewer, questo ruolo dispone delle seguenti autorizzazioni:
  • apihub.googleapis.com/apis.create
  • apihub.googleapis.com/apis.update
  • apihub.googleapis.com/apis.delete
  • apihub.googleapis.com/versions.create
  • apihub.googleapis.com/versions.update
  • apihub.googleapis.com/versions.delete
  • apihub.googleapis.com/specs.create
  • apihub.googleapis.com/specs.update
  • apihub.googleapis.com/specs.delete
  • apihub.googleapis.com/deployments.create
  • apihub.googleapis.com/deployments.update
  • apihub.googleapis.com/deployments.delete
  • apihub.googleapis.com/specs.lint
Cloud API hub Provisioning Admin Tutte le autorizzazioni correlate al provisioning
  • cloudresourcemanager.googleapis.com/projects.get
  • cloudresourcemanager.googleapis.com/projects.list
  • apihub.googleapis.com/hostProjectRegistrations.list
  • apihub.googleapis.com/hostProjectRegistrations.get
  • apihub.googleapis.com/hostProjectRegistrations.create
  • apihub.googleapis.com/hostProjectRegistrations.register
  • apihub.googleapis.com/hostProjectRegistrations.delete
  • apihub.googleapis.com/runTimeProjectAttachments.list
  • apihub.googleapis.com/runTimeProjectAttachments.get
  • apihub.googleapis.com/runTimeProjectAttachments.lookup
  • apihub.googleapis.com/runTimeProjectAttachments.create
  • apihub.googleapis.com/runTimeProjectAttachments.attach
  • apihub.googleapis.com/runTimeProjectAttachments.delete
  • apihub.googleapis.com/apiHubInstances.get
  • apihub.googleapis.com/apiHubInstances.list
  • apihub.googleapis.com/apiHubInstances.create
  • apihub.googleapis.com/apiHubInstances.delete
Cloud API hub Attributes Admin Tutte le autorizzazioni correlate agli attributi
  • cloudresourcemanager.googleapis.com/projects.get
  • cloudresourcemanager.googleapis.com/projects.list
  • apihub.googleapis.com/attributes.create
  • apihub.googleapis.com/attributes.update
  • apihub.googleapis.com/attributes.delete
  • apihub.googleapis.com/attributes.list
  • apihub.googleapis.com/attributes.get
Amministratore hub API Cloud Tutte le autorizzazioni

Questo ruolo dispone di tutte le autorizzazioni per i ruoli seguenti:

  • Editor hub API Cloud
  • Cloud API hub Attributes Admin
  • Cloud API hub Provisioning Admin
  • Cloud API hub Plugins Admin