IAM 역할 및 권한

이 페이지는 Apigee 및 Apigee Hybrid에 적용됩니다.

Google Cloud 프로젝트의 IAM & Admin > IAM 페이지에서 권한 패널을 사용하여 역할을 보고 권한을 부여할 수 있습니다.

다음 표에는 API 허브 리소스를 만들고 관리하는 데 필요한 역할과 해당 권한이 나열되어 있습니다.

IAM 역할 이름	설명	필수 권한
Cloud API 허브 뷰어	이 역할은 API 허브의 모든 리소스를 볼 수 있습니다.	`apihub.googleapis.com/locations.searchResources` `apihub.googleapis.com/apis.list` `apihub.googleapis.com/apis.get` `apihub.googleapis.com/specs.list` `apihub.googleapis.com/specs.get` `apihub.googleapis.com/apiOperations.list` `apihub.googleapis.com/apiOperations.get` `apihub.googleapis.com/versions.list` `apihub.googleapis.com/versions.get` `apihub.googleapis.com/deployments.list` `apihub.googleapis.com/deployments.get` `apihub.googleapis.com/attributes.list` `apihub.googleapis.com/attributes.get` `apihub.googleapis.com/definitions.list` `apihub.googleapis.com/definitions.get` `apihub.googleapis.com/definitions.get` `apihub.googleapis.com/externalApis.get` `apihub.googleapis.com/externalApis.list` `apihub.googleapis.com/dependencies.get` `apihub.googleapis.com/dependencies.list` `apihub.googleapis.com/plugins.get` `apihub.googleapis.com/plugins.list` `apihub.googleapis.com/runTimeProjectAttachments.get` `apihub.googleapis.com/runTimeProjectAttachments.list` `apihub.googleapis.com/hostProjectRegistrations.list` `apihub.googleapis.com/hostProjectRegistrations.get` `apihub.googleapis.com/apiHubInstances.get` `apihub.googleapis.com/apiHubInstances.list` `apihub.googleapis.com/styleGuides.get` `cloudresourcemanager.googleapis.com/projects.get` `cloudresourcemanager.googleapis.com/projects.list`
Cloud API 허브 플러그인 관리자	플러그인과 관련된 모든 권한	`cloudresourcemanager.googleapis.com/projects.get` `cloudresourcemanager.googleapis.com/projects.list` `apihub.googleapis.com/plugins.get` `apihub.googleapis.com/plugins.list` `apihub.googleapis.com/plugins.enable` `apihub.googleapis.com/plugins.disable` `apihub.googleapis.com/specs.lint` `apihub.googleapis.com/styleGuides.get` `apihub.googleapis.com/styleGuides.update`
Cloud API 허브 편집자	리소스의 편집자 역할	이 역할에는 `Cloud API hub viewer` 역할의 권한 외에도 다음 권한이 있습니다. `apihub.googleapis.com/apis.create` `apihub.googleapis.com/apis.update` `apihub.googleapis.com/apis.delete` `apihub.googleapis.com/versions.create` `apihub.googleapis.com/versions.update` `apihub.googleapis.com/versions.delete` `apihub.googleapis.com/specs.create` `apihub.googleapis.com/specs.update` `apihub.googleapis.com/specs.delete` `apihub.googleapis.com/deployments.create` `apihub.googleapis.com/deployments.update` `apihub.googleapis.com/deployments.delete` `apihub.googleapis.com/specs.lint`
Cloud API 허브 프로비저닝 관리자	프로비저닝과 관련된 모든 권한	`cloudresourcemanager.googleapis.com/projects.get` `cloudresourcemanager.googleapis.com/projects.list` `apihub.googleapis.com/hostProjectRegistrations.list` `apihub.googleapis.com/hostProjectRegistrations.get` `apihub.googleapis.com/hostProjectRegistrations.create` `apihub.googleapis.com/hostProjectRegistrations.register` `apihub.googleapis.com/hostProjectRegistrations.delete` `apihub.googleapis.com/runTimeProjectAttachments.list` `apihub.googleapis.com/runTimeProjectAttachments.get` `apihub.googleapis.com/runTimeProjectAttachments.lookup` `apihub.googleapis.com/runTimeProjectAttachments.create` `apihub.googleapis.com/runTimeProjectAttachments.attach` `apihub.googleapis.com/runTimeProjectAttachments.delete` `apihub.googleapis.com/apiHubInstances.get` `apihub.googleapis.com/apiHubInstances.list` `apihub.googleapis.com/apiHubInstances.create` `apihub.googleapis.com/apiHubInstances.delete`
Cloud API 허브 속성 관리자	속성과 관련된 모든 권한	`cloudresourcemanager.googleapis.com/projects.get` `cloudresourcemanager.googleapis.com/projects.list` `apihub.googleapis.com/attributes.create` `apihub.googleapis.com/attributes.update` `apihub.googleapis.com/attributes.delete` `apihub.googleapis.com/attributes.list` `apihub.googleapis.com/attributes.get`
Cloud API 허브 관리자	모든 권한	이 역할에는 다음 역할의 모든 권한이 포함됩니다. Cloud API 허브 편집자 Cloud API 허브 속성 관리자 Cloud API 허브 프로비저닝 관리자 Cloud API 허브 플러그인 관리자