This document describes how to authenticate to Access Approval programmatically.
For more information about Google Cloud authentication, see the authentication overview.
Access Approval supports programmatic access. How you authenticate to Access Approval depends on how you access the API. You can access the API in the following ways:
Google Cloud CLI
If your organization's security policies prevent user accounts from having the required permissions, you can use service account impersonation.
You can authenticate to the Access Approval API by using your gcloud CLI credentials or by using Application Default Credentials. For more information about authentication for REST requests, see Authenticate for using REST. For information about the types of credentials, see gcloud CLI credentials and ADC credentials.
Access control in Access Approval
After you authenticate to Access Approval, you must be authorized to access Google Cloud resources. Access Approval uses Identity and Access Management (IAM) for authorization.