如需访问备份和灾难恢复服务，每位用户都需要将 Google 账号添加为 Google Cloud 项目、文件夹或组织的主账号，并为其分配允许访问管理控制台的 IAM 角色。Google 账号用户（具有相关 IAM 角色）首次登录管理控制台后，系统会自动将其添加为管理控制台用户。管理控制台有自己的角色，这些角色决定了用户可以执行哪些操作。您的 IAM 角色将映射到管理控制台角色。如需了解详情，请参阅管理控制台角色页面。
下表介绍了可授予对管理控制台访问权限的角色。
IAM 角色
管理控制台角色
所有者 1
管理员
编辑器 1
管理员
Backup and DR Admin 1
管理员
Backup and DR User 2
基本
Backup and DR Viewer 3
可以访问管理控制台
1 建议在用户首次登录管理控制台后，手动为其添加管理员角色。如果没有此权限，他们将无法在报告管理器中成为管理员。同时，也明确表明他们具有管理员角色。如需执行此任务，请参阅修改用户部分。请注意，如果具有此 IAM 角色的用户将其管理控制台角色设为权限较低的角色，他们仍会因其 IAM 角色而拥有管理控制台管理员角色。
2 具有此 IAM 角色的 Google 账号在管理控制台中仅具有基本角色。他们需要由具有系统管理权限的用户（例如具有管理员角色的任何用户）手动设置其管理控制台角色。
3 仅具有备份和灾难恢复查看者 IAM 角色的 Google 账号可以查看管理控制台，并对部分菜单拥有只读权限。
管理员角色实际上拥有所有角色的权限，这意味着他们不仅拥有所有可能的权限，还可以对所有资源执行操作。任何拥有所有者、编辑者或备份和灾难恢复管理员角色的管理控制台用户都会自动获得管理员角色，即使在角色分配面板中未选择该角色也是如此。要想更改此设置，唯一的方法是更改其 IAM 角色。
[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-09-04。"],[[["\u003cp\u003eAccess to the Backup and DR Service management console requires a Google Account with a designated Identity and Access Management (IAM) role within a Google Cloud project, folder, or organization.\u003c/p\u003e\n"],["\u003cp\u003eIAM roles, such as Owner, Editor, Backup and DR Admin, Backup and DR User, and Backup and DR Viewer, map to specific management console roles, determining a user's level of access and the actions they can perform.\u003c/p\u003e\n"],["\u003cp\u003eUsers with Owner, Editor, or Backup and DR Admin IAM roles automatically receive the management console Administrator role, which grants them all possible rights and the ability to operate on every resource.\u003c/p\u003e\n"],["\u003cp\u003eThe management console's "Users" page allows for the addition, deletion, and management of multiple users, where you can modify user properties, sort content, adjust column widths, filter, and export the user list.\u003c/p\u003e\n"],["\u003cp\u003eManagement console roles are being phased out and replaced by Google Cloud IAM roles for Backup and DR Service, so any management console roles given will eventually be rendered obsolete.\u003c/p\u003e\n"]]],[],null,["# Manage users\n\n| **Caution:** Management console user rights and roles will be deprecated in the near future and will be replaced with Google Cloud [Identity and Access Management (IAM)](/backup-disaster-recovery/docs/access-control) roles for Backup and DR Service.\n\nTo access the Backup and DR Service, each user needs a Google Account\nadded to a Google Cloud project, folder, or organization as a principal with\nan IAM role that allows access to the management console. The first time a\nGoogle Account user (with the relevant IAM role) logs into the management\nconsole they are automatically added as a management console user. The\nmanagement console has its own roles which determines what actions that user can\ntake. Your IAM role will map to a management console role.\nSee the\n[Management console roles](/backup-disaster-recovery/docs/create-plan/manage-roles)\npage for more details.\n\nThe following table describes the roles that grant access to the management\nconsole.\n\n^1^ After the user first logs in to the management console, it is\nrecommended to manually add the administrator role to their user. Without it\nthey won't be an administrator in **Report Manager** . It also makes it\nclear that they have the administrator role. See the\n[Edit a user](/backup-disaster-recovery/docs/concepts/manage-users#edit-user)\nsection to perform this task. Note that if a user with this IAM role\nsets their management console role to a less powerful one, they will still hold\nthe management console administrator role because of their IAM role.\n\n^2^ A Google Account with this IAM role only has the **Basic** role\non the management console. They need a user with **System Manage** rights\n(such as any user who has the administrator role) to manually set their\nmanagement console role.\n\n^3^ A Google Account who only has the Backup and DR Viewer\nIAM role can view the management console with\nread-only access to limited menus.\n\nThe administrator role effectively has the rights of every role, meaning they\nnot only have all possible rights, they can also operate on every resource.\nAny management console user who has the **Owner** , **Editor** , or\n**Backup and DR Admin** role is automatically placed into the\nadministrator role, even if that role is not selected in the role assignment\npanel. The only way to change this is to change their IAM role.\n\nTo assign IAM roles to a user:\n\n1. In the Google Cloud console, go to the **IAM** page.\n\n [Go\n to IAM](https://console.cloud.google.com/projectselector/iam-admin/iam?supportedpurview=project,folder,organizationId)\n2. Click a **Select a project** drop-down menu at the top of the page.\n\n3. Select the project for which you want to view users.\n\n4. Find the principal's email address, domain, or other identifier in\n **Principals** and select **Edit principal**.\n\n5. The **Select a role** drop-down menu displays all the roles (including\n any custom roles) that you can grant to the principal on this resource.\n Search for Backup and DR and assign Backup and DR Admin or Backup and DR\n User roles.\n\nThe management console lets you add, delete, and manage multiple users.\nThe management console roles are assigned to each user such that the user\nreceives the proper authorization to execute certain functions within the\nmanagement console for managed appliances. The **Users** page under the\n**Manage** tab lists all of the users that have logged in or been manually added\nin the management console.\n\nYou can create a management console role and assign rights to the role. Based on\nthe rights assigned to a user's role, a user can also be constrained from using\nor viewing the various components of the management console. From the **Users**\npage, you can see information such as username, timezone, ID, and creation date.\nYou can modify the display of fields that appear in the **Users** list, and\nyou can also use the filter feature to locate specific users.\n\nView users in the management console\n------------------------------------\n\nUse these instructions to view users in the management console:\n\n1. Click the **Manage** tab and select **Users** from the drop-down menu. The **Users** page opens listing all appliances managed by the management console.\n2. To modify the display of the user properties, you can do the following:\n\n - **Adjust Fields**: To modify the fields that appear in the table, right-click within the table header row and click the checkboxes for the fields you want displayed (or those fields you don't want to view).\n - **Sort Content**: To sort the content listed in a table column by alphanumeric order, select a column header and then click the up or down arrow to change the order.\n - **Adjust Column Width**: To adjust the width of a table column to show more content in the table, drag the column divider in a column header to the left or right to resize the column width. Column dividers are marked by a pair of thin gray lines.\n - **Filter By** : To filter the list, enter one or more filter criteria\n as appropriate. (If you don't see the **Filter By** area,\n click **show filter** ). To clear a filter, click the **x**\n to the right of the applied filter.\n\n | **Note:** Filters that are of type text, list, and date, persist across different management console sessions for the same user.\n3. To export the user list click the **Export** icon. You can export in PDF\n format.\n\nCreate a user\n-------------\n\n| **Note:** The **Create User** option cannot create a Google Account, it can only pre-add it to the management console. Doing so lets you predefine their management console role. Google Account users are created outside of Backup and DR Service.\n\nUse these instructions to create a new user:\n\n1. Click the **Manage** tab and select **Users** from the drop-down menu. The **Users** page opens listing all users managed by the management console.\n2. Click **Create User** to open the **Create User** page.\n3. Enter the name of the new user in the **Username** field. The **Username** field is case sensitive.\n4. Select the user's time zone from the **Timezone** drop-down list.\n5. From the **Roles** area in the **Create User** window, check the checkboxes\n for the roles that you would like to assign to this user. The **Basic**\n option is selected by default.\n\n6. Click **Save User**.\n\nEdit a user\n-----------\n\nUse these instructions to edit information about an existing user:\n\n1. Click the **Manage** tab and select **Users** from the\n drop-down menu.\n\n The **Users** page opens.\n2. Select the user from the list that you want to modify and then select\n **Edit** (bottom right-hand corner of the page).\n\n The **Edit User** page opens. You can also right-click on the user in the\n list and select **Edit** from the menu.\n3. Make modifications to the user as described in **Creating a New User**.\n\n4. Click **Save User** to accept the changes.\n\nDelete a user\n-------------\n\nYou need **System Manage** rights to delete a user.\n| **Note:** The **Delete User** option does not delete the Google Account, it will only remove the user from the management console. If the user has a relevant IAM role they are able to sign in again and they are automatically added to the management console, although a user with the Backup and DR User IAM role loses any management console roles that they previously had.\n\nUse these instructions to delete a user:\n\n1. Click the **Manage** tab and select **Users** from the drop-down menu.\n\n The **Users** page opens listing all appliances managed by the management\n console.\n2. Select the user from the list and then select **Delete**\n (bottom right-hand corner of the page). You can also right-click on the user\n in the list and select **Delete** from the menu.\n\n3. Click **Confirm** in the confirmation dialog."]]
