이 페이지에서는 블록체인 노드 엔진을 사용하고 구성하는 데 필요한 권한과 역할을 설명합니다.
블록체인 노드 자체가 API 엔드포인트를 노출합니다. Google은 이 API를 정의하지 않지만 Google에서 실행하는 서드 파티 소프트웨어의 일부입니다. 이더리움의 JSON-RPC 서버에서 이에 관한 예를 확인할 수 있습니다. 이 엔드포인트에 액세스하려면 API 키가 필요합니다. API 키는 Google Cloud에서 관리되므로 IAM을 사용한 액세스 제어에 정의된 권한을 사용합니다.
이러한 권한이 관리자 역할에 추가되었습니다.
역할
이 섹션에는 블록체인 노드 엔진 서비스에서 제공하는 선별된 모든 역할이 나와 있습니다.
뷰어
모든 블록체인 노드 엔진 리소스에 대한 읽기 액세스 권한을 부여합니다. 노드를 사용하지만 관리하지 않는 엔지니어를 대상으로 합니다. API 키는 관리자가 제공해야 합니다. 보기 권한 사용자는 API 키를 조회할 수 있는 직접 액세스 권한이 없습니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[[["\u003cp\u003eThis page outlines the permissions and roles necessary for interacting with Blockchain Node Engine.\u003c/p\u003e\n"],["\u003cp\u003eBlockchain nodes expose an API endpoint that requires API keys for access, managed through Google Cloud's IAM system.\u003c/p\u003e\n"],["\u003cp\u003eThe Viewer role provides read access to Blockchain Node Engine resources, without direct access to API keys.\u003c/p\u003e\n"],["\u003cp\u003eThe Admin role offers full access to all Blockchain Node Engine resources, including managing API keys and creating/deleting blockchain nodes.\u003c/p\u003e\n"],["\u003cp\u003eIAM is the access control system and various links are provided to learn more about it, including links for access with API keys, and service usage.\u003c/p\u003e\n"]]],[],null,["# Permissions and roles\n\nThis page describes the permissions and roles that are required to use and\nconfigure Blockchain Node Engine.\n\nThe blockchain nodes themselves expose an API endpoint. Google does not define\nthis API, but is part of the third party software we run. You can see an example\nof this at\n[Ethereum's JSON-RPC Server](https://geth.ethereum.org/docs/rpc/server). This\nendpoint requires an API\nkey to access. API keys are managed in Google Cloud, and as such use the\npermissions defined on [Access control with IAM](/api-keys/docs/access-control).\nThese permissions have been added to the admin role.\n\nRoles\n-----\n\nThis section lists all curated roles provided by Blockchain Node Engine service.\n\n\n### Viewer\n\nGrants read access to all Blockchain Node Engine resources. Intended for\nengineers who use but do not manage nodes. API keys are expected to be provided\nfrom an admin. The viewer does not have direct access to look up\nAPI keys.\n\n[Blockchain Node Engine actions](/blockchain-node-engine/docs/reference/rest):\n\n- `blockchainnodeengine.googleapis.com/blockchainNodes.get`\n- `blockchainnodeengine.googleapis.com/blockchainNodes.list`\n- `blockchainnodeengine.googleapis.com/locations.get`\n- `blockchainnodeengine.googleapis.com/locations.list`\n- `blockchainnodeengine.googleapis.com/operations.get`\n- `blockchainnodeengine.googleapis.com/operations.list`\n\n[Retrieve project information](/resource-manager/reference/rest):\n\n- `cloudresourcemanager.googleapis.com/projects.get`\n- `cloudresourcemanager.googleapis.com/projects.list`\n\n[Return APIs information](/service-usage/docs/reference/rest):\n\n- `serviceusage.googleapis.com/services.get`\n\n### Admin\n\nGrants full access to all Blockchain Node Engine resources. Intended for\nblockchain node administrators.\n\nAdministrators have all permissions available to\n`blockchainnodeengine.googleapis.com/viewer` plus:\n\n\u003cbr /\u003e\n\n[API keys management](/api-keys/docs/reference/rest):\n\n- `apikeys.googleapis.com/keys.update`\n- `apikeys.googleapis.com/keys.create`\n- `apikeys.googleapis.com/keys.delete`\n- `apikeys.googleapis.com/keys.get`\n- `apikeys.googleapis.com/keys.getKeyString`\n- `apikeys.googleapis.com/keys.list`\n- `apikeys.googleapis.com/keys.undelete`\n\n[Blockchain Node Engine actions](/blockchain-node-engine/docs/reference/rest):\n\n- `blockchainnodeengine.googleapis.com/blockchainNodes.create`\n- `blockchainnodeengine.googleapis.com/blockchainNodes.delete`\n- `blockchainnodeengine.googleapis.com/operations.cancel`\n- `blockchainnodeengine.googleapis.com/operations.delete`\n\n[Enable APIs](/service-usage/docs/reference/rest):\n\n- `serviceusage.googleapis.com/services.enable`\n\nSee also\n--------\n\n- [Access control with IAM - API keys](/api-keys/docs/access-control)\n- [Access Control with IAM - Service usage](/service-usage/docs/access-control)\n- [IAM basic and predefined roles reference](/iam/docs/understanding-roles)\n- [IAM permissions reference](/iam/docs/permissions-reference)\n- [Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access)\n- [Roles and permissions](/iam/docs/roles-overview)"]]
