[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[[["\u003cp\u003eYou need super admin access to your reseller domain, along with access to the Google Cloud console and the Partner Sales Console, to begin using the Cloud Channel API.\u003c/p\u003e\n"],["\u003cp\u003eBefore using the API, you must log into the Partner Sales Console as an administrator and accept the reseller terms of service, which is where you can also find your Account ID for API integration.\u003c/p\u003e\n"],["\u003cp\u003eTo use any Google API, you must create a Google Cloud project and enable the Cloud Channel API within the project's API Library.\u003c/p\u003e\n"],["\u003cp\u003eCreate a service account in your Google Cloud project and generate a service account key, ensuring to securely store the key file, which will be required for authentication.\u003c/p\u003e\n"],["\u003cp\u003eAuthorize the service account for the reseller domain by adding its Client ID and the OAuth scope \u003ccode\u003ehttps://www.googleapis.com/auth/apps.order\u003c/code\u003e on the Domain-wide delegation page within your reseller domain's super-admin account.\u003c/p\u003e\n"]]],[],null,["# Technical setup\n\nBefore you begin\n----------------\n\nBefore starting, you need the following:\n\n- Super admin access to your reseller domain. For more information, see how to\n [access the Cloud Channel API](/channel/docs/access-api).\n\n- Access to the Google Cloud console and the Partner Sales Console.\n\nStep 1: Prepare the Partner Sales Console\n-----------------------------------------\n\nBefore you can use the API, you must accept the terms and conditions of the\nChannel Services platform.\n\nLog in to the [Partner Sales Console](https://channelservices.cloud.google.com) at least once\nas an administrator of the reseller domain. The first time you sign in,\nyou must accept the reseller terms of service, if applicable. If you accepted\nspecific terms of service offline, this step isn't applicable to you.\n\nYou can accept additional terms of service on the\n[Terms page](//accounts.google.com/AccountChooser?continue=https%3A%2F%2Fchannelservices.cloud.google.com%2Fsettings%2Fterms)\nof the Partner Sales Console.\n| **Note:** You need your Account ID, found in the Partner Sales Console Settings page, for API integration.\n\nStep 2: Configure your Google Cloud project\n-------------------------------------------\n\nTo use any Google API, you must have a Google Cloud project.\n\n### Create a Google Cloud project\n\nTo create a project, navigate to the [Projects](https://console.cloud.google.com/project)\narea of your Google Cloud console and click\nadd_box**Create Project**.\n\nFor more detailed instructions on creating a project, and for a list of best\npractices, see our [Creating and managing projects](https://cloud.google.com/resource-manager/docs/creating-managing-projects) guide.\n\nMost resellers create Google Cloud projects under their main\nGoogle Cloud organization instead of under the reseller domain. Accessing\ndata from the reseller domain is granted by setting up\n[domain-wide delegation](#delegation) to let a service account access\ndata from the reseller domain.\n\nGive the project a descriptive name. The project ID is an arbitrary identifier\nthat does not affect your ability to call the Cloud Channel API.\n\n### Enable the API\n\nNavigate to the [API Library](https://console.cloud.google.com/apis/library) section in the Google Cloud console and enable\nthe [Cloud Channel API](https://console.cloud.google.com/apis/library/cloudchannel.googleapis.com).\n\n### Create a service account\n\nTo create your service account, go to the **Service accounts** page.\n\n[Go to Service accounts](https://console.cloud.google.com/iam-admin/serviceaccounts)\n| **Note:** Service account keys are a security risk if not managed correctly. You should [choose a more secure alternative to service account keys](/docs/authentication#auth-decision-tree) whenever possible. If you must authenticate with a service account key, you are responsible for the security of the private key and for other operations described by [Best practices for managing service account keys](/iam/docs/best-practices-for-managing-service-account-keys). If you are prevented from creating a service account key, service account key creation might be disabled for your organization. For more information, see [Managing secure-by-default organization resources](/resource-manager/docs/secure-by-default-organizations).\n|\n|\n| If you acquired the service account key from an external source, you must validate it before use.\n| For more information, see [Security requirements for externally sourced credentials](/docs/authentication/external/externally-sourced-credentials).\n\n1. Click add_box**Create Service Account**.\n2. Enter the **Service account name** (and optional **Service account\n description** ) then click **Create**.\n3. Click **Continue** to skip the **Grant service account access to project** option.\n4. Skip the **Grant users access to this service account** section and click **Done** to finish account creation.\n\nAfter you create your account, create a service account key:\n\n1. In the Google Cloud console, click the email address for the service account that you created.\n2. Click **Keys**.\n3. Click **Add key** , then click **Create new key**.\n4. Click **Create**. A JSON key file is downloaded to your computer.\n\n Make sure to store the key file securely, because it can be used to\n authenticate as your service account. You can move and rename this file\n however you would like.\n5. Click **Close**.\n\nYou can delete and create private key files from the Service accounts page.\n\nStep 3: Authorize the service account for the reseller domain\n-------------------------------------------------------------\n\nYou need your service account's Client ID for this section. From the\nmore_vert**Actions** menu, select\n**Manage details** and copy your **Unique ID**.\n\nGo to the\n[Domain-wide delegation page](//accounts.google.com/AccountChooser?continue=https%3A%2F%2Fadmin.google.com%2Fac%2Fowl%2Fdomainwidedelegation)\nusing your reseller domain's super-admin account.\n\n- Click **Add new** and enter your service account's ID in the **Client ID** field.\n- Enter `https://www.googleapis.com/auth/apps.order` in the **OAuth Scopes** field.\n- Click **Authorize** to allow your service account to use the Cloud Channel API in the context of your Channel Services account.\n\n| **Note:** If you use additional APIs in your final integration, you might have more than one scope for your service account's client.\n\nThen click **Authorize** so your service account can use the Cloud Channel API in the\ncontext of your Channel Services account.\n| **Note:** You might have to enable more APIs and add more scopes in other codelabs. Your final integration might have more than one scope for your service account's client.\n\nNext steps\n----------\n\nNow that you have an initial technical integration, you can discover the API by\nreading the [Cloud Channel API documentation](/channel/docs/reference/rest).\n| **Note:** If you also have a Test Partner Sales Console, follow steps one through four with your test reseller domain. Make sure to create a separate project since Google APIs have per-project quotas. Sharing a project across environments might cause your test accounts to impact the quotas on your production account."]]
