GDC 샌드박스 인스턴스에 여러 계정이 채워집니다. 그중 하나는 이메일 주소가 fop-platform-admin@example.com인 플랫폼 관리자 계정입니다.
이 페이지에서는 프로젝트를 만들고 기타 관리 작업을 실행하는 데 필요한 권한으로 이 계정을 구성하는 방법을 설명합니다.
플랫폼 관리자 권한 설정
다음 단계에서는 프로젝트, 사용자, 스토리지, 기타 리소스를 관리하는 데 필요한 역할이 포함된 관리자 계정을 설정합니다.
GDC 콘솔 또는 명령줄 도구 gdcloud를 사용하여 관리자 계정을 설정할 수 있습니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[],[],null,["# Set up the Platform Admin account\n\nYour GDC Sandbox instance is populated with several accounts. One of\nthem is the Platform Admin account, with the email address\n`fop-platform-admin@example.com`.\nThis page describes how to configure this account with the necessary\npermissions for creating projects and performing other administration\ntasks.\n\nSet up Platform Admin permissions\n---------------------------------\n\nThe following steps will set up your administrator account with the roles\nnecessary to manage projects, users, storage, and other resources.\n| **Warning:** don't remove the Platform Admin account `fop-platform-admin@example.com`, or remove the `Organization IAM Admin` role from this account. This will lock out the instance.\n\nYou can set up your administrator account using the GDC console,\nor the command line tool `gdcloud`. \n\n### GDC console\n\n1. Navigate to your GDC console as described In [Connect to your instance](/distributed-cloud/sandbox/latest/connect).\n2. Select **Access**.\n3. Select **fop-platform-admin@example.com** and click **Edit Roles**.\n4. Click **Add Another Role** to add more roles.\n\n 1. To provide the Platform Admin with the necessary rights to create projects and perform other administrative tasks, add the following roles:\n - Org Network Policy Admin\n - Organization IAM Admin\n - Bucket Admin\n - Organization DB Admin\n - Org Network Policy Admin\n - Project Creator\n - User Cluster Admin\n - AI Platform Admin\n - Organization Grafana Viewer\n 2. To provide the Platform Admin with the necessary rights to create and test specific services, add roles specific to those services.\n 3. Click **Save**.\n5. Click **Submit**.\n\n### gdcloud\n\n1. Navigate to your GDC console as described in [Connect to your instance](/distributed-cloud/sandbox/latest/connect).\n2. Download and install the gdcloud CLI on the machine with access to your instance. See [Download the gdcloud CLI](/distributed-cloud/hosted/docs/latest/gdch/resources/gdcloud-download).\n3. Open a terminal window on a machine with access to your instance.\n - If you chose to use a remote desktop client to connect to your gateway, open a terminal in the Linux GUI on your gateway.\n - If you are connecting through an `sshuttle` tunnel, open a terminal on your own machine.\n4. Set the default GDC organization, `org-1`. For more\n details on GDC organizations, see\n [Organization](/distributed-cloud/hosted/docs/latest/gdch/overview#organization).\n\n gdcloud config set core/organization_console_url \\\n https://console.org-1.zone1.google.gdch.test\n\n5. Retrieve the certificates to authorize your sign in operation:\n\n echo -n | openssl s_client -showcerts -connect \\\n console.org-1.zone1.google.gdch.test:443 | \\\n sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' \\\n \u003e /tmp/org-1-web-tls-ca.cert\n\n6. Authenticate and sign into your GDC Sandbox\n environment. A browser window opens.\n\n gdcloud auth login --login-config-cert=/tmp/org-1-web-tls-ca.cert\n\n7. To continue your operations using the gdcloud CLI, close the browser.\n\n8. Optional: To continue your sign in through the browser, follow steps\n three to five in the GDC console tab."]]
