[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-08-18 (世界標準時間)。"],[[["\u003cp\u003eThis page outlines how Cloud Endpoints uses Identity and Access Management (IAM) to control access to APIs at both the project and individual service levels.\u003c/p\u003e\n"],["\u003cp\u003eYou can grant specific roles such as Service Consumer, Service Controller, Service Config Editor, and Service Management Administrator to manage different aspects of API access and configuration.\u003c/p\u003e\n"],["\u003cp\u003eThe Service Consumer role allows principals to view and enable the API, while the Service Controller role provides permissions for runtime calls to the Service Infrastructure API.\u003c/p\u003e\n"],["\u003cp\u003eThe Service Config Editor role enables the deployment of Endpoints configurations, and the Service Management Administrator role provides full control over API access and configuration.\u003c/p\u003e\n"],["\u003cp\u003eThe recommended practice is to primarily use the provided list of roles to manage your API access, though others are available at the service level.\u003c/p\u003e\n"]]],[],null,["# Overview of API access\n\n\u003cbr /\u003e\n\nThis page describes the API access control options available to you in\nCloud Endpoints.\n\nOverview\n--------\n\nEndpoints uses\n[Identity and Access Management (IAM)](/iam/docs)\nto control access to your API. You can grant access to your API at the project\nlevel and at the individual Endpoints service level. For example,\nyou can:\n\n- Grant access to principals on a per-service basis.\n- Grant permission to a user or service account to deploy an updated Endpoints configuration.\n- Grant access to your API users so they can enable your API in their own Google Cloud project.\n\nRoles that control access to services\n-------------------------------------\n\nYou can grant the following roles for a specific service on the **Endpoints** \\\u003e\n**Services** page in the Google Cloud console, by using the API, or by\nusing the Google Cloud CLI.\n\n| **Note:** Although you can grant other roles at the service level, we recommend that you use the roles listed in the previous table to manage your API.\n\nWhat's next\n-----------\n\n- [Controlling who can enable your API](/endpoints/docs/frameworks/control-api-callers).\n- [Granting and revoking access to the API](/endpoints/docs/frameworks/control-api-access)."]]
