设置项目和权限

本页介绍了如何创建 Google Cloud 项目、启用 AML AI、创建身份验证凭据，以及向您的账号授予一个或多个 IAM 角色。

重要提示 ：创建项目后，该 API 不会自动显示。您必须先与您的 Google 代表联系，然后才能启用该 API。

1. Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.
2. Install the Google Cloud CLI.

3. To initialize the gcloud CLI, run the following command:

   gcloud init

4. Create or select a Google Cloud project.

   Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

   • Create a Google Cloud project:

     gcloud projects create PROJECT_ID

     Replace PROJECT_ID with a name for the Google Cloud project you are creating.

   • Select the Google Cloud project that you created:

     gcloud config set project PROJECT_ID

     Replace PROJECT_ID with your Google Cloud project name.

5. Make sure that billing is enabled for your Google Cloud project.

6. Enable the required APIs:

   gcloud services enable financialservices.googleapis.com bigquery.googleapis.com cloudkms.googleapis.com

7. If you're using a local shell, then create local authentication credentials for your user account:

   gcloud auth application-default login

   You don't need to do this if you're using Cloud Shell.

8. Grant roles to your user account. Run the following command once for each of the following IAM roles: roles/financialservices.admin, roles/cloudkms.admin, roles/bigquery.admin

   gcloud projects add-iam-policy-binding PROJECT_ID --member="user:USER_IDENTIFIER" --role=ROLE

   • Replace PROJECT_ID with your project ID.

   • Replace USER_IDENTIFIER with the identifier for your user account. For example, user:[e-mail].

   • Replace ROLE with each individual role.
9. Install the Google Cloud CLI.

10. To initialize the gcloud CLI, run the following command:

    gcloud init

11. Create or select a Google Cloud project.

    Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

    • Create a Google Cloud project:

      gcloud projects create PROJECT_ID

      Replace PROJECT_ID with a name for the Google Cloud project you are creating.

    • Select the Google Cloud project that you created:

      gcloud config set project PROJECT_ID

      Replace PROJECT_ID with your Google Cloud project name.

12. Make sure that billing is enabled for your Google Cloud project.

13. Enable the required APIs:

    gcloud services enable financialservices.googleapis.com bigquery.googleapis.com cloudkms.googleapis.com

14. If you're using a local shell, then create local authentication credentials for your user account:

    gcloud auth application-default login

    You don't need to do this if you're using Cloud Shell.

15. Grant roles to your user account. Run the following command once for each of the following IAM roles: roles/financialservices.admin, roles/cloudkms.admin, roles/bigquery.admin

    gcloud projects add-iam-policy-binding PROJECT_ID --member="user:USER_IDENTIFIER" --role=ROLE

    • Replace PROJECT_ID with your project ID.

    • Replace USER_IDENTIFIER with the identifier for your user account. For example, user:[e-mail].

    • Replace ROLE with each individual role.
这些角色具有以下所需权限：

所需权限

您需要具备以下权限才能完成快速入门，并且需要这些权限才能在 AML AI 中执行许多重要的操作。

权限	说明
resourcemanager.projects.get	获取 Google Cloud 项目
resourcemanager.projects.list	列出 Google Cloud 项目
cloudkms.keyRings.create	创建 Cloud KMS 密钥环
cloudkms.cryptoKeys.create	创建 Cloud KMS 密钥
financialservices.v1instances.create	创建 AML AI 实例
financialservices.operations.get	获取 AML AI 操作
cloudkms.cryptoKeys.getIamPolicy	获取 Cloud KMS 密钥的 IAM 政策
cloudkms.cryptoKeys.setIamPolicy	为 Cloud KMS 密钥设置 IAM 政策
bigquery.datasets.create	创建 BigQuery 数据集
bigquery.datasets.get	获取 BigQuery 数据集
bigquery.transfers.get	获取 BigQuery Data Transfer Service 转移
bigquery.transfers.update	创建或删除 BigQuery Data Transfer Service 转移作业
bigquery.datasets.setIamPolicy	为 BigQuery 数据集设置 IAM 政策
bigquery.datasets.update	更新 BigQuery 数据集
financialservices.v1datasets.create	创建 AML AI 数据集
financialservices.v1engineconfigs.create	创建 AML AI 引擎配置
financialservices.v1models.create	创建 AML AI 模型
financialservices.v1backtests.create	创建 AML AI 回测结果
financialservices.v1backtests.exportMetadata	从反洗钱 AI 回测结果导出元数据
financialservices.v1instances.importRegisteredParties	将已注册的相关方导入 AML AI 实例
financialservices.v1predictions.create	创建 AML AI 预测结果
bigquery.jobs.create	创建 BigQuery 作业
bigquery.tables.getData	从 BigQuery 表中获取数据
financialservices.v1predictions.delete	删除 AML AI 预测结果
financialservices.v1backtests.delete	删除 AML AI 回测结果
financialservices.v1models.delete	删除 AML AI 模型
financialservices.v1engineconfigs.delete	删除 AML AI 引擎配置
financialservices.v1datasets.delete	删除反洗钱 AI 数据集
financialservices.v1instances.delete	删除 AML AI 实例
bigquery.datasets.delete	删除 BigQuery 数据集

重要提示 ：启用 Financial Services API 后，您必须与 Google 代表联系以将所有 AML AI 功能列入许可名单，然后才能继续创建 AML AI 实例。请务必告知代表您要创建 API 资源的位置。