[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[[["\u003cp\u003eIdentity Platform uses Admin APIs to manage tenants, users, and authentication tokens, with Identity and Access Management (IAM) for access control.\u003c/p\u003e\n"],["\u003cp\u003eYou can grant, modify, or revoke user access to a tenant resource directly within the Google Cloud console's Identity Platform Tenants page under the Permissions tab.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003esetIamPolicy\u003c/code\u003e method can be used to set the access control policy for tenant resources, allowing for direct management of permissions.\u003c/p\u003e\n"],["\u003cp\u003eDifferent Identity Platform API methods require specific roles, such as Editor or Viewer, which need to be assigned to a tenant resource for access.\u003c/p\u003e\n"],["\u003cp\u003eTo control access to various tenant management operations, such as creating or deleting a tenant, users need the Editor or Viewer roles on the corresponding project or tenant.\u003c/p\u003e\n"]]],[],null,["# Access control for tenants\n==========================\n\nIdentity Platform provides Admin APIs to manage your tenants, users, and\nauthentication tokens. You can leverage\n[Identity and Access Management](/iam) to prevent unwanted access using these APIs.\n\nGranting, changing, and revoking access\n---------------------------------------\n\nFollow these steps to grant a user a role on a tenant resource:\n\n1. Open the Identity Platform Tenants page in the Google Cloud console. \n\n [Go to the tenants page](https://console.cloud.google.com/customer-identity/tenants)\n\n2. Select a tenant from the list.\n\n3. Switch to the **Permissions** tab in the info panel on the right.\n\n4. Click **Add principal** to grant a user a new role, or use the list to\n modify or revoke access for an existing user.\n\nTo learn more about access control using IAM, see the\n[IAM documentation](/iam/docs). To set the access control policy\nfor a resource, use the [`setIamPolicy` method](/identity-platform/docs/reference/rest/v2/projects.tenants/setIamPolicy).\n\nAPI permissions\n---------------\n\nThis table lists the role required to call each method in the\nIdentity Platform API. The role should be assigned on the tenant resource."]]
