[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-09-04。"],[[["\u003cp\u003eIdentity Platform uses Admin APIs to manage tenants, users, and authentication tokens, with Identity and Access Management (IAM) for access control.\u003c/p\u003e\n"],["\u003cp\u003eYou can grant, modify, or revoke user access to a tenant resource directly within the Google Cloud console's Identity Platform Tenants page under the Permissions tab.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003esetIamPolicy\u003c/code\u003e method can be used to set the access control policy for tenant resources, allowing for direct management of permissions.\u003c/p\u003e\n"],["\u003cp\u003eDifferent Identity Platform API methods require specific roles, such as Editor or Viewer, which need to be assigned to a tenant resource for access.\u003c/p\u003e\n"],["\u003cp\u003eTo control access to various tenant management operations, such as creating or deleting a tenant, users need the Editor or Viewer roles on the corresponding project or tenant.\u003c/p\u003e\n"]]],[],null,["# Access control for tenants\n==========================\n\nIdentity Platform provides Admin APIs to manage your tenants, users, and\nauthentication tokens. You can leverage\n[Identity and Access Management](/iam) to prevent unwanted access using these APIs.\n\nGranting, changing, and revoking access\n---------------------------------------\n\nFollow these steps to grant a user a role on a tenant resource:\n\n1. Open the Identity Platform Tenants page in the Google Cloud console. \n\n [Go to the tenants page](https://console.cloud.google.com/customer-identity/tenants)\n\n2. Select a tenant from the list.\n\n3. Switch to the **Permissions** tab in the info panel on the right.\n\n4. Click **Add principal** to grant a user a new role, or use the list to\n modify or revoke access for an existing user.\n\nTo learn more about access control using IAM, see the\n[IAM documentation](/iam/docs). To set the access control policy\nfor a resource, use the [`setIamPolicy` method](/identity-platform/docs/reference/rest/v2/projects.tenants/setIamPolicy).\n\nAPI permissions\n---------------\n\nThis table lists the role required to call each method in the\nIdentity Platform API. The role should be assigned on the tenant resource."]]
