비관리자 승인은 도메인 설정, 그룹의 설정과 개별 그룹의 권한, 해당 그룹에서 그들의 멤버십 역할에 따라 관리자가 아닌 사용자에게 Google 그룹스에 대한 액세스를 제공하는 인증 모드입니다.
기본적으로 모든 사용자가 해당 도메인에 그룹을 만들 수 있습니다. 하지만 도메인 관리자는 관리 콘솔을 사용하여 Google 그룹스의 도메인 설정을 수정할 수 있습니다. 도메인 설정 수정에 대한 자세한 내용은 Groups for Business 공유 옵션 설정을 참조하세요.
소유자는 그룹의 각 멤버십 역할에 대한 권한을 설정할 수 있습니다.
기본 설정은 다음과 같습니다.
비회원은 읽기 전용 GroupsService API를 호출할 때 그룹과 세부정보를 볼 수 있습니다. 또한 읽기 전용 MembershipsService API를 호출할 때 멤버십 및 세부정보를 볼 수 있습니다.
회원은 비회원과 동일한 권한을 갖습니다.
관리자는 구성원의 모든 권한과 비소유자 회원의 멤버십 및 멤버십 역할을 관리할 수 있는 권한을 갖습니다.
소유자는 관리자의 모든 권한 및 그룹의 메타데이터 수정, 그룹 삭제, 모든 멤버십과 멤버십 역할 관리 권한을 가집니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[[["\u003cp\u003eThe Cloud Identity Groups API uses three authorization modes: Admin authorization, Non-admin authorization, and Namespace authorization.\u003c/p\u003e\n"],["\u003cp\u003eAdmin authorization provides full access to all Google Groups in a domain, granted to users with the \u003cem\u003egroups administrator privilege\u003c/em\u003e.\u003c/p\u003e\n"],["\u003cp\u003eNon-admin authorization allows access based on domain settings, group settings, and a user's membership roles within a group.\u003c/p\u003e\n"],["\u003cp\u003eNamespace authorization, only granted by Cloud Search, gives service accounts access to identity groups from the same identity source.\u003c/p\u003e\n"],["\u003cp\u003eNon-admin authorization role permissions vary between non-members, members, managers and owners, with each one receiving progressively more permissions than the previous.\u003c/p\u003e\n"]]],[],null,["# Authentication and authorization\n================================\n\nMost Google Cloud APIs grant permissions to users, groups, or service\naccounts based on their\n[IAM roles](https://cloud.google.com/iam/docs/understanding-roles). However,\nthe Cloud Identity Groups API grants permissions based on these three\nauthorization modes:\n\n- Admin authorization\n- Non-admin authorization\n- Namespace authorization\n\nThis guide explains each of these authorization modes.\n\nAdmin authorization\n-------------------\n\nThe *Admin authorization* mode grants a user full access to all Google Groups in\na domain. Any user who has the\n[*groups administrator privilege*](https://support.google.com/a/answer/1219251)\nhas Admin authorization. Only the\n[super administrator](https://support.google.com/a/answer/2405986) for the\ndomain can grant a user the groups administrator privilege.\n\nFor more information on granting groups administrator privilege, refer to\n[Assign administrator roles to a user](https://support.google.com/a/answer/172176).\n\nNon-admin authorization\n-----------------------\n\n*Non-admin authorization* is an authorization mode for Google Groups that\ngrants non-administrator users access to Google Groups based on the domain\nsettings, group's settings and, in the case of permissions on an individual\ngroup, their [membership roles](/identity/docs/groups) in that groups.\n\nBy default, all users are able to create groups in that domain. However,\ndomain administrators can modify the domain settings for Google Groups using the\nAdmin Console. For information on modifying domain settings, refer to\n[Set Groups for Business sharing options](https://support.google.com/a/answer/167097).\n\nThe owners are able to set the permissions for each membership role for a group.\nDefault settings are as follows:\n\n- Non-members can see the group and its details when calling read-only\n `GroupsService` APIs. They can also see memberships and their details when\n calling read-only `MembershipsService` APIs.\n\n- Members have the same permissions as non-members.\n\n- Managers have all the permissions of members, plus the permission to\n manage memberships and membership roles for non-owner members.\n\n- Owners have all the permissions of managers, plus the permissions to\n modify the group's metadata, delete a group, and manage all memberships and\n membership roles.\n\nTo modify group settings,\n[Create a group and choose group settings](https://support.google.com/groups/answer/2464926).\n\nNamespace authorization\n-----------------------\n\n*Namespace authorization* is an authorization mode for identity groups that\ngrants service accounts access to identity groups synced from the same identity\nsource. Namespace authorization can only be granted by\n[Cloud Search](https://developers.google.com/cloud-search)."]]
