[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-09-04。"],[],[],null,["# Managing applications in a folder\n\n| **Preview**\n|\n|\n| This product or feature is subject to the \"Pre-GA Offerings Terms\" in the General Service Terms section\n| of the [Service Specific Terms](/terms/service-terms#1).\n|\n| Pre-GA products and features are available \"as is\" and might have limited support.\n|\n| For more information, see the\n| [launch stage descriptions](/products#product-launch-stages).\n\nThis page describes how to to configure a folder for application management.\n\nOverview\n--------\n\nAn *app-enabled* folder is a folder within the Google Cloud resource hierarchy that\nhas been configured for application management. This folder lets you define and\nmanage [App Hub](/app-hub/docs/overview) applications. These applications\nare functional groupings of services and workloads that span multiple projects\nwithin that folder and its descendant projects.\n\nApp-enabled folders streamline application management by:\n\n- **Organizing workloads:** They group related applications and services, defined within App Hub, into a single manageable unit.\n- **Providing centralized monitoring and management:** Instead of tracking individual components across different projects or products, you can monitor and manage the overall health and performance of your applications at the folder level.\n- **Simplifying administration:** By designating a folder as *app-enabled*, you create an administrative boundary that simplifies creating and managing applications within your organization.\n- **Providing an application-centric view:** They shift the focus from individual resources to the application itself, providing a holistic view of its performance.\n\nConfigure a folder for app management\n-------------------------------------\n\nYou can enable application management on both new and existing folders. Once\nenabled, application management can't be disabled. Test application management within a\nnewly created, dedicated folder. This allows safe experimentation before\napplying it to existing critical folders.\n\nWithin an app-enabled folder, authorized users can aggregate workloads and\nservices from any project directly within that folder.\n\nConsider a resource hierarchy with the following structure:\n\nFolder F1 contains the following three items:\n\n- Projects P10 and P11\n- Folder F2\n\nFolder F2 contains the following two items:\n\n- Project P20 and P21\n\nEnable application management on folder F1 to create an application that\nincludes resources from multiple folder levels. For example, an application can\ninclude resources from projects p10 and p20.\n\nIf you enable application management only on folder F2, then project P10 is\nunavailable for creating applications. To create applications in project P10,\nmove project P10 under folder F2.\n\nConsider your organizational structure, team responsibilities, and resources\nwhen planning your application management strategy. The way that your teams and\nresources are structured has a direct impact on how you use app-enabled folders.\n\n### Overview of management projects\n\nA *management project* is a Google Cloud project that the system generates\nwithin an app-enabled folder, designed exclusively for application management.\nIt provides the infrastructure for Application Libraries and related APIs,\nincluding billing, quotas, and access control. The management project can also\ndiscover resources within the app-enabled folder's resource hierarchy.\n\nEnabling application management on a folder automatically provisions a\nmanagement project. Each folder can contain only one management project.\n\nEnabling application management and APIs on a folder\n----------------------------------------------------\n\nThis section describes how to enable a folder for application management.\n\n### Required roles\n\n\nTo get the permissions that\nyou need to enable application management and grant access to resources,\n\nask your administrator to grant you the\n\n\nFolder Admin (`resourcemanager.folderAdmin`)\nIAM role on the parent resource.\n\n\nFor more information about granting roles, see [Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access).\n\n\nYou might also be able to get\nthe required permissions through [custom\nroles](/iam/docs/creating-custom-roles) or other [predefined\nroles](/iam/docs/roles-overview#predefined).\n\n### Enable application APIs\n\nYou can enable application management on both new and existing folders. To create\na new folder, see [Creating folders](/resource-manager/docs/creating-managing-folders#creating-folders).\nThe following steps are for an existing folder:\n\n1. In the Google Cloud console, open the **Manage resources** page.\n\n\n [Open the Manage Resources page](https://console.cloud.google.com/cloud-resource-manager)\n\n \u003cbr /\u003e\n\n2. In the list of projects and folders, locate the folder that you want to\n configure. Then, click the more_vert **Options**\n menu at the end of its row, and select **Settings**.\n\n3. In the **Settings** page, go to the **App-enablement** section, and\n click **Enable** . The **Enable application APIs on this folder** panel opens.\n\n When you enable application management on a folder, two actions occur:\n 1. Google creates a Google-managed project in the folder. You cannot move or delete a management project.\n 2. The system enables the [required APIs](/app-hub/docs/using-vpc-service-controls#mp-apis) for application management on that project.\n4. Review the list of APIs on the panel. Some APIs have associated costs.\n To learn about pricing for a service, click the API name.\n\n | **Caution:** You can't disable application management on a folder using the console. If you need to disable this feature, you must submit a [support request](/resource-manager/docs/getting-support#disable_application_management).\n5. If you are ready to enable application management, click **Enable**.\n\nOnce application management enablement is complete, you'll see the management\nproject name on the **Settings** page. This name is derived from the folder's name\nat the time of enablement and has the suffix `-mp`.\n\n### Link a billing account to the management project\n\nTo link a billing account to the management project, do the following:\n\n1. Ensure that you have the [permissions](/billing/docs/how-to/modify-project#required-permissions-enable)\n required for this task.\n\n2. If you need to create a Cloud Billing account, see\n [Create a new Cloud Billing account](/billing/docs/how-to/create-billing-account).\n\n3. On the **Settings** page of your app-enabled folder, click **Manage Billing**.\n\n4. In the **My projects** tab, find the management project.\n\n5. To enable billing for the project, see\n [How to enable billing on an existing project](/billing/docs/how-to/modify-project#how-to-enable-billing).\n\n### Assign application users permissions on the project\n\n1. On the **Settings** page of your app-enabled folder, click **Manage IAM**.\n2. Set up [IAM roles and permissions](/app-hub/docs/roles-permissions)\n for all application management services.\n\n In particular, ensure that you can aggregate your telemetry data (logs, metrics, and traces)\n from Google Cloud services and grant the necessary permissions to view this data.\n\n### Create applications\n\n1. Set up [App Hub](/app-hub/docs/overview) and create your applications."]]
