이 페이지에서는 Secure Source Manager에서 Identity and Access Management (IAM)를 사용한 액세스 제어를 설명합니다.
개요
IAM 권한 및 역할에 따라 Secure Source Manager 인스턴스에서 데이터를 생성, 보기, 수정 또는 삭제할 수 있는 권한이 결정됩니다.
역할은 권한 모음입니다. 주 구성원에게 직접 권한을 부여할 수 없지만 대신 역할을 부여합니다. 주 구성원에게 역할을 부여하면 해당 역할에 포함된 모든 권한이 부여됩니다. 같은 주 구성원에 여러 역할을 부여할 수도 있습니다.
사전 정의된 Secure Source Manager 역할 부여
모든 Secure Source Manager API 메서드에는 요청을 수행하는 주 구성원 (사용자, 그룹 또는 서비스 계정)에게 리소스를 사용하는 데 필요한 권한이 있어야 합니다. 주 구성원에게 리소스에 대한 사전 정의된 역할을 부여하는 정책을 설정하여 주 구성원에게 권한을 부여합니다.
각 역할을 주 구성원에 할당할 때까지는 Google Cloud 콘솔에 Secure Source Manager 역할이 표시되지 않습니다. Secure Source Manager 인스턴스 및 저장소 리소스에 역할을 부여하는 방법은 IAM 역할 부여 및 취소를 참고하세요.
Secure Source Manager 권한
사용 가능한 모든 Secure Source Manager 권한을 보려면 IAM 권한 참조에서 securesourcemanager.를 검색하세요.
Secure Source Manager 사전 정의된 역할
프로젝트 및 폴더 수준 외에도 인스턴스 및 저장소 리소스에 Secure Source Manager IAM 역할을 부여할 수 있습니다.
모든 사전 정의된 Secure Source Manager 역할과 각 역할에서 사용할 수 있는 권한을 보려면 IAM 기본 및 사전 정의된 역할 참조를 참고하세요.
인스턴스 역할
인스턴스 역할은 주 구성원에게 Secure Source Manager 인스턴스에 대한 권한을 부여합니다. 저장소 역할은 별도로 부여됩니다.
저장소 역할
저장소 역할은 주 구성원에게 Secure Source Manager 저장소에 대한 권한을 부여합니다.
커스텀 역할
사전 정의된 역할 외에도 Secure Source Manager는 커스텀 역할도 지원합니다. 자세한 내용은 IAM 문서의 커스텀 역할 만들기 및 관리를 참조하세요.
저장소 역할 관리
다음 섹션에서는 일반적인 저장소 작업에 필요한 역할을 설명합니다.
저장소 관리
Secure Source Manager 저장소에서 사용자를 만들고, 삭제하고, 추가하는 데 필요한 권한을 얻으려면 관리자에게 다음 IAM 역할을 부여해 달라고 요청하세요.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[],[],null,["# Access control with Identity and Access Management\n\nThis page describes access control with Identity and Access Management (IAM) in\nSecure Source Manager.\n\nOverview\n--------\n\nIAM [permissions](/iam/docs/overview#permissions) and\n[roles](/iam/docs/overview#roles) determine your ability to create, view,\nedit, or delete data in a Secure Source Manager instance.\n\nA role is a collection of permissions. You can't grant a principal permissions\ndirectly; instead, you grant them a role. When you grant a role to a principal,\nyou grant them all the permissions that the role contains. You can grant\nmultiple roles to the same principal.\n\nGrant predefined Secure Source Manager roles\n--------------------------------------------\n\nEvery Secure Source Manager API method requires that the principal (user,\ngroup, or service account) making the request has the required permissions to\nuse the resource. Permissions are given to principals by setting policies that\ngrant the principal a predefined role on the resource.\n\nSecure Source Manager roles are not visible in the Google Cloud console\nuntil you have assigned each role to a principal. For information on granting\nroles on Secure Source Manager instance and repository resources, see\n[Grant and revoke IAM roles](/secure-source-manager/docs/grant-iam-roles).\n\nSecure Source Manager Permissions\n---------------------------------\n\nTo view all available Secure Source Manager permissions, search the\n[IAM permissions reference](/iam/docs/permissions-reference#search) for\n`securesourcemanager.`.\n\nSecure Source Manager predefined roles\n--------------------------------------\n\nIn addition to the project and folder level, Secure Source Manager\nIAM roles can be granted on the instance and repository\nresources.\n\nTo view all predefined Secure Source Manager roles and the permissions\navailable in each role, see the [IAM basic and predefined roles reference](/iam/docs/understanding-roles#secure-source-manager-roles).\n\n### Instance Roles\n\nInstance roles give principals permissions on the Secure Source Manager\ninstance. Repository roles are granted separately.\n\n### Repository Roles\n\nRepository roles give principals permissions on Secure Source Manager\nrepositories.\n\nCustom roles\n------------\n\nIn addition to the predefined roles, Secure Source Manager also supports\ncustom roles. For more information, see\n[Creating and managing custom roles](/iam/docs/creating-custom-roles) in the\nIAM documentation.\n\nRepository role management\n--------------------------\n\nThe following sections describe required roles for common repository actions.\n\n### Manage repositories\n\n\nTo get the permissions that\nyou need to create, delete, and add users to a Secure Source Manager repository,\n\nask your administrator to grant you the\nfollowing IAM roles:\n\n- [Secure Source Manager Instance Repository creator](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.instanceRepositoryCreator) (`roles/securesourcemanager.instanceRepositoryCreator`) on the Secure Source Manager instance\n- [Repo Admin](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.repoAdmin) (`roles/securesourcemanager.repoAdmin`) on the repositories you want to manage\n\n\n### Create repositories\n\n\nTo get the permissions that\nyou need to create repositories in a Secure Source Manager instance,\n\nask your administrator to grant you the\nfollowing IAM roles:\n\n- [Secure Source Manager Instance Repository creator](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.instanceRepositoryCreator) (`roles/securesourcemanager.instanceRepositoryCreator`) on the Secure Source Manager instance\n- [Secure Source Manager Repo Creator](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.repoCreator) (`roles/securesourcemanager.repoCreator`) on the Google Cloud project\n\n\n### View a repository\n\n\nTo get the permissions that\nyou need to view a repository,\n\nask your administrator to grant you the\nfollowing IAM roles:\n\n- [Secure Source Manager Instance Accessor](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.instanceAccessor) (`roles/securesourcemanager.instanceAccessor`) on the Secure Source Manager instance\n- [Secure Source Manager Repo Reader](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.repoReader) (`roles/securesourcemanager.repoReader`) on the repository\n\n\n### Use a repository and create issues and pull requests\n\n\nTo get the permissions that\nyou need to push to and pull from a repository, create issues and pull requests,\n\nask your administrator to grant you the\nfollowing IAM roles:\n\n- [Secure Source Manager Instance Accessor](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.instanceAccessor) (`roles/securesourcemanager.instanceAccessor`) on the Secure Source Manager instance\n- [Secure Source Manager Repo Writer](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.repoWriter) (`roles/securesourcemanager.repoWriter`) on the repository\n\n\nWhat's next\n-----------\n\n- Learn more about managing access in Google Cloud with the [IAM overview](/iam/docs/overview).\n- [Grant Secure Source Manager IAM roles](/secure-source-manager/docs/grant-iam-roles).\n- [Authenticate to Secure Source Manager](/secure-source-manager/docs/authentication) programmatically."]]
