[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-09-04。"],[],[],null,["# Access control with Identity and Access Management\n\nThis page describes access control with Identity and Access Management (IAM) in\nSecure Source Manager.\n\nOverview\n--------\n\nIAM [permissions](/iam/docs/overview#permissions) and\n[roles](/iam/docs/overview#roles) determine your ability to create, view,\nedit, or delete data in a Secure Source Manager instance.\n\nA role is a collection of permissions. You can't grant a principal permissions\ndirectly; instead, you grant them a role. When you grant a role to a principal,\nyou grant them all the permissions that the role contains. You can grant\nmultiple roles to the same principal.\n\nGrant predefined Secure Source Manager roles\n--------------------------------------------\n\nEvery Secure Source Manager API method requires that the principal (user,\ngroup, or service account) making the request has the required permissions to\nuse the resource. Permissions are given to principals by setting policies that\ngrant the principal a predefined role on the resource.\n\nSecure Source Manager roles are not visible in the Google Cloud console\nuntil you have assigned each role to a principal. For information on granting\nroles on Secure Source Manager instance and repository resources, see\n[Grant and revoke IAM roles](/secure-source-manager/docs/grant-iam-roles).\n\nSecure Source Manager Permissions\n---------------------------------\n\nTo view all available Secure Source Manager permissions, search the\n[IAM permissions reference](/iam/docs/permissions-reference#search) for\n`securesourcemanager.`.\n\nSecure Source Manager predefined roles\n--------------------------------------\n\nIn addition to the project and folder level, Secure Source Manager\nIAM roles can be granted on the instance and repository\nresources.\n\nTo view all predefined Secure Source Manager roles and the permissions\navailable in each role, see the [IAM basic and predefined roles reference](/iam/docs/understanding-roles#secure-source-manager-roles).\n\n### Instance Roles\n\nInstance roles give principals permissions on the Secure Source Manager\ninstance. Repository roles are granted separately.\n\n### Repository Roles\n\nRepository roles give principals permissions on Secure Source Manager\nrepositories.\n\nCustom roles\n------------\n\nIn addition to the predefined roles, Secure Source Manager also supports\ncustom roles. For more information, see\n[Creating and managing custom roles](/iam/docs/creating-custom-roles) in the\nIAM documentation.\n\nRepository role management\n--------------------------\n\nThe following sections describe required roles for common repository actions.\n\n### Manage repositories\n\n\nTo get the permissions that\nyou need to create, delete, and add users to a Secure Source Manager repository,\n\nask your administrator to grant you the\nfollowing IAM roles:\n\n- [Secure Source Manager Instance Repository creator](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.instanceRepositoryCreator) (`roles/securesourcemanager.instanceRepositoryCreator`) on the Secure Source Manager instance\n- [Repo Admin](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.repoAdmin) (`roles/securesourcemanager.repoAdmin`) on the repositories you want to manage\n\n\n### Create repositories\n\n\nTo get the permissions that\nyou need to create repositories in a Secure Source Manager instance,\n\nask your administrator to grant you the\nfollowing IAM roles:\n\n- [Secure Source Manager Instance Repository creator](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.instanceRepositoryCreator) (`roles/securesourcemanager.instanceRepositoryCreator`) on the Secure Source Manager instance\n- [Secure Source Manager Repo Creator](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.repoCreator) (`roles/securesourcemanager.repoCreator`) on the Google Cloud project\n\n\n### View a repository\n\n\nTo get the permissions that\nyou need to view a repository,\n\nask your administrator to grant you the\nfollowing IAM roles:\n\n- [Secure Source Manager Instance Accessor](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.instanceAccessor) (`roles/securesourcemanager.instanceAccessor`) on the Secure Source Manager instance\n- [Secure Source Manager Repo Reader](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.repoReader) (`roles/securesourcemanager.repoReader`) on the repository\n\n\n### Use a repository and create issues and pull requests\n\n\nTo get the permissions that\nyou need to push to and pull from a repository, create issues and pull requests,\n\nask your administrator to grant you the\nfollowing IAM roles:\n\n- [Secure Source Manager Instance Accessor](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.instanceAccessor) (`roles/securesourcemanager.instanceAccessor`) on the Secure Source Manager instance\n- [Secure Source Manager Repo Writer](/iam/docs/roles-permissions/securesourcemanager#securesourcemanager.repoWriter) (`roles/securesourcemanager.repoWriter`) on the repository\n\n\nWhat's next\n-----------\n\n- Learn more about managing access in Google Cloud with the [IAM overview](/iam/docs/overview).\n- [Grant Secure Source Manager IAM roles](/secure-source-manager/docs/grant-iam-roles).\n- [Authenticate to Secure Source Manager](/secure-source-manager/docs/authentication) programmatically."]]
