本頁說明開始使用 Service Consumer Management API 前,必須完成的步驟。本文假設您已在該專案中擁有Google Cloud 專案和代管服務 (例如使用 Cloud Endpoints 建立的代管服務),並瞭解租戶單元。
啟用服務
Service Consumer Management API 可讓您管理自己的代管服務使用情形,不過這個 API 本身也是服務。因此,您必須先為代管服務的 Google Cloud 專案啟用 Service Consumer Management API,才能使用這項功能。這個專案稱為「服務生產者」專案。
如要為服務供應商專案啟用 Service Consumer Management API,最簡單的方式是使用Google Cloud 主控台。或者,您也可以從指令列或透過程式啟用。詳情請參閱啟用及停用服務。
設定權限
為服務生產者專案啟用 Service Consumer Management API 後,您必須建立自己的服務身分,並授予資源權限,以便在資料夾中建立用戶群專案,並在用戶群專案中設定正確的帳單帳戶。這些動作是由 Service Consumer Management API 擁有的服務帳戶執行,格式如下:
[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間:2025-09-04 (世界標準時間)。"],[],[],null,["# Getting Started with the Service Consumer Management API\n\nThe page describes the steps that need to be completed before you\ncan start to use the Service Consumer Management API. It assumes that you already have a\nGoogle Cloud project and a [managed service](/service-infrastructure/docs/glossary#managed)\n(such as a managed service created using [Cloud Endpoints](/endpoints/docs)) in\nthat project, and that you understand\n[Tenancy Units](/service-infrastructure/docs/glossary#tenancy).\n\nActivating the service\n----------------------\n\nWhile the Service Consumer Management API helps you to manage the usage of your own\n[managed services](/service-infrastructure/docs/glossary#managed), it is also a service\nitself. Therefore, before you can use it, you must activate the\nService Consumer Management API for the Google Cloud project that hosts your managed\nservice. This project is known as a [service producer](/service-infrastructure/docs/glossary#producer)\nproject.\n\nThe simplest way to enable the Service Consumer Management API for your service\nproducer project is to use the\n[Google Cloud console](https://console.cloud.google.com/apis/api/serviceconsumermanagement.googleapis.com).\nAlternatively, you can enable it from the command line or programmatically. You\ncan find out more in\n[Enabling and Disabling Services](/service-usage/docs/enable-disable).\n\nSetting permissions\n-------------------\n\nAfter the Service Consumer Management API is enabled for your service producer\nproject, you must create your own service identity and grant it permissions on\nyour resources so that it can create [tenant projects](/service-infrastructure/docs/glossary#tenant) in\nyour folders and set up the correct billing account on tenant projects. These\nactions are executed by a service account owned by the Service Consumer Management\nAPI, which is specified in the following format: \n\n```\nservice-PROJECT_NUMBER@service-consumer-management.iam.gserviceaccount.com\n```\n\nwhere *PROJECT_NUMBER* is the project number for your service producer project\nthat activated the Service Consumer Management service.\n\nThe remainder of this guide uses *GCM_SA* to represent the\nService Consumer Management API service account.\n\nYou can use the following commands to generate the service identity.\n\n1. Login with your user account.\n\n```\ngcloud auth login\n```\n\n1. Generate the service identity.\n\n```\ngcloud beta services identity create --service=serviceconsumermanagement.googleapis.com --project=PROJECT_ID\n```\n\n### Setting folder permissions\n\n1. Ensure that you have a folder for holding your tenant projects: you'll need\n to have an [Organization](/resource-manager/docs/creating-managing-organization)\n to create folders within your service producer project. If you don't have a\n folder, follow the instructions in\n [Creating and Managing Folders](/resource-manager/docs/creating-managing-folders#create-folder)\n to create one. Your folder will have an integer based *FOLDER_ID*.\n\n2. On your folder, assign the **Project Creator/Deleter** role to the\n Service Consumer Management API service account. Follow the instructions in\n [Configuring Access to Folders](/resource-manager/docs/creating-managing-folders#configuring_access_to_folders)\n to add the **Project Creator** and **Project Deleter** role, using *GCM_SA* as\n the user.\n\n### Setting billing account permissions\n\n1. Ensure that you have a billing account that can be shared for tenant\n projects. If you don't have a billing account, see\n [Create, Modify, or Close a Billing Account](/billing/docs/how-to/manage-billing-account)\n for instructions to create one.\n\n2. Follow the\n [instructions](/billing/docs/how-to/billing-access)\n to add the **Billing Account User** role to *GCM_SA*.\n\nResource requirements\n---------------------\n\n- The Service Consumer Management API creates [tenant projects](/service-infrastructure/docs/glossary#tenant) on your behalf, so ensure you have enough quota to create them.\n- See the [project limits](https://cloud.google.com/resource-manager/docs/limits#project-limits) documentation to know how many projects can be created by default and to request increases to that limit."]]