Getting Started with the Service Consumer Management API

The page describes the steps that need to be completed before you can start to use the Service Consumer Management API. It assumes that you already have a Google Cloud Platform project and a managed service (such as a managed service created using Cloud Endpoints) in that project, and that you understand Tenancy Units.

Activating the service

While the Service Consumer Management API helps you to manage the usage of your own managed services, it is also a service itself. Therefore, before you can use it, you must activate the Service Consumer Management API for the Google Cloud Platform project that hosts your managed service. This project is known as a service producer project.

The simplest way to enable the Service Consumer Management API for your service producer project is to use the Google Cloud Platform Console. Alternatively, you can enable it from the command line or programmatically. You can find out more in Enabling and Disabling Services.

Setting permissions

After the Service Consumer Management API is enabled for your service producer project, you must grant it permissions on your resources so that it can create tenant projects in your folders and set up the correct billing account on tenant projects. These actions are executed by a service account owned by the Service Consumer Management API, which is specified in the following format:

service-PROJECT_NUMBER@service-consumer-management.iam.gserviceaccount.com

where PROJECT_NUMBER is the project number for your service producer project that activated the Service Consumer Management service.

The remainder of this guide uses GCM_SA to represent the Service Consumer Management API service account.

Setting folder permissions

  1. Ensure that you have a folder for holding your tenant projects: you'll need to have an Organization to create folders within your service producer project. If you don’t have a folder, follow the instructions in Creating and Managing Folders to create one. Your folder will have a integer based FOLDER_ID.

  2. On your folder, assign the Project Creator/Deleter role to the Service Consumer Management API service account. Follow the instructions in Configuring Access to Folders to add the Project Creator and Project Deleter role, using GCM_SA as the user.

Setting billing account permissions

  1. Ensure that you have a billing account that can be shared for tenant projects. If you don't have a billing account, see Create, Modify, or Close a Billing Account for instructions to create one.

  2. Follow the instructions to add the Billing Account User role to GCM_SA.

Resource requirements

  • The Service Consumer Management API creates tenant projects on your behalf, so ensure you have enough quota to create them.
  • By default, you can only create up to 12 projects. If you need more, send us an email.
Kunde den här sidan hjälpa dig? Berätta:

Skicka feedback om ...

Service Infrastructure