本页面介绍了开始使用 Service Consumer Management API 之前需要完成的步骤。本页面假定您已拥有一个Google Cloud 项目和一个托管式服务(例如使用 Cloud Endpoints 创建的托管式服务),同时您了解租赁单位。
激活服务
虽然 Service Consumer Management API 可以帮助您管理自己的托管式服务的使用,但它本身也是一项服务。因此,在使用它之前,必须为托管托管式服务的 Google Cloud 项目激活 Service Consumer Management API。此项目称为服务提供方项目。
为您的服务提供方项目启用 Service Consumer Management API 的最简单方法是使用 Google Cloud 控制台。或者,您也可以通过命令行或以编程方式启用它。 如需了解详情,请参阅启用和停用服务。
设置权限
在为您的服务提供方项目启用 Service Consumer Management API 之后,您必须创建自己的服务身份,并授予它对资源的权限,以便它能够在您的文件夹中创建租户项目,并在租户项目上设置正确的结算账户。这些操作由 Service Consumer Management API 拥有的服务账号执行,该账号按以下格式指定:
[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC):2025-09-04。"],[],[],null,["# Getting Started with the Service Consumer Management API\n\nThe page describes the steps that need to be completed before you\ncan start to use the Service Consumer Management API. It assumes that you already have a\nGoogle Cloud project and a [managed service](/service-infrastructure/docs/glossary#managed)\n(such as a managed service created using [Cloud Endpoints](/endpoints/docs)) in\nthat project, and that you understand\n[Tenancy Units](/service-infrastructure/docs/glossary#tenancy).\n\nActivating the service\n----------------------\n\nWhile the Service Consumer Management API helps you to manage the usage of your own\n[managed services](/service-infrastructure/docs/glossary#managed), it is also a service\nitself. Therefore, before you can use it, you must activate the\nService Consumer Management API for the Google Cloud project that hosts your managed\nservice. This project is known as a [service producer](/service-infrastructure/docs/glossary#producer)\nproject.\n\nThe simplest way to enable the Service Consumer Management API for your service\nproducer project is to use the\n[Google Cloud console](https://console.cloud.google.com/apis/api/serviceconsumermanagement.googleapis.com).\nAlternatively, you can enable it from the command line or programmatically. You\ncan find out more in\n[Enabling and Disabling Services](/service-usage/docs/enable-disable).\n\nSetting permissions\n-------------------\n\nAfter the Service Consumer Management API is enabled for your service producer\nproject, you must create your own service identity and grant it permissions on\nyour resources so that it can create [tenant projects](/service-infrastructure/docs/glossary#tenant) in\nyour folders and set up the correct billing account on tenant projects. These\nactions are executed by a service account owned by the Service Consumer Management\nAPI, which is specified in the following format: \n\n```\nservice-PROJECT_NUMBER@service-consumer-management.iam.gserviceaccount.com\n```\n\nwhere *PROJECT_NUMBER* is the project number for your service producer project\nthat activated the Service Consumer Management service.\n\nThe remainder of this guide uses *GCM_SA* to represent the\nService Consumer Management API service account.\n\nYou can use the following commands to generate the service identity.\n\n1. Login with your user account.\n\n```\ngcloud auth login\n```\n\n1. Generate the service identity.\n\n```\ngcloud beta services identity create --service=serviceconsumermanagement.googleapis.com --project=PROJECT_ID\n```\n\n### Setting folder permissions\n\n1. Ensure that you have a folder for holding your tenant projects: you'll need\n to have an [Organization](/resource-manager/docs/creating-managing-organization)\n to create folders within your service producer project. If you don't have a\n folder, follow the instructions in\n [Creating and Managing Folders](/resource-manager/docs/creating-managing-folders#create-folder)\n to create one. Your folder will have an integer based *FOLDER_ID*.\n\n2. On your folder, assign the **Project Creator/Deleter** role to the\n Service Consumer Management API service account. Follow the instructions in\n [Configuring Access to Folders](/resource-manager/docs/creating-managing-folders#configuring_access_to_folders)\n to add the **Project Creator** and **Project Deleter** role, using *GCM_SA* as\n the user.\n\n### Setting billing account permissions\n\n1. Ensure that you have a billing account that can be shared for tenant\n projects. If you don't have a billing account, see\n [Create, Modify, or Close a Billing Account](/billing/docs/how-to/manage-billing-account)\n for instructions to create one.\n\n2. Follow the\n [instructions](/billing/docs/how-to/billing-access)\n to add the **Billing Account User** role to *GCM_SA*.\n\nResource requirements\n---------------------\n\n- The Service Consumer Management API creates [tenant projects](/service-infrastructure/docs/glossary#tenant) on your behalf, so ensure you have enough quota to create them.\n- See the [project limits](https://cloud.google.com/resource-manager/docs/limits#project-limits) documentation to know how many projects can be created by default and to request increases to that limit."]]