Roles and permissions

The Google Spectrum Access System (SAS) Portal API user roles allow a user to make certain API calls based on their scope. These roles are assigned to the user's Google Account.

User roles

The roles assigned to a user are role_admin and role_cpi. Each user can be assigned to one or more roles.

role_admin

The first user of a SAS customer's organization is the administrator. The administrator is automatically added during the sign-up process. The administrators can then add other users and assign them roles, including the administrator role.

The administrator role has full administrative permissions for all of the child resources under the parent resource to which it has been granted access. The administrator sets up the organization's structure within the SAS Portal and manages user access.

role_cpi

The CPI role is for users who are Certified Professional Installers. To be assigned this role, users need to have an active CPI certification. To validate if a user has this certification, use the ValidateInstaller() method.

Only users with a validated role_cpi role can use the SignDevice() method to submit the installation parameters of CBSDs that require CPI installation.

Methods

The following table shows which roles can use each type of method.

Methods Roles
GetCustomer()

role_admin
role_cpi

ListCustomers()

role_admin
role_cpi

CreateDevice()

role_admin
role_cpi

GetDevice()

role_admin
role_cpi

ListDevices()

role_admin
role_cpi

UpdateDevice()

role_admin
role_cpi

CreateSignedDevice()

role_admin
role_cpi

UpdateSignedDevice()

role_admin
role_cpi

GenerateSecret()

role_admin
role_cpi

ValidateInstaller()

role_admin
role_cpi

SignDevice() role_cpi (validated)

What's next