Tier
AdminCategoria
IAMEscopo
project
Privilégios
3
Role ID
roles/serviceusage.apiKeysAdminEsta é uma role privilegiada — concede capacidades de controle elevado. Aplique o princípio do menor privilégio e monitore atribuições via Cloud Audit Logs.
Admin
Administrative control over a service, may include IAM
Descrição
Create, manage, and delete API keys for a project.
Privilégios / Capacidades(3)
Create and delete API keys
Manage API key restrictions
View API key usage
Role Definition (JSON)
{
"name": "roles/serviceusage.apiKeysAdmin",
"title": "API Keys Admin",
"description": "Create, manage, and delete API keys for a project.",
"stage": "GA",
"includedPermissions": [
"Create and delete API keys",
"Manage API key restrictions",
"View API key usage"
]
}Roles relacionadasIAM
Project Owner
Full control of all GCP resources including IAM policies, billing, and all services.
Project Editor
Full edit access to all resources, excluding IAM policy management and billing.
Project Viewer
Read-only access to all resources. Cannot create, modify, or delete.
IAM Admin
Full administrative access to IAM service accounts, roles, and policies.
Security Admin
Can get and set any IAM policy. Used by security teams to audit and configure access.