Granting and revoking access to the API  |  Cloud Endpoints with OpenAPI  |  Google Cloud (2024)

• Home
• Cloud Endpoints
• Documentation
• OpenAPI

Controlling who has access to an API is an integral part of development. Forexample, as you test your API, you might want to automate redeploying updatedCloud Endpoints configurations by using a service account that has thepermission to do so. By default, only the project owner can manage access to anAPI. This page shows you how to grant and revoke access to your API by using theGoogle Cloud console or the Google Cloud CLI.

Endpoints usesIdentity and Access Management roles to grant and revoke access at the API level. You can grant and revokeaccess to a user, service account, or to aGoogle Group.

Google Groups are a convenient way to grant or revoke access to a collection ofusers. You can grant or revoke access for a whole group at once, instead ofgranting or revoking access one at a time for individual users or serviceaccounts. You can also easily add members to and remove members from aGoogle Group instead of granting or revoking the IAM role foreach member.

Granting access

Revoking access

To revoke access to your API, remove the IAM role from the memberwho previously had the role.

What's next

Learn about:

• Creating a service account
• gcloud commands referenced on this page.