Access control for tenants

Identity Platform provides Admin APIs to manage your tenants, users, and authentication tokens. You can leverage Identity and Access Management to prevent unwanted access using these APIs.

Granting, changing, and revoking access

Follow these steps to grant a user a role on a tenant resource:

1. Open the Identity Platform Tenants page in the Google Cloud console. Go to the tenants page

2. Select a tenant from the list.

3. Switch to the Permissionstab in the info panel on the right.

   

4. Click Add principalto grant a user a new role, or use the list to modify or revoke access for an existing user.

To learn more about access control using IAM, see the IAM documentation . To set the access control policy for a resource, use the setIamPolicy method .

API permissions

This table lists the role required to call each method in the Identity Platform API. The role should be assigned on the tenant resource.