Configurazione IAM per i progetti Data Connect

Per utilizzare Firebase Data Connect, devi assegnare ruoli IAM che consentano di gestire i connettori, accedere a Cloud SQL e generare SDK. Assicurati che il service account che esegue Data Connect disponga delle autorizzazioni necessarie.

Ruoli IAM granulari per Data Connect

I ruoli di base e predefiniti di Firebase vengono mappati ai ruoli Data Connect di livello inferiore. Consulta la tabella per la mappatura.

Per gestire le singole assegnazioni di ruoli IAM per Data Connect a un livello più granulare, utilizza la console Google Cloud.

Ruolo IAM	Autorizzazioni
firebasedataconnect.googleapis.com/admin Firebase Data Connect API Admin Questo ruolo include Firebase Data Connect API Viewer. È equivalente a firebasedataconnect.*. Questo è fornito dai ruoli Proprietario cloud, Editor cloud, Amministratore Firebase e Amministratore Firebase Develop.	Accesso completo alle risorse dell'API Firebase Data Connect, inclusi i dati. firebasedataconnect.googleapis.com/operations.delete firebasedataconnect.googleapis.com/operations.cancel firebasedataconnect.googleapis.com/services.create firebasedataconnect.googleapis.com/services.update firebasedataconnect.googleapis.com/services.delete firebasedataconnect.googleapis.com/services.executeGraphql firebasedataconnect.googleapis.com/services.executeGraphqlRead firebasedataconnect.googleapis.com/schemas.create firebasedataconnect.googleapis.com/schemas.update firebasedataconnect.googleapis.com/schemas.delete firebasedataconnect.googleapis.com/schemaRevisions.create firebasedataconnect.googleapis.com/schemaRevisions.delete firebasedataconnect.googleapis.com/connectors.create firebasedataconnect.googleapis.com/connectors.update firebasedataconnect.googleapis.com/connectors.delete firebasedataconnect.googleapis.com/connectorRevisions.create firebasedataconnect.googleapis.com/connectorRevisions.delete
firebasedataconnect.googleapis.com/viewer Firebase Data Connect API Viewer Questo ruolo viene fornito dai ruoli Proprietario progetto, Editor progetto, Visualizzatore progetto, Amministratore Firebase, Visualizzatore Firebase, Amministratore sviluppo Firebase e Visualizzatore sviluppo Firebase.	Accesso di sola lettura alle risorse dell'API Firebase Data Connect. Il ruolo non concede l'accesso ai dati. cloudresourcemanager.googleapis.com/projects.list cloudresourcemanager.googleapis.com/projects.get firebasedataconnect.googleapis.com/operations.list firebasedataconnect.googleapis.com/operations.get firebasedataconnect.googleapis.com/locations.list firebasedataconnect.googleapis.com/locations.get firebasedataconnect.googleapis.com/services.list firebasedataconnect.googleapis.com/services.get firebasedataconnect.googleapis.com/schemas.list firebasedataconnect.googleapis.com/schemas.get firebasedataconnect.googleapis.com/schemaRevisions.list firebasedataconnect.googleapis.com/schemaRevisions.get firebasedataconnect.googleapis.com/connectors.list firebasedataconnect.googleapis.com/connectors.get firebasedataconnect.googleapis.com/connectorRevisions.list firebasedataconnect.googleapis.com/connectorRevisions.get
firebasedataconnect.googleapis.com/dataAdmin Firebase Data Connect API Data Admin Questo ruolo è fornito dai ruoli Proprietario progetto, Editor progetto, Amministratore Firebase e Amministratore Firebase Develop.	Accesso completo in lettura e scrittura alle origini dati. firebasedataconnect.googleapis.com/services.executeGraphql firebasedataconnect.googleapis.com/services.executeGraphqlRead
firebasedataconnect.googleapis.com/dataViewer Firebase Data Connect API Data Viewer Questo ruolo è fornito dai ruoli Proprietario progetto Cloud, Editor progetto Cloud, Amministratore Firebase e Amministratore sviluppo Firebase.	Accesso in sola lettura alle origini dati. firebasedataconnect.googleapis.com/services.executeGraphqlRead