本页面介绍了您需要向使用 Producer Portal 的团队成员授予的 Identity and Access Management (IAM) 角色和权限。
如需详细了解如何授予对角色和资源的访问权限，请参阅 IAM 文档中的授予、更改和撤消对资源的访问权限。如果您没有授予角色所需的权限，请与组织管理员联系并申请访问权限。
用于管理项目的访问权限控制
如需让用户管理您的 Google Cloud 合作伙伴网络账号和组织级设置，请向他们授予以下两个角色之一：
查看商品详情的访问权限控制
如需允许用户查看您在 Producer Portal 中创建的正在进行中的商品详情，请向他们授予 Commerce Producer Viewer 角色。
创建和管理商品详情的访问权限控制
如需允许用户在 Producer Portal 中创建和管理商品详情，请向其授予以下角色：
软件即服务 (SaaS) 产品的其他角色
对于 SaaS 产品，如果您需要创建服务账号来与 Cloud Commerce Consumer Procurement API 互动并向我们报告用量，请向用户授予服务账号管理员角色。
虚拟机 (VM) 和 Kubernetes 产品的其他角色
对于虚拟机或 Kubernetes 产品，请向用户授予 Compute Cloud Storage Admin 角色。
虚拟机引导式配置来创建虚拟机产品的部署软件包，请为用户授予以下角色，以便他们访问存储产品部署软件包的 Cloud Storage 存储桶：
预览产品的访问权限控制
如果您希望用户能够像客户在 Cloud Marketplace 中看到的那样预览您产品的商品详情，则必须向他们授予以下角色：
管理非公开优惠
如需让用户在 Producer Portal 的非公开优惠标签页中创建和管理非公开优惠，请向他们授予以下角色：
查看非公开优惠的关键事件
如需允许用户查看贵组织已发布的优惠的历史记录，请向其授予 Commerce Price Management Events Viewer 角色。
管理支出和付款
如需让用户在 Producer Portal 的付款标签页中创建付款资料以管理收款和付款设置，请向他们授予以下角色：
转售的访问权限控制
如果您已允许转销商转售您的 Cloud Marketplace 产品，则可以参考以下准则，在您的Google Cloud 组织内授予角色。
查看允许和禁止的经销商
如需让用户查看哪些经销商可以转售您的 Cloud Marketplace 产品，或哪些经销商已被禁止转售您的产品，请向他们授予以下角色之一：
管理允许的转销商
如需让用户管理哪些经销商可以转售您的 Cloud Marketplace 产品，请向他们授予 Commerce Business Enablement Configuration Admin (roles/commercebusinessenablement.admin) 角色。
查看转销商折扣
如需让用户在 Producer Portal 中查看与经销商折扣相关的资源和配置，请向其授予以下角色：
管理折扣
如需让用户在 Producer Portal 中创建和管理与经销商折扣相关的资源和配置，请向其授予以下角色：
管理分析和报告
如需让用户在 Producer Portal分析、测试结算账号、销售线索管理和报告标签页中管理您产品的分析、测试账号、销售线索管理和报告，请向他们授予以下角色：
IAM 角色和权限列表
您可以为用户授予以下一个或多个 IAM 角色。
| Role |
Permissions |
Commerce Business Enablement Configuration Admin
Beta
(roles/commercebusinessenablement.admin)
Admin of Various Provider Configuration resources
|
bigquery.datasets.create
bigquery.datasets.get
bigquery.datasets.update
commercebusinessenablement.leadgenConfig.*
commercebusinessenablement.leadgenConfig.getcommercebusinessenablement.leadgenConfig.update
commercebusinessenablement.partnerAccounts.*
commercebusinessenablement.partnerAccounts.getcommercebusinessenablement.partnerAccounts.list
commercebusinessenablement.partnerInfo.get
commercebusinessenablement.resellerConfig.*
commercebusinessenablement.resellerConfig.getcommercebusinessenablement.resellerConfig.update
commercebusinessenablement.resellerRestrictions.*
commercebusinessenablement.resellerRestrictions.listcommercebusinessenablement.resellerRestrictions.update
resourcemanager.organizations.get
resourcemanager.projects.get
resourcemanager.projects.list
serviceusage.operations.get
serviceusage.services.enable
serviceusage.services.get
|
Commerce Business Enablement Configuration Viewer
Beta
(roles/commercebusinessenablement.viewer)
Viewer of Various Provider Configuration resource
|
commercebusinessenablement.leadgenConfig.get
commercebusinessenablement.partnerAccounts.*
commercebusinessenablement.partnerAccounts.getcommercebusinessenablement.partnerAccounts.list
commercebusinessenablement.partnerInfo.get
commercebusinessenablement.resellerConfig.get
commercebusinessenablement.resellerRestrictions.list
resourcemanager.organizations.get
resourcemanager.projects.get
resourcemanager.projects.list
|
Commerce Business Enablement PaymentConfig Admin
Beta
(roles/commercebusinessenablement.paymentConfigAdmin)
Administration of Payment Configuration resource
|
commercebusinessenablement.partnerInfo.get
commercebusinessenablement.paymentConfig.*
commercebusinessenablement.paymentConfig.getcommercebusinessenablement.paymentConfig.update
resourcemanager.projects.get
resourcemanager.projects.list
|
Commerce Business Enablement PaymentConfig Viewer
Beta
(roles/commercebusinessenablement.paymentConfigViewer)
Viewer of Payment Configuration resource
|
commercebusinessenablement.partnerInfo.get
commercebusinessenablement.paymentConfig.get
resourcemanager.projects.get
resourcemanager.projects.list
|
Commerce Business Enablement Rebates Admin
Beta
(roles/commercebusinessenablement.rebatesAdmin)
Provides admin access to rebates
|
commercebusinessenablement.operations.*
commercebusinessenablement.operations.cancelcommercebusinessenablement.operations.deletecommercebusinessenablement.operations.getcommercebusinessenablement.operations.list
commercebusinessenablement.partnerInfo.get
commercebusinessenablement.refunds.*
commercebusinessenablement.refunds.cancelcommercebusinessenablement.refunds.createcommercebusinessenablement.refunds.deletecommercebusinessenablement.refunds.getcommercebusinessenablement.refunds.listcommercebusinessenablement.refunds.startcommercebusinessenablement.refunds.update
|
Commerce Business Enablement Rebates Viewer
Beta
(roles/commercebusinessenablement.rebatesViewer)
Provides read-only access to rebates
|
commercebusinessenablement.operations.get
commercebusinessenablement.operations.list
commercebusinessenablement.partnerInfo.get
commercebusinessenablement.refunds.get
commercebusinessenablement.refunds.list
|
Commerce Business Enablement Reseller Discount Admin
Beta
(roles/commercebusinessenablement.resellerDiscountAdmin)
Provides admin access to reseller discount offers
|
commercebusinessenablement.partnerAccounts.*
commercebusinessenablement.partnerAccounts.getcommercebusinessenablement.partnerAccounts.list
commercebusinessenablement.partnerInfo.get
commercebusinessenablement.resellerConfig.get
commercebusinessenablement.resellerDiscountConfig.get
commercebusinessenablement.resellerDiscountOffers.*
commercebusinessenablement.resellerDiscountOffers.cancelcommercebusinessenablement.resellerDiscountOffers.createcommercebusinessenablement.resellerDiscountOffers.list
commercebusinessenablement.resellerPrivateOfferPlans.*
commercebusinessenablement.resellerPrivateOfferPlans.cancelcommercebusinessenablement.resellerPrivateOfferPlans.createcommercebusinessenablement.resellerPrivateOfferPlans.deletecommercebusinessenablement.resellerPrivateOfferPlans.getcommercebusinessenablement.resellerPrivateOfferPlans.listcommercebusinessenablement.resellerPrivateOfferPlans.publishcommercebusinessenablement.resellerPrivateOfferPlans.update
resourcemanager.organizations.get
resourcemanager.projects.get
resourcemanager.projects.list
|
Commerce Business Enablement Reseller Discount Viewer
Beta
(roles/commercebusinessenablement.resellerDiscountViewer)
Provides read-only access to reseller discount offers
|
commercebusinessenablement.partnerAccounts.*
commercebusinessenablement.partnerAccounts.getcommercebusinessenablement.partnerAccounts.list
commercebusinessenablement.partnerInfo.get
commercebusinessenablement.resellerConfig.get
commercebusinessenablement.resellerDiscountConfig.get
commercebusinessenablement.resellerDiscountOffers.list
commercebusinessenablement.resellerPrivateOfferPlans.get
commercebusinessenablement.resellerPrivateOfferPlans.list
resourcemanager.organizations.get
resourcemanager.projects.get
resourcemanager.projects.list
|
