[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-09-04 (世界標準時間)。"],[[["\u003cp\u003eEventarc uses Identity and Access Management (IAM) for access control, allowing you to manage permissions for Eventarc resources.\u003c/p\u003e\n"],["\u003cp\u003eYou must enable the Eventarc API to view and assign IAM roles for Eventarc in your project.\u003c/p\u003e\n"],["\u003cp\u003eEventarc offers predefined IAM roles, such as Eventarc Admin, Developer, and Viewer, to cover common use cases, and you can create custom roles if needed.\u003c/p\u003e\n"],["\u003cp\u003eThere are specific roles that enable actions like publishing or recieving events, as well as roles to manage the message bus or connections.\u003c/p\u003e\n"],["\u003cp\u003eYou can manage Eventarc IAM roles at the project level through the Google Cloud console, IAM API, or Google Cloud CLI.\u003c/p\u003e\n"]]],[],null,["# Access control with IAM\n\n[Standard](/eventarc/standard/docs/overview)\n\nThis page describes the access control options that are available to you in\nEventarc.\n\nOverview\n--------\n\nEventarc uses Identity and Access Management (IAM) for access control.\n\nFor an introduction to IAM and its features, see the\n[IAM overview](/iam/docs/overview). To learn how to grant and\nrevoke access, see\n[Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access).\n\nFor lists of the permissions and roles that Eventarc\nsupports, see the following sections.\n\nEnable the Eventarc APIs\n------------------------\n\nTo view and assign IAM roles for Eventarc,\nyou must enable the Eventarc APIs for your project. You won't be able\nto see the Eventarc roles in the Google Cloud console\nuntil you enable the APIs. \n\n### Console\n\n\n[Enable the APIs](https://console.cloud.google.com/flows/enableapi?apiid=eventarc.googleapis.com,eventarcpublishing.googleapis.com&redirect=https://console.cloud.google.com)\n\n\u003cbr /\u003e\n\n### gcloud\n\n\n[Enable the APIs](https://console.cloud.google.com/flows/enableapi?apiid=eventarc.googleapis.com,eventarcpublishing.googleapis.com&redirect=https://console.cloud.google.com)\n\n\u003cbr /\u003e\n\nPredefined roles\n----------------\n\nThe following table lists the Eventarc predefined\nIAM roles with a corresponding list of all the permissions each\nrole includes.\n\nThe predefined roles address most typical use cases. If your use case isn't\ncovered by the predefined roles, you can\n[create an IAM custom role](/iam/docs/understanding-custom-roles).\n\n### Eventarc roles\n\nFor more information on Eventarc Standard roles and permissions, see [All roles and permissions](/eventarc/docs/all-roles-permissions).\n\nProject-level IAM management\n----------------------------\n\nAt the project level, you can grant, change, and revoke IAM roles\nusing the Google Cloud console, the IAM API, or the Google Cloud CLI.\nFor instructions, see\n[Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access)."]]
