On APIs & Services – Credentials – [:ANY_API_KEY] – API restrictions, my current custom role called AA cannot restrict key.
My goal is creating custom role:BB to permit API restrict like this picture.
Role:AA now has permissions below and permissions with bold are that I thought to be relavent.
But it doesn’t worked.
Can I get any help?
- apikeys.keys.create
- apikeys.keys.delete
- apikeys.keys.get
- apikeys.keys.getKeyString
- apikeys.keys.list
- apikeys.keys.lookup
- apikeys.keys.undelete
- apikeys.keys.update
- clientauthconfig.clients.create
- clientauthconfig.clients.createSecret
- clientauthconfig.clients.delete
- clientauthconfig.clients.get
- clientauthconfig.clients.getWithSecret
- clientauthconfig.clients.list
- clientauthconfig.clients.listWithSecrets
- clientauthconfig.clients.undelete
- clientauthconfig.clients.update
- container.apiServices.create
- container.apiServices.delete
- container.apiServices.get
- container.apiServices.list
- container.apiServices.update
- container.apiServices.updateStatus
- container.clusters.get
- container.clusters.getCredentials
- container.clusters.list
- container.resourceQuotas.create
- container.resourceQuotas.delete
- container.resourceQuotas.get
- container.resourceQuotas.getStatus
- container.resourceQuotas.list
- container.resourceQuotas.update
- container.resourceQuotas.updateStatus
- container.serviceAccounts.get
- container.serviceAccounts.list
- iam.serviceAccountKeys.create
- iam.serviceAccountKeys.delete
- iam.serviceAccountKeys.get
- iam.serviceAccountKeys.list
- iam.serviceAccounts.delete
- iam.serviceAccounts.get
- iam.serviceAccounts.getIamPolicy
- iam.serviceAccounts.list
- mapsadmin.clientMaps.create
- mapsadmin.clientMaps.delete
- mapsadmin.clientMaps.get
- mapsadmin.clientMaps.list
- mapsadmin.clientMaps.update
- mapsadmin.clientStyleActivationRules.update
- mapsadmin.clientStyleSheetSnapshots.list
- mapsadmin.clientStyleSheetSnapshots.update
- mapsadmin.clientStyles.create
- mapsadmin.clientStyles.delete
- mapsadmin.clientStyles.get
- mapsadmin.clientStyles.list
- mapsadmin.clientStyles.update
- mapsadmin.styleEditorConfigs.get
- mapsadmin.styleSnapshots.list
- mapsadmin.styleSnapshots.update
- mapsanalytics.metricData.query
- mapsanalytics.metricMetadata.list
- mapsplatformdatasets.datasets.create
- mapsplatformdatasets.datasets.delete
- mapsplatformdatasets.datasets.export
- mapsplatformdatasets.datasets.get
- mapsplatformdatasets.datasets.import
- mapsplatformdatasets.datasets.list
- mapsplatformdatasets.datasets.update
- monitoring.metricDescriptors.list
- monitoring.timeSeries.list
- recommender.gmpGuidedExperienceInsights.get
- recommender.gmpGuidedExperienceInsights.list
- recommender.gmpGuidedExperienceInsights.update
- recommender.gmpGuidedExperienceRecommendations.get
- recommender.gmpGuidedExperienceRecommendations.list
- recommender.gmpGuidedExperienceRecommendations.update
- recommender.gmpProjectManagementInsights.get
- recommender.gmpProjectManagementInsights.list
- recommender.gmpProjectManagementInsights.update
- recommender.gmpProjectManagementRecommendations.get
- recommender.gmpProjectManagementRecommendations.list
- recommender.gmpProjectManagementRecommendations.update
- recommender.gmpProjectProductSuggestionsInsights.get
- recommender.gmpProjectProductSuggestionsInsights.list
- recommender.gmpProjectProductSuggestionsInsights.update
- recommender.gmpProjectProductSuggestionsRecommendations.get
- recommender.gmpProjectProductSuggestionsRecommendations.list
- recommender.gmpProjectProductSuggestionsRecommendations.update
- resourcemanager.projects.get
- resourcemanager.projects.list
- resourcemanager.projects.update
- serviceconsumermanagement.consumers.get
- serviceconsumermanagement.quota.get
- serviceconsumermanagement.quota.update
- serviceconsumermanagement.tenancyu.addResource
- serviceconsumermanagement.tenancyu.create
- serviceconsumermanagement.tenancyu.delete
- serviceconsumermanagement.tenancyu.list
- serviceconsumermanagement.tenancyu.removeResource
- servicemanagement.services.bind
- servicemanagement.services.check
- servicemanagement.services.create
- servicemanagement.services.delete
- servicemanagement.services.get
- servicemanagement.services.getIamPolicy
- servicemanagement.services.list
- servicemanagement.services.quota
- servicemanagement.services.report
- servicemanagement.services.setIamPolicy
- servicemanagement.services.update
- serviceusage.apiKeys.create
- serviceusage.apiKeys.delete
- serviceusage.apiKeys.get
- serviceusage.apiKeys.getProjectForKey
- serviceusage.apiKeys.list
- serviceusage.apiKeys.regenerate
- serviceusage.apiKeys.revert
- serviceusage.apiKeys.update
- serviceusage.quotas.get
- serviceusage.quotas.update
- serviceusage.services.disable
- serviceusage.services.enable
- serviceusage.services.get
- serviceusage.services.list
- serviceusage.services.use
- storage.objects.getIamPolicy
- storage.objects.list