Mengelola akses pengguna dengan Batasan Akses Pengguna Marketplace
Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Secara default, semua pengguna dengan izin Identity and Access Management (IAM)
resourcemanager.projects.get untuk project Google Cloud dapat mengakses
Google Cloud Marketplace untuk menemukan produk baru. Jika ingin menerapkan kebijakan tata kelola dan pengadaan yang lebih ketat di organisasi Google Cloud ,
Anda dapat menggunakan Pembatasan Akses Pengguna Marketplace untuk mewajibkan pengguna memiliki
izin IAM tambahan untuk menyelesaikan beberapa tugas.
Izin IAM yang diperlukan
Setelah Anda mengaktifkan Pembatasan Akses Pengguna Marketplace, pengguna organisasi Anda
harus memiliki izin IAM berikut untuk menyelesaikan tugas
berikut:
Tindakan
Peran IAM
Tingkat penetapan peran
Mengaktifkan Pembatasan Akses Pengguna Marketplace
Peran Organization Administrator (roles/resourcemanager.organizationAdmin) DAN
Commerce Organization Governance Admin (roles/commerceorggovernance.admin)
Tingkat organisasi
Berinteraksi dengan produk yang tercantum di Google Cloud Marketplace
Peran Pengguna Marketplace yang Dikelola (roles/commerceorggovernance.user)
Jika Pembatasan Akses Pengguna Cloud Marketplace diaktifkan untuk organisasi Anda, Anda harus memiliki izin IAM berikut untuk melakukan hal berikut:
commerceorggovernance.services.list memungkinkan Anda melihat dan berinteraksi dengan
halaman berandaGoogle Cloud Marketplace Pribadi.
commerceorggovernance.services.get memungkinkan Anda berinteraksi dengan halaman listingan
produk.
Jika Minta Produk
diaktifkan, commerceorggovernance.services.request dan
consumerprocurement.entitlements.list memungkinkan Anda meminta produk yang tidak disetujui
atau produk yang belum dibeli.
Sebelum memulai
Pastikan Anda memiliki peran yang memadai untuk mengaktifkan Pembatasan Akses Pengguna Marketplace. Anda dapat menemukan detail yang diperlukan yang tercantum di atas.
Pastikan pengguna dan administrator di organisasi Anda yang memerlukan akses ke Marketplace diberi peran yang memadai. Anda dapat menemukan peran yang diperlukan yang tercantum di atas.
Pastikan Google Cloud Marketplace Pribadi mendukung produk yang ingin Anda gunakan. Untuk
mengetahui daftar produk yang didukung, lihat
Produk yang didukung.
Mengaktifkan Pembatasan Akses Pengguna Marketplace
Secara default, Pembatasan Akses Pengguna Marketplace dinonaktifkan untuk organisasi Anda.
Setelah Anda menetapkan peran IAM di atas kepada pengguna dan administrator yang relevan di organisasi, untuk mengaktifkan fitur ini, selesaikan langkah-langkah berikut:
Di Cloud Marketplace, klik Pemerintahan Marketplace.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-11 UTC."],[],[],null,["# Manage user access with Marketplace User Access Restrictions\n\nBy default, any user with the Identity and Access Management (IAM) permission\n`resourcemanager.projects.get` for a Google Cloud project can access\nGoogle Cloud Marketplace to discover new products. If you want to enforce stricter\ngovernance and procurement policies in your Google Cloud organization,\nyou can use Marketplace User Access Restrictions to require that users have\nadditional IAM permissions to accomplish some tasks.\n\nRequired IAM permissions\n------------------------\n\nAfter you turn on Marketplace User Access Restrictions, your organization's users\nmust have the following IAM permissions to complete the following\ntasks:\n\nThe\n[Governed Marketplace User](/marketplace/docs/access-control#commerceorggovernance.user)\nIAM role contains the following IAM permissions:\n\n- `commerceorggovernance.services.get`\n- `commerceorggovernance.services.list`\n- `commerceorggovernance.services.request`\n- `resourcemanager.projects.get`\n- `consumerprocurement.entitlements.list`\n\nWhen Cloud Marketplace User Access Restrictions is turned on for your\norganization, you must have these IAM permissions to do the\nfollowing:\n\n- `commerceorggovernance.services.list` lets you view and interact with the Google Cloud Private Marketplace homepage.\n- `commerceorggovernance.services.get` lets you interact with product listing pages.\n- If [Request Product](/marketplace/docs/governance/product-requests) is turned on, `commerceorggovernance.services.request` and `consumerprocurement.entitlements.list` let you request unapproved products or products that haven't been procured.\n\n| **Caution:** Ensure that key billing, organization, and project administrators have these roles assigned to them to not disrupt their associated Cloud Marketplace experience.\n\nBefore you begin\n----------------\n\n1. Ensure you have sufficient roles to enable Marketplace User Access Restrictions. You can find the required details listed [above](#required-permissions).\n\n2. Ensure users and administrators in your organization that require access to the Marketplace are given sufficient roles. You can find the required roles listed [above](#required-permissions).\n\n3. Verify that Google Cloud Private Marketplace supports the products that you plan to use. For a\n list of supported products, see\n [Supported products](/marketplace/docs/governance/private-marketplace#supported-products).\n\nTurn on Marketplace User Access Restrictions\n--------------------------------------------\n\nBy default, Marketplace User Access Restrictions is turned off for your organization.\n\nAfter you've assigned the [above IAM roles](#required-permissions) to relevant users and administrators in your organization, to turn this feature on, complete the following steps:\n\n1. In Cloud Marketplace, click **Marketplace Governance**.\n\n [Go to Marketplace](https://console.cloud.google.com/marketplace)\n2. In Governance settings, click the toggle to enable Marketplace User Access Restrictions.\n\n3. Click Confirm in the dialog.\n\n| **Note:** to disable this feature, click the toggle to turn-off enforcement. The experience for all users in your organization will revert to the default Google Cloud Marketplace experience"]]
