GKE 연결 클러스터 API를 사용하려면 GKE 멀티 클라우드 리소스에 액세스할 수 있도록 Google Cloud 계정에 대한 특정 Identity and Access Management(IAM) 권한이 사용자에게 있어야 합니다. GKE 연결 클러스터에는 일반적으로 사용되는 권한 집합 2개를 번들로 제공하는 사전 정의된 역할 2개가 포함됩니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-07-31(UTC)"],[],[],null,["# Attached clusters API access control\n\nTo use the GKE attached clusters API, users must have specific Identity and Access Management\n(IAM) permissions on their Google Cloud account for access\nto GKE Multi-Cloud resources. GKE attached clusters includes two\npredefined roles that bundle together two commonly-used sets of permissions:\n\n- `gkemulticloud.viewer` (for read-only access) and\n- `gkemulticloud.admin`(to grant administrative control).\n\nThe permissions in these roles are:\n\n### gkemulticloud.admin\n\n- gkemulticloud.\\*\n- resourcemanager.projects.get\n- resourcemanager.projects.list\n\n### gkemulticloud.viewer\n\n- gkemulticloud.attachedClusters.get\n- gkemulticloud.attachedClusters.list\n- gkemulticloud.attachedServerConfigs.get\n- gkemulticloud.attachedClusters.generateInstallManifest\n- gkemulticloud.awsClusters.generateAccessToken\n- gkemulticloud.awsClusters.get\n- gkemulticloud.awsClusters.list\n- gkemulticloud.awsNodePools.get\n- gkemulticloud.awsNodePools.list\n- gkemulticloud.awsServerConfigs.get\n- gkemulticloud.azureClients.get\n- gkemulticloud.azureClients.list\n- gkemulticloud.azureClusters.generateAccessToken\n- gkemulticloud.azureClusters.get\n- gkemulticloud.azureClusters.list\n- gkemulticloud.azureNodePools.get\n- gkemulticloud.azureNodePools.list\n- gkemulticloud.azureServerConfigs.get\n- gkemulticloud.operations.get\n- gkemulticloud.operations.list\n- gkemulticloud.operations.wait\n- resourcemanager.projects.get\n- resourcemanager.projects.list\n\nTo learn about granting and revoking these permissions, see\n[Manage access to projects, folders, and organizations](/iam/docs/granting-changing-revoking-access)."]]
