Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
SAS Portal API memiliki beberapa peran, yang ditentukan di bawah, yang masing-masing memberikan izin kepada pengguna untuk
melakukan panggilan API tertentu. Peran ditetapkan ke Akun Google pengguna.
Pengguna pertama organisasi pelanggan SAS adalah Admin, yang otomatis ditambahkan selama
proses pendaftaran. Admin kemudian dapat menambahkan pengguna lain dan menetapkan peran kepada mereka, termasuk peran Admin.
Peran pengguna
Ada dua peran yang dapat ditetapkan kepada pengguna:
Peran ini memiliki hak istimewa administratif penuh untuk semua
resource turunan di bawah resource induk yang telah
diberikan aksesnya. Mereka menyiapkan struktur organisasi dalam SAS Portal dan mengelola akses pengguna.
role_cpi
Peran ini ditujukan bagi pengguna yang merupakan Penginstal Profesional Bersertifikasi (CPI). Untuk mengklaim peran ini,
pengguna harus membuktikan bahwa mereka memiliki sertifikasi CPI yang aktif. Mereka melakukannya dengan metode
ValidateInstaller(). Hanya pengguna dengan peran role_cpi yang divalidasi yang dapat menggunakan metode
SignDevice()
untuk mengirimkan parameter penginstalan CBSD yang memerlukan penginstalan CPI.
Metode
Tabel berikut menunjukkan peran mana yang dapat menggunakan setiap jenis metode:
[null,null,["Terakhir diperbarui pada 2025-07-25 UTC."],[[["\u003cp\u003eThe SAS Portal API uses roles to control user permissions, with \u003ccode\u003erole_admin\u003c/code\u003e for administrative tasks and \u003ccode\u003erole_cpi\u003c/code\u003e for Certified Professional Installers.\u003c/p\u003e\n"],["\u003cp\u003eInitially, an Admin user is automatically assigned during sign-up and can manage other users and their roles.\u003c/p\u003e\n"],["\u003cp\u003eCPI users need to validate their certification using the \u003ccode\u003eValidateInstaller()\u003c/code\u003e method to utilize the \u003ccode\u003eSignDevice()\u003c/code\u003e method for CBSD installations.\u003c/p\u003e\n"],["\u003cp\u003eBoth \u003ccode\u003erole_admin\u003c/code\u003e and \u003ccode\u003erole_cpi\u003c/code\u003e have access to a range of methods like \u003ccode\u003eGetCustomer()\u003c/code\u003e, \u003ccode\u003eListDevices()\u003c/code\u003e, and \u003ccode\u003eUpdateDevice()\u003c/code\u003e, while \u003ccode\u003eSignDevice()\u003c/code\u003e is exclusive to validated \u003ccode\u003erole_cpi\u003c/code\u003e users.\u003c/p\u003e\n"],["\u003cp\u003eCurrently, user role assignment is handled by the SAS API Support team, and requests should be sent to \u003ca href=\"mailto:sas-api-support@google.com\"\u003esas-api-support@google.com\u003c/a\u003e.\u003c/p\u003e\n"]]],["The SAS Portal API assigns roles to users' Google Accounts to manage API access. The initial Admin role is established during signup, and admins can manage user roles. Currently, role assignment is handled by the SAS API Support team via request. Two roles exist: `role_admin` with full administrative control and `role_cpi` for Certified Professional Installers who must validate their certification using `ValidateInstaller()` to use `SignDevice()`. Both roles share access to other core methods, such as `GetCustomer()` and `CreateDevice()`.\n"],null,["# Roles and permissions\n\nThe SAS Portal API has several roles, defined below, each of which gives a user permission to\nmake certain API calls. Roles are assigned to the user's Google Account.\n\nThe first user of a SAS customer's organization is the Admin, who's automatically added during\nthe sign-up process. The Admin can then add other users and assign them roles, including the Admin\nrole.\n| **Note:** Currently, user role assignment is done by the SAS API Support team. If you need to assign roles to users, send your requests to [sas-api-support@google.com](mailto:sas-api-support@google.com) and indicate the Google Account and role needed in a CSV file.\n\nUser roles\n----------\n\nThere are two roles that can be assigned to users:\n\n- [`role_admin`](/spectrum-access-system/guides/roles-and-permissions#admin)\n- [`role_cpi`](/spectrum-access-system/guides/roles-and-permissions#cpi)\n\n| **Note:** Each user can be assigned to *one or more* of these roles.\n\n### role_admin\n\nThis role has full administrative privileges for all of the child\n[resources](/spectrum-access-system/guides/resource-management) under the parent resource to which it has\nbeen granted access. They set up the organization's structure within the SAS Portal and manage user\naccess.\n\n### role_cpi\n\nThis role is for users that are Certified Professional Installers (CPIs). To claim this role,\nusers need to prove that they have an active CPI certification. They do so with the\n[`ValidateInstaller()`](/spectrum-access-system/reference/rest/customers.devices/validate)\nmethod. Only users with a validated `role_cpi` role can use the\n[`SignDevice()`](/spectrum-access-system/reference/rest/customers.devices/signDevice)\nmethod to submit the installation parameters of CBSDs that require CPI installation.\n\nMethods\n-------\n\nThe following table shows which roles can use each type of method:\n\n| Methods | Roles |\n|-------------------------------------------------------------------------------------------------|-------------------------|\n| [`GetCustomer()`](/spectrum-access-system/reference/rest/customers/get) | `role_admin` `role_cpi` |\n| [`ListCustomers()`](/spectrum-access-system/reference/rest/customers/list) | `role_admin` `role_cpi` |\n| [`CreateDevice()`](/spectrum-access-system/reference/rest/customers.devices/create) | `role_admin` `role_cpi` |\n| [`GetDevice()`](/spectrum-access-system/reference/rest/customers.devices/get) | `role_admin` `role_cpi` |\n| [`ListDevices()`](/spectrum-access-system/reference/rest/customers.devices/list) | `role_admin` `role_cpi` |\n| [`UpdateDevice()`](/spectrum-access-system/reference/rest/customers.devices/patch) | `role_admin` `role_cpi` |\n| [`CreateSignedDevice()`](/spectrum-access-system/reference/rest/customers.devices/createSigned) | `role_admin` `role_cpi` |\n| [`UpdateSignedDevice()`](/spectrum-access-system/reference/rest/customers.devices/updateSigned) | `role_admin` `role_cpi` |\n| [`GenerateSecret()`](/spectrum-access-system/reference/rest/customers.devices/generateSecret) | `role_admin` `role_cpi` |\n| [`ValidateInstaller()`](/spectrum-access-system/reference/rest/customers.devices/validate) | `role_admin` `role_cpi` |\n| [`SignDevice()`](/spectrum-access-system/reference/rest/customers.devices/signDevice) | `role_cpi` (validated) |"]]
