Control access with IAM

The Cloud Translation - Advanced API (v3) uses Identity and Access Management (IAM) to control access. Assign one or more IAM roles to a principal to grant permissions. For more information, see IAM basic and predefined roles.

Note: Cloud Translation - Basic (v2) supports authentication through IAM but not authorization; you cannot specify granular IAM permissions for Cloud Translation - Basic.

Predefined Cloud Translation roles for v3

The following table lists the predefined roles that give you access to Cloud Translation resources:

Role	Permissions
Cloud Translation API Admin (roles/cloudtranslate.admin) Full access to all Cloud Translation resources	automl.models.get automl.models.predict cloudtranslate.* cloudtranslate.adaptiveMtDatasets.create cloudtranslate.adaptiveMtDatasets.delete cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.import cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.adaptiveMtFiles.delete cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.create cloudtranslate.customModels.delete cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.datasets.create cloudtranslate.datasets.delete cloudtranslate.datasets.export cloudtranslate.datasets.get cloudtranslate.datasets.import cloudtranslate.datasets.list cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.get cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.create cloudtranslate.glossaries.delete cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict cloudtranslate.glossaries.update cloudtranslate.glossaryentries.create cloudtranslate.glossaryentries.delete cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.glossaryentries.update cloudtranslate.languageDetectionModels.predict cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.cancel cloudtranslate.operations.delete cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Cloud Translation API Editor (roles/cloudtranslate.editor) Editor of all Cloud Translation resources	automl.models.get automl.models.predict cloudtranslate.* cloudtranslate.adaptiveMtDatasets.create cloudtranslate.adaptiveMtDatasets.delete cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.import cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.adaptiveMtFiles.delete cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.create cloudtranslate.customModels.delete cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.datasets.create cloudtranslate.datasets.delete cloudtranslate.datasets.export cloudtranslate.datasets.get cloudtranslate.datasets.import cloudtranslate.datasets.list cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.get cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.create cloudtranslate.glossaries.delete cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict cloudtranslate.glossaries.update cloudtranslate.glossaryentries.create cloudtranslate.glossaryentries.delete cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.glossaryentries.update cloudtranslate.languageDetectionModels.predict cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.cancel cloudtranslate.operations.delete cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Cloud Translation API User (roles/cloudtranslate.user) User of Cloud Translation and AutoML models	automl.models.get automl.models.predict cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.datasets.get cloudtranslate.datasets.list cloudtranslate.generalModels.* cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.get cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.languageDetectionModels.predict cloudtranslate.locations.* cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list
Cloud Translation API Viewer (roles/cloudtranslate.viewer) Viewer of all Translation resources	automl.models.get cloudtranslate.adaptiveMtDatasets.get cloudtranslate.adaptiveMtDatasets.list cloudtranslate.adaptiveMtFiles.get cloudtranslate.adaptiveMtFiles.list cloudtranslate.adaptiveMtSentences.list cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.datasets.get cloudtranslate.datasets.list cloudtranslate.generalModels.get cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaryentries.get cloudtranslate.glossaryentries.list cloudtranslate.locations.* cloudtranslate.locations.get cloudtranslate.locations.list cloudtranslate.operations.get cloudtranslate.operations.list cloudtranslate.operations.wait resourcemanager.projects.get resourcemanager.projects.list

Custom roles

If a predefined role doesn't offer the right set of permissions for your use case, create a custom role. Custom roles can include any permissions that you specify. For example, you can create a custom role with specific administrative operations, such as creating glossaries or managing custom models. To create custom roles, see Creating and managing custom roles.

What's next

• For more information about granting a role on a project, see Grant a role. You can grant predefined or custom roles in this way.
• To learn more about IAM, see IAM overview.