[null,null,["最后更新时间 (UTC)：2025-08-29。"],[],[],null,["# Roles and permissions\n\nA [role](/workspace/drive/api/reference/rest/v3/permissions#Permission.FIELDS.inlinedField_2) is a\ncollection of [permissions](/workspace/drive/api/reference/rest/v3/permissions) that allows users to\nperform specific actions on Google Drive resources. To make permissions\navailable to users, groups, and service accounts, you assign roles. When you\nassign a role, you grant all the permissions that the role contains.\n\nEach permission in the Google Drive API has a role that defines what users can do\nwith a file, folder, or shared drive. For more information, see [Scenarios for\nsharing Drive\nresources](/workspace/drive/api/guides/manage-sharing#sharing-drive-resources).\n\nOperations for files and folders\n--------------------------------\n\nThe following table shows the operations users can perform for each role, when\nthe role isn't restricted to a view. For more information, see [Views](#views).\n\n| Permitted operation | `owner` | `organizer` | `fileOrganizer` | `writer` | `commenter` | `reader` |\n|---------------------------------------------------------------------|---------|-------------|-----------------|----------|-------------|----------|\n| Read the metadata (such as name, description) of the file or folder | | | | | | |\n| Read the content of the file | | | | | | |\n| Read the list of items in the folder | | | | | | |\n| Add comments to the file | | | | | | |\n| Modify the metadata of the file or folder | | | | | | |\n| Modify the content of the file | | | | | | |\n| Access historical revisions | | | | | | |\n| Add items to the folder | | | | | | |\n| Remove items from the My Drive folder | | | | | | |\n| Share items from the My Drive folder | | | | | | |\n| Can access detailed file permissions | | | | | | |\n| Move items into the trash | | | | | | |\n| Recover items from the trash | | | | | | |\n| Empty the trash | | | | | | |\n| Delete a file or folder | | | | | | |\n| Add a content restriction to a file in a My Drive folder | | | | | | |\n| Set or unset the limited access setting in My Drive folders | | | | | | |\n\nOperations specific to shared drives\n------------------------------------\n\nThe following table shows shared drive specific operations users can perform for\neach role, when the role isn't restricted to a view. For more information, see\n[Views](#views).\n\n| Permitted operation | `owner` | `organizer` | `fileOrganizer` | `writer` | `commenter` | `reader` |\n|-----------------------------------------------------------------|---------|-------------|-----------------|----------|-------------|----------|\n| Share a shared drive item | | | | | | |\n| Add files to shared drives | | | | | | |\n| Modify the metadata of a shared drive | | | | | | |\n| Add shared drive members | | | | | | |\n| Reorganize items within a shared drive \\[1\\] | | | | | | |\n| Move items outside of a shared drive \\[2\\] | | | | | | |\n| Delete items in shared drives \\[2\\] | | | | | | |\n| Delete an empty shared drive | | | | | | |\n| Add a content restriction to a file in a shared drive | | | | | | |\n| Set or unset the limited access setting in shared drive folders | | | | | | |\n\n| **\\[1\\]** Requires the `organizer` or `fileOrganizer` role on a direct or indirect parent, as opposed to the role being present on the item. \n| **\\[2\\]** Requires the `organizer` role on a direct or indirect parent, as opposed to the role being present on the item.\n\nCorrelation between Drive API and Drive UI roles\n------------------------------------------------\n\nThe Drive API and Drive UI use the same underlying\npermission system. However, the role names differ slightly between the two.\n\nThe following table shows how the roles correspond for files and folders in My\nDrive.\n\n| Drive API role | Drive UI role | Description |\n|----------------|---------------|------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `owner` | Owner | Grants full control over the file or folder. |\n| `writer` | Editor | Grants the ability to view the file, add comments, and edit the file. For folders, can add, edit, and delete files or subfolders within that folder. |\n| `commenter` | Commenter | Grants the ability to view the file and add comments. |\n| `reader` | Viewer | Grants the ability to view the file. |\n\nThe following table shows how the roles correspond for files and folders in\nshared drives.\n\n| Drive API role | Drive UI role | Description |\n|-----------------|-----------------|--------------------------------------------------------------------------------------------------------------------|\n| `organizer` | Manager | Grants the ability to manage files, folders, people, and settings. |\n| `fileOrganizer` | Content Manager | Grants the ability to contribute and manage content. Default role for new members. |\n| `writer` | Contributor | Grants the ability to view the file, add comments, and edit the file. Can also create files within a shared drive. |\n| `commenter` | Commenter | Grants the ability to view the file and add comments. |\n| `reader` | Viewer | Grants the ability to view the file. |\n\nViews\n-----\n\nA permission might be restricted to a\n[`view`](/workspace/drive/api/reference/rest/v3/permissions#Permission.FIELDS.view), in which case\nthe role only applies to that particular view.\n\nA permission with `view=published` and `role=reader` grants `reader` access to\nthe published view of the file, but it doesn't grant `reader` access to the\nfile.\n\nA permission with `view=metadata` and `role=reader` grants `reader` access to\nthe metadata of the folder, but it doesn't grant access to the folder's\ncontents.\n\nConversely, any permission that's not restricted to a particular view, grants\n`reader` access to the published view of the file.\n\nRelated topics\n--------------\n\n- [Share files from Google Drive](https://support.google.com/docs/answer/2494822#zippy=%2Cunderstand-share-permissions)\n- [How file access works in shared drives](https://support.google.com/a/users/answer/12380484#access)"]]
