角色与权限
使用集合让一切井井有条
根据您的偏好保存内容并对其进行分类。
SAS Portal API 有多个角色（如下所述），每个角色都授予用户进行特定 API 调用的权限。角色会分配给用户的 Google 账号。
SAS 客户组织中的第一个用户是管理员，系统会在注册过程中自动添加该用户。然后，管理员可以添加其他用户并为其分配角色，包括管理员角色。
用户角色
您可以为用户分配以下两种角色：
role_admin
此角色对已授予访问权限的父资源下的所有子资源拥有完整的管理权限。他们会在 SAS 门户中设置组织的结构并管理用户访问权限。
role_cpi
此角色适用于经过认证的专业安装人员 (CPI)。如需声明此角色，用户需要证明自己拥有有效的 CPI 认证。它们通过 ValidateInstaller() 方法实现此目的。只有具有经过验证的 role_cpi 角色的用户才能使用 SignDevice() 方法提交需要 CPI 安装的 CBSD 的安装参数。
方法
下表显示了哪些角色可以使用每种类型的方法：
如未另行说明，那么本页面中的内容已根据知识共享署名 4.0 许可获得了许可，并且代码示例已根据 Apache 2.0 许可获得了许可。有关详情，请参阅 Google 开发者网站政策。Java 是 Oracle 和/或其关联公司的注册商标。
最后更新时间 (UTC)：2025-07-25。
[null,null,["最后更新时间 (UTC)：2025-07-25。"],[[["\u003cp\u003eThe SAS Portal API uses roles to control user permissions, with \u003ccode\u003erole_admin\u003c/code\u003e for administrative tasks and \u003ccode\u003erole_cpi\u003c/code\u003e for Certified Professional Installers.\u003c/p\u003e\n"],["\u003cp\u003eInitially, an Admin user is automatically assigned during sign-up and can manage other users and their roles.\u003c/p\u003e\n"],["\u003cp\u003eCPI users need to validate their certification using the \u003ccode\u003eValidateInstaller()\u003c/code\u003e method to utilize the \u003ccode\u003eSignDevice()\u003c/code\u003e method for CBSD installations.\u003c/p\u003e\n"],["\u003cp\u003eBoth \u003ccode\u003erole_admin\u003c/code\u003e and \u003ccode\u003erole_cpi\u003c/code\u003e have access to a range of methods like \u003ccode\u003eGetCustomer()\u003c/code\u003e, \u003ccode\u003eListDevices()\u003c/code\u003e, and \u003ccode\u003eUpdateDevice()\u003c/code\u003e, while \u003ccode\u003eSignDevice()\u003c/code\u003e is exclusive to validated \u003ccode\u003erole_cpi\u003c/code\u003e users.\u003c/p\u003e\n"],["\u003cp\u003eCurrently, user role assignment is handled by the SAS API Support team, and requests should be sent to \u003ca href=\"mailto:sas-api-support@google.com\"\u003esas-api-support@google.com\u003c/a\u003e.\u003c/p\u003e\n"]]],["The SAS Portal API assigns roles to users' Google Accounts to manage API access. The initial Admin role is established during signup, and admins can manage user roles. Currently, role assignment is handled by the SAS API Support team via request. Two roles exist: `role_admin` with full administrative control and `role_cpi` for Certified Professional Installers who must validate their certification using `ValidateInstaller()` to use `SignDevice()`. Both roles share access to other core methods, such as `GetCustomer()` and `CreateDevice()`.\n"],null,["# Roles and permissions\n\nThe SAS Portal API has several roles, defined below, each of which gives a user permission to\nmake certain API calls. Roles are assigned to the user's Google Account.\n\nThe first user of a SAS customer's organization is the Admin, who's automatically added during\nthe sign-up process. The Admin can then add other users and assign them roles, including the Admin\nrole.\n| **Note:** Currently, user role assignment is done by the SAS API Support team. If you need to assign roles to users, send your requests to [sas-api-support@google.com](mailto:sas-api-support@google.com) and indicate the Google Account and role needed in a CSV file.\n\nUser roles\n----------\n\nThere are two roles that can be assigned to users:\n\n- [`role_admin`](/spectrum-access-system/guides/roles-and-permissions#admin)\n- [`role_cpi`](/spectrum-access-system/guides/roles-and-permissions#cpi)\n\n| **Note:** Each user can be assigned to *one or more* of these roles.\n\n### role_admin\n\nThis role has full administrative privileges for all of the child\n[resources](/spectrum-access-system/guides/resource-management) under the parent resource to which it has\nbeen granted access. They set up the organization's structure within the SAS Portal and manage user\naccess.\n\n### role_cpi\n\nThis role is for users that are Certified Professional Installers (CPIs). To claim this role,\nusers need to prove that they have an active CPI certification. They do so with the\n[`ValidateInstaller()`](/spectrum-access-system/reference/rest/customers.devices/validate)\nmethod. Only users with a validated `role_cpi` role can use the\n[`SignDevice()`](/spectrum-access-system/reference/rest/customers.devices/signDevice)\nmethod to submit the installation parameters of CBSDs that require CPI installation.\n\nMethods\n-------\n\nThe following table shows which roles can use each type of method:\n\n| Methods | Roles |\n|-------------------------------------------------------------------------------------------------|-------------------------|\n| [`GetCustomer()`](/spectrum-access-system/reference/rest/customers/get) | `role_admin` `role_cpi` |\n| [`ListCustomers()`](/spectrum-access-system/reference/rest/customers/list) | `role_admin` `role_cpi` |\n| [`CreateDevice()`](/spectrum-access-system/reference/rest/customers.devices/create) | `role_admin` `role_cpi` |\n| [`GetDevice()`](/spectrum-access-system/reference/rest/customers.devices/get) | `role_admin` `role_cpi` |\n| [`ListDevices()`](/spectrum-access-system/reference/rest/customers.devices/list) | `role_admin` `role_cpi` |\n| [`UpdateDevice()`](/spectrum-access-system/reference/rest/customers.devices/patch) | `role_admin` `role_cpi` |\n| [`CreateSignedDevice()`](/spectrum-access-system/reference/rest/customers.devices/createSigned) | `role_admin` `role_cpi` |\n| [`UpdateSignedDevice()`](/spectrum-access-system/reference/rest/customers.devices/updateSigned) | `role_admin` `role_cpi` |\n| [`GenerateSecret()`](/spectrum-access-system/reference/rest/customers.devices/generateSecret) | `role_admin` `role_cpi` |\n| [`ValidateInstaller()`](/spectrum-access-system/reference/rest/customers.devices/validate) | `role_admin` `role_cpi` |\n| [`SignDevice()`](/spectrum-access-system/reference/rest/customers.devices/signDevice) | `role_cpi` (validated) |"]]
