Access to Google App Engine is secured with IAM. Let's have a look at a list of predefined roles, along with a short description of each:
- App Engine Admin: Read/write/modify access to all application configuration and settings.
- App Engine Service Admin: Read-only access to application configuration and settings. Write access to service and version settings. Cannot deploy versions of apps.
- App Engine Deployer: Read-only access to application configuration and settings. Can deploy and create new versions and delete old ones. Cannot modify an existing version traffic configuration.
- App Engine Viewer: Read-only access to application configuration and settings.
- App Engine Code Viewer: Read-only access application configuration, settings, and deployed code.
For less granular access, you can also use primitive roles of Owner, Editor, and Viewer.