Repository navigation
How to only give premission to specific users? #2772
Description
I realize now that this may be more of a GCP issue than an ADK. However, have not seen this issue in any tutorials or in the documentation (might have missed it)
I know of google IAM and IAP. IAP seems to have so many steps that I wonder if I am missing something. Lets say I make a simple ADK app and deploy it using gcloud. Should it not be failry easy to make only me (the owner) and someone else (the client) be able to use the app?
So I guess what I am really asking is what are the common (and best) practices to give access to an ADK application.
I also know that ADK is standalone so I could try to deploy on another service that makes it easer to share with a client but I have not looked into those options yet.
Activity
michaelb48 commentedon Aug 31, 2025
I think the best way to solve this a proxy with a service account for authentication inbetween. That's what I have seen others use and what I used myself.
Allena101 commentedon Sep 1, 2025
Hi Michael 👋 Thanks alot for the response!
So with proxy you are talking about IAP , right?
So in practice you would manually add all the users that should have access to the app?
Also, does anything change if you deploy a fastAPI app that calls ADK when it comes to the giving permission to specific users part.
This is the best guide I have found thus far:
https://cloud.google.com/iap/docs/enabling-cloud-run
The guide uses a load balancer. Is that standard practice?