Skip to content

How to only give premission to specific users? #2772

Description

@Allena101

I realize now that this may be more of a GCP issue than an ADK. However, have not seen this issue in any tutorials or in the documentation (might have missed it)

I know of google IAM and IAP. IAP seems to have so many steps that I wonder if I am missing something. Lets say I make a simple ADK app and deploy it using gcloud. Should it not be failry easy to make only me (the owner) and someone else (the client) be able to use the app?

So I guess what I am really asking is what are the common (and best) practices to give access to an ADK application.
I also know that ADK is standalone so I could try to deploy on another service that makes it easer to share with a client but I have not looked into those options yet.

Activity

  1. added
    question[Component] This issue is asking a question or clarification
    on Aug 28, 2025
  2. michaelb48 commented on Aug 31, 2025

    @michaelb48

    I think the best way to solve this a proxy with a service account for authentication inbetween. That's what I have seen others use and what I used myself.

  3. Allena101 commented on Sep 1, 2025

    @Allena101
    Author

    I think the best way to solve this a proxy with a service account for authentication inbetween. That's what I have seen others use and what I used myself.

    Hi Michael 👋 Thanks alot for the response!

    So with proxy you are talking about IAP , right?

    So in practice you would manually add all the users that should have access to the app?
    Also, does anything change if you deploy a fastAPI app that calls ADK when it comes to the giving permission to specific users part.

    This is the best guide I have found thus far:
    https://cloud.google.com/iap/docs/enabling-cloud-run
    The guide uses a load balancer. Is that standard practice?

  4. locked and limited conversation to collaborators on Sep 2, 2025
  5. converted this issue into a discussion #2827 on Sep 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    question[Component] This issue is asking a question or clarification

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions