ApigeeX -restrict access to an Environment using conditions in IAM policy

Google Cloud Apigee
1

Hello All,

I have a requirement where I need to restrict user access to a particular environment .

For e.g I have 2 environments - Dev, Test . I want to give development access to a user for Dev only.

I tried the following

Gave Apigee API admin and Apigee Environment Admin roles with conditions where

resource.name == “organizations/{orgname}/environments/dev”

When I tried to open a proxy that is deployed only in “dev” ,I get UI Errors saying “Error fetching Deployments”

In the background it’s trying to get the deployments for both the environments . For dev it works and for test it throws an error " the caller doesn’t have permission"

Can someone guide me on whats missing here and how this can be handled .

Thanks

2

https://www.googlecloudcommunity.com/gc/Cloud-Product-Articles/Assigning-Custom-Roles-for-Environment-based-RBAC-access-in/ta-p/167173

3

Thanks Uday. Will give this a try…