gplay-user-management
Compare original and translation side by side
🇺🇸
Original
English🇨🇳
Translation
ChineseUser & Grant Management
用户与权限授予管理
Use this skill when you need to manage users and their permissions in Google Play Console.
当你需要在Google Play Console中管理用户及其权限时,可以使用本技能。
Preconditions
前置条件
- Ensure credentials are set (or
gplay auth loginenv var).GPLAY_SERVICE_ACCOUNT - Service account needs "Admin" permission to manage users and grants.
- Developer account ID is required for user operations.
- 确保已设置凭据(或
gplay auth login环境变量)。GPLAY_SERVICE_ACCOUNT - 服务账户需要拥有“管理员”权限才能管理用户和权限授予。
- 用户操作需要开发者账户ID。
User Management
用户管理
List all users
列出所有用户
bash
gplay users list \
--developer-id DEVELOPER_IDbash
gplay users list \
--developer-id DEVELOPER_IDList users with pagination
分页列出用户
bash
gplay users list \
--developer-id DEVELOPER_ID \
--paginatebash
gplay users list \
--developer-id DEVELOPER_ID \
--paginateList users as table
以表格形式列出用户
bash
gplay users list \
--developer-id DEVELOPER_ID \
--output tablebash
gplay users list \
--developer-id DEVELOPER_ID \
--output tableCreate a new user
创建新用户
bash
gplay users create \
--developer-id DEVELOPER_ID \
--email user@example.com \
--role adminbash
gplay users create \
--developer-id DEVELOPER_ID \
--email user@example.com \
--role adminCreate user with specific permissions
创建具有特定权限的用户
bash
gplay users create \
--developer-id DEVELOPER_ID \
--email user@example.com \
--role custom \
--permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING"bash
gplay users create \
--developer-id DEVELOPER_ID \
--email user@example.com \
--role custom \
--permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING"Update a user
更新用户信息
bash
gplay users update \
--developer-id DEVELOPER_ID \
--email user@example.com \
--role viewerbash
gplay users update \
--developer-id DEVELOPER_ID \
--email user@example.com \
--role viewerDelete a user
删除用户
bash
gplay users delete \
--developer-id DEVELOPER_ID \
--email user@example.com \
--confirmbash
gplay users delete \
--developer-id DEVELOPER_ID \
--email user@example.com \
--confirmGrant Management
权限授予管理
Grants control app-level access for users.
权限授予用于控制用户的应用级访问权限。
Create a grant (give user access to an app)
创建权限授予(为用户分配应用访问权限)
bash
gplay grants create \
--developer-id DEVELOPER_ID \
--email user@example.com \
--package com.example.app \
--permissions "VIEW_APP_INFORMATION,VIEW_FINANCIAL_DATA"bash
gplay grants create \
--developer-id DEVELOPER_ID \
--email user@example.com \
--package com.example.app \
--permissions "VIEW_APP_INFORMATION,VIEW_FINANCIAL_DATA"Update a grant (change permissions)
更新权限授予(修改权限)
bash
gplay grants update \
--developer-id DEVELOPER_ID \
--email user@example.com \
--package com.example.app \
--permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING,MANAGE_RELEASES"bash
gplay grants update \
--developer-id DEVELOPER_ID \
--email user@example.com \
--package com.example.app \
--permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING,MANAGE_RELEASES"Delete a grant (revoke app access)
删除权限授予(撤销应用访问权限)
bash
gplay grants delete \
--developer-id DEVELOPER_ID \
--email user@example.com \
--package com.example.app \
--confirmbash
gplay grants delete \
--developer-id DEVELOPER_ID \
--email user@example.com \
--package com.example.app \
--confirmCommon Flags
通用参数
User flags
用户操作参数
| Flag | Description |
|---|---|
| Developer account ID (required) |
| User email address |
| Role: |
| Comma-separated permission list (for custom role) |
| Output format ( |
| Fetch all pages |
| Required for destructive operations |
| 参数 | 说明 |
|---|---|
| 开发者账户ID(必填) |
| 用户邮箱地址 |
| 角色: |
| 逗号分隔的权限列表(适用于自定义角色) |
| 输出格式( |
| 获取所有分页数据 |
| 执行破坏性操作时必填 |
Grant flags
权限授予操作参数
| Flag | Description |
|---|---|
| Developer account ID (required) |
| User email address (required) |
| App package name (required) |
| Comma-separated permission list (required) |
| Required for delete operations |
| 参数 | 说明 |
|---|---|
| 开发者账户ID(必填) |
| 用户邮箱地址(必填) |
| 应用包名(必填) |
| 逗号分隔的权限列表(必填) |
| 删除操作时必填 |
Available Permissions
可用权限
| Permission | Description |
|---|---|
| View app info and download bulk reports |
| View financial data, orders, and cancellation surveys |
| Manage orders and subscriptions |
| Manage store listing, pricing, and distribution |
| Manage production and testing releases |
| Manage app content rating and policy declarations |
| View app quality information |
| 权限 | 说明 |
|---|---|
| 查看应用信息并下载批量报告 |
| 查看财务数据、订单和取消调查 |
| 管理订单和订阅 |
| 管理商店列表、定价和分发 |
| 管理正式版和测试版发布 |
| 管理应用内容分级和政策声明 |
| 查看应用质量信息 |
Workflow Examples
工作流示例
Onboard a new team member
新团队成员入职
bash
undefinedbash
undefined1. Create user account
1. 创建用户账户
gplay users create
--developer-id 1234567890
--email newdev@example.com
--role custom
--permissions "VIEW_APP_INFORMATION"
--developer-id 1234567890
--email newdev@example.com
--role custom
--permissions "VIEW_APP_INFORMATION"
gplay users create
--developer-id 1234567890
--email newdev@example.com
--role custom
--permissions "VIEW_APP_INFORMATION"
--developer-id 1234567890
--email newdev@example.com
--role custom
--permissions "VIEW_APP_INFORMATION"
2. Grant access to specific apps
2. 授予特定应用的访问权限
gplay grants create
--developer-id 1234567890
--email newdev@example.com
--package com.example.app1
--permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES"
--developer-id 1234567890
--email newdev@example.com
--package com.example.app1
--permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES"
gplay grants create
--developer-id 1234567890
--email newdev@example.com
--package com.example.app2
--permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING"
--developer-id 1234567890
--email newdev@example.com
--package com.example.app2
--permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING"
undefinedgplay grants create
--developer-id 1234567890
--email newdev@example.com
--package com.example.app1
--permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES"
--developer-id 1234567890
--email newdev@example.com
--package com.example.app1
--permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES"
gplay grants create
--developer-id 1234567890
--email newdev@example.com
--package com.example.app2
--permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING"
--developer-id 1234567890
--email newdev@example.com
--package com.example.app2
--permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING"
undefinedOffboard a team member
团队成员离职
bash
undefinedbash
undefinedRevoke all access by deleting the user
通过删除用户撤销所有访问权限
gplay users delete
--developer-id 1234567890
--email departed@example.com
--confirm
--developer-id 1234567890
--email departed@example.com
--confirm
undefinedgplay users delete
--developer-id 1234567890
--email departed@example.com
--confirm
--developer-id 1234567890
--email departed@example.com
--confirm
undefinedAudit current permissions
审核当前权限
bash
undefinedbash
undefinedList all users in table format
以表格形式列出所有用户
gplay users list
--developer-id 1234567890
--paginate
--output table
--developer-id 1234567890
--paginate
--output table
undefinedgplay users list
--developer-id 1234567890
--paginate
--output table
--developer-id 1234567890
--paginate
--output table
undefinedPromote user to release manager
提升用户为发布经理
bash
gplay grants update \
--developer-id 1234567890 \
--email dev@example.com \
--package com.example.app \
--permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES,MANAGE_STORE_LISTING"bash
gplay grants update \
--developer-id 1234567890 \
--email dev@example.com \
--package com.example.app \
--permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES,MANAGE_STORE_LISTING"Best Practices
最佳实践
- Principle of least privilege - Grant only the permissions each user needs.
- Use app-level grants - Prefer grants over account-level roles for fine-grained control.
- Audit regularly - Periodically review users and their permissions.
- Offboard promptly - Remove users immediately when they leave the team.
- Use carefully - Delete operations are irreversible.
--confirm - Automate onboarding - Script user creation and grant assignment for consistency.
- 最小权限原则 - 仅授予用户完成工作所需的权限。
- 使用应用级权限授予 - 优先使用应用级权限授予而非账户级角色,以实现更精细的控制。
- 定期审核 - 定期检查用户及其权限。
- 及时离职处理 - 当用户离开团队时立即删除其账户。
- 谨慎使用参数 - 删除操作不可撤销。
--confirm - 自动化入职流程 - 编写脚本自动化用户创建和权限授予分配,确保一致性。