gplay-user-management

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

User & Grant Management

用户与权限授予管理

Use this skill when you need to manage users and their permissions in Google Play Console.
当你需要在Google Play Console中管理用户及其权限时,可以使用本技能。

Preconditions

前置条件

  • Ensure credentials are set (
    gplay auth login
    or
    GPLAY_SERVICE_ACCOUNT
    env var).
  • Service account needs "Admin" permission to manage users and grants.
  • Developer account ID is required for user operations.
  • 确保已设置凭据(
    gplay auth login
    GPLAY_SERVICE_ACCOUNT
    环境变量)。
  • 服务账户需要拥有“管理员”权限才能管理用户和权限授予。
  • 用户操作需要开发者账户ID。

User Management

用户管理

List all users

列出所有用户

bash
gplay users list \
  --developer-id DEVELOPER_ID
bash
gplay users list \
  --developer-id DEVELOPER_ID

List users with pagination

分页列出用户

bash
gplay users list \
  --developer-id DEVELOPER_ID \
  --paginate
bash
gplay users list \
  --developer-id DEVELOPER_ID \
  --paginate

List users as table

以表格形式列出用户

bash
gplay users list \
  --developer-id DEVELOPER_ID \
  --output table
bash
gplay users list \
  --developer-id DEVELOPER_ID \
  --output table

Create a new user

创建新用户

bash
gplay users create \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --role admin
bash
gplay users create \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --role admin

Create user with specific permissions

创建具有特定权限的用户

bash
gplay users create \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --role custom \
  --permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING"
bash
gplay users create \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --role custom \
  --permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING"

Update a user

更新用户信息

bash
gplay users update \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --role viewer
bash
gplay users update \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --role viewer

Delete a user

删除用户

bash
gplay users delete \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --confirm
bash
gplay users delete \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --confirm

Grant Management

权限授予管理

Grants control app-level access for users.
权限授予用于控制用户的应用级访问权限。

Create a grant (give user access to an app)

创建权限授予(为用户分配应用访问权限)

bash
gplay grants create \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --package com.example.app \
  --permissions "VIEW_APP_INFORMATION,VIEW_FINANCIAL_DATA"
bash
gplay grants create \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --package com.example.app \
  --permissions "VIEW_APP_INFORMATION,VIEW_FINANCIAL_DATA"

Update a grant (change permissions)

更新权限授予(修改权限)

bash
gplay grants update \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --package com.example.app \
  --permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING,MANAGE_RELEASES"
bash
gplay grants update \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --package com.example.app \
  --permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING,MANAGE_RELEASES"

Delete a grant (revoke app access)

删除权限授予(撤销应用访问权限)

bash
gplay grants delete \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --package com.example.app \
  --confirm
bash
gplay grants delete \
  --developer-id DEVELOPER_ID \
  --email user@example.com \
  --package com.example.app \
  --confirm

Common Flags

通用参数

User flags

用户操作参数

FlagDescription
--developer-id
Developer account ID (required)
--email
User email address
--role
Role:
admin
,
viewer
,
custom
--permissions
Comma-separated permission list (for custom role)
--output
Output format (
json
,
table
,
markdown
)
--paginate
Fetch all pages
--confirm
Required for destructive operations
参数说明
--developer-id
开发者账户ID(必填)
--email
用户邮箱地址
--role
角色:
admin
(管理员)、
viewer
(查看者)、
custom
(自定义)
--permissions
逗号分隔的权限列表(适用于自定义角色)
--output
输出格式(
json
table
markdown
--paginate
获取所有分页数据
--confirm
执行破坏性操作时必填

Grant flags

权限授予操作参数

FlagDescription
--developer-id
Developer account ID (required)
--email
User email address (required)
--package
App package name (required)
--permissions
Comma-separated permission list (required)
--confirm
Required for delete operations
参数说明
--developer-id
开发者账户ID(必填)
--email
用户邮箱地址(必填)
--package
应用包名(必填)
--permissions
逗号分隔的权限列表(必填)
--confirm
删除操作时必填

Available Permissions

可用权限

PermissionDescription
VIEW_APP_INFORMATION
View app info and download bulk reports
VIEW_FINANCIAL_DATA
View financial data, orders, and cancellation surveys
MANAGE_ORDERS
Manage orders and subscriptions
MANAGE_STORE_LISTING
Manage store listing, pricing, and distribution
MANAGE_RELEASES
Manage production and testing releases
MANAGE_APP_CONTENT
Manage app content rating and policy declarations
VIEW_APP_QUALITY
View app quality information
权限说明
VIEW_APP_INFORMATION
查看应用信息并下载批量报告
VIEW_FINANCIAL_DATA
查看财务数据、订单和取消调查
MANAGE_ORDERS
管理订单和订阅
MANAGE_STORE_LISTING
管理商店列表、定价和分发
MANAGE_RELEASES
管理正式版和测试版发布
MANAGE_APP_CONTENT
管理应用内容分级和政策声明
VIEW_APP_QUALITY
查看应用质量信息

Workflow Examples

工作流示例

Onboard a new team member

新团队成员入职

bash
undefined
bash
undefined

1. Create user account

1. 创建用户账户

gplay users create
--developer-id 1234567890
--email newdev@example.com
--role custom
--permissions "VIEW_APP_INFORMATION"
gplay users create
--developer-id 1234567890
--email newdev@example.com
--role custom
--permissions "VIEW_APP_INFORMATION"

2. Grant access to specific apps

2. 授予特定应用的访问权限

gplay grants create
--developer-id 1234567890
--email newdev@example.com
--package com.example.app1
--permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES"
gplay grants create
--developer-id 1234567890
--email newdev@example.com
--package com.example.app2
--permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING"
undefined
gplay grants create
--developer-id 1234567890
--email newdev@example.com
--package com.example.app1
--permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES"
gplay grants create
--developer-id 1234567890
--email newdev@example.com
--package com.example.app2
--permissions "VIEW_APP_INFORMATION,MANAGE_STORE_LISTING"
undefined

Offboard a team member

团队成员离职

bash
undefined
bash
undefined

Revoke all access by deleting the user

通过删除用户撤销所有访问权限

gplay users delete
--developer-id 1234567890
--email departed@example.com
--confirm
undefined
gplay users delete
--developer-id 1234567890
--email departed@example.com
--confirm
undefined

Audit current permissions

审核当前权限

bash
undefined
bash
undefined

List all users in table format

以表格形式列出所有用户

gplay users list
--developer-id 1234567890
--paginate
--output table
undefined
gplay users list
--developer-id 1234567890
--paginate
--output table
undefined

Promote user to release manager

提升用户为发布经理

bash
gplay grants update \
  --developer-id 1234567890 \
  --email dev@example.com \
  --package com.example.app \
  --permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES,MANAGE_STORE_LISTING"
bash
gplay grants update \
  --developer-id 1234567890 \
  --email dev@example.com \
  --package com.example.app \
  --permissions "VIEW_APP_INFORMATION,MANAGE_RELEASES,MANAGE_STORE_LISTING"

Best Practices

最佳实践

  1. Principle of least privilege - Grant only the permissions each user needs.
  2. Use app-level grants - Prefer grants over account-level roles for fine-grained control.
  3. Audit regularly - Periodically review users and their permissions.
  4. Offboard promptly - Remove users immediately when they leave the team.
  5. Use
    --confirm
    carefully
    - Delete operations are irreversible.
  6. Automate onboarding - Script user creation and grant assignment for consistency.
  1. 最小权限原则 - 仅授予用户完成工作所需的权限。
  2. 使用应用级权限授予 - 优先使用应用级权限授予而非账户级角色,以实现更精细的控制。
  3. 定期审核 - 定期检查用户及其权限。
  4. 及时离职处理 - 当用户离开团队时立即删除其账户。
  5. 谨慎使用
    --confirm
    参数
    - 删除操作不可撤销。
  6. 自动化入职流程 - 编写脚本自动化用户创建和权限授予分配,确保一致性。