How to only give premission to specific users?

[Allena101]

I realize now that this may be more of a GCP issue than an ADK. However, have not seen this issue in any tutorials or in the documentation (might have missed it)

I know of google IAM and IAP. IAP seems to have so many steps that I wonder if I am missing something. Lets say I make a simple ADK app and deploy it using gcloud. Should it not be failry easy to make only me (the owner) and someone else (the client) be able to use the app?

So I guess what I am really asking is what are the common (and best) practices to give access to an ADK application.
I also know that ADK is standalone so I could try to deploy on another service that makes it easer to share with a client but I have not looked into those options yet.

[michaelb48]

I think the best way to solve this a proxy with a service account for authentication inbetween. That's what I have seen others use and what I used myself.

[Allena101]

I think the best way to solve this a proxy with a service account for authentication inbetween. That's what I have seen others use and what I used myself.

Hi Michael 👋 Thanks alot for the response!

So with proxy you are talking about IAP , right?

So in practice you would manually add all the users that should have access to the app?
Also, does anything change if you deploy a fastAPI app that calls ADK when it comes to the giving permission to specific users part.

This is the best guide I have found thus far:
https://cloud.google.com/iap/docs/enabling-cloud-run
The guide uses a load balancer. Is that standard practice?