ApigeeX -restrict access to an Environment using conditions in IAM policy

[DigitalD]

Hello All,

                I have a requirement where I need to restrict user access  to a particular environment .

For e.g I have 2 environments - Dev, Test . I want to give development access to a user for Dev only.

I tried the following 

 Gave Apigee API admin and Apigee Environment Admin roles with conditions where

resource.name == "organizations/{orgname}/environments/dev"

When I tried to open a proxy that is deployed only in "dev" ,I get UI Errors saying "Error fetching Deployments" 

In the background it's trying to get the deployments for both the environments . For dev it works and for test it throws an error " the caller doesn’t have permission" 

Can someone guide me on whats missing here and how this can be handled .

Thanks

[udayjoshi]

https://www.googlecloudcommunity.com/gc/Cloud-Product-Articles/Assigning-Custom-Roles-for-Environmen...

[DigitalD]

Thanks Uday. Will give this a try...