iOS Developer Program Roles Overview 的說明

Apple Developer Member管理真是一大門學問，光是要弄懂彼此之間的關係就不是很容易了～
如果是大型企業然後還有委託外面的廠商開發，那帳號真是一筆糊塗帳。
有鑒於最近在開發Apple App上面有一些角色上的建立認知，筆者除了為了方便自己檢視與比對各項權限之外，也對Apple官網開發者中心裡面的各種角色定位做中譯本的特別說明，以下（藍色）為翻譯內容

假如有翻譯不對的地方懇請指正，畢竟我也還在摸索。

Team Roles

團隊角色

Table 10-1 lists the roles a person can play and describes each. Each level of access includes all the capabilities of the levels below it.

表 10-1 列出了每一個角色可以使用的遊戲規則，而且描述了各自在系統上的使用功能等級，同時包含該功能以下的各種功能。

Table 10-1  Team roles

表 10-1 團隊角色

Role	Description
Team agent 代理人	A team agent is legally responsible for the team and acts as the primary contact with Apple. The team agent can invite team members and change the access level of any other team member. There’s only one team agent. 團隊代理人在帳號認定是法定的代理人並受法律條款約束，同時他也是這個開發者帳號與蘋果公司的主要聯繫人。這個團隊代理人可以邀請任何人員加入團隊，並同時擁有改變任何其他團隊成員的功能使用級別。所以一個開發者帳號只能有一個團隊代理人。
Team admin 管理者	A team admin can set the privilege levels of other team members, except the team agent. Team admins manage all assets used to sign your apps, either during development or when your team is ready to distribute an app. Team admins are the only people on a team who can sign apps for distribution on nondevelopment devices. Team admins also approve signing certificate requests made by team members. 團隊管理員可以設置其他團隊成員的權限級別，除了團隊代理人之外。團隊管理者是用來簽核您的應用程式的管理權限，無論是在開發過程中或當您的團隊準備發佈應用程式時。團隊管理者是唯一在團隊中可以簽署每一個應用程式的發佈與支援的設備。團隊管理員還可批准簽署由一般成員提出certificate證書的申請。
Team member 一般成員	A team member can gain access to prerelease content delivered by Apple in Member Center. A team member can also sign apps during development, but only after he or she makes a request for a development signing certificate and has that request approved by a team admin. 一般成員可以觀看蘋果公司在會員中心提供的搶鮮內容。一般成員也可以在開發過程中簽署應用程式，但只有在向團隊管理員申請並簽署了certificate證書之後才能簽署應用程式。

Team Privileges

團隊權限

Each team role defines a set of privileges or tasks that a person can perform. Table 10-2 lists the specific privileges granted to members of the team. The privileges are listed in chronological order to help guide you through the process. Refer to Table 11-1 for the types of certificates that each team member can revoke.
每個團隊角色定義了一組權限或任務讓每一個人可以執行。表 10-2 列出了該團隊的成員授予的特定權限。該權限按操作的時間順序排列，您可以透過權限瞭解整個過程。後面參考表 11-1 certificates 證書，即列出每個團隊成員可以撤銷的憑證類型。

Table 10-2  Privileges assigned to each membership level

表 10-2 分配給每個成員級別權限

Privilege	Team agent	Team admin	Team member
Have legal responsibility for the team 對團隊的法律責任
Be the primary contact with Apple 與蘋果公司的主要聯繫人
View prerelease Apple content 觀看蘋果的搶鮮內容
Enroll in additional developer programs and renew them 參加蘋果公司其他開發項目和開發者帳號續約
Invite team admins and team members 可以邀請團隊管理員和一般成員
Request development certificates 申請開發證書（certificates）
Approve team member requests for development certificates 核准來自開發團隊成員的證書（certificates）申請需求
Request distribution certificates 申請發佈憑證（distribution certificates）
For Mac apps, request Developer ID certificates 針對 Mac 的 Apps，申請開發者 ID 證書（certificates）
Add devices for development and testing 加入用於開發和測試設備
Create App IDs and enable certain technologies and services 創建應用程式ID和啟用某些技術和服務
Create development and distribution provisioning profiles 建立開發和發佈（distribution）供應（provisioning）配置文件（profiles）
Create SSL certificates for Apple Push Notification service 創建蘋果推播（Push Notification）通知服務的SSL證書（certificates）
Download development provisioning profiles 下載開發者供應（provisioning）配置文件（profiles）
Submit apps to the App Store or Mac App Store 上傳應用程式到 App Store 或 Mac App Store

Revoking Certificates

吊銷證書

You revoke certificates when you no longer need them or when you want to re-create them because of another code signing issue (refer to “Certificate Issues” for the types of problems that can occur). You also revoke certificates if you suspect that they have been compromised. If you’re a team admin for a company, you may want to revoke development certificates of team members who no longer work on your project. Revoking certificates may invalidate provisioning profiles, so read all the steps in “Re-Creating Certificates and Updating Related Provisioning Profiles” to avoid code signing issues later.

如果您的證書代碼發生問題時，或者當您不再需要時，又或者您要重新創建同樣的一個證書時，您可以撤銷之前的證書。如果你懷疑有問題時您可以隨時的撤銷證書。如果你是一個團隊管理的公司，你可能要撤銷的團隊成員使用開發證書的權利。吊銷證書可能會使預置描述文件作廢，所以在閱讀“重新創建證書”之後，並“更新相關的供應配置文件”中的所有步驟，來避免代碼簽名的問題。

Revoking Privileges

撤銷權限

Table 11-1 lists the types of certificates that each team member can revoke. Individual developers are the team agent for their one-person team, which means they have permission to revoke all types of development and distribution certificates except as indicated. For a company, any team member can revoke his or her own development certificate, but a team member can only revoke distribution certificates if he or she is a team agent or admin.

表 11-1 列出的證書，每個團隊成員都可以撤銷的類型。個人開發者等於是一個人的團隊而他自己也是團隊代理人，這意味著他們有權撤銷所有類型的開發和銷售憑證，除了特別有特別的情況之外。如果是企業開發的團隊（多人分工的開發），任何團隊中的成員都可以撤銷自己的開發證書（development certificate），但是只有團隊代理人或是團隊管理者可以刪除銷售憑證（distribution certificates）。

Table 11-1  Team certificate revoking privileges

表 11-1 團隊證書撤銷權限

Type of certificate	Team agent	Team admin	Team member
Your development certificates: 您的開發證書 iOS Development Mac Development
Other team admin and member certificates: 其他的管理團隊和成員證書 iOS Development Mac Development
The team agent’s certificate: 該團隊代理人的證書 iOS Development Mac Development
Store distribution certificates: 蘋果App Atore銷售證書 iOS Distribution Mac App Distribution Mac Installer Distribution
Developer ID certificates: 開發者ID證書 Developer ID Application Developer ID Installer
Push notification certificates: 推播通知證書 APNs Development iOS APNs Production iOS APNs Development Mac APNs Production Mac
Pass certificate: 通關證書 Pass Type ID

You can’t revoke Developer ID or Passbook certificates using Member Center. Instead, send a request to Apple atproduct-security@apple.com to revoke these types of certificates.

If Apple revokes your Developer ID certificate, users can no longer install applications that have been signed with that certificate. Instead of revoking a Developer ID certificate, you can create additional Developer ID certificates using Member Center as described in “Requesting Additional Developer ID Certificates.”

你不能使用會員中心來撤銷開發者ID或Passbook證書（certificates）。透過發送一個請求到蘋果atproduct-security@apple.com 即可以撤銷這些類型的證書。

如果蘋果撤銷你的開發者ID證書（certificates），用戶不再安裝已與該證書簽名的應用程序。相反吊銷開發者身份證明的，你可以創建一個使用會員中心中所描述的其他開發商ID證書“請求其他開發商ID證書。

Revoking Development Certificates Using Xcode

使用Xcode撤銷開發者證書（Certificates）

If the development certificate you want to revoke appears in the Accounts preferences in Xcode—it’s a certificate you created on your Mac and is in your keychain—then you can revoke it using Xcode. Otherwise, use Member Center to revoke the certificate, as described in “Revoking Certificates Using Member Center.” (If you attempt to revoke a distribution certificate using Xcode, you’ll be redirected to Member Center.)

如果您要刪除開發著證書（certificate），這憑證是來自MAC電腦上面鑰匙串創建的，您可以在XCode撤銷它（在XCode的帳戶偏好裡面），如果您是從開發者會員中心去撤銷這個憑證，那麼下次您想在XCode撤銷它就會被重定向到開發者中心。