# Authorize with Cloud Shell

Authorizing your Cloud Shell session grants your environment temporary
credentials, letting you send gcloud CLI commands and manage
Google Cloud resources.

## Authorize tools in Cloud Shell

When you make a Google Cloud API call or use a command-line tool, such
as the gcloud CLI, that requires credentials for the first time with
Cloud Shell, Cloud Shell prompts
you with the **Authorize Cloud Shell** dialog.

To allow the tool to use your credentials to make calls, click **Authorize**.

### Duration of authorization

This authorization lasts the lifetime of your Cloud Shell session.
Since each Cloud Shell session is tied to an
ephemeral, pre-configured virtual machine, if you restart your VM or close
your browser, you will need to reauthorize these tools if you use them in
your next new session. To learn more about how Cloud Shell works,
refer to the [Concepts page](https://docs.cloud.google.com/shell/docs/how-cloud-shell-works) that outlines
key features and how they work.

### Revoke access

To revoke access for a session, restart your VM to start a new session by
clicking **More** \>
**Restart**.