Open8
App Store Connect API / App-specific password

App Store Connect API | Apple Developer Documentation
APIの概要 - App Store Connect - Apple Developer
Sign in to apps with your Apple ID using app-specific passwords - Apple Support
App 用パスワードを使って Apple ID で App にサインインする - Apple サポート (日本)

- 前者は組織単位で利用するためのAPI KEY
- 後者は個人のAppleIDでの認証を代替するためのもの

Role と Permissions

Developer の動作確認
Cloud Signing を使って xcodebuild で export できるか? > NG
以下のようなエラーが発生する
** ARCHIVE SUCCEEDED **
2023-03-29 10:28:05.379 xcodebuild[9482:25957] [MT] IDEDistribution: -[IDEDistributionLogging _createLoggingBundleAtPath:]: Created bundle at path "/var/folders/24/8k48jl6d249_n_qfxwsl6xvm0000gn/T/Runner_2023-03-29_10-28-05.377.xcdistributionlogs".
error: exportArchive: Cloud signing permission error
** EXPORT FAILED **
Error Domain=DeveloperAPIServiceErrorDomain Code=5 "Cloud signing permission error" UserInfo={IDEDistributionIssueSeverity=3, NSLocalizedRecoverySuggestion=You haven't been given access to cloud-managed distribution certificates. Please contact your team's Account Holder or an Admin to give you access. If you need further assistance, contact Apple Developer Program Support at https://developer.apple.com/contact/., NSLocalizedDescription=Cloud signing permission error}

AppManagerの動作確認
Cloud Signing を使って xcodebuild で export できるか? > NG
** ARCHIVE SUCCEEDED **
2023-03-29 10:40:39.994 xcodebuild[7470:29410] [MT] IDEDistribution: -[IDEDistributionLogging _createLoggingBundleAtPath:]: Created bundle at path "/var/folders/24/8k48jl6d249_n_qfxwsl6xvm0000gn/T/Runner_2023-03-29_10-40-39.992.xcdistributionlogs".
error: exportArchive: Cloud signing permission error
Error Domain=DeveloperAPIServiceErrorDomain Code=5 "Cloud signing permission error" UserInfo={IDEDistributionIssueSeverity=3, NSLocalizedDescription=Cloud signing permission error, NSLocalizedRecoverySuggestion=You haven't been given access to cloud-managed distribution certificates. Please contact your team's Account Holder or an Admin to give you access. If you need further assistance, contact Apple Developer Program Support at https://developer.apple.com/contact/.}
error: exportArchive: No signing certificate "iOS Distribution" found

結論はCI環境で以下の用途でAppStoreConnectAPIを使う場合はAdminで払い出す必要がある
- xcodebuild (Cloud Signing)
- xcrun altool --upload-app