Fetch all roles

darkbitio · Oct 10, 2024 · 06f43d2 · 06f43d2
1 parent 3a80c11
commit 06f43d2
Show file tree

Hide file tree

Showing 36 changed files with 195 additions and 192 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/backupdr.backupvaultAdmin b/roles/backupdr.backupvaultAdmin
@@ -25,6 +25,6 @@
     "backupdr.operations.list"
   ],
   "name": "roles/backupdr.backupvaultAdmin",
-  "stage": "BETA",
+  "stage": "GA",
   "title": "Backup and DR Backup Vault Admin"
 }
diff --git a/roles/batch.serviceAgent b/roles/batch.serviceAgent
@@ -216,7 +216,6 @@
     "compute.licenseCodes.getIamPolicy",
     "compute.licenseCodes.list",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -241,7 +240,6 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",

diff --git a/roles/cloudcontrolspartner.admin b/roles/cloudcontrolspartner.admin
@@ -3,8 +3,6 @@
   "etag": "AA==",
   "includedPermissions": [
     "cloudcontrolspartner.accessapprovalrequests.list",
-    "cloudcontrolspartner.customers.create",
-    "cloudcontrolspartner.customers.delete",
     "cloudcontrolspartner.customers.get",
     "cloudcontrolspartner.customers.list",
     "cloudcontrolspartner.ekmconnections.get",

diff --git a/roles/cloudcontrolspartner.editor b/roles/cloudcontrolspartner.editor
@@ -3,6 +3,8 @@
   "etag": "AA==",
   "includedPermissions": [
     "cloudcontrolspartner.accessapprovalrequests.list",
+    "cloudcontrolspartner.customers.create",
+    "cloudcontrolspartner.customers.delete",
     "cloudcontrolspartner.customers.get",
     "cloudcontrolspartner.customers.list",
     "cloudcontrolspartner.ekmconnections.get",

diff --git a/roles/cloudfunctions.admin b/roles/cloudfunctions.admin
@@ -37,46 +37,16 @@
     "eventarc.channels.setIamPolicy",
     "eventarc.channels.undelete",
     "eventarc.channels.update",
-    "eventarc.enrollments.create",
-    "eventarc.enrollments.delete",
-    "eventarc.enrollments.get",
-    "eventarc.enrollments.getIamPolicy",
-    "eventarc.enrollments.list",
-    "eventarc.enrollments.setIamPolicy",
-    "eventarc.enrollments.update",
     "eventarc.events.receiveAuditLogWritten",
     "eventarc.events.receiveEvent",
-    "eventarc.googleApiSources.create",
-    "eventarc.googleApiSources.delete",
-    "eventarc.googleApiSources.get",
-    "eventarc.googleApiSources.getIamPolicy",
-    "eventarc.googleApiSources.list",
-    "eventarc.googleApiSources.setIamPolicy",
-    "eventarc.googleApiSources.update",
     "eventarc.googleChannelConfigs.get",
     "eventarc.googleChannelConfigs.update",
     "eventarc.locations.get",
     "eventarc.locations.list",
-    "eventarc.messageBuses.create",
-    "eventarc.messageBuses.delete",
-    "eventarc.messageBuses.get",
-    "eventarc.messageBuses.getIamPolicy",
-    "eventarc.messageBuses.list",
-    "eventarc.messageBuses.publish",
-    "eventarc.messageBuses.setIamPolicy",
-    "eventarc.messageBuses.update",
-    "eventarc.messageBuses.use",
     "eventarc.operations.cancel",
     "eventarc.operations.delete",
     "eventarc.operations.get",
     "eventarc.operations.list",
-    "eventarc.pipelines.create",
-    "eventarc.pipelines.delete",
-    "eventarc.pipelines.get",
-    "eventarc.pipelines.getIamPolicy",
-    "eventarc.pipelines.list",
-    "eventarc.pipelines.setIamPolicy",
-    "eventarc.pipelines.update",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.create",

diff --git a/roles/cloudfunctions.developer b/roles/cloudfunctions.developer
@@ -33,6 +33,18 @@
     "eventarc.channels.publish",
     "eventarc.channels.undelete",
     "eventarc.channels.update",
+    "eventarc.enrollments.create",
+    "eventarc.enrollments.delete",
+    "eventarc.enrollments.get",
+    "eventarc.enrollments.getIamPolicy",
+    "eventarc.enrollments.list",
+    "eventarc.enrollments.update",
+    "eventarc.googleApiSources.create",
+    "eventarc.googleApiSources.delete",
+    "eventarc.googleApiSources.get",
+    "eventarc.googleApiSources.getIamPolicy",
+    "eventarc.googleApiSources.list",
+    "eventarc.googleApiSources.update",
     "eventarc.googleChannelConfigs.get",
     "eventarc.googleChannelConfigs.update",
     "eventarc.locations.get",
@@ -41,6 +53,12 @@
     "eventarc.operations.delete",
     "eventarc.operations.get",
     "eventarc.operations.list",
+    "eventarc.pipelines.create",
+    "eventarc.pipelines.delete",
+    "eventarc.pipelines.get",
+    "eventarc.pipelines.getIamPolicy",
+    "eventarc.pipelines.list",
+    "eventarc.pipelines.update",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.create",

diff --git a/roles/cloudfunctions.serviceAgent b/roles/cloudfunctions.serviceAgent
@@ -90,6 +90,18 @@
     "eventarc.channels.publish",
     "eventarc.channels.undelete",
     "eventarc.channels.update",
+    "eventarc.enrollments.create",
+    "eventarc.enrollments.delete",
+    "eventarc.enrollments.get",
+    "eventarc.enrollments.getIamPolicy",
+    "eventarc.enrollments.list",
+    "eventarc.enrollments.update",
+    "eventarc.googleApiSources.create",
+    "eventarc.googleApiSources.delete",
+    "eventarc.googleApiSources.get",
+    "eventarc.googleApiSources.getIamPolicy",
+    "eventarc.googleApiSources.list",
+    "eventarc.googleApiSources.update",
     "eventarc.googleChannelConfigs.get",
     "eventarc.googleChannelConfigs.update",
     "eventarc.locations.get",
@@ -98,6 +110,12 @@
     "eventarc.operations.delete",
     "eventarc.operations.get",
     "eventarc.operations.list",
+    "eventarc.pipelines.create",
+    "eventarc.pipelines.delete",
+    "eventarc.pipelines.get",
+    "eventarc.pipelines.getIamPolicy",
+    "eventarc.pipelines.list",
+    "eventarc.pipelines.update",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.create",

diff --git a/roles/cloudfunctions.viewer b/roles/cloudfunctions.viewer
@@ -18,11 +18,24 @@
     "eventarc.channels.get",
     "eventarc.channels.getIamPolicy",
     "eventarc.channels.list",
+    "eventarc.enrollments.get",
+    "eventarc.enrollments.getIamPolicy",
+    "eventarc.enrollments.list",
+    "eventarc.googleApiSources.get",
+    "eventarc.googleApiSources.getIamPolicy",
+    "eventarc.googleApiSources.list",
     "eventarc.googleChannelConfigs.get",
     "eventarc.locations.get",
     "eventarc.locations.list",
+    "eventarc.messageBuses.get",
+    "eventarc.messageBuses.getIamPolicy",
+    "eventarc.messageBuses.list",
+    "eventarc.messageBuses.use",
     "eventarc.operations.get",
     "eventarc.operations.list",
+    "eventarc.pipelines.get",
+    "eventarc.pipelines.getIamPolicy",
+    "eventarc.pipelines.list",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.get",

diff --git a/roles/cloudtpu.serviceAgent b/roles/cloudtpu.serviceAgent
@@ -335,6 +335,7 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
+    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -368,9 +369,11 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
+    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
+    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.access",
     "compute.networks.addPeering",

diff --git a/roles/compute.admin b/roles/compute.admin
@@ -364,6 +364,7 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
+    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -402,9 +403,11 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
+    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
+    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.access",
     "compute.networks.addPeering",
@@ -673,11 +676,13 @@
     "compute.securityPolicies.delete",
     "compute.securityPolicies.deleteTagBinding",
     "compute.securityPolicies.get",
+    "compute.securityPolicies.getIamPolicy",
     "compute.securityPolicies.list",
     "compute.securityPolicies.listEffectiveTags",
     "compute.securityPolicies.listTagBindings",
     "compute.securityPolicies.move",
     "compute.securityPolicies.removeAssociation",
+    "compute.securityPolicies.setIamPolicy",
     "compute.securityPolicies.setLabels",
     "compute.securityPolicies.update",
     "compute.securityPolicies.use",

diff --git a/roles/compute.instanceAdmin b/roles/compute.instanceAdmin
@@ -157,9 +157,11 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
+    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
+    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.get",
     "compute.networks.list",

diff --git a/roles/compute.instanceAdmin.v1 b/roles/compute.instanceAdmin.v1
@@ -222,6 +222,7 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
+    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -248,9 +249,11 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
+    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
+    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.get",
     "compute.networks.list",

diff --git a/roles/dataproc.serviceAgent b/roles/dataproc.serviceAgent
@@ -160,11 +160,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.get",
     "compute.networks.getEffectiveFirewalls",

diff --git a/roles/dataprocrm.nodeServiceAgent b/roles/dataprocrm.nodeServiceAgent
@@ -15,6 +15,6 @@
     "monitoring.timeSeries.create"
   ],
   "name": "roles/dataprocrm.nodeServiceAgent",
-  "stage": "GA",
+  "stage": "ALPHA",
   "title": "Dataproc Resource Manager Node Service Agent"
 }
diff --git a/roles/eventarc.developer b/roles/eventarc.developer
@@ -17,6 +17,18 @@
     "eventarc.channels.publish",
     "eventarc.channels.undelete",
     "eventarc.channels.update",
+    "eventarc.enrollments.create",
+    "eventarc.enrollments.delete",
+    "eventarc.enrollments.get",
+    "eventarc.enrollments.getIamPolicy",
+    "eventarc.enrollments.list",
+    "eventarc.enrollments.update",
+    "eventarc.googleApiSources.create",
+    "eventarc.googleApiSources.delete",
+    "eventarc.googleApiSources.get",
+    "eventarc.googleApiSources.getIamPolicy",
+    "eventarc.googleApiSources.list",
+    "eventarc.googleApiSources.update",
     "eventarc.googleChannelConfigs.get",
     "eventarc.googleChannelConfigs.update",
     "eventarc.locations.get",
@@ -25,6 +37,12 @@
     "eventarc.operations.delete",
     "eventarc.operations.get",
     "eventarc.operations.list",
+    "eventarc.pipelines.create",
+    "eventarc.pipelines.delete",
+    "eventarc.pipelines.get",
+    "eventarc.pipelines.getIamPolicy",
+    "eventarc.pipelines.list",
+    "eventarc.pipelines.update",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.create",

diff --git a/roles/eventarc.messageBusAdmin b/roles/eventarc.messageBusAdmin
@@ -1,17 +1,7 @@
 {
   "description": "Full control over Message Buses resources.",
   "etag": "AA==",
-  "includedPermissions": [
-    "eventarc.messageBuses.create",
-    "eventarc.messageBuses.delete",
-    "eventarc.messageBuses.get",
-    "eventarc.messageBuses.getIamPolicy",
-    "eventarc.messageBuses.list",
-    "eventarc.messageBuses.publish",
-    "eventarc.messageBuses.update",
-    "eventarc.messageBuses.use"
-  ],
   "name": "roles/eventarc.messageBusAdmin",
-  "stage": "BETA",
+  "stage": "ALPHA",
   "title": "Eventarc Message Bus Admin"
 }
diff --git a/roles/eventarc.messageBusUser b/roles/eventarc.messageBusUser
@@ -1,7 +1,13 @@
 {
   "description": "Access to publish to or bind to a Message Bus.",
   "etag": "AA==",
+  "includedPermissions": [
+    "eventarc.messageBuses.get",
+    "eventarc.messageBuses.list",
+    "eventarc.messageBuses.publish",
+    "eventarc.messageBuses.use"
+  ],
   "name": "roles/eventarc.messageBusUser",
-  "stage": "ALPHA",
+  "stage": "BETA",
   "title": "Eventarc Message Bus User"
 }
diff --git a/roles/eventarc.serviceAgent b/roles/eventarc.serviceAgent
@@ -26,7 +26,6 @@
     "container.services.list",
     "dns.networks.targetWithPeeringZone",
     "eventarc.channels.publish",
-    "eventarc.messageBuses.publish",
     "eventarc.operations.get",
     "iam.serviceAccounts.actAs",
     "iam.serviceAccounts.getAccessToken",

diff --git a/roles/firebase.developViewer b/roles/firebase.developViewer
@@ -57,24 +57,11 @@
     "eventarc.channels.get",
     "eventarc.channels.getIamPolicy",
     "eventarc.channels.list",
-    "eventarc.enrollments.get",
-    "eventarc.enrollments.getIamPolicy",
-    "eventarc.enrollments.list",
-    "eventarc.googleApiSources.get",
-    "eventarc.googleApiSources.getIamPolicy",
-    "eventarc.googleApiSources.list",
     "eventarc.googleChannelConfigs.get",
     "eventarc.locations.get",
     "eventarc.locations.list",
-    "eventarc.messageBuses.get",
-    "eventarc.messageBuses.getIamPolicy",
-    "eventarc.messageBuses.list",
-    "eventarc.messageBuses.use",
     "eventarc.operations.get",
     "eventarc.operations.list",
-    "eventarc.pipelines.get",
-    "eventarc.pipelines.getIamPolicy",
-    "eventarc.pipelines.list",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.get",