Fetch all roles

darkbitio · Nov 16, 2024 · 0e5f06e · 0e5f06e
1 parent be2257a
commit 0e5f06e
Show file tree

Hide file tree

Showing 43 changed files with 336 additions and 44 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/aiplatform.onlinePredictionServiceAgent b/roles/aiplatform.onlinePredictionServiceAgent
@@ -0,0 +1,25 @@
+{
+  "description": "Gives Vertex AI Online Prediction the permissions it needs to function.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "gkehub.features.get",
+    "gkehub.features.getIamPolicy",
+    "gkehub.features.list",
+    "gkehub.fleet.get",
+    "gkehub.gateway.delete",
+    "gkehub.gateway.generateCredentials",
+    "gkehub.gateway.get",
+    "gkehub.gateway.patch",
+    "gkehub.gateway.post",
+    "gkehub.gateway.put",
+    "gkehub.locations.get",
+    "gkehub.locations.list",
+    "gkehub.memberships.get",
+    "gkehub.memberships.getIamPolicy",
+    "gkehub.memberships.list",
+    "serviceusage.services.get"
+  ],
+  "name": "roles/aiplatform.onlinePredictionServiceAgent",
+  "stage": "GA",
+  "title": "Vertex AI Online Prediction Service Agent"
+}
diff --git a/roles/chronicle.editor b/roles/chronicle.editor
@@ -67,8 +67,6 @@
     "chronicle.dataTaps.get",
     "chronicle.dataTaps.list",
     "chronicle.dataTaps.update",
-    "chronicle.enrichmentControls.get",
-    "chronicle.enrichmentControls.list",
     "chronicle.entities.batchCreate",
     "chronicle.entities.batchDelete",
     "chronicle.entities.batchValidate",
@@ -144,6 +142,7 @@
     "chronicle.legacies.legacyGetRuleCounts",
     "chronicle.legacies.legacyGetRulesTrends",
     "chronicle.legacies.legacyRunTestRule",
+    "chronicle.legacies.legacySearchAlerts",
     "chronicle.legacies.legacySearchArtifactEvents",
     "chronicle.legacies.legacySearchArtifactIoCDetails",
     "chronicle.legacies.legacySearchAssetEvents",

diff --git a/roles/chronicle.limitedViewer b/roles/chronicle.limitedViewer
@@ -58,7 +58,6 @@
     "chronicle.legacies.legacyFindUdmEvents",
     "chronicle.legacies.legacyGetAlert",
     "chronicle.legacies.legacyGetFinding",
-    "chronicle.legacies.legacySearchAlerts",
     "chronicle.legacies.legacySearchArtifactEvents",
     "chronicle.legacies.legacySearchArtifactIoCDetails",
     "chronicle.legacies.legacySearchAssetEvents",

diff --git a/roles/chronicle.viewer b/roles/chronicle.viewer
@@ -40,6 +40,8 @@
     "chronicle.dataTables.list",
     "chronicle.dataTaps.get",
     "chronicle.dataTaps.list",
+    "chronicle.enrichmentControls.get",
+    "chronicle.enrichmentControls.list",
     "chronicle.entities.find",
     "chronicle.entities.findRelatedEntities",
     "chronicle.entities.get",
@@ -103,7 +105,6 @@
     "chronicle.legacies.legacyGetRuleCounts",
     "chronicle.legacies.legacyGetRulesTrends",
     "chronicle.legacies.legacyRunTestRule",
-    "chronicle.legacies.legacySearchAlerts",
     "chronicle.legacies.legacySearchArtifactEvents",
     "chronicle.legacies.legacySearchArtifactIoCDetails",
     "chronicle.legacies.legacySearchAssetEvents",

diff --git a/roles/chroniclesm.viewer b/roles/chroniclesm.viewer
@@ -3,6 +3,7 @@
   "etag": "AA==",
   "includedPermissions": [
     "chroniclesm.gcpAssociations.get",
+    "chroniclesm.gcpAssociations.list",
     "chroniclesm.gcpLogFlowFilters.get",
     "chroniclesm.gcpSettings.get"
   ],

diff --git a/roles/cloudaicompanion.serviceAgent b/roles/cloudaicompanion.serviceAgent
@@ -1,5 +1,5 @@
 {
-  "description": "Gives Cloud AI Companion components the proper permissions to function.",
+  "description": "Gives Gemini for Google Cloud components the proper permissions to function.",
   "etag": "AA==",
   "includedPermissions": [
     "cloudaicompanion.codeRepositoryIndexes.get",
@@ -29,5 +29,5 @@
   ],
   "name": "roles/cloudaicompanion.serviceAgent",
   "stage": "GA",
-  "title": "Cloud AI Companion Service Agent"
+  "title": "Gemini for Google Cloud Service Agent"
 }
diff --git a/roles/composer.serviceAgent b/roles/composer.serviceAgent
@@ -464,6 +464,8 @@
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
     "compute.networkEndpointGroups.use",
+    "compute.networkProfiles.get",
+    "compute.networkProfiles.list",
     "compute.networks.access",
     "compute.networks.addPeering",
     "compute.networks.create",
@@ -681,6 +683,7 @@
     "compute.snapshots.setIamPolicy",
     "compute.snapshots.setLabels",
     "compute.snapshots.useReadOnly",
+    "compute.spotAssistants.get",
     "compute.sslCertificates.get",
     "compute.sslCertificates.list",
     "compute.sslCertificates.listEffectiveTags",
@@ -715,6 +718,7 @@
     "compute.subnetworks.update",
     "compute.subnetworks.use",
     "compute.subnetworks.useExternalIp",
+    "compute.subnetworks.usePeerMigration",
     "compute.targetGrpcProxies.create",
     "compute.targetGrpcProxies.createTagBinding",
     "compute.targetGrpcProxies.delete",

diff --git a/roles/compute.instanceAdmin.v1 b/roles/compute.instanceAdmin.v1
@@ -261,6 +261,8 @@
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
     "compute.networkEndpointGroups.use",
+    "compute.networkProfiles.get",
+    "compute.networkProfiles.list",
     "compute.networks.get",
     "compute.networks.list",
     "compute.networks.listEffectiveTags",
@@ -359,6 +361,7 @@
     "compute.snapshots.setIamPolicy",
     "compute.snapshots.setLabels",
     "compute.snapshots.useReadOnly",
+    "compute.spotAssistants.get",
     "compute.sslCertificates.get",
     "compute.sslCertificates.list",
     "compute.sslCertificates.listEffectiveTags",

diff --git a/roles/compute.networkAdmin b/roles/compute.networkAdmin
@@ -231,6 +231,8 @@
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
     "compute.networkEndpointGroups.use",
+    "compute.networkProfiles.get",
+    "compute.networkProfiles.list",
     "compute.networks.access",
     "compute.networks.addPeering",
     "compute.networks.create",
@@ -451,6 +453,7 @@
     "compute.subnetworks.update",
     "compute.subnetworks.use",
     "compute.subnetworks.useExternalIp",
+    "compute.subnetworks.usePeerMigration",
     "compute.targetGrpcProxies.create",
     "compute.targetGrpcProxies.createTagBinding",
     "compute.targetGrpcProxies.delete",

diff --git a/roles/compute.networkUser b/roles/compute.networkUser
@@ -36,6 +36,8 @@
     "compute.networkAttachments.list",
     "compute.networkAttachments.listEffectiveTags",
     "compute.networkAttachments.listTagBindings",
+    "compute.networkProfiles.get",
+    "compute.networkProfiles.list",
     "compute.networks.access",
     "compute.networks.get",
     "compute.networks.getEffectiveFirewalls",

diff --git a/roles/compute.viewer b/roles/compute.viewer
@@ -150,6 +150,8 @@
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
+    "compute.networkProfiles.get",
+    "compute.networkProfiles.list",
     "compute.networks.get",
     "compute.networks.getEffectiveFirewalls",
     "compute.networks.getRegionEffectiveFirewalls",
@@ -265,6 +267,7 @@
     "compute.snapshots.list",
     "compute.snapshots.listEffectiveTags",
     "compute.snapshots.listTagBindings",
+    "compute.spotAssistants.get",
     "compute.sslCertificates.get",
     "compute.sslCertificates.list",
     "compute.sslCertificates.listEffectiveTags",

diff --git a/roles/container.serviceAgent b/roles/container.serviceAgent
@@ -426,6 +426,8 @@
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
     "compute.networkEndpointGroups.use",
+    "compute.networkProfiles.get",
+    "compute.networkProfiles.list",
     "compute.networks.access",
     "compute.networks.addPeering",
     "compute.networks.create",
@@ -676,6 +678,7 @@
     "compute.snapshots.setIamPolicy",
     "compute.snapshots.setLabels",
     "compute.snapshots.useReadOnly",
+    "compute.spotAssistants.get",
     "compute.sslCertificates.create",
     "compute.sslCertificates.createTagBinding",
     "compute.sslCertificates.delete",
@@ -719,6 +722,7 @@
     "compute.subnetworks.update",
     "compute.subnetworks.use",
     "compute.subnetworks.useExternalIp",
+    "compute.subnetworks.usePeerMigration",
     "compute.targetGrpcProxies.create",
     "compute.targetGrpcProxies.createTagBinding",
     "compute.targetGrpcProxies.delete",

diff --git a/roles/dataflow.serviceAgent b/roles/dataflow.serviceAgent
@@ -493,6 +493,8 @@
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
     "compute.networkEndpointGroups.use",
+    "compute.networkProfiles.get",
+    "compute.networkProfiles.list",
     "compute.networks.access",
     "compute.networks.addPeering",
     "compute.networks.create",
@@ -748,6 +750,7 @@
     "compute.subnetworks.update",
     "compute.subnetworks.use",
     "compute.subnetworks.useExternalIp",
+    "compute.subnetworks.usePeerMigration",
     "compute.targetGrpcProxies.create",
     "compute.targetGrpcProxies.createTagBinding",
     "compute.targetGrpcProxies.delete",

diff --git a/roles/dataplex.admin b/roles/dataplex.admin
@@ -53,6 +53,11 @@
     "dataplex.datascans.run",
     "dataplex.datascans.setIamPolicy",
     "dataplex.datascans.update",
+    "dataplex.encryptionConfig.create",
+    "dataplex.encryptionConfig.delete",
+    "dataplex.encryptionConfig.get",
+    "dataplex.encryptionConfig.list",
+    "dataplex.encryptionConfig.update",
     "dataplex.entities.create",
     "dataplex.entities.delete",
     "dataplex.entities.get",

diff --git a/roles/dataplex.encryptionAdmin b/roles/dataplex.encryptionAdmin
@@ -0,0 +1,14 @@
+{
+  "description": "Gives user permissions to manage encryption config.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "dataplex.encryptionConfig.create",
+    "dataplex.encryptionConfig.delete",
+    "dataplex.encryptionConfig.get",
+    "dataplex.encryptionConfig.list",
+    "dataplex.encryptionConfig.update"
+  ],
+  "name": "roles/dataplex.encryptionAdmin",
+  "stage": "BETA",
+  "title": "Dataplex Encryption Admin"
+}
diff --git a/roles/dataprep.serviceAgent b/roles/dataprep.serviceAgent
@@ -207,6 +207,8 @@
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
+    "compute.networkProfiles.get",
+    "compute.networkProfiles.list",
     "compute.networks.get",
     "compute.networks.getEffectiveFirewalls",
     "compute.networks.getRegionEffectiveFirewalls",
@@ -322,6 +324,7 @@
     "compute.snapshots.list",
     "compute.snapshots.listEffectiveTags",
     "compute.snapshots.listTagBindings",
+    "compute.spotAssistants.get",
     "compute.sslCertificates.get",
     "compute.sslCertificates.list",
     "compute.sslCertificates.listEffectiveTags",

diff --git a/roles/dialogflow.serviceAgent b/roles/dialogflow.serviceAgent
@@ -46,8 +46,11 @@
     "dialogflow.conversationDatasets.list",
     "dialogflow.conversationModels.get",
     "dialogflow.conversationModels.list",
+    "dialogflow.conversationProfiles.create",
+    "dialogflow.conversationProfiles.delete",
     "dialogflow.conversationProfiles.get",
     "dialogflow.conversationProfiles.list",
+    "dialogflow.conversationProfiles.update",
     "dialogflow.conversations.addPhoneNumber",
     "dialogflow.conversations.complete",
     "dialogflow.conversations.create",

diff --git a/roles/discoveryengine.admin b/roles/discoveryengine.admin
@@ -111,6 +111,9 @@
     "discoveryengine.siteSearchEngines.fetchDomainVerificationStatus",
     "discoveryengine.siteSearchEngines.get",
     "discoveryengine.siteSearchEngines.recrawlUris",
+    "discoveryengine.sitemaps.create",
+    "discoveryengine.sitemaps.delete",
+    "discoveryengine.sitemaps.fetch",
     "discoveryengine.suggestionDenyListEntries.import",
     "discoveryengine.suggestionDenyListEntries.purge",
     "discoveryengine.targetSites.batchCreate",

diff --git a/roles/dlp.orgdriver b/roles/dlp.orgdriver
@@ -139,12 +139,32 @@
     "aiplatform.tuningJobs.list",
     "alloydb.backups.createTagBinding",
     "alloydb.backups.deleteTagBinding",
+    "alloydb.backups.get",
+    "alloydb.backups.list",
     "alloydb.backups.listEffectiveTags",
     "alloydb.backups.listTagBindings",
     "alloydb.clusters.createTagBinding",
     "alloydb.clusters.deleteTagBinding",
+    "alloydb.clusters.export",
+    "alloydb.clusters.generateClientCertificate",
+    "alloydb.clusters.get",
+    "alloydb.clusters.list",
     "alloydb.clusters.listEffectiveTags",
     "alloydb.clusters.listTagBindings",
+    "alloydb.databases.list",
+    "alloydb.instances.connect",
+    "alloydb.instances.executeSql",
+    "alloydb.instances.get",
+    "alloydb.instances.list",
+    "alloydb.locations.get",
+    "alloydb.locations.list",
+    "alloydb.operations.get",
+    "alloydb.operations.list",
+    "alloydb.supportedDatabaseFlags.get",
+    "alloydb.supportedDatabaseFlags.list",
+    "alloydb.users.get",
+    "alloydb.users.list",
+    "alloydb.users.login",
     "artifactregistry.repositories.createTagBinding",
     "artifactregistry.repositories.deleteTagBinding",
     "artifactregistry.repositories.listEffectiveTags",
@@ -220,6 +240,7 @@
     "bigtable.instances.deleteTagBinding",
     "bigtable.instances.listEffectiveTags",
     "bigtable.instances.listTagBindings",
+    "cloudaicompanion.entitlements.get",
     "cloudasset.assets.analyzeIamPolicy",
     "cloudasset.assets.analyzeMove",
     "cloudasset.assets.analyzeOrgPolicy",
@@ -1151,6 +1172,14 @@
     "managedidentities.domains.listEffectiveTags",
     "managedidentities.domains.listTagBindings",
     "pubsub.topics.updateTag",
+    "recommender.alloydbClusterPerformanceInsights.get",
+    "recommender.alloydbClusterPerformanceInsights.list",
+    "recommender.alloydbClusterPerformanceRecommendations.get",
+    "recommender.alloydbClusterPerformanceRecommendations.list",
+    "recommender.alloydbClusterReliabilityInsights.get",
+    "recommender.alloydbClusterReliabilityInsights.list",
+    "recommender.alloydbClusterReliabilityRecommendations.get",
+    "recommender.alloydbClusterReliabilityRecommendations.list",
     "recommender.cloudAssetInsights.get",
     "recommender.cloudAssetInsights.list",
     "recommender.locations.get",

diff --git a/roles/dlp.projectdriver b/roles/dlp.projectdriver
@@ -139,12 +139,32 @@
     "aiplatform.tuningJobs.list",
     "alloydb.backups.createTagBinding",
     "alloydb.backups.deleteTagBinding",
+    "alloydb.backups.get",
+    "alloydb.backups.list",
     "alloydb.backups.listEffectiveTags",
     "alloydb.backups.listTagBindings",
     "alloydb.clusters.createTagBinding",
     "alloydb.clusters.deleteTagBinding",
+    "alloydb.clusters.export",
+    "alloydb.clusters.generateClientCertificate",
+    "alloydb.clusters.get",
+    "alloydb.clusters.list",
     "alloydb.clusters.listEffectiveTags",
     "alloydb.clusters.listTagBindings",
+    "alloydb.databases.list",
+    "alloydb.instances.connect",
+    "alloydb.instances.executeSql",
+    "alloydb.instances.get",
+    "alloydb.instances.list",
+    "alloydb.locations.get",
+    "alloydb.locations.list",
+    "alloydb.operations.get",
+    "alloydb.operations.list",
+    "alloydb.supportedDatabaseFlags.get",
+    "alloydb.supportedDatabaseFlags.list",
+    "alloydb.users.get",
+    "alloydb.users.list",
+    "alloydb.users.login",
     "artifactregistry.repositories.createTagBinding",
     "artifactregistry.repositories.deleteTagBinding",
     "artifactregistry.repositories.listEffectiveTags",
@@ -220,6 +240,7 @@
     "bigtable.instances.deleteTagBinding",
     "bigtable.instances.listEffectiveTags",
     "bigtable.instances.listTagBindings",
+    "cloudaicompanion.entitlements.get",
     "cloudasset.assets.analyzeIamPolicy",
     "cloudasset.assets.analyzeMove",
     "cloudasset.assets.analyzeOrgPolicy",
@@ -1151,6 +1172,14 @@
     "managedidentities.domains.listEffectiveTags",
     "managedidentities.domains.listTagBindings",
     "pubsub.topics.updateTag",
+    "recommender.alloydbClusterPerformanceInsights.get",
+    "recommender.alloydbClusterPerformanceInsights.list",
+    "recommender.alloydbClusterPerformanceRecommendations.get",
+    "recommender.alloydbClusterPerformanceRecommendations.list",
+    "recommender.alloydbClusterReliabilityInsights.get",
+    "recommender.alloydbClusterReliabilityInsights.list",
+    "recommender.alloydbClusterReliabilityRecommendations.get",
+    "recommender.alloydbClusterReliabilityRecommendations.list",
     "recommender.cloudAssetInsights.get",
     "recommender.cloudAssetInsights.list",
     "recommender.locations.get",