Fetch all roles

darkbitio · Sep 13, 2024 · 1b7e242 · 1b7e242
1 parent a095329
commit 1b7e242
Show file tree

Hide file tree

Showing 19 changed files with 246 additions and 67 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/apigee.admin b/roles/apigee.admin
@@ -55,7 +55,10 @@
     "apigee.deployments.create",
     "apigee.deployments.delete",
     "apigee.deployments.get",
+    "apigee.deployments.getIamPolicy",
+    "apigee.deployments.invoke",
     "apigee.deployments.list",
+    "apigee.deployments.setIamPolicy",
     "apigee.deployments.update",
     "apigee.developerappattributes.createOrUpdateAll",
     "apigee.developerappattributes.delete",

diff --git a/roles/apigee.deploymentInvoker b/roles/apigee.deploymentInvoker
@@ -0,0 +1,7 @@
+{
+  "description": "Invoker of deployments in the apigee runtime",
+  "etag": "AA==",
+  "name": "roles/apigee.deploymentInvoker",
+  "stage": "ALPHA",
+  "title": "Apigee Deployment Invoker"
+}
diff --git a/roles/automlrecommendations.serviceAgent b/roles/automlrecommendations.serviceAgent
@@ -41,8 +41,6 @@
     "monitoring.notificationChannelDescriptors.list",
     "monitoring.notificationChannels.get",
     "monitoring.notificationChannels.list",
-    "monitoring.publicWidgets.get",
-    "monitoring.publicWidgets.list",
     "monitoring.services.get",
     "monitoring.services.list",
     "monitoring.slos.get",

diff --git a/roles/cloudsql.studioUser b/roles/cloudsql.studioUser
@@ -0,0 +1,14 @@
+{
+  "description": "Role allowing access to Cloud SQL Studio",
+  "etag": "AA==",
+  "includedPermissions": [
+    "cloudsql.databases.list",
+    "cloudsql.instances.executeSql",
+    "cloudsql.instances.get",
+    "cloudsql.instances.login",
+    "cloudsql.users.list"
+  ],
+  "name": "roles/cloudsql.studioUser",
+  "stage": "ALPHA",
+  "title": "Cloud SQL Studio User"
+}
diff --git a/roles/compute.admin b/roles/compute.admin
@@ -86,7 +86,6 @@
     "compute.externalVpnGateways.listTagBindings",
     "compute.externalVpnGateways.setLabels",
     "compute.externalVpnGateways.use",
-    "compute.firewallPolicies.addAssociation",
     "compute.firewallPolicies.cloneRules",
     "compute.firewallPolicies.copyRules",
     "compute.firewallPolicies.create",
@@ -99,7 +98,6 @@
     "compute.firewallPolicies.listEffectiveTags",
     "compute.firewallPolicies.listTagBindings",
     "compute.firewallPolicies.move",
-    "compute.firewallPolicies.removeAssociation",
     "compute.firewallPolicies.setIamPolicy",
     "compute.firewallPolicies.update",
     "compute.firewallPolicies.use",
@@ -244,9 +242,13 @@
     "compute.instanceGroupManagers.update",
     "compute.instanceGroupManagers.use",
     "compute.instanceGroups.create",
+    "compute.instanceGroups.createTagBinding",
     "compute.instanceGroups.delete",
+    "compute.instanceGroups.deleteTagBinding",
     "compute.instanceGroups.get",
     "compute.instanceGroups.list",
+    "compute.instanceGroups.listEffectiveTags",
+    "compute.instanceGroups.listTagBindings",
     "compute.instanceGroups.update",
     "compute.instanceGroups.use",
     "compute.instanceSettings.get",
@@ -259,7 +261,6 @@
     "compute.instanceTemplates.setIamPolicy",
     "compute.instanceTemplates.useReadOnly",
     "compute.instances.addAccessConfig",
-    "compute.instances.addMaintenancePolicies",
     "compute.instances.addResourcePolicies",
     "compute.instances.attachDisk",
     "compute.instances.create",
@@ -283,7 +284,6 @@
     "compute.instances.osAdminLogin",
     "compute.instances.osLogin",
     "compute.instances.pscInterfaceCreate",
-    "compute.instances.removeMaintenancePolicies",
     "compute.instances.removeResourcePolicies",
     "compute.instances.reset",
     "compute.instances.resume",
@@ -458,9 +458,13 @@
     "compute.organizations.setSecurityPolicy",
     "compute.oslogin.updateExternalUser",
     "compute.packetMirrorings.create",
+    "compute.packetMirrorings.createTagBinding",
     "compute.packetMirrorings.delete",
+    "compute.packetMirrorings.deleteTagBinding",
     "compute.packetMirrorings.get",
     "compute.packetMirrorings.list",
+    "compute.packetMirrorings.listEffectiveTags",
+    "compute.packetMirrorings.listTagBindings",
     "compute.packetMirrorings.update",
     "compute.projects.get",
     "compute.projects.setCloudArmorTier",
@@ -567,10 +571,14 @@
     "compute.regionSslCertificates.listEffectiveTags",
     "compute.regionSslCertificates.listTagBindings",
     "compute.regionSslPolicies.create",
+    "compute.regionSslPolicies.createTagBinding",
     "compute.regionSslPolicies.delete",
+    "compute.regionSslPolicies.deleteTagBinding",
     "compute.regionSslPolicies.get",
     "compute.regionSslPolicies.list",
     "compute.regionSslPolicies.listAvailableFeatures",
+    "compute.regionSslPolicies.listEffectiveTags",
+    "compute.regionSslPolicies.listTagBindings",
     "compute.regionSslPolicies.update",
     "compute.regionSslPolicies.use",
     "compute.regionTargetHttpProxies.create",
@@ -597,9 +605,13 @@
     "compute.regionTargetHttpsProxies.update",
     "compute.regionTargetHttpsProxies.use",
     "compute.regionTargetTcpProxies.create",
+    "compute.regionTargetTcpProxies.createTagBinding",
     "compute.regionTargetTcpProxies.delete",
+    "compute.regionTargetTcpProxies.deleteTagBinding",
     "compute.regionTargetTcpProxies.get",
     "compute.regionTargetTcpProxies.list",
+    "compute.regionTargetTcpProxies.listEffectiveTags",
+    "compute.regionTargetTcpProxies.listTagBindings",
     "compute.regionTargetTcpProxies.use",
     "compute.regionUrlMaps.create",
     "compute.regionUrlMaps.createTagBinding",
@@ -736,9 +748,13 @@
     "compute.subnetworks.use",
     "compute.subnetworks.useExternalIp",
     "compute.targetGrpcProxies.create",
+    "compute.targetGrpcProxies.createTagBinding",
     "compute.targetGrpcProxies.delete",
+    "compute.targetGrpcProxies.deleteTagBinding",
     "compute.targetGrpcProxies.get",
     "compute.targetGrpcProxies.list",
+    "compute.targetGrpcProxies.listEffectiveTags",
+    "compute.targetGrpcProxies.listTagBindings",
     "compute.targetGrpcProxies.update",
     "compute.targetGrpcProxies.use",
     "compute.targetHttpProxies.create",

diff --git a/roles/compute.orgSecurityPolicyUser b/roles/compute.orgSecurityPolicyUser
@@ -2,12 +2,10 @@
   "description": "View or use Compute Engine Security Policies to associate with the organization or folders.",
   "etag": "AA==",
   "includedPermissions": [
-    "compute.firewallPolicies.addAssociation",
     "compute.firewallPolicies.get",
     "compute.firewallPolicies.list",
     "compute.firewallPolicies.listEffectiveTags",
     "compute.firewallPolicies.listTagBindings",
-    "compute.firewallPolicies.removeAssociation",
     "compute.firewallPolicies.use",
     "compute.globalOperations.get",
     "compute.globalOperations.getIamPolicy",

diff --git a/roles/discoveryengine.admin b/roles/discoveryengine.admin
@@ -39,6 +39,7 @@
     "discoveryengine.dataStores.update",
     "discoveryengine.documentProcessingConfigs.get",
     "discoveryengine.documentProcessingConfigs.update",
+    "discoveryengine.documents.batchGetDocumentsMetadata",
     "discoveryengine.documents.create",
     "discoveryengine.documents.delete",
     "discoveryengine.documents.get",

diff --git a/roles/dlp.projectdriver b/roles/dlp.projectdriver
@@ -720,6 +720,10 @@
     "compute.instanceGroupManagers.deleteTagBinding",
     "compute.instanceGroupManagers.listEffectiveTags",
     "compute.instanceGroupManagers.listTagBindings",
+    "compute.instanceGroups.createTagBinding",
+    "compute.instanceGroups.deleteTagBinding",
+    "compute.instanceGroups.listEffectiveTags",
+    "compute.instanceGroups.listTagBindings",
     "compute.instances.createTagBinding",
     "compute.instances.deleteTagBinding",
     "compute.instances.listEffectiveTags",
@@ -740,6 +744,10 @@
     "compute.networks.deleteTagBinding",
     "compute.networks.listEffectiveTags",
     "compute.networks.listTagBindings",
+    "compute.packetMirrorings.createTagBinding",
+    "compute.packetMirrorings.deleteTagBinding",
+    "compute.packetMirrorings.listEffectiveTags",
+    "compute.packetMirrorings.listTagBindings",
     "compute.regionBackendServices.createTagBinding",
     "compute.regionBackendServices.deleteTagBinding",
     "compute.regionBackendServices.listEffectiveTags",
@@ -764,6 +772,10 @@
     "compute.regionSslCertificates.deleteTagBinding",
     "compute.regionSslCertificates.listEffectiveTags",
     "compute.regionSslCertificates.listTagBindings",
+    "compute.regionSslPolicies.createTagBinding",
+    "compute.regionSslPolicies.deleteTagBinding",
+    "compute.regionSslPolicies.listEffectiveTags",
+    "compute.regionSslPolicies.listTagBindings",
     "compute.regionTargetHttpProxies.createTagBinding",
     "compute.regionTargetHttpProxies.deleteTagBinding",
     "compute.regionTargetHttpProxies.listEffectiveTags",
@@ -772,6 +784,10 @@
     "compute.regionTargetHttpsProxies.deleteTagBinding",
     "compute.regionTargetHttpsProxies.listEffectiveTags",
     "compute.regionTargetHttpsProxies.listTagBindings",
+    "compute.regionTargetTcpProxies.createTagBinding",
+    "compute.regionTargetTcpProxies.deleteTagBinding",
+    "compute.regionTargetTcpProxies.listEffectiveTags",
+    "compute.regionTargetTcpProxies.listTagBindings",
     "compute.regionUrlMaps.createTagBinding",
     "compute.regionUrlMaps.deleteTagBinding",
     "compute.regionUrlMaps.listEffectiveTags",
@@ -804,6 +820,10 @@
     "compute.subnetworks.deleteTagBinding",
     "compute.subnetworks.listEffectiveTags",
     "compute.subnetworks.listTagBindings",
+    "compute.targetGrpcProxies.createTagBinding",
+    "compute.targetGrpcProxies.deleteTagBinding",
+    "compute.targetGrpcProxies.listEffectiveTags",
+    "compute.targetGrpcProxies.listTagBindings",
     "compute.targetHttpProxies.createTagBinding",
     "compute.targetHttpProxies.deleteTagBinding",
     "compute.targetHttpProxies.listEffectiveTags",

diff --git a/roles/monitoring.editor b/roles/monitoring.editor
@@ -33,11 +33,6 @@
     "monitoring.notificationChannels.sendVerificationCode",
     "monitoring.notificationChannels.update",
     "monitoring.notificationChannels.verify",
-    "monitoring.publicWidgets.create",
-    "monitoring.publicWidgets.delete",
-    "monitoring.publicWidgets.get",
-    "monitoring.publicWidgets.list",
-    "monitoring.publicWidgets.update",
     "monitoring.services.create",
     "monitoring.services.delete",
     "monitoring.services.get",

diff --git a/roles/monitoring.viewer b/roles/monitoring.viewer
@@ -17,8 +17,6 @@
     "monitoring.notificationChannelDescriptors.list",
     "monitoring.notificationChannels.get",
     "monitoring.notificationChannels.list",
-    "monitoring.publicWidgets.get",
-    "monitoring.publicWidgets.list",
     "monitoring.services.get",
     "monitoring.services.list",
     "monitoring.slos.get",

diff --git a/roles/netapp.admin b/roles/netapp.admin
@@ -29,6 +29,12 @@
     "netapp.kmsConfigs.list",
     "netapp.kmsConfigs.update",
     "netapp.kmsConfigs.verify",
+    "netapp.locations.get",
+    "netapp.locations.list",
+    "netapp.operations.cancel",
+    "netapp.operations.delete",
+    "netapp.operations.get",
+    "netapp.operations.list",
     "netapp.replications.create",
     "netapp.replications.delete",
     "netapp.replications.get",
@@ -46,6 +52,7 @@
     "netapp.storagePools.delete",
     "netapp.storagePools.get",
     "netapp.storagePools.list",
+    "netapp.storagePools.switch",
     "netapp.storagePools.update",
     "netapp.volumes.create",
     "netapp.volumes.delete",

diff --git a/roles/notebooks.admin b/roles/notebooks.admin
@@ -98,6 +98,8 @@
     "compute.instanceGroupManagers.listTagBindings",
     "compute.instanceGroups.get",
     "compute.instanceGroups.list",
+    "compute.instanceGroups.listEffectiveTags",
+    "compute.instanceGroups.listTagBindings",
     "compute.instanceSettings.get",
     "compute.instanceTemplates.get",
     "compute.instanceTemplates.getIamPolicy",
@@ -171,6 +173,8 @@
     "compute.organizations.listAssociations",
     "compute.packetMirrorings.get",
     "compute.packetMirrorings.list",
+    "compute.packetMirrorings.listEffectiveTags",
+    "compute.packetMirrorings.listTagBindings",
     "compute.projects.get",
     "compute.publicAdvertisedPrefixes.get",
     "compute.publicAdvertisedPrefixes.list",
@@ -212,6 +216,8 @@
     "compute.regionSslPolicies.get",
     "compute.regionSslPolicies.list",
     "compute.regionSslPolicies.listAvailableFeatures",
+    "compute.regionSslPolicies.listEffectiveTags",
+    "compute.regionSslPolicies.listTagBindings",
     "compute.regionTargetHttpProxies.get",
     "compute.regionTargetHttpProxies.list",
     "compute.regionTargetHttpProxies.listEffectiveTags",
@@ -222,6 +228,8 @@
     "compute.regionTargetHttpsProxies.listTagBindings",
     "compute.regionTargetTcpProxies.get",
     "compute.regionTargetTcpProxies.list",
+    "compute.regionTargetTcpProxies.listEffectiveTags",
+    "compute.regionTargetTcpProxies.listTagBindings",
     "compute.regionUrlMaps.get",
     "compute.regionUrlMaps.list",
     "compute.regionUrlMaps.listEffectiveTags",
@@ -278,6 +286,8 @@
     "compute.subnetworks.listTagBindings",
     "compute.targetGrpcProxies.get",
     "compute.targetGrpcProxies.list",
+    "compute.targetGrpcProxies.listEffectiveTags",
+    "compute.targetGrpcProxies.listTagBindings",
     "compute.targetHttpProxies.get",
     "compute.targetHttpProxies.list",
     "compute.targetHttpProxies.listEffectiveTags",

diff --git a/roles/osconfig.admin b/roles/osconfig.admin
@@ -0,0 +1,46 @@
+{
+  "description": "Full access to OS Config resources",
+  "etag": "AA==",
+  "includedPermissions": [
+    "osconfig.guestPolicies.create",
+    "osconfig.guestPolicies.delete",
+    "osconfig.guestPolicies.get",
+    "osconfig.guestPolicies.list",
+    "osconfig.guestPolicies.update",
+    "osconfig.instanceOSPoliciesCompliances.get",
+    "osconfig.instanceOSPoliciesCompliances.list",
+    "osconfig.inventories.get",
+    "osconfig.inventories.list",
+    "osconfig.osPolicyAssignmentReports.get",
+    "osconfig.osPolicyAssignmentReports.list",
+    "osconfig.osPolicyAssignmentReports.searchSummaries",
+    "osconfig.osPolicyAssignments.create",
+    "osconfig.osPolicyAssignments.delete",
+    "osconfig.osPolicyAssignments.get",
+    "osconfig.osPolicyAssignments.list",
+    "osconfig.osPolicyAssignments.searchPolicies",
+    "osconfig.osPolicyAssignments.update",
+    "osconfig.patchDeployments.create",
+    "osconfig.patchDeployments.delete",
+    "osconfig.patchDeployments.execute",
+    "osconfig.patchDeployments.get",
+    "osconfig.patchDeployments.list",
+    "osconfig.patchDeployments.pause",
+    "osconfig.patchDeployments.resume",
+    "osconfig.patchDeployments.update",
+    "osconfig.patchJobs.exec",
+    "osconfig.patchJobs.get",
+    "osconfig.patchJobs.list",
+    "osconfig.projectFeatureSettings.get",
+    "osconfig.projectFeatureSettings.update",
+    "osconfig.upgradeReports.get",
+    "osconfig.upgradeReports.getSummary",
+    "osconfig.upgradeReports.list",
+    "osconfig.upgradeReports.searchSummaries",
+    "osconfig.vulnerabilityReports.get",
+    "osconfig.vulnerabilityReports.list"
+  ],
+  "name": "roles/osconfig.admin",
+  "stage": "ALPHA",
+  "title": "OS Config Admin"
+}
diff --git a/roles/osconfig.viewer b/roles/osconfig.viewer
@@ -0,0 +1,32 @@
+{
+  "description": "Readonly access to OS Config resources",
+  "etag": "AA==",
+  "includedPermissions": [
+    "osconfig.guestPolicies.get",
+    "osconfig.guestPolicies.list",
+    "osconfig.instanceOSPoliciesCompliances.get",
+    "osconfig.instanceOSPoliciesCompliances.list",
+    "osconfig.inventories.get",
+    "osconfig.inventories.list",
+    "osconfig.osPolicyAssignmentReports.get",
+    "osconfig.osPolicyAssignmentReports.list",
+    "osconfig.osPolicyAssignmentReports.searchSummaries",
+    "osconfig.osPolicyAssignments.get",
+    "osconfig.osPolicyAssignments.list",
+    "osconfig.osPolicyAssignments.searchPolicies",
+    "osconfig.patchDeployments.get",
+    "osconfig.patchDeployments.list",
+    "osconfig.patchJobs.get",
+    "osconfig.patchJobs.list",
+    "osconfig.projectFeatureSettings.get",
+    "osconfig.upgradeReports.get",
+    "osconfig.upgradeReports.getSummary",
+    "osconfig.upgradeReports.list",
+    "osconfig.upgradeReports.searchSummaries",
+    "osconfig.vulnerabilityReports.get",
+    "osconfig.vulnerabilityReports.list"
+  ],
+  "name": "roles/osconfig.viewer",
+  "stage": "ALPHA",
+  "title": "OS Config Viewer"
+}