Fetch all roles

darkbitio · Jul 24, 2024 · 35f82fe · 35f82fe
1 parent e23716e
commit 35f82fe
Show file tree

Hide file tree

Showing 8 changed files with 72 additions and 3 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/dataplex.entryGroupImporter b/roles/dataplex.entryGroupImporter
@@ -0,0 +1,12 @@
+{
+  "description": "Grants access to import this entry group for Metadata Job processing.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "dataplex.entryGroups.get",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/dataplex.entryGroupImporter",
+  "stage": "ALPHA",
+  "title": "Dataplex Entry Group Importer"
+}
diff --git a/roles/dataplex.metadataJobOwner b/roles/dataplex.metadataJobOwner
@@ -0,0 +1,12 @@
+{
+  "description": "Grants access to creating and managing Metadata Jobs. Does not give the right to create/modify Entry Groups.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "dataplex.operations.get",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/dataplex.metadataJobOwner",
+  "stage": "ALPHA",
+  "title": "Dataplex Metadata Job Owner"
+}
diff --git a/roles/dataplex.metadataJobViewer b/roles/dataplex.metadataJobViewer
@@ -0,0 +1,12 @@
+{
+  "description": "Read access to Metadata Job resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "dataplex.operations.get",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/dataplex.metadataJobViewer",
+  "stage": "ALPHA",
+  "title": "Dataplex Metadata Job Viewer"
+}
diff --git a/roles/dataproc.hubAgent b/roles/dataproc.hubAgent
@@ -48,6 +48,7 @@
     "logging.usage.get",
     "logging.views.get",
     "logging.views.list",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "storage.buckets.get",

diff --git a/roles/logging.configWriter b/roles/logging.configWriter
@@ -48,6 +48,7 @@
     "logging.views.getIamPolicy",
     "logging.views.list",
     "logging.views.update",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/memorystore.serviceAgent b/roles/memorystore.serviceAgent
@@ -0,0 +1,26 @@
+{
+  "description": "Gives Cloud Memorystore service account access to managed resource",
+  "etag": "AA==",
+  "includedPermissions": [
+    "compute.globalOperations.get",
+    "compute.networks.addPeering",
+    "compute.networks.get",
+    "compute.networks.removePeering",
+    "compute.projects.get",
+    "compute.routes.get",
+    "compute.routes.list",
+    "compute.subnetworks.get",
+    "compute.subnetworks.list",
+    "monitoring.metricDescriptors.create",
+    "monitoring.metricDescriptors.get",
+    "monitoring.metricDescriptors.list",
+    "monitoring.monitoredResourceDescriptors.get",
+    "monitoring.monitoredResourceDescriptors.list",
+    "monitoring.timeSeries.create",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/memorystore.serviceAgent",
+  "stage": "ALPHA",
+  "title": "Cloud Memorystore Service Agent"
+}
diff --git a/roles/telcoautomation.admin b/roles/telcoautomation.admin
@@ -27,6 +27,7 @@
     "logging.views.get",
     "logging.views.list",
     "monitoring.timeSeries.list",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "serviceusage.quotas.get",
     "serviceusage.quotas.update",