Fetch all roles

darkbitio · Oct 10, 2024 · 3a80c11 · 3a80c11
1 parent 532c5ee
commit 3a80c11
Show file tree

Hide file tree

Showing 34 changed files with 276 additions and 86 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/backupdr.backupvaultLister b/roles/backupdr.backupvaultLister
@@ -5,6 +5,6 @@
     "backupdr.backupVaults.list"
   ],
   "name": "roles/backupdr.backupvaultLister",
-  "stage": "BETA",
+  "stage": "GA",
   "title": "Backup and DR Backup Vault Lister"
 }
diff --git a/roles/chronicle.soarServiceAgent b/roles/chronicle.soarServiceAgent
@@ -3,6 +3,8 @@
   "etag": "AA==",
   "includedPermissions": [
     "cloudasset.assets.analyzeIamPolicy",
+    "cloudasset.assets.exportIamPolicy",
+    "cloudasset.assets.exportResource",
     "cloudasset.assets.searchAllIamPolicies",
     "cloudasset.assets.searchAllResources",
     "compute.firewalls.get",

diff --git a/roles/cloudcontrolspartner.admin b/roles/cloudcontrolspartner.admin
@@ -3,6 +3,8 @@
   "etag": "AA==",
   "includedPermissions": [
     "cloudcontrolspartner.accessapprovalrequests.list",
+    "cloudcontrolspartner.customers.create",
+    "cloudcontrolspartner.customers.delete",
     "cloudcontrolspartner.customers.get",
     "cloudcontrolspartner.customers.list",
     "cloudcontrolspartner.ekmconnections.get",

diff --git a/roles/cloudcontrolspartner.supportCaseServiceAgent b/roles/cloudcontrolspartner.supportCaseServiceAgent
@@ -0,0 +1,10 @@
+{
+  "description": "Gives the Partner Console service account access to support cases for workloads associated with a partner.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "cloudsupport.techCases.get"
+  ],
+  "name": "roles/cloudcontrolspartner.supportCaseServiceAgent",
+  "stage": "ALPHA",
+  "title": "Cloud Controls Partner Support Case Service Agent"
+}
diff --git a/roles/cloudfunctions.admin b/roles/cloudfunctions.admin
@@ -37,16 +37,46 @@
     "eventarc.channels.setIamPolicy",
     "eventarc.channels.undelete",
     "eventarc.channels.update",
+    "eventarc.enrollments.create",
+    "eventarc.enrollments.delete",
+    "eventarc.enrollments.get",
+    "eventarc.enrollments.getIamPolicy",
+    "eventarc.enrollments.list",
+    "eventarc.enrollments.setIamPolicy",
+    "eventarc.enrollments.update",
     "eventarc.events.receiveAuditLogWritten",
     "eventarc.events.receiveEvent",
+    "eventarc.googleApiSources.create",
+    "eventarc.googleApiSources.delete",
+    "eventarc.googleApiSources.get",
+    "eventarc.googleApiSources.getIamPolicy",
+    "eventarc.googleApiSources.list",
+    "eventarc.googleApiSources.setIamPolicy",
+    "eventarc.googleApiSources.update",
     "eventarc.googleChannelConfigs.get",
     "eventarc.googleChannelConfigs.update",
     "eventarc.locations.get",
     "eventarc.locations.list",
+    "eventarc.messageBuses.create",
+    "eventarc.messageBuses.delete",
+    "eventarc.messageBuses.get",
+    "eventarc.messageBuses.getIamPolicy",
+    "eventarc.messageBuses.list",
+    "eventarc.messageBuses.publish",
+    "eventarc.messageBuses.setIamPolicy",
+    "eventarc.messageBuses.update",
+    "eventarc.messageBuses.use",
     "eventarc.operations.cancel",
     "eventarc.operations.delete",
     "eventarc.operations.get",
     "eventarc.operations.list",
+    "eventarc.pipelines.create",
+    "eventarc.pipelines.delete",
+    "eventarc.pipelines.get",
+    "eventarc.pipelines.getIamPolicy",
+    "eventarc.pipelines.list",
+    "eventarc.pipelines.setIamPolicy",
+    "eventarc.pipelines.update",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.create",

diff --git a/roles/cloudtpu.serviceAgent b/roles/cloudtpu.serviceAgent
@@ -335,7 +335,6 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -369,11 +368,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.access",
     "compute.networks.addPeering",

diff --git a/roles/composer.serviceAgent b/roles/composer.serviceAgent
@@ -425,7 +425,6 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -459,11 +458,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.access",
     "compute.networks.addPeering",
@@ -1297,6 +1294,7 @@
     "iam.serviceAccounts.actAs",
     "iam.serviceAccounts.get",
     "iam.serviceAccounts.getAccessToken",
+    "iam.serviceAccounts.getOpenIdToken",
     "iam.serviceAccounts.list",
     "logging.buckets.create",
     "logging.buckets.createTagBinding",
@@ -1344,6 +1342,8 @@
     "logging.sinks.get",
     "logging.sinks.list",
     "logging.sinks.update",
+    "logging.sqlAlerts.create",
+    "logging.sqlAlerts.update",
     "logging.views.create",
     "logging.views.delete",
     "logging.views.get",

diff --git a/roles/compute.admin b/roles/compute.admin
@@ -364,7 +364,6 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -403,11 +402,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.access",
     "compute.networks.addPeering",
@@ -676,13 +673,11 @@
     "compute.securityPolicies.delete",
     "compute.securityPolicies.deleteTagBinding",
     "compute.securityPolicies.get",
-    "compute.securityPolicies.getIamPolicy",
     "compute.securityPolicies.list",
     "compute.securityPolicies.listEffectiveTags",
     "compute.securityPolicies.listTagBindings",
     "compute.securityPolicies.move",
     "compute.securityPolicies.removeAssociation",
-    "compute.securityPolicies.setIamPolicy",
     "compute.securityPolicies.setLabels",
     "compute.securityPolicies.update",
     "compute.securityPolicies.use",

diff --git a/roles/compute.instanceAdmin b/roles/compute.instanceAdmin
@@ -157,11 +157,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.get",
     "compute.networks.list",

diff --git a/roles/compute.instanceAdmin.v1 b/roles/compute.instanceAdmin.v1
@@ -222,7 +222,6 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -249,11 +248,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.get",
     "compute.networks.list",

diff --git a/roles/compute.orgSecurityPolicyAdmin b/roles/compute.orgSecurityPolicyAdmin
@@ -29,13 +29,11 @@
     "compute.securityPolicies.delete",
     "compute.securityPolicies.deleteTagBinding",
     "compute.securityPolicies.get",
-    "compute.securityPolicies.getIamPolicy",
     "compute.securityPolicies.list",
     "compute.securityPolicies.listEffectiveTags",
     "compute.securityPolicies.listTagBindings",
     "compute.securityPolicies.move",
     "compute.securityPolicies.removeAssociation",
-    "compute.securityPolicies.setIamPolicy",
     "compute.securityPolicies.update",
     "compute.securityPolicies.use",
     "resourcemanager.projects.get",

diff --git a/roles/compute.storageAdmin b/roles/compute.storageAdmin
@@ -57,7 +57,6 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",

diff --git a/roles/container.serviceAgent b/roles/container.serviceAgent
@@ -384,7 +384,6 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -418,11 +417,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.access",
     "compute.networks.addPeering",
@@ -642,13 +639,11 @@
     "compute.securityPolicies.delete",
     "compute.securityPolicies.deleteTagBinding",
     "compute.securityPolicies.get",
-    "compute.securityPolicies.getIamPolicy",
     "compute.securityPolicies.list",
     "compute.securityPolicies.listEffectiveTags",
     "compute.securityPolicies.listTagBindings",
     "compute.securityPolicies.move",
     "compute.securityPolicies.removeAssociation",
-    "compute.securityPolicies.setIamPolicy",
     "compute.securityPolicies.setLabels",
     "compute.securityPolicies.update",
     "compute.securityPolicies.use",

diff --git a/roles/dataprocrm.nodeServiceAgent b/roles/dataprocrm.nodeServiceAgent
@@ -0,0 +1,20 @@
+{
+  "description": "Dataproc Resource Manager Node Service Agent used to run managed resources in user project with restricted permissions.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "dataprocrm.nodes.get",
+    "dataprocrm.nodes.heartbeat",
+    "dataprocrm.nodes.mintOAuthToken",
+    "logging.logEntries.create",
+    "logging.logEntries.route",
+    "monitoring.metricDescriptors.create",
+    "monitoring.metricDescriptors.get",
+    "monitoring.metricDescriptors.list",
+    "monitoring.monitoredResourceDescriptors.get",
+    "monitoring.monitoredResourceDescriptors.list",
+    "monitoring.timeSeries.create"
+  ],
+  "name": "roles/dataprocrm.nodeServiceAgent",
+  "stage": "GA",
+  "title": "Dataproc Resource Manager Node Service Agent"
+}
diff --git a/roles/editor b/roles/editor
@@ -1996,6 +1996,8 @@
     "cloudconfig.configs.get",
     "cloudconfig.configs.update",
     "cloudcontrolspartner.accessapprovalrequests.list",
+    "cloudcontrolspartner.customers.create",
+    "cloudcontrolspartner.customers.delete",
     "cloudcontrolspartner.customers.get",
     "cloudcontrolspartner.customers.list",
     "cloudcontrolspartner.ekmconnections.get",
@@ -2843,7 +2845,6 @@
     "compute.licenseCodes.getIamPolicy",
     "compute.licenseCodes.list",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -2875,7 +2876,6 @@
     "compute.networkEndpointGroups.delete",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
@@ -3102,7 +3102,6 @@
     "compute.securityPolicies.create",
     "compute.securityPolicies.delete",
     "compute.securityPolicies.get",
-    "compute.securityPolicies.getIamPolicy",
     "compute.securityPolicies.list",
     "compute.securityPolicies.listEffectiveTags",
     "compute.securityPolicies.listTagBindings",
@@ -5280,15 +5279,41 @@
     "eventarc.channels.publish",
     "eventarc.channels.undelete",
     "eventarc.channels.update",
+    "eventarc.enrollments.create",
+    "eventarc.enrollments.delete",
+    "eventarc.enrollments.get",
+    "eventarc.enrollments.getIamPolicy",
+    "eventarc.enrollments.list",
+    "eventarc.enrollments.update",
     "eventarc.events.receiveEvent",
+    "eventarc.googleApiSources.create",
+    "eventarc.googleApiSources.delete",
+    "eventarc.googleApiSources.get",
+    "eventarc.googleApiSources.getIamPolicy",
+    "eventarc.googleApiSources.list",
+    "eventarc.googleApiSources.update",
     "eventarc.googleChannelConfigs.get",
     "eventarc.googleChannelConfigs.update",
     "eventarc.locations.get",
     "eventarc.locations.list",
+    "eventarc.messageBuses.create",
+    "eventarc.messageBuses.delete",
+    "eventarc.messageBuses.get",
+    "eventarc.messageBuses.getIamPolicy",
+    "eventarc.messageBuses.list",
+    "eventarc.messageBuses.publish",
+    "eventarc.messageBuses.update",
+    "eventarc.messageBuses.use",
     "eventarc.operations.cancel",
     "eventarc.operations.delete",
     "eventarc.operations.get",
     "eventarc.operations.list",
+    "eventarc.pipelines.create",
+    "eventarc.pipelines.delete",
+    "eventarc.pipelines.get",
+    "eventarc.pipelines.getIamPolicy",
+    "eventarc.pipelines.list",
+    "eventarc.pipelines.update",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.create",
@@ -6049,6 +6074,7 @@
     "integrations.certificates.get",
     "integrations.certificates.list",
     "integrations.certificates.update",
+    "integrations.executions.cancel",
     "integrations.executions.get",
     "integrations.executions.list",
     "integrations.executions.replay",
@@ -6062,6 +6088,7 @@
     "integrations.integrations.create",
     "integrations.integrations.delete",
     "integrations.integrations.deploy",
+    "integrations.integrations.generateOpenApiSpec",
     "integrations.integrations.get",
     "integrations.integrations.invoke",
     "integrations.integrations.list",
@@ -6098,6 +6125,12 @@
     "integrations.suspensions.lift",
     "integrations.suspensions.list",
     "integrations.suspensions.resolve",
+    "integrations.testCases.create",
+    "integrations.testCases.delete",
+    "integrations.testCases.get",
+    "integrations.testCases.invoke",
+    "integrations.testCases.list",
+    "integrations.testCases.update",
     "issuerswitch.accountManagerTransactions.list",
     "issuerswitch.accountManagerTransactions.update",
     "issuerswitch.complaintTransactions.list",
@@ -6214,6 +6247,8 @@
     "logging.settings.update",
     "logging.sinks.get",
     "logging.sinks.list",
+    "logging.sqlAlerts.create",
+    "logging.sqlAlerts.update",
     "logging.usage.get",
     "logging.views.create",
     "logging.views.delete",