Fetch all roles

darkbitio · Aug 2, 2022 · 40bac59 · 40bac59
1 parent 6930771
commit 40bac59
Show file tree

Hide file tree

Showing 18 changed files with 127 additions and 13 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/artifactregistry.serviceAgent b/roles/artifactregistry.serviceAgent
@@ -3,7 +3,6 @@
   "etag": "AA==",
   "includedPermissions": [
     "artifactregistry.repositories.downloadArtifacts",
-    "artifactregistry.versions.delete",
     "pubsub.topics.publish"
   ],
   "name": "roles/artifactregistry.serviceAgent",

diff --git a/roles/backupdr.admin b/roles/backupdr.admin
@@ -0,0 +1,25 @@
+{
+  "description": "Full control of Backup and DR resources including ACL configuration via the management console.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "backupdr.locations.get",
+    "backupdr.locations.list",
+    "backupdr.managementServers.backupAccess",
+    "backupdr.managementServers.create",
+    "backupdr.managementServers.delete",
+    "backupdr.managementServers.get",
+    "backupdr.managementServers.getIamPolicy",
+    "backupdr.managementServers.list",
+    "backupdr.managementServers.manageInternalACL",
+    "backupdr.managementServers.setIamPolicy",
+    "backupdr.operations.cancel",
+    "backupdr.operations.delete",
+    "backupdr.operations.get",
+    "backupdr.operations.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/backupdr.admin",
+  "stage": "ALPHA",
+  "title": "Backup and DR Admin"
+}
diff --git a/roles/backupdr.user b/roles/backupdr.user
@@ -0,0 +1,17 @@
+{
+  "description": "Provides access to management console. Granular Backup and DR permissions depend on ACL configuration provided by Backup and DR admin within the management console.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "backupdr.managementServers.backupAccess",
+    "backupdr.managementServers.get",
+    "backupdr.managementServers.getIamPolicy",
+    "backupdr.managementServers.list",
+    "backupdr.operations.get",
+    "backupdr.operations.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/backupdr.user",
+  "stage": "GA",
+  "title": "Backup and DR User"
+}
diff --git a/roles/backupdr.viewer b/roles/backupdr.viewer
@@ -0,0 +1,18 @@
+{
+  "description": "Read-only access to Backup and DR resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "backupdr.locations.get",
+    "backupdr.locations.list",
+    "backupdr.managementServers.get",
+    "backupdr.managementServers.getIamPolicy",
+    "backupdr.managementServers.list",
+    "backupdr.operations.get",
+    "backupdr.operations.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/backupdr.viewer",
+  "stage": "GA",
+  "title": "Backup and DR Viewer"
+}
diff --git a/roles/billing.admin b/roles/billing.admin
@@ -39,6 +39,7 @@
     "cloudsupport.techCases.get",
     "cloudsupport.techCases.list",
     "cloudsupport.techCases.update",
+    "commerceoffercatalog.documents.get",
     "commerceoffercatalog.offers.get",
     "consumerprocurement.accounts.create",
     "consumerprocurement.accounts.delete",

diff --git a/roles/billing.viewer b/roles/billing.viewer
@@ -16,6 +16,7 @@
     "billing.resourceAssociations.list",
     "billing.subscriptions.get",
     "billing.subscriptions.list",
+    "commerceoffercatalog.documents.get",
     "commerceoffercatalog.offers.get",
     "consumerprocurement.accounts.get",
     "consumerprocurement.accounts.list",

diff --git a/roles/commerceoffercatalog.offersViewer b/roles/commerceoffercatalog.offersViewer
@@ -2,6 +2,7 @@
   "description": "Allows viewing offers",
   "etag": "AA==",
   "includedPermissions": [
+    "commerceoffercatalog.documents.get",
     "commerceoffercatalog.offers.get"
   ],
   "name": "roles/commerceoffercatalog.offersViewer",

diff --git a/roles/commercepricemanagement.readOnlyAdminUser b/roles/commercepricemanagement.readOnlyAdminUser
diff --git a/roles/consumerprocurement.orderAdmin b/roles/consumerprocurement.orderAdmin
@@ -2,6 +2,7 @@
   "description": "Allows managing purchases",
   "etag": "AA==",
   "includedPermissions": [
+    "commerceoffercatalog.documents.get",
     "commerceoffercatalog.offers.get",
     "consumerprocurement.accounts.create",
     "consumerprocurement.accounts.delete",

diff --git a/roles/consumerprocurement.orderViewer b/roles/consumerprocurement.orderViewer
@@ -2,6 +2,7 @@
   "description": "Allows inspecting purchases",
   "etag": "AA==",
   "includedPermissions": [
+    "commerceoffercatalog.documents.get",
     "commerceoffercatalog.offers.get",
     "consumerprocurement.accounts.get",
     "consumerprocurement.accounts.list",

diff --git a/roles/container.nodeServiceAccount b/roles/container.nodeServiceAccount
diff --git a/roles/editor b/roles/editor
@@ -740,6 +740,19 @@
     "autoscaling.sites.readRecommendations",
     "autoscaling.sites.writeMetrics",
     "autoscaling.sites.writeState",
+    "backupdr.locations.get",
+    "backupdr.locations.list",
+    "backupdr.managementServers.backupAccess",
+    "backupdr.managementServers.create",
+    "backupdr.managementServers.delete",
+    "backupdr.managementServers.get",
+    "backupdr.managementServers.getIamPolicy",
+    "backupdr.managementServers.list",
+    "backupdr.managementServers.manageInternalACL",
+    "backupdr.operations.cancel",
+    "backupdr.operations.delete",
+    "backupdr.operations.get",
+    "backupdr.operations.list",
     "baremetalsolution.instancequotas.list",
     "baremetalsolution.instances.attachVolume",
     "baremetalsolution.instances.create",
@@ -1455,6 +1468,7 @@
     "cloudvolumesgcp-api.netapp.com/volumes.get",
     "cloudvolumesgcp-api.netapp.com/volumes.list",
     "cloudvolumesgcp-api.netapp.com/volumes.update",
+    "commerceoffercatalog.documents.get",
     "commerceoffercatalog.offers.get",
     "commerceprice.privateoffers.cancel",
     "commerceprice.privateoffers.create",

diff --git a/roles/iam.securityAdmin b/roles/iam.securityAdmin
@@ -188,6 +188,11 @@
     "automlrecommendations.recommendations.list",
     "autoscaling.sites.getIamPolicy",
     "autoscaling.sites.setIamPolicy",
+    "backupdr.locations.list",
+    "backupdr.managementServers.getIamPolicy",
+    "backupdr.managementServers.list",
+    "backupdr.managementServers.setIamPolicy",
+    "backupdr.operations.list",
     "baremetalsolution.instancequotas.list",
     "baremetalsolution.instances.list",
     "baremetalsolution.luns.list",

diff --git a/roles/iam.securityReviewer b/roles/iam.securityReviewer
@@ -169,6 +169,10 @@
     "automlrecommendations.placements.list",
     "automlrecommendations.recommendations.list",
     "autoscaling.sites.getIamPolicy",
+    "backupdr.locations.list",
+    "backupdr.managementServers.getIamPolicy",
+    "backupdr.managementServers.list",
+    "backupdr.operations.list",
     "baremetalsolution.instancequotas.list",
     "baremetalsolution.instances.list",
     "baremetalsolution.luns.list",

diff --git a/roles/multiclusteringress.serviceAgent b/roles/multiclusteringress.serviceAgent
@@ -175,6 +175,7 @@
     "container.customResourceDefinitions.create",
     "container.customResourceDefinitions.delete",
     "container.customResourceDefinitions.get",
+    "container.customResourceDefinitions.list",
     "container.customResourceDefinitions.update",
     "container.deployments.create",
     "container.deployments.delete",

diff --git a/roles/owner b/roles/owner
@@ -773,6 +773,20 @@
     "autoscaling.sites.setIamPolicy",
     "autoscaling.sites.writeMetrics",
     "autoscaling.sites.writeState",
+    "backupdr.locations.get",
+    "backupdr.locations.list",
+    "backupdr.managementServers.backupAccess",
+    "backupdr.managementServers.create",
+    "backupdr.managementServers.delete",
+    "backupdr.managementServers.get",
+    "backupdr.managementServers.getIamPolicy",
+    "backupdr.managementServers.list",
+    "backupdr.managementServers.manageInternalACL",
+    "backupdr.managementServers.setIamPolicy",
+    "backupdr.operations.cancel",
+    "backupdr.operations.delete",
+    "backupdr.operations.get",
+    "backupdr.operations.list",
     "baremetalsolution.instancequotas.list",
     "baremetalsolution.instances.attachVolume",
     "baremetalsolution.instances.create",
@@ -1602,6 +1616,7 @@
     "cloudvolumesgcp-api.netapp.com/volumes.get",
     "cloudvolumesgcp-api.netapp.com/volumes.list",
     "cloudvolumesgcp-api.netapp.com/volumes.update",
+    "commerceoffercatalog.documents.get",
     "commerceoffercatalog.offers.get",
     "commerceprice.privateoffers.cancel",
     "commerceprice.privateoffers.create",

diff --git a/roles/viewer b/roles/viewer
@@ -354,6 +354,13 @@
     "automlrecommendations.recommendations.list",
     "autoscaling.sites.getIamPolicy",
     "autoscaling.sites.readRecommendations",
+    "backupdr.locations.get",
+    "backupdr.locations.list",
+    "backupdr.managementServers.get",
+    "backupdr.managementServers.getIamPolicy",
+    "backupdr.managementServers.list",
+    "backupdr.operations.get",
+    "backupdr.operations.list",
     "baremetalsolution.instancequotas.list",
     "baremetalsolution.instances.get",
     "baremetalsolution.instances.list",
@@ -736,6 +743,7 @@
     "cloudvolumesgcp-api.netapp.com/snapshots.list",
     "cloudvolumesgcp-api.netapp.com/volumes.get",
     "cloudvolumesgcp-api.netapp.com/volumes.list",
+    "commerceoffercatalog.documents.get",
     "commerceoffercatalog.offers.get",
     "commerceprice.privateoffers.get",
     "commerceprice.privateoffers.list",