Fetch all roles

darkbitio · Dec 13, 2024 · 54c48bf · 54c48bf
1 parent 375e8c7
commit 54c48bf
Show file tree

Hide file tree

Showing 67 changed files with 407 additions and 238 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/appengine.codeViewer b/roles/appengine.codeViewer
@@ -13,7 +13,6 @@
     "appengine.versions.get",
     "appengine.versions.getFileContents",
     "appengine.versions.list",
-    "artifactregistry.projectsettings.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/appengine.serviceAdmin b/roles/appengine.serviceAdmin
@@ -17,7 +17,6 @@
     "appengine.versions.get",
     "appengine.versions.list",
     "appengine.versions.update",
-    "artifactregistry.projectsettings.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/auditmanager.serviceAgent b/roles/auditmanager.serviceAgent
@@ -607,11 +607,18 @@
     "resourcemanager.folders.get",
     "resourcemanager.folders.getIamPolicy",
     "resourcemanager.folders.list",
+    "resourcemanager.hierarchyNodes.listEffectiveTags",
+    "resourcemanager.hierarchyNodes.listTagBindings",
     "resourcemanager.organizations.get",
     "resourcemanager.organizations.getIamPolicy",
     "resourcemanager.projects.get",
     "resourcemanager.projects.getIamPolicy",
     "resourcemanager.projects.list",
+    "resourcemanager.tagHolds.list",
+    "resourcemanager.tagKeys.get",
+    "resourcemanager.tagKeys.list",
+    "resourcemanager.tagValues.get",
+    "resourcemanager.tagValues.list",
     "secretmanager.secrets.list",
     "serviceusage.quotas.get",
     "serviceusage.services.get",

diff --git a/roles/bigquery.resourceAdmin b/roles/bigquery.resourceAdmin
@@ -21,6 +21,7 @@
     "bigquery.reservations.delete",
     "bigquery.reservations.get",
     "bigquery.reservations.list",
+    "bigquery.reservations.listFailoverDatasets",
     "bigquery.reservations.update",
     "recommender.bigqueryCapacityCommitmentsInsights.get",
     "recommender.bigqueryCapacityCommitmentsInsights.list",

diff --git a/roles/bigquery.resourceEditor b/roles/bigquery.resourceEditor
@@ -17,7 +17,6 @@
     "bigquery.reservations.delete",
     "bigquery.reservations.get",
     "bigquery.reservations.list",
-    "bigquery.reservations.listFailoverDatasets",
     "bigquery.reservations.update",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"

diff --git a/roles/bigquery.resourceViewer b/roles/bigquery.resourceViewer
@@ -13,7 +13,6 @@
     "bigquery.reservationAssignments.search",
     "bigquery.reservations.get",
     "bigquery.reservations.list",
-    "bigquery.reservations.listFailoverDatasets",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/bigquery.studioUser b/roles/bigquery.studioUser
@@ -1,5 +1,5 @@
 {
-  "description": "Combination role of BigQuery Job User, BigQuery Read Session User, Dataform Code Creator, Notebook Runtime User and Dataproc Serverless Editor.",
+  "description": "Combination role of BigQuery Job User, BigQuery Read Session User, Dataform Code Creator, and Notebook Runtime User.",
   "etag": "AA==",
   "includedPermissions": [
     "aiplatform.notebookRuntimeTemplates.apply",
@@ -15,55 +15,11 @@
     "bigquery.readsessions.create",
     "bigquery.readsessions.getData",
     "bigquery.readsessions.update",
-    "compute.projects.get",
-    "compute.regions.get",
-    "compute.regions.list",
-    "compute.zones.get",
-    "compute.zones.list",
     "dataform.locations.get",
     "dataform.locations.list",
     "dataform.repositories.create",
     "dataform.repositories.list",
     "dataplex.projects.search",
-    "dataproc.batches.analyze",
-    "dataproc.batches.cancel",
-    "dataproc.batches.create",
-    "dataproc.batches.delete",
-    "dataproc.batches.get",
-    "dataproc.batches.list",
-    "dataproc.operations.cancel",
-    "dataproc.operations.delete",
-    "dataproc.operations.get",
-    "dataproc.operations.list",
-    "dataproc.sessionTemplates.create",
-    "dataproc.sessionTemplates.delete",
-    "dataproc.sessionTemplates.get",
-    "dataproc.sessionTemplates.list",
-    "dataproc.sessionTemplates.update",
-    "dataproc.sessions.create",
-    "dataproc.sessions.delete",
-    "dataproc.sessions.get",
-    "dataproc.sessions.list",
-    "dataproc.sessions.sparkApplicationRead",
-    "dataproc.sessions.sparkApplicationWrite",
-    "dataproc.sessions.terminate",
-    "dataprocrm.nodePools.create",
-    "dataprocrm.nodePools.delete",
-    "dataprocrm.nodePools.deleteNodes",
-    "dataprocrm.nodePools.get",
-    "dataprocrm.nodePools.list",
-    "dataprocrm.nodePools.resize",
-    "dataprocrm.nodes.get",
-    "dataprocrm.nodes.heartbeat",
-    "dataprocrm.nodes.list",
-    "dataprocrm.nodes.update",
-    "dataprocrm.operations.get",
-    "dataprocrm.operations.list",
-    "dataprocrm.workloads.cancel",
-    "dataprocrm.workloads.create",
-    "dataprocrm.workloads.delete",
-    "dataprocrm.workloads.get",
-    "dataprocrm.workloads.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/bigquery.user b/roles/bigquery.user
@@ -19,7 +19,6 @@
     "bigquery.reservationAssignments.search",
     "bigquery.reservations.get",
     "bigquery.reservations.list",
-    "bigquery.reservations.listFailoverDatasets",
     "bigquery.routines.list",
     "bigquery.savedqueries.get",
     "bigquery.savedqueries.list",

diff --git a/roles/billing.admin b/roles/billing.admin
@@ -19,6 +19,11 @@
     "billing.accounts.update",
     "billing.accounts.updatePaymentInfo",
     "billing.accounts.updateUsageExportSpec",
+    "billing.anomalies.get",
+    "billing.anomalies.list",
+    "billing.anomalies.submitFeedback",
+    "billing.anomaliesConfigs.get",
+    "billing.anomaliesConfigs.update",
     "billing.billingAccountPrice.get",
     "billing.billingAccountPrices.list",
     "billing.billingAccountServices.get",

diff --git a/roles/billing.costsManager b/roles/billing.costsManager
@@ -8,6 +8,10 @@
     "billing.accounts.getUsageExportSpec",
     "billing.accounts.list",
     "billing.accounts.updateUsageExportSpec",
+    "billing.anomalies.get",
+    "billing.anomalies.list",
+    "billing.anomaliesConfigs.get",
+    "billing.anomaliesConfigs.update",
     "billing.budgets.create",
     "billing.budgets.delete",
     "billing.budgets.get",

diff --git a/roles/cloudsql.admin b/roles/cloudsql.admin
@@ -2,11 +2,7 @@
   "description": "Full control of Cloud SQL resources.",
   "etag": "AA==",
   "includedPermissions": [
-    "cloudaicompanion.companions.generateChat",
-    "cloudaicompanion.companions.generateCode",
     "cloudaicompanion.entitlements.get",
-    "cloudaicompanion.instances.completeCode",
-    "cloudaicompanion.instances.generateCode",
     "cloudsql.backupRuns.create",
     "cloudsql.backupRuns.delete",
     "cloudsql.backupRuns.get",

diff --git a/roles/cloudtpu.serviceAgent b/roles/cloudtpu.serviceAgent
@@ -6,7 +6,15 @@
     "backupdr.backupPlanAssociations.deleteForComputeInstance",
     "backupdr.backupPlanAssociations.list",
     "backupdr.backupPlanAssociations.triggerBackupForComputeInstance",
+    "backupdr.backupPlans.get",
+    "backupdr.backupPlans.list",
     "backupdr.backupPlans.useForComputeInstance",
+    "backupdr.backupVaults.get",
+    "backupdr.backupVaults.list",
+    "backupdr.locations.list",
+    "backupdr.operations.get",
+    "backupdr.operations.list",
+    "backupdr.serviceConfig.initialize",
     "compute.acceleratorTypes.get",
     "compute.acceleratorTypes.list",
     "compute.addresses.create",
@@ -537,6 +545,8 @@
     "compute.regionUrlMaps.validate",
     "compute.regions.get",
     "compute.regions.list",
+    "compute.reservationBlocks.get",
+    "compute.reservationBlocks.list",
     "compute.reservations.get",
     "compute.reservations.list",
     "compute.resourcePolicies.create",

diff --git a/roles/commerceorggovernance.admin b/roles/commerceorggovernance.admin
@@ -20,8 +20,6 @@
     "commerceorggovernance.services.get",
     "commerceorggovernance.services.list",
     "commerceorggovernance.services.request",
-    "consumerprocurement.entitlements.get",
-    "consumerprocurement.entitlements.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/commerceorggovernance.user b/roles/commerceorggovernance.user
@@ -5,8 +5,6 @@
     "commerceorggovernance.services.get",
     "commerceorggovernance.services.list",
     "commerceorggovernance.services.request",
-    "consumerprocurement.entitlements.get",
-    "consumerprocurement.entitlements.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/compute.admin b/roles/compute.admin
@@ -6,7 +6,15 @@
     "backupdr.backupPlanAssociations.deleteForComputeInstance",
     "backupdr.backupPlanAssociations.list",
     "backupdr.backupPlanAssociations.triggerBackupForComputeInstance",
+    "backupdr.backupPlans.get",
+    "backupdr.backupPlans.list",
     "backupdr.backupPlans.useForComputeInstance",
+    "backupdr.backupVaults.get",
+    "backupdr.backupVaults.list",
+    "backupdr.locations.list",
+    "backupdr.operations.get",
+    "backupdr.operations.list",
+    "backupdr.serviceConfig.initialize",
     "compute.acceleratorTypes.get",
     "compute.acceleratorTypes.list",
     "compute.addresses.create",
@@ -643,6 +651,8 @@
     "compute.regionUrlMaps.validate",
     "compute.regions.get",
     "compute.regions.list",
+    "compute.reservationBlocks.get",
+    "compute.reservationBlocks.list",
     "compute.reservations.create",
     "compute.reservations.delete",
     "compute.reservations.get",

diff --git a/roles/compute.instanceAdmin b/roles/compute.instanceAdmin
@@ -6,15 +6,7 @@
     "backupdr.backupPlanAssociations.deleteForComputeInstance",
     "backupdr.backupPlanAssociations.list",
     "backupdr.backupPlanAssociations.triggerBackupForComputeInstance",
-    "backupdr.backupPlans.get",
-    "backupdr.backupPlans.list",
     "backupdr.backupPlans.useForComputeInstance",
-    "backupdr.backupVaults.get",
-    "backupdr.backupVaults.list",
-    "backupdr.locations.list",
-    "backupdr.operations.get",
-    "backupdr.operations.list",
-    "backupdr.serviceConfig.initialize",
     "compute.acceleratorTypes.get",
     "compute.acceleratorTypes.list",
     "compute.addresses.createInternal",
@@ -200,8 +192,6 @@
     "compute.regionOperations.list",
     "compute.regions.get",
     "compute.regions.list",
-    "compute.reservationBlocks.get",
-    "compute.reservationBlocks.list",
     "compute.reservations.get",
     "compute.reservations.list",
     "compute.resourcePolicies.list",

diff --git a/roles/contactcenterinsights.viewer b/roles/contactcenterinsights.viewer
@@ -12,6 +12,7 @@
     "contactcenterinsights.faqEntries.list",
     "contactcenterinsights.faqModels.get",
     "contactcenterinsights.faqModels.list",
+    "contactcenterinsights.feedbackLabels.download",
     "contactcenterinsights.feedbackLabels.get",
     "contactcenterinsights.feedbackLabels.list",
     "contactcenterinsights.issueModels.get",

diff --git a/roles/container.cloudKmsKeyUser b/roles/container.cloudKmsKeyUser
@@ -6,7 +6,6 @@
     "cloudkms.cryptoKeyVersions.useToSign",
     "cloudkms.cryptoKeyVersions.useToVerify",
     "cloudkms.cryptoKeyVersions.viewPublicKey",
-    "cloudkms.cryptoKeys.get",
     "cloudkms.locations.get",
     "cloudkms.locations.list",
     "resourcemanager.projects.get"

diff --git a/roles/dataflow.serviceAgent b/roles/dataflow.serviceAgent
@@ -6,15 +6,7 @@
     "backupdr.backupPlanAssociations.deleteForComputeInstance",
     "backupdr.backupPlanAssociations.list",
     "backupdr.backupPlanAssociations.triggerBackupForComputeInstance",
-    "backupdr.backupPlans.get",
-    "backupdr.backupPlans.list",
     "backupdr.backupPlans.useForComputeInstance",
-    "backupdr.backupVaults.get",
-    "backupdr.backupVaults.list",
-    "backupdr.locations.list",
-    "backupdr.operations.get",
-    "backupdr.operations.list",
-    "backupdr.serviceConfig.initialize",
     "bigquery.bireservations.get",
     "bigquery.bireservations.update",
     "bigquery.capacityCommitments.create",
@@ -81,7 +73,6 @@
     "bigquery.reservations.delete",
     "bigquery.reservations.get",
     "bigquery.reservations.list",
-    "bigquery.reservations.listFailoverDatasets",
     "bigquery.reservations.update",
     "bigquery.routines.create",
     "bigquery.routines.delete",
@@ -657,8 +648,6 @@
     "compute.regionUrlMaps.validate",
     "compute.regions.get",
     "compute.regions.list",
-    "compute.reservationBlocks.get",
-    "compute.reservationBlocks.list",
     "compute.reservations.get",
     "compute.reservations.list",
     "compute.resourcePolicies.create",
@@ -1002,11 +991,6 @@
     "logging.logMetrics.get",
     "logging.logMetrics.list",
     "logging.logMetrics.update",
-    "logging.logScopes.create",
-    "logging.logScopes.delete",
-    "logging.logScopes.get",
-    "logging.logScopes.list",
-    "logging.logScopes.update",
     "logging.logServiceIndexes.list",
     "logging.logServices.list",
     "logging.logs.list",
@@ -1376,14 +1360,12 @@
     "storage.buckets.enableObjectRetention",
     "storage.buckets.get",
     "storage.buckets.getIamPolicy",
-    "storage.buckets.getIpFilter",
     "storage.buckets.getObjectInsights",
     "storage.buckets.list",
     "storage.buckets.listEffectiveTags",
     "storage.buckets.listTagBindings",
     "storage.buckets.restore",
     "storage.buckets.setIamPolicy",
-    "storage.buckets.setIpFilter",
     "storage.buckets.update",
     "storage.folders.create",
     "storage.folders.delete",

diff --git a/roles/datafusion.serviceAgent b/roles/datafusion.serviceAgent
@@ -581,14 +581,12 @@
     "storage.buckets.enableObjectRetention",
     "storage.buckets.get",
     "storage.buckets.getIamPolicy",
-    "storage.buckets.getIpFilter",
     "storage.buckets.getObjectInsights",
     "storage.buckets.list",
     "storage.buckets.listEffectiveTags",
     "storage.buckets.listTagBindings",
     "storage.buckets.restore",
     "storage.buckets.setIamPolicy",
-    "storage.buckets.setIpFilter",
     "storage.buckets.update",
     "storage.folders.create",
     "storage.folders.delete",

diff --git a/roles/dataplex.encryptionAdmin b/roles/dataplex.encryptionAdmin
@@ -6,7 +6,9 @@
     "dataplex.encryptionConfig.delete",
     "dataplex.encryptionConfig.get",
     "dataplex.encryptionConfig.list",
-    "dataplex.encryptionConfig.update"
+    "dataplex.encryptionConfig.update",
+    "dataplex.operations.get",
+    "dataplex.operations.list"
   ],
   "name": "roles/dataplex.encryptionAdmin",
   "stage": "BETA",

diff --git a/roles/dataplex.serviceAgent b/roles/dataplex.serviceAgent
@@ -68,7 +68,6 @@
     "bigquery.reservations.delete",
     "bigquery.reservations.get",
     "bigquery.reservations.list",
-    "bigquery.reservations.listFailoverDatasets",
     "bigquery.reservations.update",
     "bigquery.routines.create",
     "bigquery.routines.delete",
@@ -243,14 +242,12 @@
     "storage.buckets.enableObjectRetention",
     "storage.buckets.get",
     "storage.buckets.getIamPolicy",
-    "storage.buckets.getIpFilter",
     "storage.buckets.getObjectInsights",
     "storage.buckets.list",
     "storage.buckets.listEffectiveTags",
     "storage.buckets.listTagBindings",
     "storage.buckets.restore",
     "storage.buckets.setIamPolicy",
-    "storage.buckets.setIpFilter",
     "storage.buckets.update",
     "storage.folders.create",
     "storage.folders.delete",

diff --git a/roles/dataprep.serviceAgent b/roles/dataprep.serviceAgent
@@ -28,7 +28,6 @@
     "bigquery.reservationAssignments.search",
     "bigquery.reservations.get",
     "bigquery.reservations.list",
-    "bigquery.reservations.listFailoverDatasets",
     "bigquery.routines.create",
     "bigquery.routines.delete",
     "bigquery.routines.get",
@@ -294,8 +293,6 @@
     "compute.regionUrlMaps.validate",
     "compute.regions.get",
     "compute.regions.list",
-    "compute.reservationBlocks.get",
-    "compute.reservationBlocks.list",
     "compute.reservations.get",
     "compute.reservations.list",
     "compute.resourcePolicies.get",