Fetch all roles

darkbitio · Aug 9, 2022 · 54e3748 · 54e3748
1 parent 994947c
commit 54e3748
Show file tree

Hide file tree

Showing 16 changed files with 257 additions and 14 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/bigtable.admin b/roles/bigtable.admin
@@ -21,10 +21,14 @@
     "bigtable.clusters.list",
     "bigtable.clusters.update",
     "bigtable.instances.create",
+    "bigtable.instances.createTagBinding",
     "bigtable.instances.delete",
+    "bigtable.instances.deleteTagBinding",
     "bigtable.instances.get",
     "bigtable.instances.getIamPolicy",
     "bigtable.instances.list",
+    "bigtable.instances.listEffectiveTags",
+    "bigtable.instances.listTagBindings",
     "bigtable.instances.setIamPolicy",
     "bigtable.instances.update",
     "bigtable.keyvisualizer.get",

diff --git a/roles/bigtable.viewer b/roles/bigtable.viewer
@@ -10,6 +10,8 @@
     "bigtable.clusters.list",
     "bigtable.instances.get",
     "bigtable.instances.list",
+    "bigtable.instances.listEffectiveTags",
+    "bigtable.instances.listTagBindings",
     "bigtable.locations.list",
     "bigtable.tables.checkConsistency",
     "bigtable.tables.generateConsistencyToken",

diff --git a/roles/connectors.invoker b/roles/connectors.invoker
@@ -15,6 +15,6 @@
     "connectors.entityTypes.list"
   ],
   "name": "roles/connectors.invoker",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Connector Invoker"
 }
diff --git a/roles/datafusion.serviceAgent b/roles/datafusion.serviceAgent
@@ -79,10 +79,14 @@
     "bigtable.clusters.list",
     "bigtable.clusters.update",
     "bigtable.instances.create",
+    "bigtable.instances.createTagBinding",
     "bigtable.instances.delete",
+    "bigtable.instances.deleteTagBinding",
     "bigtable.instances.get",
     "bigtable.instances.getIamPolicy",
     "bigtable.instances.list",
+    "bigtable.instances.listEffectiveTags",
+    "bigtable.instances.listTagBindings",
     "bigtable.instances.setIamPolicy",
     "bigtable.instances.update",
     "bigtable.keyvisualizer.get",

diff --git a/roles/editor b/roles/editor
@@ -945,6 +945,8 @@
     "bigtable.instances.get",
     "bigtable.instances.getIamPolicy",
     "bigtable.instances.list",
+    "bigtable.instances.listEffectiveTags",
+    "bigtable.instances.listTagBindings",
     "bigtable.instances.update",
     "bigtable.keyvisualizer.get",
     "bigtable.keyvisualizer.list",
@@ -4137,6 +4139,33 @@
     "metastore.tables.getIamPolicy",
     "metastore.tables.list",
     "metastore.tables.update",
+    "migrationcenter.assets.create",
+    "migrationcenter.assets.delete",
+    "migrationcenter.assets.get",
+    "migrationcenter.assets.list",
+    "migrationcenter.assets.reportFrames",
+    "migrationcenter.assets.update",
+    "migrationcenter.groups.create",
+    "migrationcenter.groups.delete",
+    "migrationcenter.groups.get",
+    "migrationcenter.groups.list",
+    "migrationcenter.groups.update",
+    "migrationcenter.importJobs.create",
+    "migrationcenter.importJobs.delete",
+    "migrationcenter.importJobs.get",
+    "migrationcenter.importJobs.list",
+    "migrationcenter.importJobs.update",
+    "migrationcenter.locations.get",
+    "migrationcenter.locations.list",
+    "migrationcenter.operations.cancel",
+    "migrationcenter.operations.delete",
+    "migrationcenter.operations.get",
+    "migrationcenter.operations.list",
+    "migrationcenter.sources.create",
+    "migrationcenter.sources.delete",
+    "migrationcenter.sources.get",
+    "migrationcenter.sources.list",
+    "migrationcenter.sources.update",
     "ml.jobs.cancel",
     "ml.jobs.create",
     "ml.jobs.get",

diff --git a/roles/iam.securityAdmin b/roles/iam.securityAdmin
@@ -1071,6 +1071,12 @@
     "metastore.tables.getIamPolicy",
     "metastore.tables.list",
     "metastore.tables.setIamPolicy",
+    "migrationcenter.assets.list",
+    "migrationcenter.groups.list",
+    "migrationcenter.importJobs.list",
+    "migrationcenter.locations.list",
+    "migrationcenter.operations.list",
+    "migrationcenter.sources.list",
     "ml.jobs.getIamPolicy",
     "ml.jobs.list",
     "ml.jobs.setIamPolicy",

diff --git a/roles/iam.securityReviewer b/roles/iam.securityReviewer
@@ -918,6 +918,12 @@
     "metastore.services.list",
     "metastore.tables.getIamPolicy",
     "metastore.tables.list",
+    "migrationcenter.assets.list",
+    "migrationcenter.groups.list",
+    "migrationcenter.importJobs.list",
+    "migrationcenter.locations.list",
+    "migrationcenter.operations.list",
+    "migrationcenter.sources.list",
     "ml.jobs.getIamPolicy",
     "ml.jobs.list",
     "ml.locations.list",

diff --git a/roles/integrations.serviceAgent b/roles/integrations.serviceAgent
@@ -5,6 +5,17 @@
     "cloudfunctions.functions.invoke",
     "cloudsql.instances.connect",
     "cloudsql.instances.get",
+    "connectors.actions.execute",
+    "connectors.actions.list",
+    "connectors.connections.executeSqlQuery",
+    "connectors.entities.create",
+    "connectors.entities.delete",
+    "connectors.entities.deleteEntitiesWithConditions",
+    "connectors.entities.get",
+    "connectors.entities.list",
+    "connectors.entities.update",
+    "connectors.entities.updateEntitiesWithConditions",
+    "connectors.entityTypes.list",
     "integrations.apigeeAuthConfigs.create",
     "integrations.apigeeAuthConfigs.delete",
     "integrations.apigeeAuthConfigs.get",
@@ -34,23 +45,78 @@
     "integrations.apigeeSfdcInstances.get",
     "integrations.apigeeSfdcInstances.list",
     "integrations.apigeeSfdcInstances.update",
+    "integrations.apigeeSuspensions.lift",
     "integrations.apigeeSuspensions.list",
     "integrations.apigeeSuspensions.resolve",
+    "integrations.authConfigs.create",
+    "integrations.authConfigs.delete",
+    "integrations.authConfigs.get",
+    "integrations.authConfigs.list",
+    "integrations.authConfigs.update",
+    "integrations.certificates.create",
+    "integrations.certificates.delete",
+    "integrations.certificates.get",
+    "integrations.certificates.list",
+    "integrations.certificates.update",
+    "integrations.executions.list",
+    "integrations.integrationVersions.create",
+    "integrations.integrationVersions.delete",
+    "integrations.integrationVersions.deploy",
+    "integrations.integrationVersions.get",
+    "integrations.integrationVersions.list",
+    "integrations.integrationVersions.update",
+    "integrations.integrations.create",
+    "integrations.integrations.delete",
+    "integrations.integrations.deploy",
+    "integrations.integrations.get",
     "integrations.integrations.invoke",
+    "integrations.integrations.list",
+    "integrations.integrations.update",
+    "integrations.sfdcChannels.create",
+    "integrations.sfdcChannels.delete",
+    "integrations.sfdcChannels.get",
+    "integrations.sfdcChannels.list",
+    "integrations.sfdcChannels.update",
+    "integrations.sfdcInstances.create",
+    "integrations.sfdcInstances.delete",
+    "integrations.sfdcInstances.get",
+    "integrations.sfdcInstances.list",
+    "integrations.sfdcInstances.update",
+    "integrations.suspensions.lift",
+    "integrations.suspensions.list",
+    "integrations.suspensions.resolve",
+    "pubsub.schemas.attach",
+    "pubsub.schemas.create",
+    "pubsub.schemas.delete",
+    "pubsub.schemas.get",
+    "pubsub.schemas.list",
+    "pubsub.schemas.validate",
     "pubsub.snapshots.create",
     "pubsub.snapshots.delete",
+    "pubsub.snapshots.get",
+    "pubsub.snapshots.list",
+    "pubsub.snapshots.seek",
     "pubsub.snapshots.update",
     "pubsub.subscriptions.consume",
     "pubsub.subscriptions.create",
     "pubsub.subscriptions.delete",
     "pubsub.subscriptions.get",
     "pubsub.subscriptions.list",
     "pubsub.subscriptions.update",
+    "pubsub.topics.attachSubscription",
     "pubsub.topics.create",
     "pubsub.topics.delete",
     "pubsub.topics.detachSubscription",
+    "pubsub.topics.get",
+    "pubsub.topics.list",
+    "pubsub.topics.publish",
     "pubsub.topics.update",
-    "pubsub.topics.updateTag"
+    "pubsub.topics.updateTag",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list",
+    "serviceusage.quotas.get",
+    "serviceusage.services.get",
+    "serviceusage.services.list"
   ],
   "name": "roles/integrations.serviceAgent",
   "stage": "GA",

diff --git a/roles/migrationcenter.admin b/roles/migrationcenter.admin
@@ -0,0 +1,38 @@
+{
+  "description": "Full access to Migration Center all resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "migrationcenter.assets.create",
+    "migrationcenter.assets.delete",
+    "migrationcenter.assets.get",
+    "migrationcenter.assets.list",
+    "migrationcenter.assets.reportFrames",
+    "migrationcenter.assets.update",
+    "migrationcenter.groups.create",
+    "migrationcenter.groups.delete",
+    "migrationcenter.groups.get",
+    "migrationcenter.groups.list",
+    "migrationcenter.groups.update",
+    "migrationcenter.importJobs.create",
+    "migrationcenter.importJobs.delete",
+    "migrationcenter.importJobs.get",
+    "migrationcenter.importJobs.list",
+    "migrationcenter.importJobs.update",
+    "migrationcenter.locations.get",
+    "migrationcenter.locations.list",
+    "migrationcenter.operations.cancel",
+    "migrationcenter.operations.delete",
+    "migrationcenter.operations.get",
+    "migrationcenter.operations.list",
+    "migrationcenter.sources.create",
+    "migrationcenter.sources.delete",
+    "migrationcenter.sources.get",
+    "migrationcenter.sources.list",
+    "migrationcenter.sources.update",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/migrationcenter.admin",
+  "stage": "BETA",
+  "title": "Migration Center Admin"
+}
diff --git a/roles/migrationcenter.serviceAgent b/roles/migrationcenter.serviceAgent
@@ -0,0 +1,11 @@
+{
+  "description": "Gives Migration Center Service Account access to objects storedin object store and Cloud Migration products.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "storage.objects.get",
+    "vmmigration.migratingVms.create"
+  ],
+  "name": "roles/migrationcenter.serviceAgent",
+  "stage": "ALPHA",
+  "title": "Migration Center Service Agent"
+}
diff --git a/roles/migrationcenter.viewer b/roles/migrationcenter.viewer
@@ -0,0 +1,23 @@
+{
+  "description": "Read-only access to Migration Center all resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "migrationcenter.assets.get",
+    "migrationcenter.assets.list",
+    "migrationcenter.groups.get",
+    "migrationcenter.groups.list",
+    "migrationcenter.importJobs.get",
+    "migrationcenter.importJobs.list",
+    "migrationcenter.locations.get",
+    "migrationcenter.locations.list",
+    "migrationcenter.operations.get",
+    "migrationcenter.operations.list",
+    "migrationcenter.sources.get",
+    "migrationcenter.sources.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/migrationcenter.viewer",
+  "stage": "BETA",
+  "title": "Migration Center Viewer"
+}
diff --git a/roles/owner b/roles/owner
@@ -1003,10 +1003,14 @@
     "bigtable.clusters.list",
     "bigtable.clusters.update",
     "bigtable.instances.create",
+    "bigtable.instances.createTagBinding",
     "bigtable.instances.delete",
+    "bigtable.instances.deleteTagBinding",
     "bigtable.instances.get",
     "bigtable.instances.getIamPolicy",
     "bigtable.instances.list",
+    "bigtable.instances.listEffectiveTags",
+    "bigtable.instances.listTagBindings",
     "bigtable.instances.setIamPolicy",
     "bigtable.instances.update",
     "bigtable.keyvisualizer.get",
@@ -4504,6 +4508,33 @@
     "metastore.tables.list",
     "metastore.tables.setIamPolicy",
     "metastore.tables.update",
+    "migrationcenter.assets.create",
+    "migrationcenter.assets.delete",
+    "migrationcenter.assets.get",
+    "migrationcenter.assets.list",
+    "migrationcenter.assets.reportFrames",
+    "migrationcenter.assets.update",
+    "migrationcenter.groups.create",
+    "migrationcenter.groups.delete",
+    "migrationcenter.groups.get",
+    "migrationcenter.groups.list",
+    "migrationcenter.groups.update",
+    "migrationcenter.importJobs.create",
+    "migrationcenter.importJobs.delete",
+    "migrationcenter.importJobs.get",
+    "migrationcenter.importJobs.list",
+    "migrationcenter.importJobs.update",
+    "migrationcenter.locations.get",
+    "migrationcenter.locations.list",
+    "migrationcenter.operations.cancel",
+    "migrationcenter.operations.delete",
+    "migrationcenter.operations.get",
+    "migrationcenter.operations.list",
+    "migrationcenter.sources.create",
+    "migrationcenter.sources.delete",
+    "migrationcenter.sources.get",
+    "migrationcenter.sources.list",
+    "migrationcenter.sources.update",
     "ml.jobs.cancel",
     "ml.jobs.create",
     "ml.jobs.get",

diff --git a/roles/resourcemanager.tagUser b/roles/resourcemanager.tagUser
@@ -9,6 +9,10 @@
     "bigquery.datasets.createTagBinding",
     "bigquery.datasets.deleteTagBinding",
     "bigquery.datasets.listTagBindings",
+    "bigtable.instances.createTagBinding",
+    "bigtable.instances.deleteTagBinding",
+    "bigtable.instances.listEffectiveTags",
+    "bigtable.instances.listTagBindings",
     "cloudkms.keyRings.createTagBinding",
     "cloudkms.keyRings.deleteTagBinding",
     "cloudkms.keyRings.listEffectiveTags",

diff --git a/roles/resourcemanager.tagViewer b/roles/resourcemanager.tagViewer
@@ -5,6 +5,8 @@
     "artifactregistry.repositories.listEffectiveTags",
     "artifactregistry.repositories.listTagBindings",
     "bigquery.datasets.listTagBindings",
+    "bigtable.instances.listEffectiveTags",
+    "bigtable.instances.listTagBindings",
     "cloudkms.keyRings.listEffectiveTags",
     "cloudkms.keyRings.listTagBindings",
     "cloudsql.instances.listEffectiveTags",

diff --git a/roles/viewer b/roles/viewer
@@ -459,6 +459,8 @@
     "bigtable.instances.get",
     "bigtable.instances.getIamPolicy",
     "bigtable.instances.list",
+    "bigtable.instances.listEffectiveTags",
+    "bigtable.instances.listTagBindings",
     "bigtable.keyvisualizer.get",
     "bigtable.keyvisualizer.list",
     "bigtable.locations.list",
@@ -1976,6 +1978,18 @@
     "metastore.tables.get",
     "metastore.tables.getIamPolicy",
     "metastore.tables.list",
+    "migrationcenter.assets.get",
+    "migrationcenter.assets.list",
+    "migrationcenter.groups.get",
+    "migrationcenter.groups.list",
+    "migrationcenter.importJobs.get",
+    "migrationcenter.importJobs.list",
+    "migrationcenter.locations.get",
+    "migrationcenter.locations.list",
+    "migrationcenter.operations.get",
+    "migrationcenter.operations.list",
+    "migrationcenter.sources.get",
+    "migrationcenter.sources.list",
     "ml.jobs.get",
     "ml.jobs.getIamPolicy",
     "ml.jobs.list",