diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json index cf3bb08b..d308ddd9 100644 --- a/gcp_roles_cai.json +++ b/gcp_roles_cai.json @@ -457,7 +457,7 @@ {"description":"Full control of Compute Engine networking resources.","etag":"AA==","includedPermissions":["compute.acceleratorTypes.get","compute.acceleratorTypes.list","compute.addresses.create","compute.addresses.createInternal","compute.addresses.delete","compute.addresses.deleteInternal","compute.addresses.get","compute.addresses.list","compute.addresses.setLabels","compute.addresses.use","compute.addresses.useInternal","compute.autoscalers.get","compute.autoscalers.list","compute.backendBuckets.addSignedUrlKey","compute.backendBuckets.create","compute.backendBuckets.createTagBinding","compute.backendBuckets.delete","compute.backendBuckets.deleteSignedUrlKey","compute.backendBuckets.deleteTagBinding","compute.backendBuckets.get","compute.backendBuckets.getIamPolicy","compute.backendBuckets.list","compute.backendBuckets.listEffectiveTags","compute.backendBuckets.listTagBindings","compute.backendBuckets.setIamPolicy","compute.backendBuckets.setSecurityPolicy","compute.backendBuckets.update","compute.backendBuckets.use","compute.backendServices.addSignedUrlKey","compute.backendServices.create","compute.backendServices.createTagBinding","compute.backendServices.delete","compute.backendServices.deleteSignedUrlKey","compute.backendServices.deleteTagBinding","compute.backendServices.get","compute.backendServices.getIamPolicy","compute.backendServices.list","compute.backendServices.listEffectiveTags","compute.backendServices.listTagBindings","compute.backendServices.setIamPolicy","compute.backendServices.setSecurityPolicy","compute.backendServices.update","compute.backendServices.use","compute.disks.listEffectiveTags","compute.disks.listTagBindings","compute.externalVpnGateways.create","compute.externalVpnGateways.createTagBinding","compute.externalVpnGateways.delete","compute.externalVpnGateways.deleteTagBinding","compute.externalVpnGateways.get","compute.externalVpnGateways.list","compute.externalVpnGateways.listEffectiveTags","compute.externalVpnGateways.listTagBindings","compute.externalVpnGateways.setLabels","compute.externalVpnGateways.use","compute.firewallPolicies.get","compute.firewallPolicies.list","compute.firewallPolicies.listEffectiveTags","compute.firewallPolicies.listTagBindings","compute.firewallPolicies.use","compute.firewalls.get","compute.firewalls.list","compute.firewalls.listEffectiveTags","compute.firewalls.listTagBindings","compute.forwardingRules.create","compute.forwardingRules.createTagBinding","compute.forwardingRules.delete","compute.forwardingRules.deleteTagBinding","compute.forwardingRules.get","compute.forwardingRules.list","compute.forwardingRules.listEffectiveTags","compute.forwardingRules.listTagBindings","compute.forwardingRules.pscCreate","compute.forwardingRules.pscDelete","compute.forwardingRules.pscSetLabels","compute.forwardingRules.pscSetTarget","compute.forwardingRules.pscUpdate","compute.forwardingRules.setLabels","compute.forwardingRules.setTarget","compute.forwardingRules.update","compute.forwardingRules.use","compute.globalAddresses.create","compute.globalAddresses.createInternal","compute.globalAddresses.delete","compute.globalAddresses.deleteInternal","compute.globalAddresses.get","compute.globalAddresses.list","compute.globalAddresses.setLabels","compute.globalAddresses.use","compute.globalForwardingRules.create","compute.globalForwardingRules.createTagBinding","compute.globalForwardingRules.delete","compute.globalForwardingRules.deleteTagBinding","compute.globalForwardingRules.get","compute.globalForwardingRules.list","compute.globalForwardingRules.listEffectiveTags","compute.globalForwardingRules.listTagBindings","compute.globalForwardingRules.pscCreate","compute.globalForwardingRules.pscDelete","compute.globalForwardingRules.pscGet","compute.globalForwardingRules.pscSetLabels","compute.globalForwardingRules.pscSetTarget","compute.globalForwardingRules.pscUpdate","compute.globalForwardingRules.setLabels","compute.globalForwardingRules.setTarget","compute.globalForwardingRules.update","compute.globalNetworkEndpointGroups.get","compute.globalNetworkEndpointGroups.list","compute.globalNetworkEndpointGroups.listEffectiveTags","compute.globalNetworkEndpointGroups.listTagBindings","compute.globalNetworkEndpointGroups.use","compute.globalOperations.get","compute.globalOperations.list","compute.globalPublicDelegatedPrefixes.delete","compute.globalPublicDelegatedPrefixes.get","compute.globalPublicDelegatedPrefixes.list","compute.globalPublicDelegatedPrefixes.update","compute.globalPublicDelegatedPrefixes.updatePolicy","compute.healthChecks.create","compute.healthChecks.createTagBinding","compute.healthChecks.delete","compute.healthChecks.deleteTagBinding","compute.healthChecks.get","compute.healthChecks.list","compute.healthChecks.listEffectiveTags","compute.healthChecks.listTagBindings","compute.healthChecks.update","compute.healthChecks.use","compute.healthChecks.useReadOnly","compute.httpHealthChecks.create","compute.httpHealthChecks.createTagBinding","compute.httpHealthChecks.delete","compute.httpHealthChecks.deleteTagBinding","compute.httpHealthChecks.get","compute.httpHealthChecks.list","compute.httpHealthChecks.listEffectiveTags","compute.httpHealthChecks.listTagBindings","compute.httpHealthChecks.update","compute.httpHealthChecks.use","compute.httpHealthChecks.useReadOnly","compute.httpsHealthChecks.create","compute.httpsHealthChecks.createTagBinding","compute.httpsHealthChecks.delete","compute.httpsHealthChecks.deleteTagBinding","compute.httpsHealthChecks.get","compute.httpsHealthChecks.list","compute.httpsHealthChecks.listEffectiveTags","compute.httpsHealthChecks.listTagBindings","compute.httpsHealthChecks.update","compute.httpsHealthChecks.use","compute.httpsHealthChecks.useReadOnly","compute.images.listEffectiveTags","compute.images.listTagBindings","compute.instanceGroupManagers.get","compute.instanceGroupManagers.list","compute.instanceGroupManagers.listEffectiveTags","compute.instanceGroupManagers.listTagBindings","compute.instanceGroupManagers.update","compute.instanceGroupManagers.use","compute.instanceGroups.get","compute.instanceGroups.list","compute.instanceGroups.update","compute.instanceGroups.use","compute.instanceSettings.get","compute.instances.get","compute.instances.getGuestAttributes","compute.instances.getScreenshot","compute.instances.getSerialPortOutput","compute.instances.list","compute.instances.listEffectiveTags","compute.instances.listReferrers","compute.instances.listTagBindings","compute.instances.updateSecurity","compute.instances.use","compute.instances.useReadOnly","compute.interconnectAttachments.create","compute.interconnectAttachments.createTagBinding","compute.interconnectAttachments.delete","compute.interconnectAttachments.deleteTagBinding","compute.interconnectAttachments.get","compute.interconnectAttachments.list","compute.interconnectAttachments.listEffectiveTags","compute.interconnectAttachments.listTagBindings","compute.interconnectAttachments.setLabels","compute.interconnectAttachments.update","compute.interconnectAttachments.use","compute.interconnectLocations.get","compute.interconnectLocations.list","compute.interconnectRemoteLocations.get","compute.interconnectRemoteLocations.list","compute.interconnects.create","compute.interconnects.createTagBinding","compute.interconnects.delete","compute.interconnects.deleteTagBinding","compute.interconnects.get","compute.interconnects.getMacsecConfig","compute.interconnects.list","compute.interconnects.listEffectiveTags","compute.interconnects.listTagBindings","compute.interconnects.setLabels","compute.interconnects.update","compute.interconnects.use","compute.machineTypes.get","compute.machineTypes.list","compute.networkAttachments.create","compute.networkAttachments.delete","compute.networkAttachments.get","compute.networkAttachments.getIamPolicy","compute.networkAttachments.list","compute.networkAttachments.setIamPolicy","compute.networkAttachments.update","compute.networkEndpointGroups.get","compute.networkEndpointGroups.list","compute.networkEndpointGroups.listEffectiveTags","compute.networkEndpointGroups.listTagBindings","compute.networkEndpointGroups.use","compute.networks.access","compute.networks.addPeering","compute.networks.create","compute.networks.createTagBinding","compute.networks.delete","compute.networks.deleteTagBinding","compute.networks.get","compute.networks.getEffectiveFirewalls","compute.networks.getRegionEffectiveFirewalls","compute.networks.list","compute.networks.listEffectiveTags","compute.networks.listPeeringRoutes","compute.networks.listTagBindings","compute.networks.mirror","compute.networks.removePeering","compute.networks.setFirewallPolicy","compute.networks.switchToCustomMode","compute.networks.update","compute.networks.updatePeering","compute.networks.updatePolicy","compute.networks.use","compute.networks.useExternalIp","compute.packetMirrorings.get","compute.packetMirrorings.list","compute.projects.get","compute.publicDelegatedPrefixes.delete","compute.publicDelegatedPrefixes.get","compute.publicDelegatedPrefixes.list","compute.publicDelegatedPrefixes.update","compute.publicDelegatedPrefixes.updatePolicy","compute.regionBackendServices.create","compute.regionBackendServices.createTagBinding","compute.regionBackendServices.delete","compute.regionBackendServices.deleteTagBinding","compute.regionBackendServices.get","compute.regionBackendServices.getIamPolicy","compute.regionBackendServices.list","compute.regionBackendServices.listEffectiveTags","compute.regionBackendServices.listTagBindings","compute.regionBackendServices.setIamPolicy","compute.regionBackendServices.setSecurityPolicy","compute.regionBackendServices.update","compute.regionBackendServices.use","compute.regionFirewallPolicies.get","compute.regionFirewallPolicies.list","compute.regionFirewallPolicies.listEffectiveTags","compute.regionFirewallPolicies.listTagBindings","compute.regionFirewallPolicies.use","compute.regionHealthCheckServices.create","compute.regionHealthCheckServices.delete","compute.regionHealthCheckServices.get","compute.regionHealthCheckServices.list","compute.regionHealthCheckServices.update","compute.regionHealthCheckServices.use","compute.regionHealthChecks.create","compute.regionHealthChecks.createTagBinding","compute.regionHealthChecks.delete","compute.regionHealthChecks.deleteTagBinding","compute.regionHealthChecks.get","compute.regionHealthChecks.list","compute.regionHealthChecks.listEffectiveTags","compute.regionHealthChecks.listTagBindings","compute.regionHealthChecks.update","compute.regionHealthChecks.use","compute.regionHealthChecks.useReadOnly","compute.regionNetworkEndpointGroups.get","compute.regionNetworkEndpointGroups.list","compute.regionNetworkEndpointGroups.listEffectiveTags","compute.regionNetworkEndpointGroups.listTagBindings","compute.regionNetworkEndpointGroups.use","compute.regionNotificationEndpoints.create","compute.regionNotificationEndpoints.delete","compute.regionNotificationEndpoints.get","compute.regionNotificationEndpoints.list","compute.regionNotificationEndpoints.update","compute.regionNotificationEndpoints.use","compute.regionOperations.get","compute.regionOperations.list","compute.regionSecurityPolicies.get","compute.regionSecurityPolicies.list","compute.regionSecurityPolicies.listEffectiveTags","compute.regionSecurityPolicies.listTagBindings","compute.regionSecurityPolicies.use","compute.regionSslCertificates.get","compute.regionSslCertificates.list","compute.regionSslCertificates.listEffectiveTags","compute.regionSslCertificates.listTagBindings","compute.regionSslPolicies.create","compute.regionSslPolicies.delete","compute.regionSslPolicies.get","compute.regionSslPolicies.list","compute.regionSslPolicies.listAvailableFeatures","compute.regionSslPolicies.update","compute.regionSslPolicies.use","compute.regionTargetHttpProxies.create","compute.regionTargetHttpProxies.createTagBinding","compute.regionTargetHttpProxies.delete","compute.regionTargetHttpProxies.deleteTagBinding","compute.regionTargetHttpProxies.get","compute.regionTargetHttpProxies.list","compute.regionTargetHttpProxies.listEffectiveTags","compute.regionTargetHttpProxies.listTagBindings","compute.regionTargetHttpProxies.setUrlMap","compute.regionTargetHttpProxies.update","compute.regionTargetHttpProxies.use","compute.regionTargetHttpsProxies.create","compute.regionTargetHttpsProxies.createTagBinding","compute.regionTargetHttpsProxies.delete","compute.regionTargetHttpsProxies.deleteTagBinding","compute.regionTargetHttpsProxies.get","compute.regionTargetHttpsProxies.list","compute.regionTargetHttpsProxies.listEffectiveTags","compute.regionTargetHttpsProxies.listTagBindings","compute.regionTargetHttpsProxies.setSslCertificates","compute.regionTargetHttpsProxies.setUrlMap","compute.regionTargetHttpsProxies.update","compute.regionTargetHttpsProxies.use","compute.regionTargetTcpProxies.create","compute.regionTargetTcpProxies.delete","compute.regionTargetTcpProxies.get","compute.regionTargetTcpProxies.list","compute.regionTargetTcpProxies.use","compute.regionUrlMaps.create","compute.regionUrlMaps.createTagBinding","compute.regionUrlMaps.delete","compute.regionUrlMaps.deleteTagBinding","compute.regionUrlMaps.get","compute.regionUrlMaps.invalidateCache","compute.regionUrlMaps.list","compute.regionUrlMaps.listEffectiveTags","compute.regionUrlMaps.listTagBindings","compute.regionUrlMaps.update","compute.regionUrlMaps.use","compute.regionUrlMaps.validate","compute.regions.get","compute.regions.list","compute.routers.create","compute.routers.createTagBinding","compute.routers.delete","compute.routers.deleteRoutePolicy","compute.routers.deleteTagBinding","compute.routers.get","compute.routers.getRoutePolicy","compute.routers.list","compute.routers.listBgpRoutes","compute.routers.listEffectiveTags","compute.routers.listRoutePolicies","compute.routers.listTagBindings","compute.routers.update","compute.routers.updateRoutePolicy","compute.routers.use","compute.routes.create","compute.routes.createTagBinding","compute.routes.delete","compute.routes.deleteTagBinding","compute.routes.get","compute.routes.list","compute.routes.listEffectiveTags","compute.routes.listTagBindings","compute.securityPolicies.get","compute.securityPolicies.list","compute.securityPolicies.listEffectiveTags","compute.securityPolicies.listTagBindings","compute.securityPolicies.use","compute.serviceAttachments.create","compute.serviceAttachments.delete","compute.serviceAttachments.get","compute.serviceAttachments.getIamPolicy","compute.serviceAttachments.list","compute.serviceAttachments.setIamPolicy","compute.serviceAttachments.update","compute.serviceAttachments.use","compute.snapshots.listEffectiveTags","compute.snapshots.listTagBindings","compute.sslCertificates.get","compute.sslCertificates.list","compute.sslCertificates.listEffectiveTags","compute.sslCertificates.listTagBindings","compute.sslPolicies.create","compute.sslPolicies.createTagBinding","compute.sslPolicies.delete","compute.sslPolicies.deleteTagBinding","compute.sslPolicies.get","compute.sslPolicies.list","compute.sslPolicies.listAvailableFeatures","compute.sslPolicies.listEffectiveTags","compute.sslPolicies.listTagBindings","compute.sslPolicies.update","compute.sslPolicies.use","compute.subnetworks.create","compute.subnetworks.createTagBinding","compute.subnetworks.delete","compute.subnetworks.deleteTagBinding","compute.subnetworks.expandIpCidrRange","compute.subnetworks.get","compute.subnetworks.getIamPolicy","compute.subnetworks.list","compute.subnetworks.listEffectiveTags","compute.subnetworks.listTagBindings","compute.subnetworks.mirror","compute.subnetworks.setIamPolicy","compute.subnetworks.setPrivateIpGoogleAccess","compute.subnetworks.update","compute.subnetworks.use","compute.subnetworks.useExternalIp","compute.targetGrpcProxies.create","compute.targetGrpcProxies.delete","compute.targetGrpcProxies.get","compute.targetGrpcProxies.list","compute.targetGrpcProxies.update","compute.targetGrpcProxies.use","compute.targetHttpProxies.create","compute.targetHttpProxies.createTagBinding","compute.targetHttpProxies.delete","compute.targetHttpProxies.deleteTagBinding","compute.targetHttpProxies.get","compute.targetHttpProxies.list","compute.targetHttpProxies.listEffectiveTags","compute.targetHttpProxies.listTagBindings","compute.targetHttpProxies.setUrlMap","compute.targetHttpProxies.update","compute.targetHttpProxies.use","compute.targetHttpsProxies.create","compute.targetHttpsProxies.createTagBinding","compute.targetHttpsProxies.delete","compute.targetHttpsProxies.deleteTagBinding","compute.targetHttpsProxies.get","compute.targetHttpsProxies.list","compute.targetHttpsProxies.listEffectiveTags","compute.targetHttpsProxies.listTagBindings","compute.targetHttpsProxies.setCertificateMap","compute.targetHttpsProxies.setQuicOverride","compute.targetHttpsProxies.setSslCertificates","compute.targetHttpsProxies.setSslPolicy","compute.targetHttpsProxies.setUrlMap","compute.targetHttpsProxies.update","compute.targetHttpsProxies.use","compute.targetInstances.create","compute.targetInstances.createTagBinding","compute.targetInstances.delete","compute.targetInstances.deleteTagBinding","compute.targetInstances.get","compute.targetInstances.list","compute.targetInstances.listEffectiveTags","compute.targetInstances.listTagBindings","compute.targetInstances.setSecurityPolicy","compute.targetInstances.use","compute.targetPools.addHealthCheck","compute.targetPools.addInstance","compute.targetPools.create","compute.targetPools.createTagBinding","compute.targetPools.delete","compute.targetPools.deleteTagBinding","compute.targetPools.get","compute.targetPools.list","compute.targetPools.listEffectiveTags","compute.targetPools.listTagBindings","compute.targetPools.removeHealthCheck","compute.targetPools.removeInstance","compute.targetPools.setSecurityPolicy","compute.targetPools.update","compute.targetPools.use","compute.targetSslProxies.create","compute.targetSslProxies.createTagBinding","compute.targetSslProxies.delete","compute.targetSslProxies.deleteTagBinding","compute.targetSslProxies.get","compute.targetSslProxies.list","compute.targetSslProxies.listEffectiveTags","compute.targetSslProxies.listTagBindings","compute.targetSslProxies.setBackendService","compute.targetSslProxies.setCertificateMap","compute.targetSslProxies.setProxyHeader","compute.targetSslProxies.setSslCertificates","compute.targetSslProxies.setSslPolicy","compute.targetSslProxies.update","compute.targetSslProxies.use","compute.targetTcpProxies.create","compute.targetTcpProxies.createTagBinding","compute.targetTcpProxies.delete","compute.targetTcpProxies.deleteTagBinding","compute.targetTcpProxies.get","compute.targetTcpProxies.list","compute.targetTcpProxies.listEffectiveTags","compute.targetTcpProxies.listTagBindings","compute.targetTcpProxies.update","compute.targetTcpProxies.use","compute.targetVpnGateways.create","compute.targetVpnGateways.createTagBinding","compute.targetVpnGateways.delete","compute.targetVpnGateways.deleteTagBinding","compute.targetVpnGateways.get","compute.targetVpnGateways.list","compute.targetVpnGateways.listEffectiveTags","compute.targetVpnGateways.listTagBindings","compute.targetVpnGateways.setLabels","compute.targetVpnGateways.use","compute.urlMaps.create","compute.urlMaps.createTagBinding","compute.urlMaps.delete","compute.urlMaps.deleteTagBinding","compute.urlMaps.get","compute.urlMaps.invalidateCache","compute.urlMaps.list","compute.urlMaps.listEffectiveTags","compute.urlMaps.listTagBindings","compute.urlMaps.update","compute.urlMaps.use","compute.urlMaps.validate","compute.vpnGateways.create","compute.vpnGateways.createTagBinding","compute.vpnGateways.delete","compute.vpnGateways.deleteTagBinding","compute.vpnGateways.get","compute.vpnGateways.list","compute.vpnGateways.listEffectiveTags","compute.vpnGateways.listTagBindings","compute.vpnGateways.setLabels","compute.vpnGateways.use","compute.vpnTunnels.create","compute.vpnTunnels.createTagBinding","compute.vpnTunnels.delete","compute.vpnTunnels.deleteTagBinding","compute.vpnTunnels.get","compute.vpnTunnels.list","compute.vpnTunnels.listEffectiveTags","compute.vpnTunnels.listTagBindings","compute.vpnTunnels.setLabels","compute.zoneOperations.get","compute.zoneOperations.list","compute.zones.get","compute.zones.list","networkconnectivity.internalRanges.create","networkconnectivity.internalRanges.delete","networkconnectivity.internalRanges.get","networkconnectivity.internalRanges.getIamPolicy","networkconnectivity.internalRanges.list","networkconnectivity.internalRanges.setIamPolicy","networkconnectivity.internalRanges.update","networkconnectivity.locations.get","networkconnectivity.locations.list","networkconnectivity.operations.cancel","networkconnectivity.operations.delete","networkconnectivity.operations.get","networkconnectivity.operations.list","networkconnectivity.policyBasedRoutes.create","networkconnectivity.policyBasedRoutes.delete","networkconnectivity.policyBasedRoutes.get","networkconnectivity.policyBasedRoutes.getIamPolicy","networkconnectivity.policyBasedRoutes.list","networkconnectivity.policyBasedRoutes.setIamPolicy","networkconnectivity.regionalEndpoints.create","networkconnectivity.regionalEndpoints.delete","networkconnectivity.regionalEndpoints.get","networkconnectivity.regionalEndpoints.list","networkconnectivity.serviceClasses.create","networkconnectivity.serviceClasses.delete","networkconnectivity.serviceClasses.get","networkconnectivity.serviceClasses.list","networkconnectivity.serviceClasses.update","networkconnectivity.serviceClasses.use","networkconnectivity.serviceConnectionMaps.create","networkconnectivity.serviceConnectionMaps.delete","networkconnectivity.serviceConnectionMaps.get","networkconnectivity.serviceConnectionMaps.list","networkconnectivity.serviceConnectionMaps.update","networkconnectivity.serviceConnectionPolicies.create","networkconnectivity.serviceConnectionPolicies.delete","networkconnectivity.serviceConnectionPolicies.get","networkconnectivity.serviceConnectionPolicies.list","networkconnectivity.serviceConnectionPolicies.update","networkmanagement.connectivitytests.get","networkmanagement.connectivitytests.list","networksecurity.addressGroups.create","networksecurity.addressGroups.delete","networksecurity.addressGroups.get","networksecurity.addressGroups.getIamPolicy","networksecurity.addressGroups.list","networksecurity.addressGroups.setIamPolicy","networksecurity.addressGroups.update","networksecurity.addressGroups.use","networksecurity.authorizationPolicies.create","networksecurity.authorizationPolicies.delete","networksecurity.authorizationPolicies.get","networksecurity.authorizationPolicies.getIamPolicy","networksecurity.authorizationPolicies.list","networksecurity.authorizationPolicies.setIamPolicy","networksecurity.authorizationPolicies.update","networksecurity.authorizationPolicies.use","networksecurity.clientTlsPolicies.create","networksecurity.clientTlsPolicies.delete","networksecurity.clientTlsPolicies.get","networksecurity.clientTlsPolicies.getIamPolicy","networksecurity.clientTlsPolicies.list","networksecurity.clientTlsPolicies.setIamPolicy","networksecurity.clientTlsPolicies.update","networksecurity.clientTlsPolicies.use","networksecurity.firewallEndpointAssociations.create","networksecurity.firewallEndpointAssociations.delete","networksecurity.firewallEndpointAssociations.get","networksecurity.firewallEndpointAssociations.list","networksecurity.firewallEndpointAssociations.update","networksecurity.firewallEndpoints.create","networksecurity.firewallEndpoints.delete","networksecurity.firewallEndpoints.get","networksecurity.firewallEndpoints.list","networksecurity.firewallEndpoints.update","networksecurity.firewallEndpoints.use","networksecurity.gatewaySecurityPolicies.create","networksecurity.gatewaySecurityPolicies.delete","networksecurity.gatewaySecurityPolicies.get","networksecurity.gatewaySecurityPolicies.list","networksecurity.gatewaySecurityPolicies.update","networksecurity.gatewaySecurityPolicies.use","networksecurity.gatewaySecurityPolicyRules.create","networksecurity.gatewaySecurityPolicyRules.delete","networksecurity.gatewaySecurityPolicyRules.get","networksecurity.gatewaySecurityPolicyRules.list","networksecurity.gatewaySecurityPolicyRules.update","networksecurity.gatewaySecurityPolicyRules.use","networksecurity.locations.get","networksecurity.locations.list","networksecurity.operations.cancel","networksecurity.operations.delete","networksecurity.operations.get","networksecurity.operations.list","networksecurity.securityProfileGroups.create","networksecurity.securityProfileGroups.delete","networksecurity.securityProfileGroups.get","networksecurity.securityProfileGroups.list","networksecurity.securityProfileGroups.update","networksecurity.securityProfileGroups.use","networksecurity.securityProfiles.create","networksecurity.securityProfiles.delete","networksecurity.securityProfiles.get","networksecurity.securityProfiles.list","networksecurity.securityProfiles.update","networksecurity.securityProfiles.use","networksecurity.serverTlsPolicies.create","networksecurity.serverTlsPolicies.delete","networksecurity.serverTlsPolicies.get","networksecurity.serverTlsPolicies.getIamPolicy","networksecurity.serverTlsPolicies.list","networksecurity.serverTlsPolicies.setIamPolicy","networksecurity.serverTlsPolicies.update","networksecurity.serverTlsPolicies.use","networksecurity.tlsInspectionPolicies.create","networksecurity.tlsInspectionPolicies.delete","networksecurity.tlsInspectionPolicies.get","networksecurity.tlsInspectionPolicies.list","networksecurity.tlsInspectionPolicies.update","networksecurity.tlsInspectionPolicies.use","networksecurity.urlLists.create","networksecurity.urlLists.delete","networksecurity.urlLists.get","networksecurity.urlLists.list","networksecurity.urlLists.update","networksecurity.urlLists.use","networkservices.endpointConfigSelectors.create","networkservices.endpointConfigSelectors.delete","networkservices.endpointConfigSelectors.get","networkservices.endpointConfigSelectors.getIamPolicy","networkservices.endpointConfigSelectors.list","networkservices.endpointConfigSelectors.setIamPolicy","networkservices.endpointConfigSelectors.update","networkservices.endpointConfigSelectors.use","networkservices.endpointPolicies.create","networkservices.endpointPolicies.delete","networkservices.endpointPolicies.get","networkservices.endpointPolicies.getIamPolicy","networkservices.endpointPolicies.list","networkservices.endpointPolicies.setIamPolicy","networkservices.endpointPolicies.update","networkservices.endpointPolicies.use","networkservices.gateways.create","networkservices.gateways.delete","networkservices.gateways.get","networkservices.gateways.list","networkservices.gateways.update","networkservices.gateways.use","networkservices.grpcRoutes.create","networkservices.grpcRoutes.delete","networkservices.grpcRoutes.get","networkservices.grpcRoutes.getIamPolicy","networkservices.grpcRoutes.list","networkservices.grpcRoutes.setIamPolicy","networkservices.grpcRoutes.update","networkservices.grpcRoutes.use","networkservices.httpFilters.create","networkservices.httpFilters.delete","networkservices.httpFilters.get","networkservices.httpFilters.getIamPolicy","networkservices.httpFilters.list","networkservices.httpFilters.setIamPolicy","networkservices.httpFilters.update","networkservices.httpFilters.use","networkservices.httpRoutes.create","networkservices.httpRoutes.delete","networkservices.httpRoutes.get","networkservices.httpRoutes.getIamPolicy","networkservices.httpRoutes.list","networkservices.httpRoutes.setIamPolicy","networkservices.httpRoutes.update","networkservices.httpRoutes.use","networkservices.httpfilters.create","networkservices.httpfilters.delete","networkservices.httpfilters.get","networkservices.httpfilters.getIamPolicy","networkservices.httpfilters.list","networkservices.httpfilters.setIamPolicy","networkservices.httpfilters.update","networkservices.httpfilters.use","networkservices.lbRouteExtensions.create","networkservices.lbRouteExtensions.delete","networkservices.lbRouteExtensions.get","networkservices.lbRouteExtensions.list","networkservices.lbRouteExtensions.update","networkservices.lbTrafficExtensions.create","networkservices.lbTrafficExtensions.delete","networkservices.lbTrafficExtensions.get","networkservices.lbTrafficExtensions.list","networkservices.lbTrafficExtensions.update","networkservices.locations.get","networkservices.locations.list","networkservices.meshes.create","networkservices.meshes.delete","networkservices.meshes.get","networkservices.meshes.getIamPolicy","networkservices.meshes.list","networkservices.meshes.setIamPolicy","networkservices.meshes.update","networkservices.meshes.use","networkservices.operations.cancel","networkservices.operations.delete","networkservices.operations.get","networkservices.operations.list","networkservices.route_views.get","networkservices.route_views.list","networkservices.serviceBindings.create","networkservices.serviceBindings.delete","networkservices.serviceBindings.get","networkservices.serviceBindings.list","networkservices.serviceBindings.update","networkservices.serviceLbPolicies.create","networkservices.serviceLbPolicies.delete","networkservices.serviceLbPolicies.get","networkservices.serviceLbPolicies.list","networkservices.serviceLbPolicies.update","networkservices.tcpRoutes.create","networkservices.tcpRoutes.delete","networkservices.tcpRoutes.get","networkservices.tcpRoutes.getIamPolicy","networkservices.tcpRoutes.list","networkservices.tcpRoutes.setIamPolicy","networkservices.tcpRoutes.update","networkservices.tcpRoutes.use","networkservices.tlsRoutes.create","networkservices.tlsRoutes.delete","networkservices.tlsRoutes.get","networkservices.tlsRoutes.list","networkservices.tlsRoutes.update","networkservices.tlsRoutes.use","resourcemanager.projects.get","resourcemanager.projects.list","servicedirectory.namespaces.create","servicedirectory.namespaces.delete","servicedirectory.services.create","servicedirectory.services.delete","servicenetworking.operations.get","servicenetworking.services.addPeering","servicenetworking.services.createPeeredDnsDomain","servicenetworking.services.deleteConnection","servicenetworking.services.deletePeeredDnsDomain","servicenetworking.services.disableVpcServiceControls","servicenetworking.services.enableVpcServiceControls","servicenetworking.services.get","servicenetworking.services.listPeeredDnsDomains","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list","trafficdirector.networks.getConfigs","trafficdirector.networks.reportMetrics"],"name":"roles/compute.networkAdmin","stage":"GA","title":"Compute Network Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Access to use Compute Engine networking resources.","etag":"AA==","includedPermissions":["compute.addresses.createInternal","compute.addresses.deleteInternal","compute.addresses.get","compute.addresses.list","compute.addresses.useInternal","compute.externalVpnGateways.get","compute.externalVpnGateways.list","compute.externalVpnGateways.listEffectiveTags","compute.externalVpnGateways.listTagBindings","compute.externalVpnGateways.use","compute.firewalls.get","compute.firewalls.list","compute.firewalls.listEffectiveTags","compute.firewalls.listTagBindings","compute.instanceSettings.get","compute.interconnectAttachments.get","compute.interconnectAttachments.list","compute.interconnectAttachments.listEffectiveTags","compute.interconnectAttachments.listTagBindings","compute.interconnectLocations.get","compute.interconnectLocations.list","compute.interconnectRemoteLocations.get","compute.interconnectRemoteLocations.list","compute.interconnects.get","compute.interconnects.list","compute.interconnects.listEffectiveTags","compute.interconnects.listTagBindings","compute.interconnects.use","compute.networkAttachments.get","compute.networkAttachments.list","compute.networks.access","compute.networks.get","compute.networks.getEffectiveFirewalls","compute.networks.getRegionEffectiveFirewalls","compute.networks.list","compute.networks.listEffectiveTags","compute.networks.listPeeringRoutes","compute.networks.listTagBindings","compute.networks.use","compute.networks.useExternalIp","compute.projects.get","compute.regions.get","compute.regions.list","compute.routers.get","compute.routers.getRoutePolicy","compute.routers.list","compute.routers.listBgpRoutes","compute.routers.listEffectiveTags","compute.routers.listRoutePolicies","compute.routers.listTagBindings","compute.routes.get","compute.routes.list","compute.routes.listEffectiveTags","compute.routes.listTagBindings","compute.serviceAttachments.get","compute.serviceAttachments.list","compute.subnetworks.get","compute.subnetworks.list","compute.subnetworks.listEffectiveTags","compute.subnetworks.listTagBindings","compute.subnetworks.use","compute.subnetworks.useExternalIp","compute.targetVpnGateways.get","compute.targetVpnGateways.list","compute.targetVpnGateways.listEffectiveTags","compute.targetVpnGateways.listTagBindings","compute.vpnGateways.get","compute.vpnGateways.list","compute.vpnGateways.listEffectiveTags","compute.vpnGateways.listTagBindings","compute.vpnGateways.use","compute.vpnTunnels.get","compute.vpnTunnels.list","compute.vpnTunnels.listEffectiveTags","compute.vpnTunnels.listTagBindings","compute.zones.get","compute.zones.list","networkconnectivity.internalRanges.get","networkconnectivity.internalRanges.list","networkconnectivity.locations.get","networkconnectivity.locations.list","networkconnectivity.operations.get","networkconnectivity.operations.list","networkconnectivity.policyBasedRoutes.get","networkconnectivity.policyBasedRoutes.list","networkmanagement.connectivitytests.get","networkmanagement.connectivitytests.list","networksecurity.addressGroups.get","networksecurity.addressGroups.list","networksecurity.addressGroups.use","networksecurity.authorizationPolicies.get","networksecurity.authorizationPolicies.list","networksecurity.authorizationPolicies.use","networksecurity.clientTlsPolicies.get","networksecurity.clientTlsPolicies.list","networksecurity.clientTlsPolicies.use","networksecurity.firewallEndpointAssociations.get","networksecurity.firewallEndpointAssociations.list","networksecurity.firewallEndpoints.get","networksecurity.firewallEndpoints.list","networksecurity.firewallEndpoints.use","networksecurity.gatewaySecurityPolicies.get","networksecurity.gatewaySecurityPolicies.list","networksecurity.gatewaySecurityPolicies.use","networksecurity.gatewaySecurityPolicyRules.get","networksecurity.gatewaySecurityPolicyRules.list","networksecurity.gatewaySecurityPolicyRules.use","networksecurity.locations.get","networksecurity.locations.list","networksecurity.operations.get","networksecurity.operations.list","networksecurity.securityProfileGroups.get","networksecurity.securityProfileGroups.list","networksecurity.securityProfileGroups.use","networksecurity.securityProfiles.get","networksecurity.securityProfiles.list","networksecurity.securityProfiles.use","networksecurity.serverTlsPolicies.get","networksecurity.serverTlsPolicies.list","networksecurity.serverTlsPolicies.use","networksecurity.tlsInspectionPolicies.get","networksecurity.tlsInspectionPolicies.list","networksecurity.tlsInspectionPolicies.use","networksecurity.urlLists.get","networksecurity.urlLists.list","networksecurity.urlLists.use","networkservices.endpointConfigSelectors.get","networkservices.endpointConfigSelectors.list","networkservices.endpointConfigSelectors.use","networkservices.endpointPolicies.get","networkservices.endpointPolicies.list","networkservices.endpointPolicies.use","networkservices.gateways.get","networkservices.gateways.list","networkservices.gateways.use","networkservices.grpcRoutes.get","networkservices.grpcRoutes.list","networkservices.grpcRoutes.use","networkservices.httpFilters.get","networkservices.httpFilters.list","networkservices.httpFilters.use","networkservices.httpRoutes.get","networkservices.httpRoutes.list","networkservices.httpRoutes.use","networkservices.httpfilters.get","networkservices.httpfilters.list","networkservices.httpfilters.use","networkservices.lbRouteExtensions.get","networkservices.lbRouteExtensions.list","networkservices.lbTrafficExtensions.get","networkservices.lbTrafficExtensions.list","networkservices.locations.get","networkservices.locations.list","networkservices.meshes.get","networkservices.meshes.list","networkservices.meshes.use","networkservices.operations.get","networkservices.operations.list","networkservices.route_views.get","networkservices.route_views.list","networkservices.serviceBindings.get","networkservices.serviceBindings.list","networkservices.serviceLbPolicies.get","networkservices.serviceLbPolicies.list","networkservices.tcpRoutes.get","networkservices.tcpRoutes.list","networkservices.tcpRoutes.use","networkservices.tlsRoutes.get","networkservices.tlsRoutes.list","networkservices.tlsRoutes.use","resourcemanager.projects.get","resourcemanager.projects.list","servicenetworking.services.get","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list"],"name":"roles/compute.networkUser","stage":"GA","title":"Compute Network User","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Read-only access to Compute Engine networking resources.","etag":"AA==","includedPermissions":["compute.acceleratorTypes.get","compute.acceleratorTypes.list","compute.addresses.get","compute.addresses.list","compute.autoscalers.get","compute.autoscalers.list","compute.backendBuckets.get","compute.backendBuckets.list","compute.backendBuckets.listEffectiveTags","compute.backendBuckets.listTagBindings","compute.backendServices.get","compute.backendServices.list","compute.backendServices.listEffectiveTags","compute.backendServices.listTagBindings","compute.disks.listEffectiveTags","compute.disks.listTagBindings","compute.externalVpnGateways.get","compute.externalVpnGateways.list","compute.externalVpnGateways.listEffectiveTags","compute.externalVpnGateways.listTagBindings","compute.firewalls.get","compute.firewalls.list","compute.firewalls.listEffectiveTags","compute.firewalls.listTagBindings","compute.forwardingRules.get","compute.forwardingRules.list","compute.forwardingRules.listEffectiveTags","compute.forwardingRules.listTagBindings","compute.globalAddresses.get","compute.globalAddresses.list","compute.globalForwardingRules.get","compute.globalForwardingRules.list","compute.globalForwardingRules.listEffectiveTags","compute.globalForwardingRules.listTagBindings","compute.globalForwardingRules.pscGet","compute.healthChecks.get","compute.healthChecks.list","compute.healthChecks.listEffectiveTags","compute.healthChecks.listTagBindings","compute.httpHealthChecks.get","compute.httpHealthChecks.list","compute.httpHealthChecks.listEffectiveTags","compute.httpHealthChecks.listTagBindings","compute.httpsHealthChecks.get","compute.httpsHealthChecks.list","compute.httpsHealthChecks.listEffectiveTags","compute.httpsHealthChecks.listTagBindings","compute.images.listEffectiveTags","compute.images.listTagBindings","compute.instanceGroupManagers.get","compute.instanceGroupManagers.list","compute.instanceGroupManagers.listEffectiveTags","compute.instanceGroupManagers.listTagBindings","compute.instanceGroups.get","compute.instanceGroups.list","compute.instanceSettings.get","compute.instances.get","compute.instances.getGuestAttributes","compute.instances.getScreenshot","compute.instances.getSerialPortOutput","compute.instances.list","compute.instances.listEffectiveTags","compute.instances.listReferrers","compute.instances.listTagBindings","compute.interconnectAttachments.get","compute.interconnectAttachments.list","compute.interconnectAttachments.listEffectiveTags","compute.interconnectAttachments.listTagBindings","compute.interconnectLocations.get","compute.interconnectLocations.list","compute.interconnectRemoteLocations.get","compute.interconnectRemoteLocations.list","compute.interconnects.get","compute.interconnects.list","compute.interconnects.listEffectiveTags","compute.interconnects.listTagBindings","compute.machineTypes.get","compute.machineTypes.list","compute.networkAttachments.get","compute.networkAttachments.list","compute.networks.get","compute.networks.getEffectiveFirewalls","compute.networks.getRegionEffectiveFirewalls","compute.networks.list","compute.networks.listEffectiveTags","compute.networks.listPeeringRoutes","compute.networks.listTagBindings","compute.packetMirrorings.get","compute.packetMirrorings.list","compute.projects.get","compute.regionBackendServices.get","compute.regionBackendServices.list","compute.regionBackendServices.listEffectiveTags","compute.regionBackendServices.listTagBindings","compute.regionHealthCheckServices.get","compute.regionHealthCheckServices.list","compute.regionHealthChecks.get","compute.regionHealthChecks.list","compute.regionHealthChecks.listEffectiveTags","compute.regionHealthChecks.listTagBindings","compute.regionNotificationEndpoints.get","compute.regionNotificationEndpoints.list","compute.regionSslCertificates.get","compute.regionSslCertificates.list","compute.regionSslCertificates.listEffectiveTags","compute.regionSslCertificates.listTagBindings","compute.regionSslPolicies.get","compute.regionSslPolicies.list","compute.regionSslPolicies.listAvailableFeatures","compute.regionTargetHttpProxies.get","compute.regionTargetHttpProxies.list","compute.regionTargetHttpProxies.listEffectiveTags","compute.regionTargetHttpProxies.listTagBindings","compute.regionTargetHttpsProxies.get","compute.regionTargetHttpsProxies.list","compute.regionTargetHttpsProxies.listEffectiveTags","compute.regionTargetHttpsProxies.listTagBindings","compute.regionTargetTcpProxies.get","compute.regionTargetTcpProxies.list","compute.regionUrlMaps.get","compute.regionUrlMaps.list","compute.regionUrlMaps.listEffectiveTags","compute.regionUrlMaps.listTagBindings","compute.regions.get","compute.regions.list","compute.routers.get","compute.routers.getRoutePolicy","compute.routers.list","compute.routers.listBgpRoutes","compute.routers.listEffectiveTags","compute.routers.listRoutePolicies","compute.routers.listTagBindings","compute.routes.get","compute.routes.list","compute.routes.listEffectiveTags","compute.routes.listTagBindings","compute.serviceAttachments.get","compute.serviceAttachments.list","compute.snapshots.listEffectiveTags","compute.snapshots.listTagBindings","compute.sslCertificates.get","compute.sslCertificates.list","compute.sslCertificates.listEffectiveTags","compute.sslCertificates.listTagBindings","compute.sslPolicies.get","compute.sslPolicies.list","compute.sslPolicies.listAvailableFeatures","compute.sslPolicies.listEffectiveTags","compute.sslPolicies.listTagBindings","compute.subnetworks.get","compute.subnetworks.list","compute.subnetworks.listEffectiveTags","compute.subnetworks.listTagBindings","compute.targetGrpcProxies.get","compute.targetGrpcProxies.list","compute.targetHttpProxies.get","compute.targetHttpProxies.list","compute.targetHttpProxies.listEffectiveTags","compute.targetHttpProxies.listTagBindings","compute.targetHttpsProxies.get","compute.targetHttpsProxies.list","compute.targetHttpsProxies.listEffectiveTags","compute.targetHttpsProxies.listTagBindings","compute.targetInstances.get","compute.targetInstances.list","compute.targetInstances.listEffectiveTags","compute.targetInstances.listTagBindings","compute.targetPools.get","compute.targetPools.list","compute.targetPools.listEffectiveTags","compute.targetPools.listTagBindings","compute.targetSslProxies.get","compute.targetSslProxies.list","compute.targetSslProxies.listEffectiveTags","compute.targetSslProxies.listTagBindings","compute.targetTcpProxies.get","compute.targetTcpProxies.list","compute.targetTcpProxies.listEffectiveTags","compute.targetTcpProxies.listTagBindings","compute.targetVpnGateways.get","compute.targetVpnGateways.list","compute.targetVpnGateways.listEffectiveTags","compute.targetVpnGateways.listTagBindings","compute.urlMaps.get","compute.urlMaps.list","compute.urlMaps.listEffectiveTags","compute.urlMaps.listTagBindings","compute.vpnGateways.get","compute.vpnGateways.list","compute.vpnGateways.listEffectiveTags","compute.vpnGateways.listTagBindings","compute.vpnTunnels.get","compute.vpnTunnels.list","compute.vpnTunnels.listEffectiveTags","compute.vpnTunnels.listTagBindings","compute.zones.get","compute.zones.list","networkconnectivity.internalRanges.get","networkconnectivity.internalRanges.list","networkconnectivity.locations.get","networkconnectivity.locations.list","networkconnectivity.operations.get","networkconnectivity.operations.list","networkconnectivity.policyBasedRoutes.get","networkconnectivity.policyBasedRoutes.list","networkmanagement.connectivitytests.get","networkmanagement.connectivitytests.list","networksecurity.addressGroups.get","networksecurity.addressGroups.list","networksecurity.authorizationPolicies.get","networksecurity.authorizationPolicies.list","networksecurity.clientTlsPolicies.get","networksecurity.clientTlsPolicies.list","networksecurity.firewallEndpointAssociations.get","networksecurity.firewallEndpointAssociations.list","networksecurity.firewallEndpoints.get","networksecurity.firewallEndpoints.list","networksecurity.gatewaySecurityPolicies.get","networksecurity.gatewaySecurityPolicies.list","networksecurity.gatewaySecurityPolicyRules.get","networksecurity.gatewaySecurityPolicyRules.list","networksecurity.locations.get","networksecurity.locations.list","networksecurity.operations.get","networksecurity.operations.list","networksecurity.securityProfileGroups.get","networksecurity.securityProfileGroups.list","networksecurity.securityProfiles.get","networksecurity.securityProfiles.list","networksecurity.serverTlsPolicies.get","networksecurity.serverTlsPolicies.list","networksecurity.tlsInspectionPolicies.get","networksecurity.tlsInspectionPolicies.list","networksecurity.urlLists.get","networksecurity.urlLists.list","networkservices.endpointConfigSelectors.get","networkservices.endpointConfigSelectors.list","networkservices.endpointPolicies.get","networkservices.endpointPolicies.list","networkservices.gateways.get","networkservices.gateways.list","networkservices.grpcRoutes.get","networkservices.grpcRoutes.list","networkservices.httpFilters.get","networkservices.httpFilters.list","networkservices.httpRoutes.get","networkservices.httpRoutes.list","networkservices.httpfilters.get","networkservices.httpfilters.list","networkservices.lbRouteExtensions.get","networkservices.lbRouteExtensions.list","networkservices.lbTrafficExtensions.get","networkservices.lbTrafficExtensions.list","networkservices.locations.get","networkservices.locations.list","networkservices.meshes.get","networkservices.meshes.list","networkservices.operations.get","networkservices.operations.list","networkservices.route_views.get","networkservices.route_views.list","networkservices.serviceBindings.get","networkservices.serviceBindings.list","networkservices.serviceLbPolicies.get","networkservices.serviceLbPolicies.list","networkservices.tcpRoutes.get","networkservices.tcpRoutes.list","networkservices.tlsRoutes.get","networkservices.tlsRoutes.list","resourcemanager.projects.get","resourcemanager.projects.list","servicenetworking.services.get","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list","trafficdirector.networks.getConfigs","trafficdirector.networks.reportMetrics"],"name":"roles/compute.networkViewer","stage":"GA","title":"Compute Network Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} -{"description":"Full control of Compute Engine Organization Firewall Policies.","etag":"AA==","includedPermissions":["compute.firewallPolicies.cloneRules","compute.firewallPolicies.create","compute.firewallPolicies.createTagBinding","compute.firewallPolicies.delete","compute.firewallPolicies.deleteTagBinding","compute.firewallPolicies.get","compute.firewallPolicies.getIamPolicy","compute.firewallPolicies.list","compute.firewallPolicies.listEffectiveTags","compute.firewallPolicies.listTagBindings","compute.firewallPolicies.move","compute.firewallPolicies.setIamPolicy","compute.firewallPolicies.update","compute.firewallPolicies.use","compute.globalOperations.get","compute.globalOperations.getIamPolicy","compute.globalOperations.list","compute.globalOperations.setIamPolicy","compute.projects.get","compute.regionFirewallPolicies.cloneRules","compute.regionFirewallPolicies.create","compute.regionFirewallPolicies.createTagBinding","compute.regionFirewallPolicies.delete","compute.regionFirewallPolicies.deleteTagBinding","compute.regionFirewallPolicies.get","compute.regionFirewallPolicies.getIamPolicy","compute.regionFirewallPolicies.list","compute.regionFirewallPolicies.listEffectiveTags","compute.regionFirewallPolicies.listTagBindings","compute.regionFirewallPolicies.setIamPolicy","compute.regionFirewallPolicies.update","compute.regionFirewallPolicies.use","compute.regionOperations.get","compute.regionOperations.getIamPolicy","compute.regionOperations.list","compute.regionOperations.setIamPolicy","resourcemanager.projects.get","resourcemanager.projects.list","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list"],"name":"roles/compute.orgFirewallPolicyAdmin","stage":"GA","title":"Compute Organization Firewall Policy Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Full control of Compute Engine Organization Firewall Policies.","etag":"AA==","includedPermissions":["compute.firewallPolicies.cloneRules","compute.firewallPolicies.copyRules","compute.firewallPolicies.create","compute.firewallPolicies.createTagBinding","compute.firewallPolicies.delete","compute.firewallPolicies.deleteTagBinding","compute.firewallPolicies.get","compute.firewallPolicies.getIamPolicy","compute.firewallPolicies.list","compute.firewallPolicies.listEffectiveTags","compute.firewallPolicies.listTagBindings","compute.firewallPolicies.move","compute.firewallPolicies.setIamPolicy","compute.firewallPolicies.update","compute.firewallPolicies.use","compute.globalOperations.get","compute.globalOperations.getIamPolicy","compute.globalOperations.list","compute.globalOperations.setIamPolicy","compute.projects.get","compute.regionFirewallPolicies.cloneRules","compute.regionFirewallPolicies.create","compute.regionFirewallPolicies.createTagBinding","compute.regionFirewallPolicies.delete","compute.regionFirewallPolicies.deleteTagBinding","compute.regionFirewallPolicies.get","compute.regionFirewallPolicies.getIamPolicy","compute.regionFirewallPolicies.list","compute.regionFirewallPolicies.listEffectiveTags","compute.regionFirewallPolicies.listTagBindings","compute.regionFirewallPolicies.setIamPolicy","compute.regionFirewallPolicies.update","compute.regionFirewallPolicies.use","compute.regionOperations.get","compute.regionOperations.getIamPolicy","compute.regionOperations.list","compute.regionOperations.setIamPolicy","resourcemanager.projects.get","resourcemanager.projects.list","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list"],"name":"roles/compute.orgFirewallPolicyAdmin","stage":"GA","title":"Compute Organization Firewall Policy Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"View or use Compute Engine Firewall Policies to associate with the organization or folders.","etag":"AA==","includedPermissions":["compute.firewallPolicies.get","compute.firewallPolicies.list","compute.firewallPolicies.listEffectiveTags","compute.firewallPolicies.listTagBindings","compute.firewallPolicies.use","compute.globalOperations.get","compute.globalOperations.getIamPolicy","compute.globalOperations.list","compute.projects.get","compute.regionFirewallPolicies.get","compute.regionFirewallPolicies.list","compute.regionFirewallPolicies.listEffectiveTags","compute.regionFirewallPolicies.listTagBindings","compute.regionFirewallPolicies.use","compute.regionOperations.get","compute.regionOperations.getIamPolicy","compute.regionOperations.list","resourcemanager.projects.get","resourcemanager.projects.list","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list"],"name":"roles/compute.orgFirewallPolicyUser","stage":"GA","title":"Compute Organization Firewall Policy User","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Full control of Compute Engine Organization Security Policies.","etag":"AA==","includedPermissions":["compute.firewallPolicies.addAssociation","compute.firewallPolicies.cloneRules","compute.firewallPolicies.copyRules","compute.firewallPolicies.create","compute.firewallPolicies.createTagBinding","compute.firewallPolicies.delete","compute.firewallPolicies.deleteTagBinding","compute.firewallPolicies.get","compute.firewallPolicies.getIamPolicy","compute.firewallPolicies.list","compute.firewallPolicies.listEffectiveTags","compute.firewallPolicies.listTagBindings","compute.firewallPolicies.move","compute.firewallPolicies.removeAssociation","compute.firewallPolicies.setIamPolicy","compute.firewallPolicies.update","compute.firewallPolicies.use","compute.globalOperations.get","compute.globalOperations.getIamPolicy","compute.globalOperations.list","compute.globalOperations.setIamPolicy","compute.projects.get","compute.securityPolicies.addAssociation","compute.securityPolicies.copyRules","compute.securityPolicies.create","compute.securityPolicies.createTagBinding","compute.securityPolicies.delete","compute.securityPolicies.deleteTagBinding","compute.securityPolicies.get","compute.securityPolicies.getIamPolicy","compute.securityPolicies.list","compute.securityPolicies.listEffectiveTags","compute.securityPolicies.listTagBindings","compute.securityPolicies.move","compute.securityPolicies.removeAssociation","compute.securityPolicies.setIamPolicy","compute.securityPolicies.update","compute.securityPolicies.use","resourcemanager.projects.get","resourcemanager.projects.list","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list"],"name":"roles/compute.orgSecurityPolicyAdmin","stage":"GA","title":"Compute Organization Security Policy Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"View or use Compute Engine Security Policies to associate with the organization or folders.","etag":"AA==","includedPermissions":["compute.firewallPolicies.addAssociation","compute.firewallPolicies.get","compute.firewallPolicies.list","compute.firewallPolicies.listEffectiveTags","compute.firewallPolicies.listTagBindings","compute.firewallPolicies.removeAssociation","compute.firewallPolicies.use","compute.globalOperations.get","compute.globalOperations.getIamPolicy","compute.globalOperations.list","compute.globalOperations.setIamPolicy","compute.projects.get","compute.securityPolicies.addAssociation","compute.securityPolicies.get","compute.securityPolicies.list","compute.securityPolicies.listEffectiveTags","compute.securityPolicies.listTagBindings","compute.securityPolicies.removeAssociation","compute.securityPolicies.use","resourcemanager.projects.get","resourcemanager.projects.list","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list"],"name":"roles/compute.orgSecurityPolicyUser","stage":"GA","title":"Compute Organization Security Policy User","asset_type":"iam.googleapis.com/ExportedIAMRole"} @@ -646,6 +646,7 @@ {"description":"Read access to backup schedules in Cloud Datastore.","etag":"AA==","includedPermissions":["datastore.backupSchedules.get","datastore.backupSchedules.list"],"name":"roles/datastore.backupSchedulesViewer","stage":"GA","title":"Cloud Datastore Backup Schedules Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Read/Write access to metadata about backups in Cloud Datastore but restore is not allowed.","etag":"AA==","includedPermissions":["datastore.backups.delete","datastore.backups.get","datastore.backups.list"],"name":"roles/datastore.backupsAdmin","stage":"GA","title":"Cloud Datastore Backups Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Read access to metadata about backups in Cloud Datastore.","etag":"AA==","includedPermissions":["datastore.backups.get","datastore.backups.list"],"name":"roles/datastore.backupsViewer","stage":"GA","title":"Cloud Datastore Backups Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Full access to manage bulk operations.","etag":"AA==","includedPermissions":["datastore.databases.getMetadata","datastore.operations.cancel","datastore.operations.get","datastore.operations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/datastore.bulkAdmin","stage":"ALPHA","title":"Cloud Datastore Bulk Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Full access to manage imports and exports.","etag":"AA==","includedPermissions":["appengine.applications.get","datastore.databases.export","datastore.databases.getMetadata","datastore.databases.import","datastore.operations.cancel","datastore.operations.get","datastore.operations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/datastore.importExportAdmin","stage":"GA","title":"Cloud Datastore Import Export Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Full access to manage index definitions.","etag":"AA==","includedPermissions":["appengine.applications.get","datastore.databases.getMetadata","datastore.indexes.create","datastore.indexes.delete","datastore.indexes.get","datastore.indexes.list","datastore.indexes.update","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/datastore.indexAdmin","stage":"GA","title":"Cloud Datastore Index Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Full access to Key Visualizer scans.","etag":"AA==","includedPermissions":["datastore.databases.getMetadata","datastore.keyVisualizerScans.get","datastore.keyVisualizerScans.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/datastore.keyVisualizerViewer","stage":"GA","title":"Cloud Datastore Key Visualizer Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} @@ -1287,6 +1288,8 @@ {"description":"Admin of Error Reporting Insights and Recommendations.","etag":"AA==","includedPermissions":["recommender.errorReportingInsights.get","recommender.errorReportingInsights.list","recommender.errorReportingInsights.update","recommender.errorReportingRecommendations.get","recommender.errorReportingRecommendations.list","recommender.errorReportingRecommendations.update","recommender.locations.get","recommender.locations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/recommender.errorReportingAdmin","stage":"GA","title":"Error Reporting Recommender Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Viewer of Error Reporting Insights and Recommendations.","etag":"AA==","includedPermissions":["recommender.errorReportingInsights.get","recommender.errorReportingInsights.list","recommender.errorReportingRecommendations.get","recommender.errorReportingRecommendations.list","recommender.locations.get","recommender.locations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/recommender.errorReportingViewer","stage":"GA","title":"Error Reporting Recommender Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Exporter of Recommendations","etag":"AA==","includedPermissions":["recommender.resources.export"],"name":"roles/recommender.exporter","stage":"GA","title":"Recommendations Exporter","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Admin of Firestore Database Reliability Insights and Recommendations.","etag":"AA==","includedPermissions":["recommender.locations.get","recommender.locations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/recommender.firestoredatabasereliabilityAdmin","stage":"ALPHA","title":"Firestore Database Reliability Recommender Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Viewer of Firestore Database Reliability Insights and Recommendations.","etag":"AA==","includedPermissions":["recommender.locations.get","recommender.locations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/recommender.firestoredatabasereliabilityViewer","stage":"ALPHA","title":"Firestore Database Reliability Recommender Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Admin of Firewall insights and recommendations.","etag":"AA==","includedPermissions":["monitoring.timeSeries.list","recommender.computeFirewallInsightTypeConfigs.get","recommender.computeFirewallInsightTypeConfigs.update","recommender.computeFirewallInsights.get","recommender.computeFirewallInsights.list","recommender.computeFirewallInsights.update","recommender.locations.get","recommender.locations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/recommender.firewallAdmin","stage":"GA","title":"Firewall Recommender Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Viewer of Firewall insights and recommendations.","etag":"AA==","includedPermissions":["monitoring.timeSeries.list","recommender.computeFirewallInsightTypeConfigs.get","recommender.computeFirewallInsights.get","recommender.computeFirewallInsights.list","recommender.locations.get","recommender.locations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/recommender.firewallViewer","stage":"GA","title":"Firewall Recommender Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Admin of all Google Maps Platform insights and recommendations.","etag":"AA==","includedPermissions":["recommender.gmpGuidedExperienceInsights.get","recommender.gmpGuidedExperienceInsights.list","recommender.gmpGuidedExperienceInsights.update","recommender.gmpGuidedExperienceRecommendations.get","recommender.gmpGuidedExperienceRecommendations.list","recommender.gmpGuidedExperienceRecommendations.update","recommender.gmpProjectManagementInsights.get","recommender.gmpProjectManagementInsights.list","recommender.gmpProjectManagementInsights.update","recommender.gmpProjectManagementRecommendations.get","recommender.gmpProjectManagementRecommendations.list","recommender.gmpProjectManagementRecommendations.update","recommender.gmpProjectProductSuggestionsInsights.get","recommender.gmpProjectProductSuggestionsInsights.list","recommender.gmpProjectProductSuggestionsInsights.update","recommender.gmpProjectProductSuggestionsRecommendations.get","recommender.gmpProjectProductSuggestionsRecommendations.list","recommender.gmpProjectProductSuggestionsRecommendations.update","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/recommender.gmpAdmin","stage":"GA","title":"Google Maps Platform Insights/Recommendations Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} @@ -1428,6 +1431,7 @@ {"description":"Security Center automation service agent can configure GCP resources to enable security scanning.","etag":"AA==","includedPermissions":["cloudasset.feeds.create","cloudasset.feeds.delete","cloudasset.feeds.get","cloudasset.feeds.list","cloudasset.feeds.update","resourcemanager.folders.get","resourcemanager.folders.list","resourcemanager.organizations.get","resourcemanager.projects.get","resourcemanager.projects.getIamPolicy","resourcemanager.projects.list","serviceusage.services.enable","serviceusage.services.get"],"name":"roles/securitycenter.automationServiceAgent","stage":"GA","title":"Security Center Automation Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Read-Write access to security center BigQuery Exports","etag":"AA==","includedPermissions":["resourcemanager.folders.get","resourcemanager.folders.list","resourcemanager.organizations.get","resourcemanager.projects.get","resourcemanager.projects.list","securitycenter.bigQueryExports.create","securitycenter.bigQueryExports.delete","securitycenter.bigQueryExports.get","securitycenter.bigQueryExports.list","securitycenter.bigQueryExports.update"],"name":"roles/securitycenter.bigQueryExportsEditor","stage":"GA","title":"Security Center BigQuery Exports Editor","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Read access to security center BigQuery Exports","etag":"AA==","includedPermissions":["resourcemanager.folders.get","resourcemanager.folders.list","resourcemanager.organizations.get","resourcemanager.projects.get","resourcemanager.projects.list","securitycenter.bigQueryExports.get","securitycenter.bigQueryExports.list"],"name":"roles/securitycenter.bigQueryExportsViewer","stage":"GA","title":"Security Center BigQuery Exports Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Read access to security center compliance reports","etag":"AA==","name":"roles/securitycenter.complianceReportsViewer","stage":"ALPHA","title":"Security Center Compliance Reports Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Read access to security center compliance snapshots","etag":"AA==","includedPermissions":["securitycenter.compliancesnapshots.list"],"name":"roles/securitycenter.complianceSnapshotsViewer","stage":"BETA","title":"Security Center Compliance Snapshots Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Security Center Control service agent can monitor and configure GCP resources and import security findings.","etag":"AA==","includedPermissions":["bigquery.datasets.get","binaryauthorization.policy.get","cloudasset.assets.analyzeIamPolicy","cloudasset.assets.analyzeMove","cloudasset.assets.analyzeOrgPolicy","cloudasset.assets.exportAccessLevel","cloudasset.assets.exportAccessPolicy","cloudasset.assets.exportAiplatformBatchPredictionJobs","cloudasset.assets.exportAiplatformCustomJobs","cloudasset.assets.exportAiplatformDataLabelingJobs","cloudasset.assets.exportAiplatformDatasets","cloudasset.assets.exportAiplatformEndpoints","cloudasset.assets.exportAiplatformHyperparameterTuningJobs","cloudasset.assets.exportAiplatformMetadataStores","cloudasset.assets.exportAiplatformModelDeploymentMonitoringJobs","cloudasset.assets.exportAiplatformModels","cloudasset.assets.exportAiplatformPipelineJobs","cloudasset.assets.exportAiplatformSpecialistPools","cloudasset.assets.exportAiplatformTrainingPipelines","cloudasset.assets.exportAllAccessPolicy","cloudasset.assets.exportAnthosConnectedCluster","cloudasset.assets.exportAnthosedgeCluster","cloudasset.assets.exportApigatewayApi","cloudasset.assets.exportApigatewayApiConfig","cloudasset.assets.exportApigatewayGateway","cloudasset.assets.exportApikeysKeys","cloudasset.assets.exportAppengineApplications","cloudasset.assets.exportAppengineServices","cloudasset.assets.exportAppengineVersions","cloudasset.assets.exportArtifactregistryDockerImages","cloudasset.assets.exportArtifactregistryRepositories","cloudasset.assets.exportAssuredWorkloadsWorkloads","cloudasset.assets.exportBeyondCorpApiGateways","cloudasset.assets.exportBeyondCorpAppConnections","cloudasset.assets.exportBeyondCorpAppConnectors","cloudasset.assets.exportBeyondCorpAppGateways","cloudasset.assets.exportBeyondCorpClientConnectorServices","cloudasset.assets.exportBeyondCorpClientGateways","cloudasset.assets.exportBigqueryDatasets","cloudasset.assets.exportBigqueryModels","cloudasset.assets.exportBigqueryTables","cloudasset.assets.exportBigtableAppProfile","cloudasset.assets.exportBigtableBackup","cloudasset.assets.exportBigtableCluster","cloudasset.assets.exportBigtableInstance","cloudasset.assets.exportBigtableTable","cloudasset.assets.exportCloudAssetFeeds","cloudasset.assets.exportCloudDeployDeliveryPipelines","cloudasset.assets.exportCloudDeployReleases","cloudasset.assets.exportCloudDeployRollouts","cloudasset.assets.exportCloudDeployTargets","cloudasset.assets.exportCloudDocumentAIEvaluation","cloudasset.assets.exportCloudDocumentAIHumanReviewConfig","cloudasset.assets.exportCloudDocumentAILabelerPool","cloudasset.assets.exportCloudDocumentAIProcessor","cloudasset.assets.exportCloudDocumentAIProcessorVersion","cloudasset.assets.exportCloudbillingBillingAccounts","cloudasset.assets.exportCloudbillingProjectBillingInfos","cloudasset.assets.exportCloudfunctionsFunctions","cloudasset.assets.exportCloudfunctionsGen2Functions","cloudasset.assets.exportCloudkmsCryptoKeyVersions","cloudasset.assets.exportCloudkmsCryptoKeys","cloudasset.assets.exportCloudkmsEkmConnections","cloudasset.assets.exportCloudkmsImportJobs","cloudasset.assets.exportCloudkmsKeyRings","cloudasset.assets.exportCloudmemcacheInstances","cloudasset.assets.exportCloudresourcemanagerFolders","cloudasset.assets.exportCloudresourcemanagerOrganizations","cloudasset.assets.exportCloudresourcemanagerProjects","cloudasset.assets.exportCloudresourcemanagerTagBindings","cloudasset.assets.exportCloudresourcemanagerTagKeys","cloudasset.assets.exportCloudresourcemanagerTagValues","cloudasset.assets.exportComposerEnvironments","cloudasset.assets.exportComputeAddress","cloudasset.assets.exportComputeAutoscalers","cloudasset.assets.exportComputeBackendBuckets","cloudasset.assets.exportComputeBackendServices","cloudasset.assets.exportComputeCommitments","cloudasset.assets.exportComputeDisks","cloudasset.assets.exportComputeExternalVpnGateways","cloudasset.assets.exportComputeFirewallPolicies","cloudasset.assets.exportComputeFirewalls","cloudasset.assets.exportComputeForwardingRules","cloudasset.assets.exportComputeGlobalAddress","cloudasset.assets.exportComputeGlobalForwardingRules","cloudasset.assets.exportComputeHealthChecks","cloudasset.assets.exportComputeHttpHealthChecks","cloudasset.assets.exportComputeHttpsHealthChecks","cloudasset.assets.exportComputeImages","cloudasset.assets.exportComputeInstanceGroupManagers","cloudasset.assets.exportComputeInstanceGroups","cloudasset.assets.exportComputeInstanceTemplates","cloudasset.assets.exportComputeInstances","cloudasset.assets.exportComputeInterconnect","cloudasset.assets.exportComputeInterconnectAttachment","cloudasset.assets.exportComputeLicenses","cloudasset.assets.exportComputeNetworkEndpointGroups","cloudasset.assets.exportComputeNetworks","cloudasset.assets.exportComputeNodeGroups","cloudasset.assets.exportComputeNodeTemplates","cloudasset.assets.exportComputePacketMirrorings","cloudasset.assets.exportComputeProjects","cloudasset.assets.exportComputeRegionAutoscaler","cloudasset.assets.exportComputeRegionBackendServices","cloudasset.assets.exportComputeRegionDisk","cloudasset.assets.exportComputeRegionInstanceGroup","cloudasset.assets.exportComputeRegionInstanceGroupManager","cloudasset.assets.exportComputeReservations","cloudasset.assets.exportComputeResourcePolicies","cloudasset.assets.exportComputeRouters","cloudasset.assets.exportComputeRoutes","cloudasset.assets.exportComputeSecurityPolicy","cloudasset.assets.exportComputeServiceAttachments","cloudasset.assets.exportComputeSnapshots","cloudasset.assets.exportComputeSslCertificates","cloudasset.assets.exportComputeSslPolicies","cloudasset.assets.exportComputeSubnetworks","cloudasset.assets.exportComputeTargetHttpProxies","cloudasset.assets.exportComputeTargetHttpsProxies","cloudasset.assets.exportComputeTargetInstances","cloudasset.assets.exportComputeTargetPools","cloudasset.assets.exportComputeTargetSslProxies","cloudasset.assets.exportComputeTargetTcpProxies","cloudasset.assets.exportComputeTargetVpnGateways","cloudasset.assets.exportComputeUrlMaps","cloudasset.assets.exportComputeVpnGateways","cloudasset.assets.exportComputeVpnTunnels","cloudasset.assets.exportConnectorsConnections","cloudasset.assets.exportConnectorsConnectorVersions","cloudasset.assets.exportConnectorsConnectors","cloudasset.assets.exportConnectorsProviders","cloudasset.assets.exportConnectorsRuntimeConfigs","cloudasset.assets.exportContainerAppsDeployment","cloudasset.assets.exportContainerAppsReplicaSets","cloudasset.assets.exportContainerBatchJobs","cloudasset.assets.exportContainerClusterrole","cloudasset.assets.exportContainerClusterrolebinding","cloudasset.assets.exportContainerClusters","cloudasset.assets.exportContainerExtensionsIngresses","cloudasset.assets.exportContainerJobs","cloudasset.assets.exportContainerNamespace","cloudasset.assets.exportContainerNetworkingIngresses","cloudasset.assets.exportContainerNetworkingNetworkPolicies","cloudasset.assets.exportContainerNode","cloudasset.assets.exportContainerNodepool","cloudasset.assets.exportContainerPod","cloudasset.assets.exportContainerReplicaSets","cloudasset.assets.exportContainerRole","cloudasset.assets.exportContainerRolebinding","cloudasset.assets.exportContainerServices","cloudasset.assets.exportContainerregistryImage","cloudasset.assets.exportDataMigrationConnectionProfiles","cloudasset.assets.exportDataMigrationMigrationJobs","cloudasset.assets.exportDataflowJobs","cloudasset.assets.exportDatafusionInstance","cloudasset.assets.exportDataplexAssets","cloudasset.assets.exportDataplexLakes","cloudasset.assets.exportDataplexTasks","cloudasset.assets.exportDataplexZones","cloudasset.assets.exportDataprocAutoscalingPolicies","cloudasset.assets.exportDataprocBatches","cloudasset.assets.exportDataprocClusters","cloudasset.assets.exportDataprocJobs","cloudasset.assets.exportDataprocSessions","cloudasset.assets.exportDataprocWorkflowTemplates","cloudasset.assets.exportDatastreamConnectionProfile","cloudasset.assets.exportDatastreamPrivateConnection","cloudasset.assets.exportDatastreamStream","cloudasset.assets.exportDialogflowAgents","cloudasset.assets.exportDialogflowConversationProfiles","cloudasset.assets.exportDialogflowKnowledgeBases","cloudasset.assets.exportDialogflowLocationSettings","cloudasset.assets.exportDlpDeidentifyTemplates","cloudasset.assets.exportDlpDlpJobs","cloudasset.assets.exportDlpInspectTemplates","cloudasset.assets.exportDlpJobTriggers","cloudasset.assets.exportDlpStoredInfoTypes","cloudasset.assets.exportDnsManagedZones","cloudasset.assets.exportDnsPolicies","cloudasset.assets.exportDomainsRegistrations","cloudasset.assets.exportEventarcTriggers","cloudasset.assets.exportFileBackups","cloudasset.assets.exportFileInstances","cloudasset.assets.exportFirebaseAppInfos","cloudasset.assets.exportFirebaseProjects","cloudasset.assets.exportFirestoreDatabases","cloudasset.assets.exportGKEHubFeatures","cloudasset.assets.exportGKEHubMemberships","cloudasset.assets.exportGameservicesGameServerClusters","cloudasset.assets.exportGameservicesGameServerConfigs","cloudasset.assets.exportGameservicesGameServerDeployments","cloudasset.assets.exportGameservicesRealms","cloudasset.assets.exportGkeBackupBackupPlans","cloudasset.assets.exportGkeBackupBackups","cloudasset.assets.exportGkeBackupRestorePlans","cloudasset.assets.exportGkeBackupRestores","cloudasset.assets.exportGkeBackupVolumeBackups","cloudasset.assets.exportGkeBackupVolumeRestores","cloudasset.assets.exportHealthcareConsentStores","cloudasset.assets.exportHealthcareDatasets","cloudasset.assets.exportHealthcareDicomStores","cloudasset.assets.exportHealthcareFhirStores","cloudasset.assets.exportHealthcareHl7V2Stores","cloudasset.assets.exportIamPolicy","cloudasset.assets.exportIamRoles","cloudasset.assets.exportIamServiceAccountKeys","cloudasset.assets.exportIamServiceAccounts","cloudasset.assets.exportIapTunnel","cloudasset.assets.exportIapTunnelInstances","cloudasset.assets.exportIapTunnelZones","cloudasset.assets.exportIapWeb","cloudasset.assets.exportIapWebServiceVersion","cloudasset.assets.exportIapWebServices","cloudasset.assets.exportIapWebType","cloudasset.assets.exportIdsEndpoints","cloudasset.assets.exportIntegrationsAuthConfigs","cloudasset.assets.exportIntegrationsCertificates","cloudasset.assets.exportIntegrationsExecutions","cloudasset.assets.exportIntegrationsIntegrationVersions","cloudasset.assets.exportIntegrationsIntegrations","cloudasset.assets.exportIntegrationsSfdcChannels","cloudasset.assets.exportIntegrationsSfdcInstances","cloudasset.assets.exportIntegrationsSuspensions","cloudasset.assets.exportLoggingLogMetrics","cloudasset.assets.exportLoggingLogSinks","cloudasset.assets.exportManagedidentitiesDomain","cloudasset.assets.exportMetastoreBackups","cloudasset.assets.exportMetastoreMetadataImports","cloudasset.assets.exportMetastoreServices","cloudasset.assets.exportMonitoringAlertPolicies","cloudasset.assets.exportNetworkConnectivityHubs","cloudasset.assets.exportNetworkConnectivitySpokes","cloudasset.assets.exportNetworkManagementConnectivityTests","cloudasset.assets.exportNetworkServicesEndpointPolicies","cloudasset.assets.exportNetworkServicesGateways","cloudasset.assets.exportNetworkServicesGrpcRoutes","cloudasset.assets.exportNetworkServicesHttpRoutes","cloudasset.assets.exportNetworkServicesMeshes","cloudasset.assets.exportNetworkServicesServiceBindings","cloudasset.assets.exportNetworkServicesTcpRoutes","cloudasset.assets.exportNetworkServicesTlsRoutes","cloudasset.assets.exportOSConfigOSPolicyAssignmentReports","cloudasset.assets.exportOSConfigOSPolicyAssignments","cloudasset.assets.exportOSConfigVulnerabilityReports","cloudasset.assets.exportOSInventories","cloudasset.assets.exportOrgPolicy","cloudasset.assets.exportPatchDeployments","cloudasset.assets.exportPubsubSnapshots","cloudasset.assets.exportPubsubSubscriptions","cloudasset.assets.exportPubsubTopics","cloudasset.assets.exportRedisInstances","cloudasset.assets.exportResource","cloudasset.assets.exportSecretManagerSecretVersions","cloudasset.assets.exportSecretManagerSecrets","cloudasset.assets.exportServiceDirectoryNamespaces","cloudasset.assets.exportServicePerimeter","cloudasset.assets.exportServiceconsumermanagementConsumerProperty","cloudasset.assets.exportServiceconsumermanagementConsumerQuotaLimits","cloudasset.assets.exportServiceconsumermanagementConsumers","cloudasset.assets.exportServiceconsumermanagementProducerOverrides","cloudasset.assets.exportServiceconsumermanagementTenancyUnits","cloudasset.assets.exportServiceconsumermanagementVisibility","cloudasset.assets.exportServicemanagementServices","cloudasset.assets.exportServiceusageAdminOverrides","cloudasset.assets.exportServiceusageConsumerOverrides","cloudasset.assets.exportServiceusageServices","cloudasset.assets.exportSpannerBackups","cloudasset.assets.exportSpannerDatabases","cloudasset.assets.exportSpannerInstances","cloudasset.assets.exportSpeakerIdPhrases","cloudasset.assets.exportSpeakerIdSettings","cloudasset.assets.exportSpeakerIdSpeakers","cloudasset.assets.exportSpeechCustomClasses","cloudasset.assets.exportSpeechPhraseSets","cloudasset.assets.exportSqladminBackupRuns","cloudasset.assets.exportSqladminInstances","cloudasset.assets.exportStorageBuckets","cloudasset.assets.exportTpuNodes","cloudasset.assets.exportVpcaccessConnector","cloudasset.assets.listAccessLevel","cloudasset.assets.listAccessPolicy","cloudasset.assets.listAiplatformBatchPredictionJobs","cloudasset.assets.listAiplatformCustomJobs","cloudasset.assets.listAiplatformDataLabelingJobs","cloudasset.assets.listAiplatformDatasets","cloudasset.assets.listAiplatformEndpoints","cloudasset.assets.listAiplatformHyperparameterTuningJobs","cloudasset.assets.listAiplatformMetadataStores","cloudasset.assets.listAiplatformModelDeploymentMonitoringJobs","cloudasset.assets.listAiplatformModels","cloudasset.assets.listAiplatformPipelineJobs","cloudasset.assets.listAiplatformSpecialistPools","cloudasset.assets.listAiplatformTrainingPipelines","cloudasset.assets.listAllAccessPolicy","cloudasset.assets.listAnthosConnectedCluster","cloudasset.assets.listAnthosedgeCluster","cloudasset.assets.listApigatewayApi","cloudasset.assets.listApigatewayApiConfig","cloudasset.assets.listApigatewayGateway","cloudasset.assets.listApikeysKeys","cloudasset.assets.listAppengineApplications","cloudasset.assets.listAppengineServices","cloudasset.assets.listAppengineVersions","cloudasset.assets.listArtifactregistryDockerImages","cloudasset.assets.listArtifactregistryRepositories","cloudasset.assets.listAssuredWorkloadsWorkloads","cloudasset.assets.listBeyondCorpApiGateways","cloudasset.assets.listBeyondCorpAppConnections","cloudasset.assets.listBeyondCorpAppConnectors","cloudasset.assets.listBeyondCorpAppGateways","cloudasset.assets.listBeyondCorpClientConnectorServices","cloudasset.assets.listBeyondCorpClientGateways","cloudasset.assets.listBigqueryDatasets","cloudasset.assets.listBigqueryModels","cloudasset.assets.listBigqueryTables","cloudasset.assets.listBigtableAppProfile","cloudasset.assets.listBigtableBackup","cloudasset.assets.listBigtableCluster","cloudasset.assets.listBigtableInstance","cloudasset.assets.listBigtableTable","cloudasset.assets.listCloudAssetFeeds","cloudasset.assets.listCloudDeployDeliveryPipelines","cloudasset.assets.listCloudDeployReleases","cloudasset.assets.listCloudDeployRollouts","cloudasset.assets.listCloudDeployTargets","cloudasset.assets.listCloudDocumentAIEvaluation","cloudasset.assets.listCloudDocumentAIHumanReviewConfig","cloudasset.assets.listCloudDocumentAILabelerPool","cloudasset.assets.listCloudDocumentAIProcessor","cloudasset.assets.listCloudDocumentAIProcessorVersion","cloudasset.assets.listCloudbillingBillingAccounts","cloudasset.assets.listCloudbillingProjectBillingInfos","cloudasset.assets.listCloudfunctionsFunctions","cloudasset.assets.listCloudfunctionsGen2Functions","cloudasset.assets.listCloudkmsCryptoKeyVersions","cloudasset.assets.listCloudkmsCryptoKeys","cloudasset.assets.listCloudkmsEkmConnections","cloudasset.assets.listCloudkmsImportJobs","cloudasset.assets.listCloudkmsKeyRings","cloudasset.assets.listCloudmemcacheInstances","cloudasset.assets.listCloudresourcemanagerFolders","cloudasset.assets.listCloudresourcemanagerOrganizations","cloudasset.assets.listCloudresourcemanagerProjects","cloudasset.assets.listCloudresourcemanagerTagBindings","cloudasset.assets.listCloudresourcemanagerTagKeys","cloudasset.assets.listCloudresourcemanagerTagValues","cloudasset.assets.listComposerEnvironments","cloudasset.assets.listComputeAddress","cloudasset.assets.listComputeAutoscalers","cloudasset.assets.listComputeBackendBuckets","cloudasset.assets.listComputeBackendServices","cloudasset.assets.listComputeCommitments","cloudasset.assets.listComputeDisks","cloudasset.assets.listComputeExternalVpnGateways","cloudasset.assets.listComputeFirewallPolicies","cloudasset.assets.listComputeFirewalls","cloudasset.assets.listComputeForwardingRules","cloudasset.assets.listComputeGlobalAddress","cloudasset.assets.listComputeGlobalForwardingRules","cloudasset.assets.listComputeHealthChecks","cloudasset.assets.listComputeHttpHealthChecks","cloudasset.assets.listComputeHttpsHealthChecks","cloudasset.assets.listComputeImages","cloudasset.assets.listComputeInstanceGroupManagers","cloudasset.assets.listComputeInstanceGroups","cloudasset.assets.listComputeInstanceTemplates","cloudasset.assets.listComputeInstances","cloudasset.assets.listComputeInterconnect","cloudasset.assets.listComputeInterconnectAttachment","cloudasset.assets.listComputeLicenses","cloudasset.assets.listComputeNetworkEndpointGroups","cloudasset.assets.listComputeNetworks","cloudasset.assets.listComputeNodeGroups","cloudasset.assets.listComputeNodeTemplates","cloudasset.assets.listComputePacketMirrorings","cloudasset.assets.listComputeProjects","cloudasset.assets.listComputeRegionAutoscaler","cloudasset.assets.listComputeRegionBackendServices","cloudasset.assets.listComputeRegionDisk","cloudasset.assets.listComputeRegionInstanceGroup","cloudasset.assets.listComputeRegionInstanceGroupManager","cloudasset.assets.listComputeReservations","cloudasset.assets.listComputeResourcePolicies","cloudasset.assets.listComputeRouters","cloudasset.assets.listComputeRoutes","cloudasset.assets.listComputeSecurityPolicy","cloudasset.assets.listComputeServiceAttachments","cloudasset.assets.listComputeSnapshots","cloudasset.assets.listComputeSslCertificates","cloudasset.assets.listComputeSslPolicies","cloudasset.assets.listComputeSubnetworks","cloudasset.assets.listComputeTargetHttpProxies","cloudasset.assets.listComputeTargetHttpsProxies","cloudasset.assets.listComputeTargetInstances","cloudasset.assets.listComputeTargetPools","cloudasset.assets.listComputeTargetSslProxies","cloudasset.assets.listComputeTargetTcpProxies","cloudasset.assets.listComputeTargetVpnGateways","cloudasset.assets.listComputeUrlMaps","cloudasset.assets.listComputeVpnGateways","cloudasset.assets.listComputeVpnTunnels","cloudasset.assets.listConnectorsConnections","cloudasset.assets.listConnectorsConnectorVersions","cloudasset.assets.listConnectorsConnectors","cloudasset.assets.listConnectorsProviders","cloudasset.assets.listConnectorsRuntimeConfigs","cloudasset.assets.listContainerAppsDeployment","cloudasset.assets.listContainerAppsReplicaSets","cloudasset.assets.listContainerBatchJobs","cloudasset.assets.listContainerClusterrole","cloudasset.assets.listContainerClusterrolebinding","cloudasset.assets.listContainerClusters","cloudasset.assets.listContainerExtensionsIngresses","cloudasset.assets.listContainerJobs","cloudasset.assets.listContainerNamespace","cloudasset.assets.listContainerNetworkingIngresses","cloudasset.assets.listContainerNetworkingNetworkPolicies","cloudasset.assets.listContainerNode","cloudasset.assets.listContainerNodepool","cloudasset.assets.listContainerPod","cloudasset.assets.listContainerReplicaSets","cloudasset.assets.listContainerRole","cloudasset.assets.listContainerRolebinding","cloudasset.assets.listContainerServices","cloudasset.assets.listContainerregistryImage","cloudasset.assets.listDataMigrationConnectionProfiles","cloudasset.assets.listDataMigrationMigrationJobs","cloudasset.assets.listDataflowJobs","cloudasset.assets.listDatafusionInstance","cloudasset.assets.listDataplexAssets","cloudasset.assets.listDataplexLakes","cloudasset.assets.listDataplexTasks","cloudasset.assets.listDataplexZones","cloudasset.assets.listDataprocAutoscalingPolicies","cloudasset.assets.listDataprocBatches","cloudasset.assets.listDataprocClusters","cloudasset.assets.listDataprocJobs","cloudasset.assets.listDataprocSessions","cloudasset.assets.listDataprocWorkflowTemplates","cloudasset.assets.listDatastreamConnectionProfile","cloudasset.assets.listDatastreamPrivateConnection","cloudasset.assets.listDatastreamStream","cloudasset.assets.listDialogflowAgents","cloudasset.assets.listDialogflowConversationProfiles","cloudasset.assets.listDialogflowKnowledgeBases","cloudasset.assets.listDialogflowLocationSettings","cloudasset.assets.listDlpDeidentifyTemplates","cloudasset.assets.listDlpDlpJobs","cloudasset.assets.listDlpInspectTemplates","cloudasset.assets.listDlpJobTriggers","cloudasset.assets.listDlpStoredInfoTypes","cloudasset.assets.listDnsManagedZones","cloudasset.assets.listDnsPolicies","cloudasset.assets.listDomainsRegistrations","cloudasset.assets.listEventarcTriggers","cloudasset.assets.listFileBackups","cloudasset.assets.listFileInstances","cloudasset.assets.listFirebaseAppInfos","cloudasset.assets.listFirebaseProjects","cloudasset.assets.listFirestoreDatabases","cloudasset.assets.listGKEHubFeatures","cloudasset.assets.listGKEHubMemberships","cloudasset.assets.listGameservicesGameServerClusters","cloudasset.assets.listGameservicesGameServerConfigs","cloudasset.assets.listGameservicesGameServerDeployments","cloudasset.assets.listGameservicesRealms","cloudasset.assets.listGkeBackupBackupPlans","cloudasset.assets.listGkeBackupBackups","cloudasset.assets.listGkeBackupRestorePlans","cloudasset.assets.listGkeBackupRestores","cloudasset.assets.listGkeBackupVolumeBackups","cloudasset.assets.listGkeBackupVolumeRestores","cloudasset.assets.listHealthcareConsentStores","cloudasset.assets.listHealthcareDatasets","cloudasset.assets.listHealthcareDicomStores","cloudasset.assets.listHealthcareFhirStores","cloudasset.assets.listHealthcareHl7V2Stores","cloudasset.assets.listIamPolicy","cloudasset.assets.listIamRoles","cloudasset.assets.listIamServiceAccountKeys","cloudasset.assets.listIamServiceAccounts","cloudasset.assets.listIapTunnel","cloudasset.assets.listIapTunnelInstances","cloudasset.assets.listIapTunnelZones","cloudasset.assets.listIapWeb","cloudasset.assets.listIapWebServiceVersion","cloudasset.assets.listIapWebServices","cloudasset.assets.listIapWebType","cloudasset.assets.listIdsEndpoints","cloudasset.assets.listIntegrationsAuthConfigs","cloudasset.assets.listIntegrationsCertificates","cloudasset.assets.listIntegrationsExecutions","cloudasset.assets.listIntegrationsIntegrationVersions","cloudasset.assets.listIntegrationsIntegrations","cloudasset.assets.listIntegrationsSfdcChannels","cloudasset.assets.listIntegrationsSfdcInstances","cloudasset.assets.listIntegrationsSuspensions","cloudasset.assets.listLoggingLogMetrics","cloudasset.assets.listLoggingLogSinks","cloudasset.assets.listManagedidentitiesDomain","cloudasset.assets.listMetastoreBackups","cloudasset.assets.listMetastoreMetadataImports","cloudasset.assets.listMetastoreServices","cloudasset.assets.listMonitoringAlertPolicies","cloudasset.assets.listNetworkConnectivityHubs","cloudasset.assets.listNetworkConnectivitySpokes","cloudasset.assets.listNetworkManagementConnectivityTests","cloudasset.assets.listNetworkServicesEndpointPolicies","cloudasset.assets.listNetworkServicesGateways","cloudasset.assets.listNetworkServicesGrpcRoutes","cloudasset.assets.listNetworkServicesHttpRoutes","cloudasset.assets.listNetworkServicesMeshes","cloudasset.assets.listNetworkServicesServiceBindings","cloudasset.assets.listNetworkServicesTcpRoutes","cloudasset.assets.listNetworkServicesTlsRoutes","cloudasset.assets.listOSConfigOSPolicyAssignmentReports","cloudasset.assets.listOSConfigOSPolicyAssignments","cloudasset.assets.listOSConfigVulnerabilityReports","cloudasset.assets.listOSInventories","cloudasset.assets.listOrgPolicy","cloudasset.assets.listPatchDeployments","cloudasset.assets.listPubsubSnapshots","cloudasset.assets.listPubsubSubscriptions","cloudasset.assets.listPubsubTopics","cloudasset.assets.listRedisInstances","cloudasset.assets.listResource","cloudasset.assets.listRunDomainMapping","cloudasset.assets.listRunRevision","cloudasset.assets.listRunService","cloudasset.assets.listSecretManagerSecretVersions","cloudasset.assets.listSecretManagerSecrets","cloudasset.assets.listServiceDirectoryNamespaces","cloudasset.assets.listServicePerimeter","cloudasset.assets.listServiceconsumermanagementConsumerProperty","cloudasset.assets.listServiceconsumermanagementConsumerQuotaLimits","cloudasset.assets.listServiceconsumermanagementConsumers","cloudasset.assets.listServiceconsumermanagementProducerOverrides","cloudasset.assets.listServiceconsumermanagementTenancyUnits","cloudasset.assets.listServiceconsumermanagementVisibility","cloudasset.assets.listServicemanagementServices","cloudasset.assets.listServiceusageAdminOverrides","cloudasset.assets.listServiceusageConsumerOverrides","cloudasset.assets.listServiceusageServices","cloudasset.assets.listSpannerBackups","cloudasset.assets.listSpannerDatabases","cloudasset.assets.listSpannerInstances","cloudasset.assets.listSpeakerIdPhrases","cloudasset.assets.listSpeakerIdSettings","cloudasset.assets.listSpeakerIdSpeakers","cloudasset.assets.listSpeechCustomClasses","cloudasset.assets.listSpeechPhraseSets","cloudasset.assets.listSqladminBackupRuns","cloudasset.assets.listSqladminInstances","cloudasset.assets.listStorageBuckets","cloudasset.assets.listTpuNodes","cloudasset.assets.listVpcaccessConnector","cloudasset.assets.queryAccessPolicy","cloudasset.assets.queryIamPolicy","cloudasset.assets.queryOSInventories","cloudasset.assets.queryResource","cloudasset.assets.searchAllIamPolicies","cloudasset.assets.searchAllResources","cloudasset.feeds.create","cloudasset.feeds.delete","cloudasset.feeds.get","cloudasset.feeds.list","cloudasset.feeds.update","cloudsql.instances.connect","cloudsql.users.list","compute.disks.useReadOnly","compute.globalOperations.get","compute.instances.get","compute.instances.list","compute.networkEndpointGroups.get","compute.projects.get","container.clusters.get","iam.denypolicies.get","iam.denypolicies.list","iam.googleapis.com/workloadIdentityPoolProviders.list","iam.googleapis.com/workloadIdentityPools.list","logging.logEntries.list","monitoring.alertPolicies.list","monitoring.timeSeries.list","orgpolicy.policies.list","orgpolicy.policy.get","recommender.cloudAssetInsights.get","recommender.cloudAssetInsights.list","recommender.locations.get","recommender.locations.list","resourcemanager.folders.get","resourcemanager.folders.list","resourcemanager.organizations.get","resourcemanager.projects.get","resourcemanager.projects.getIamPolicy","resourcemanager.projects.list","resourcemanager.tagValues.get","securitycenter.assets.list","securitycenter.assetsecuritymarks.update","securitycenter.findings.list","securitycenter.notificationconfig.create","securitycenter.notificationconfig.delete","securitycenter.notificationconfig.update","securitycenter.organizationsettings.get","securitycenter.resourcevalueconfigs.get","securitycenter.resourcevalueconfigs.list","securitycenter.sources.list","securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get","securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list","securitycentermanagement.securityHealthAnalyticsCustomModules.create","securitycentermanagement.securityHealthAnalyticsCustomModules.delete","securitycentermanagement.securityHealthAnalyticsCustomModules.get","securitycentermanagement.securityHealthAnalyticsCustomModules.list","securitycentermanagement.securityHealthAnalyticsCustomModules.simulate","securitycentermanagement.securityHealthAnalyticsCustomModules.update","serviceusage.quotas.get","serviceusage.services.disable","serviceusage.services.enable","serviceusage.services.get","serviceusage.services.list","stackdriver.projects.get","storage.buckets.get","storage.buckets.getIamPolicy","storage.buckets.list"],"name":"roles/securitycenter.controlServiceAgent","stage":"GA","title":"Security Center Control Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Write access to security center external systems","etag":"AA==","includedPermissions":["securitycenter.findingexternalsystems.update"],"name":"roles/securitycenter.externalSystemsEditor","stage":"GA","title":"Security Center External Systems Editor","asset_type":"iam.googleapis.com/ExportedIAMRole"} diff --git a/roles/compute.orgFirewallPolicyAdmin b/roles/compute.orgFirewallPolicyAdmin index 23032ea3..bc305e63 100644 --- a/roles/compute.orgFirewallPolicyAdmin +++ b/roles/compute.orgFirewallPolicyAdmin @@ -3,6 +3,7 @@ "etag": "AA==", "includedPermissions": [ "compute.firewallPolicies.cloneRules", + "compute.firewallPolicies.copyRules", "compute.firewallPolicies.create", "compute.firewallPolicies.createTagBinding", "compute.firewallPolicies.delete", diff --git a/roles/datastore.bulkAdmin b/roles/datastore.bulkAdmin new file mode 100644 index 00000000..ea815c1b --- /dev/null +++ b/roles/datastore.bulkAdmin @@ -0,0 +1,15 @@ +{ + "description": "Full access to manage bulk operations.", + "etag": "AA==", + "includedPermissions": [ + "datastore.databases.getMetadata", + "datastore.operations.cancel", + "datastore.operations.get", + "datastore.operations.list", + "resourcemanager.projects.get", + "resourcemanager.projects.list" + ], + "name": "roles/datastore.bulkAdmin", + "stage": "ALPHA", + "title": "Cloud Datastore Bulk Admin" +} diff --git a/roles/recommender.firestoredatabasereliabilityAdmin b/roles/recommender.firestoredatabasereliabilityAdmin new file mode 100644 index 00000000..94bbb8fc --- /dev/null +++ b/roles/recommender.firestoredatabasereliabilityAdmin @@ -0,0 +1,13 @@ +{ + "description": "Admin of Firestore Database Reliability Insights and Recommendations.", + "etag": "AA==", + "includedPermissions": [ + "recommender.locations.get", + "recommender.locations.list", + "resourcemanager.projects.get", + "resourcemanager.projects.list" + ], + "name": "roles/recommender.firestoredatabasereliabilityAdmin", + "stage": "ALPHA", + "title": "Firestore Database Reliability Recommender Admin" +} diff --git a/roles/recommender.firestoredatabasereliabilityViewer b/roles/recommender.firestoredatabasereliabilityViewer new file mode 100644 index 00000000..b384dcbc --- /dev/null +++ b/roles/recommender.firestoredatabasereliabilityViewer @@ -0,0 +1,13 @@ +{ + "description": "Viewer of Firestore Database Reliability Insights and Recommendations.", + "etag": "AA==", + "includedPermissions": [ + "recommender.locations.get", + "recommender.locations.list", + "resourcemanager.projects.get", + "resourcemanager.projects.list" + ], + "name": "roles/recommender.firestoredatabasereliabilityViewer", + "stage": "ALPHA", + "title": "Firestore Database Reliability Recommender Viewer" +} diff --git a/roles/securitycenter.complianceReportsViewer b/roles/securitycenter.complianceReportsViewer new file mode 100644 index 00000000..ad0e48eb --- /dev/null +++ b/roles/securitycenter.complianceReportsViewer @@ -0,0 +1,7 @@ +{ + "description": "Read access to security center compliance reports", + "etag": "AA==", + "name": "roles/securitycenter.complianceReportsViewer", + "stage": "ALPHA", + "title": "Security Center Compliance Reports Viewer" +}