Fetch all roles

darkbitio · Aug 6, 2024 · 69fc20f · 69fc20f
1 parent 292e1ab
commit 69fc20f
Show file tree

Hide file tree

Showing 5 changed files with 6 additions and 20 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/chronicle.soarServiceAgent b/roles/chronicle.soarServiceAgent
@@ -5,14 +5,9 @@
     "cloudasset.assets.analyzeIamPolicy",
     "cloudasset.assets.searchAllIamPolicies",
     "cloudasset.assets.searchAllResources",
-    "compute.firewalls.get",
-    "compute.firewalls.update",
-    "compute.instances.deleteAccessConfig",
     "compute.instances.get",
     "compute.instances.list",
     "compute.instances.stop",
-    "compute.instances.updateNetworkInterface",
-    "compute.networks.updatePolicy",
     "compute.zones.list",
     "iam.serviceAccounts.disable",
     "iam.serviceAccounts.list",
@@ -26,14 +21,9 @@
     "securitycenter.findings.setState",
     "securitycenter.findings.update",
     "securitycenter.notificationconfig.create",
-    "securitycenter.notificationconfig.delete",
     "securitycenter.notificationconfig.get",
     "securitycenter.notificationconfig.update",
-    "securitycenter.sources.list",
-    "storage.buckets.get",
-    "storage.buckets.getIamPolicy",
-    "storage.buckets.list",
-    "storage.buckets.update"
+    "securitycenter.sources.list"
   ],
   "name": "roles/chronicle.soarServiceAgent",
   "stage": "GA",

diff --git a/roles/container.serviceAgent b/roles/container.serviceAgent
@@ -2,9 +2,6 @@
   "description": "Gives Kubernetes Engine account access to manage cluster resources. Includes access to service accounts.",
   "etag": "AA==",
   "includedPermissions": [
-    "autoscaling.sites.readRecommendations",
-    "autoscaling.sites.writeMetrics",
-    "autoscaling.sites.writeState",
     "bigquery.datasets.create",
     "bigquery.datasets.get",
     "bigquery.tables.create",

diff --git a/roles/datacatalog.migrationConfigAdmin b/roles/datacatalog.migrationConfigAdmin
@@ -7,6 +7,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/datacatalog.migrationConfigAdmin",
-  "stage": "BETA",
+  "stage": "ALPHA",
   "title": "DataCatalog Migration Config Admin"
 }
diff --git a/roles/monitoring.notificationServiceAgent b/roles/monitoring.notificationServiceAgent
@@ -5,7 +5,6 @@
     "bigquery.jobs.create",
     "cloudfunctions.functions.get",
     "cloudtrace.traces.patch",
-    "logging.links.list",
     "monitoring.metricDescriptors.get",
     "monitoring.metricDescriptors.list",
     "monitoring.monitoredResourceDescriptors.get",