Fetch all roles

darkbitio · Aug 22, 2022 · 7b252c7 · 7b252c7
1 parent d3b918c
commit 7b252c7
Show file tree

Hide file tree

Showing 30 changed files with 237 additions and 23 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/appengine.memcacheDataAdmin b/roles/appengine.memcacheDataAdmin
@@ -0,0 +1,16 @@
+{
+  "description": "Can get, set, delete, and flush App Engine Memcache items.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "appengine.applications.get",
+    "appengine.memcache.addKey",
+    "appengine.memcache.flush",
+    "appengine.memcache.get",
+    "appengine.memcache.update",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/appengine.memcacheDataAdmin",
+  "stage": "ALPHA",
+  "title": "App Engine Memcache Data Admin"
+}
diff --git a/roles/cloudsql.admin b/roles/cloudsql.admin
@@ -65,6 +65,12 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
+    "recommender.cloudsqlInstancePerformanceInsights.get",
+    "recommender.cloudsqlInstancePerformanceInsights.list",
+    "recommender.cloudsqlInstancePerformanceInsights.update",
+    "recommender.cloudsqlInstancePerformanceRecommendations.get",
+    "recommender.cloudsqlInstancePerformanceRecommendations.list",
+    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/cloudsql.editor b/roles/cloudsql.editor
@@ -44,6 +44,12 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
+    "recommender.cloudsqlInstancePerformanceInsights.get",
+    "recommender.cloudsqlInstancePerformanceInsights.list",
+    "recommender.cloudsqlInstancePerformanceInsights.update",
+    "recommender.cloudsqlInstancePerformanceRecommendations.get",
+    "recommender.cloudsqlInstancePerformanceRecommendations.list",
+    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/composer.serviceAgent b/roles/composer.serviceAgent
@@ -1027,6 +1027,10 @@
     "logging.exclusions.get",
     "logging.exclusions.list",
     "logging.exclusions.update",
+    "logging.links.create",
+    "logging.links.delete",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",
@@ -1259,6 +1263,12 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
+    "recommender.cloudsqlInstancePerformanceInsights.get",
+    "recommender.cloudsqlInstancePerformanceInsights.list",
+    "recommender.cloudsqlInstancePerformanceInsights.update",
+    "recommender.cloudsqlInstancePerformanceRecommendations.get",
+    "recommender.cloudsqlInstancePerformanceRecommendations.list",
+    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/dataflow.serviceAgent b/roles/dataflow.serviceAgent
@@ -636,6 +636,10 @@
     "logging.exclusions.get",
     "logging.exclusions.list",
     "logging.exclusions.update",
+    "logging.links.create",
+    "logging.links.delete",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",

diff --git a/roles/dataproc.hubAgent b/roles/dataproc.hubAgent
@@ -26,6 +26,8 @@
     "logging.buckets.list",
     "logging.exclusions.get",
     "logging.exclusions.list",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",

diff --git a/roles/editor b/roles/editor
@@ -3473,6 +3473,13 @@
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
     "firebaseinappmessaging.campaigns.update",
+    "firebasemessagingcampaigns.campaigns.create",
+    "firebasemessagingcampaigns.campaigns.delete",
+    "firebasemessagingcampaigns.campaigns.get",
+    "firebasemessagingcampaigns.campaigns.list",
+    "firebasemessagingcampaigns.campaigns.start",
+    "firebasemessagingcampaigns.campaigns.stop",
+    "firebasemessagingcampaigns.campaigns.update",
     "firebaseml.compressionjobs.create",
     "firebaseml.compressionjobs.delete",
     "firebaseml.compressionjobs.get",
@@ -4006,6 +4013,10 @@
     "logging.cmekSettings.update",
     "logging.exclusions.get",
     "logging.exclusions.list",
+    "logging.links.create",
+    "logging.links.delete",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",
@@ -4673,6 +4684,12 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
+    "recommender.cloudsqlInstancePerformanceInsights.get",
+    "recommender.cloudsqlInstancePerformanceInsights.list",
+    "recommender.cloudsqlInstancePerformanceInsights.update",
+    "recommender.cloudsqlInstancePerformanceRecommendations.get",
+    "recommender.cloudsqlInstancePerformanceRecommendations.list",
+    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/firebase.admin b/roles/firebase.admin
@@ -285,6 +285,13 @@
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
     "firebaseinappmessaging.campaigns.update",
+    "firebasemessagingcampaigns.campaigns.create",
+    "firebasemessagingcampaigns.campaigns.delete",
+    "firebasemessagingcampaigns.campaigns.get",
+    "firebasemessagingcampaigns.campaigns.list",
+    "firebasemessagingcampaigns.campaigns.start",
+    "firebasemessagingcampaigns.campaigns.stop",
+    "firebasemessagingcampaigns.campaigns.update",
     "firebaseml.compressionjobs.create",
     "firebaseml.compressionjobs.delete",
     "firebaseml.compressionjobs.get",

diff --git a/roles/firebase.growthAdmin b/roles/firebase.growthAdmin
@@ -43,6 +43,13 @@
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
     "firebaseinappmessaging.campaigns.update",
+    "firebasemessagingcampaigns.campaigns.create",
+    "firebasemessagingcampaigns.campaigns.delete",
+    "firebasemessagingcampaigns.campaigns.get",
+    "firebasemessagingcampaigns.campaigns.list",
+    "firebasemessagingcampaigns.campaigns.start",
+    "firebasemessagingcampaigns.campaigns.stop",
+    "firebasemessagingcampaigns.campaigns.update",
     "firebasenotifications.messages.create",
     "firebasenotifications.messages.delete",
     "firebasenotifications.messages.get",

diff --git a/roles/firebase.growthViewer b/roles/firebase.growthViewer
@@ -26,6 +26,8 @@
     "firebaseextensions.configs.list",
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
+    "firebasemessagingcampaigns.campaigns.get",
+    "firebasemessagingcampaigns.campaigns.list",
     "firebasenotifications.messages.get",
     "firebasenotifications.messages.list",
     "monitoring.timeSeries.list",

diff --git a/roles/firebase.viewer b/roles/firebase.viewer
@@ -121,6 +121,8 @@
     "firebasehosting.sites.list",
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
+    "firebasemessagingcampaigns.campaigns.get",
+    "firebasemessagingcampaigns.campaigns.list",
     "firebaseml.compressionjobs.get",
     "firebaseml.compressionjobs.list",
     "firebaseml.models.get",

diff --git a/roles/firebasemessagingcampaigns.admin b/roles/firebasemessagingcampaigns.admin
@@ -0,0 +1,16 @@
+{
+  "description": "Full management of Firebase Messaging Campaigns.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "firebasemessagingcampaigns.campaigns.create",
+    "firebasemessagingcampaigns.campaigns.delete",
+    "firebasemessagingcampaigns.campaigns.get",
+    "firebasemessagingcampaigns.campaigns.list",
+    "firebasemessagingcampaigns.campaigns.start",
+    "firebasemessagingcampaigns.campaigns.stop",
+    "firebasemessagingcampaigns.campaigns.update"
+  ],
+  "name": "roles/firebasemessagingcampaigns.admin",
+  "stage": "ALPHA",
+  "title": "Firebase Messaging Campaigns Admin"
+}
diff --git a/roles/firebasemessagingcampaigns.viewer b/roles/firebasemessagingcampaigns.viewer
@@ -0,0 +1,11 @@
+{
+  "description": "Read-only access for Firebase Messaging Campaigns.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "firebasemessagingcampaigns.campaigns.get",
+    "firebasemessagingcampaigns.campaigns.list"
+  ],
+  "name": "roles/firebasemessagingcampaigns.viewer",
+  "stage": "ALPHA",
+  "title": "Firebase Messaging Campaigns Viewer"
+}
diff --git a/roles/iam.securityAdmin b/roles/iam.securityAdmin
@@ -868,6 +868,7 @@
     "firebaseextensions.configs.list",
     "firebasehosting.sites.list",
     "firebaseinappmessaging.campaigns.list",
+    "firebasemessagingcampaigns.campaigns.list",
     "firebaseml.compressionjobs.list",
     "firebaseml.models.list",
     "firebaseml.modelversions.list",
@@ -1031,6 +1032,7 @@
     "livestream.operations.list",
     "logging.buckets.list",
     "logging.exclusions.list",
+    "logging.links.list",
     "logging.locations.list",
     "logging.logEntries.list",
     "logging.logMetrics.list",
@@ -1253,6 +1255,8 @@
     "recommender.cloudsqlInstanceDiskUsageTrendInsights.list",
     "recommender.cloudsqlInstanceMemoryUsageInsights.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
+    "recommender.cloudsqlInstancePerformanceInsights.list",
+    "recommender.cloudsqlInstancePerformanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.commitmentUtilizationInsights.list",
     "recommender.computeAddressIdleResourceInsights.list",

diff --git a/roles/iam.securityReviewer b/roles/iam.securityReviewer
@@ -750,6 +750,7 @@
     "firebaseextensions.configs.list",
     "firebasehosting.sites.list",
     "firebaseinappmessaging.campaigns.list",
+    "firebasemessagingcampaigns.campaigns.list",
     "firebaseml.compressionjobs.list",
     "firebaseml.models.list",
     "firebaseml.modelversions.list",
@@ -884,6 +885,7 @@
     "livestream.operations.list",
     "logging.buckets.list",
     "logging.exclusions.list",
+    "logging.links.list",
     "logging.locations.list",
     "logging.logEntries.list",
     "logging.logMetrics.list",
@@ -1062,6 +1064,8 @@
     "recommender.cloudsqlInstanceDiskUsageTrendInsights.list",
     "recommender.cloudsqlInstanceMemoryUsageInsights.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
+    "recommender.cloudsqlInstancePerformanceInsights.list",
+    "recommender.cloudsqlInstancePerformanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.commitmentUtilizationInsights.list",
     "recommender.computeAddressIdleResourceInsights.list",

diff --git a/roles/iam.serviceAccountOpenIdTokenCreator b/roles/iam.serviceAccountOpenIdTokenCreator
@@ -0,0 +1,10 @@
+{
+  "description": "Create OpenID Connect (OIDC) identity tokens",
+  "etag": "AA==",
+  "includedPermissions": [
+    "iam.serviceAccounts.getOpenIdToken"
+  ],
+  "name": "roles/iam.serviceAccountOpenIdTokenCreator",
+  "stage": "ALPHA",
+  "title": "Service Account OpenID Connect Identity Token Creator"
+}
diff --git a/roles/logging.admin b/roles/logging.admin
@@ -17,6 +17,10 @@
     "logging.exclusions.list",
     "logging.exclusions.update",
     "logging.fields.access",
+    "logging.links.create",
+    "logging.links.delete",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",

diff --git a/roles/logging.configWriter b/roles/logging.configWriter
@@ -15,6 +15,10 @@
     "logging.exclusions.get",
     "logging.exclusions.list",
     "logging.exclusions.update",
+    "logging.links.create",
+    "logging.links.delete",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logMetrics.create",

diff --git a/roles/logging.linkViewer b/roles/logging.linkViewer
@@ -0,0 +1,11 @@
+{
+  "description": "Ability to see links for a bucket.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "logging.links.get",
+    "logging.links.list"
+  ],
+  "name": "roles/logging.linkViewer",
+  "stage": "ALPHA",
+  "title": "Log Link Accessor"
+}
diff --git a/roles/logging.privateLogViewer b/roles/logging.privateLogViewer
@@ -6,6 +6,8 @@
     "logging.buckets.list",
     "logging.exclusions.get",
     "logging.exclusions.list",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.list",

diff --git a/roles/logging.viewer b/roles/logging.viewer
@@ -6,6 +6,8 @@
     "logging.buckets.list",
     "logging.exclusions.get",
     "logging.exclusions.list",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.list",

diff --git a/roles/owner b/roles/owner
@@ -3762,6 +3762,13 @@
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
     "firebaseinappmessaging.campaigns.update",
+    "firebasemessagingcampaigns.campaigns.create",
+    "firebasemessagingcampaigns.campaigns.delete",
+    "firebasemessagingcampaigns.campaigns.get",
+    "firebasemessagingcampaigns.campaigns.list",
+    "firebasemessagingcampaigns.campaigns.start",
+    "firebasemessagingcampaigns.campaigns.stop",
+    "firebasemessagingcampaigns.campaigns.update",
     "firebaseml.compressionjobs.create",
     "firebaseml.compressionjobs.delete",
     "firebaseml.compressionjobs.get",
@@ -4370,6 +4377,10 @@
     "logging.exclusions.list",
     "logging.exclusions.update",
     "logging.fields.access",
+    "logging.links.create",
+    "logging.links.delete",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",
@@ -5096,6 +5107,12 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
+    "recommender.cloudsqlInstancePerformanceInsights.get",
+    "recommender.cloudsqlInstancePerformanceInsights.list",
+    "recommender.cloudsqlInstancePerformanceInsights.update",
+    "recommender.cloudsqlInstancePerformanceRecommendations.get",
+    "recommender.cloudsqlInstancePerformanceRecommendations.list",
+    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/recommender.cloudsqlAdmin b/roles/recommender.cloudsqlAdmin
@@ -20,6 +20,12 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
+    "recommender.cloudsqlInstancePerformanceInsights.get",
+    "recommender.cloudsqlInstancePerformanceInsights.list",
+    "recommender.cloudsqlInstancePerformanceInsights.update",
+    "recommender.cloudsqlInstancePerformanceRecommendations.get",
+    "recommender.cloudsqlInstancePerformanceRecommendations.list",
+    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/recommender.cloudsqlViewer b/roles/recommender.cloudsqlViewer
@@ -14,6 +14,10 @@
     "recommender.cloudsqlInstanceMemoryUsageInsights.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
+    "recommender.cloudsqlInstancePerformanceInsights.get",
+    "recommender.cloudsqlInstancePerformanceInsights.list",
+    "recommender.cloudsqlInstancePerformanceRecommendations.get",
+    "recommender.cloudsqlInstancePerformanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "resourcemanager.projects.get",

diff --git a/roles/securitycenter.controlServiceAgent b/roles/securitycenter.controlServiceAgent
@@ -504,6 +504,8 @@
     "logging.buckets.list",
     "logging.exclusions.get",
     "logging.exclusions.list",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.list",

diff --git a/roles/securitycenter.securityHealthAnalyticsServiceAgent b/roles/securitycenter.securityHealthAnalyticsServiceAgent
@@ -339,6 +339,8 @@
     "logging.buckets.list",
     "logging.exclusions.get",
     "logging.exclusions.list",
+    "logging.links.get",
+    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.list",