Fetch all roles

darkbitio · Oct 20, 2024 · 8e26f4d · 8e26f4d
1 parent 76ff811
commit 8e26f4d
Show file tree

Hide file tree

Showing 23 changed files with 94 additions and 52 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/auditmanager.auditor b/roles/auditmanager.auditor
@@ -6,6 +6,7 @@
     "auditmanager.auditReports.get",
     "auditmanager.auditReports.list",
     "auditmanager.auditScopeReports.generate",
+    "auditmanager.billingSettings.get",
     "auditmanager.controlReports.get",
     "auditmanager.controlReports.list",
     "auditmanager.controls.list",

diff --git a/roles/backupdr.computeEngineOperator b/roles/backupdr.computeEngineOperator
@@ -22,17 +22,21 @@
     "compute.images.useReadOnly",
     "compute.instances.attachDisk",
     "compute.instances.create",
+    "compute.instances.createTagBinding",
     "compute.instances.delete",
     "compute.instances.detachDisk",
     "compute.instances.get",
     "compute.instances.list",
     "compute.instances.listEffectiveTags",
+    "compute.instances.pscInterfaceCreate",
+    "compute.instances.setDeletionProtection",
     "compute.instances.setLabels",
     "compute.instances.setMetadata",
     "compute.instances.setServiceAccount",
     "compute.instances.setTags",
     "compute.instances.start",
     "compute.instances.stop",
+    "compute.instances.updateDisplayDevice",
     "compute.instances.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
@@ -44,6 +48,7 @@
     "compute.regionOperations.get",
     "compute.regions.get",
     "compute.regions.list",
+    "compute.resourcePolicies.use",
     "compute.snapshots.create",
     "compute.snapshots.delete",
     "compute.snapshots.get",

diff --git a/roles/bigquerydatapolicy.admin b/roles/bigquerydatapolicy.admin
@@ -11,6 +11,6 @@
     "bigquery.dataPolicies.update"
   ],
   "name": "roles/bigquerydatapolicy.admin",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "BigQuery Data Policy Admin"
 }
diff --git a/roles/blockchainvalidatormanager.viewer b/roles/blockchainvalidatormanager.viewer
@@ -1,11 +1,17 @@
 {
-  "description": "Readonly access to Blockchain Validator Config resources.",
+  "description": "Readonly access to Blockchain Validator Manager resources.",
   "etag": "AA==",
   "includedPermissions": [
+    "blockchainvalidatormanager.blockchainValidatorConfigs.get",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.list",
+    "blockchainvalidatormanager.locations.get",
+    "blockchainvalidatormanager.locations.list",
+    "blockchainvalidatormanager.operations.get",
+    "blockchainvalidatormanager.operations.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],
   "name": "roles/blockchainvalidatormanager.viewer",
-  "stage": "ALPHA",
-  "title": "Blockchain Validator Config Viewer"
+  "stage": "BETA",
+  "title": "Blockchain Validator Viewer"
 }
diff --git a/roles/certificatemanager.editor b/roles/certificatemanager.editor
@@ -9,24 +9,20 @@
     "certificatemanager.certissuanceconfigs.use",
     "certificatemanager.certmapentries.create",
     "certificatemanager.certmapentries.get",
-    "certificatemanager.certmapentries.getIamPolicy",
     "certificatemanager.certmapentries.list",
     "certificatemanager.certmapentries.update",
     "certificatemanager.certmaps.create",
     "certificatemanager.certmaps.get",
-    "certificatemanager.certmaps.getIamPolicy",
     "certificatemanager.certmaps.list",
     "certificatemanager.certmaps.update",
     "certificatemanager.certmaps.use",
     "certificatemanager.certs.create",
     "certificatemanager.certs.get",
-    "certificatemanager.certs.getIamPolicy",
     "certificatemanager.certs.list",
     "certificatemanager.certs.update",
     "certificatemanager.certs.use",
     "certificatemanager.dnsauthorizations.create",
     "certificatemanager.dnsauthorizations.get",
-    "certificatemanager.dnsauthorizations.getIamPolicy",
     "certificatemanager.dnsauthorizations.list",
     "certificatemanager.dnsauthorizations.update",
     "certificatemanager.dnsauthorizations.use",

diff --git a/roles/certificatemanager.viewer b/roles/certificatemanager.viewer
@@ -5,16 +5,12 @@
     "certificatemanager.certissuanceconfigs.get",
     "certificatemanager.certissuanceconfigs.list",
     "certificatemanager.certmapentries.get",
-    "certificatemanager.certmapentries.getIamPolicy",
     "certificatemanager.certmapentries.list",
     "certificatemanager.certmaps.get",
-    "certificatemanager.certmaps.getIamPolicy",
     "certificatemanager.certmaps.list",
     "certificatemanager.certs.get",
-    "certificatemanager.certs.getIamPolicy",
     "certificatemanager.certs.list",
     "certificatemanager.dnsauthorizations.get",
-    "certificatemanager.dnsauthorizations.getIamPolicy",
     "certificatemanager.dnsauthorizations.list",
     "certificatemanager.locations.get",
     "certificatemanager.locations.list",

diff --git a/roles/container.serviceAgent b/roles/container.serviceAgent
@@ -15,27 +15,23 @@
     "certificatemanager.certmapentries.create",
     "certificatemanager.certmapentries.delete",
     "certificatemanager.certmapentries.get",
-    "certificatemanager.certmapentries.getIamPolicy",
     "certificatemanager.certmapentries.list",
     "certificatemanager.certmapentries.update",
     "certificatemanager.certmaps.create",
     "certificatemanager.certmaps.delete",
     "certificatemanager.certmaps.get",
-    "certificatemanager.certmaps.getIamPolicy",
     "certificatemanager.certmaps.list",
     "certificatemanager.certmaps.update",
     "certificatemanager.certmaps.use",
     "certificatemanager.certs.create",
     "certificatemanager.certs.delete",
     "certificatemanager.certs.get",
-    "certificatemanager.certs.getIamPolicy",
     "certificatemanager.certs.list",
     "certificatemanager.certs.update",
     "certificatemanager.certs.use",
     "certificatemanager.dnsauthorizations.create",
     "certificatemanager.dnsauthorizations.delete",
     "certificatemanager.dnsauthorizations.get",
-    "certificatemanager.dnsauthorizations.getIamPolicy",
     "certificatemanager.dnsauthorizations.list",
     "certificatemanager.dnsauthorizations.update",
     "certificatemanager.dnsauthorizations.use",

diff --git a/roles/dataplex.aspectTypeOwner b/roles/dataplex.aspectTypeOwner
@@ -2,6 +2,7 @@
   "description": "Grants access to creating and managing Aspect Types. Does not give the right to create/modify Entries.",
   "etag": "AA==",
   "includedPermissions": [
+    "datacatalog.migrationConfig.get",
     "dataplex.aspectTypes.create",
     "dataplex.aspectTypes.delete",
     "dataplex.aspectTypes.get",

diff --git a/roles/dataplex.aspectTypeUser b/roles/dataplex.aspectTypeUser
@@ -2,6 +2,7 @@
   "description": "Grants access to use Aspect Types to create/modify Entries with the corresponding aspects.",
   "etag": "AA==",
   "includedPermissions": [
+    "datacatalog.migrationConfig.get",
     "dataplex.aspectTypes.get",
     "dataplex.aspectTypes.list",
     "dataplex.aspectTypes.use",

diff --git a/roles/dataplex.catalogAdmin b/roles/dataplex.catalogAdmin
@@ -2,6 +2,7 @@
   "description": "Has full access to Catalog resources: Entry Groups, Entry Types, Aspect Types and Entries.",
   "etag": "AA==",
   "includedPermissions": [
+    "datacatalog.migrationConfig.get",
     "dataplex.aspectTypes.create",
     "dataplex.aspectTypes.delete",
     "dataplex.aspectTypes.get",

diff --git a/roles/dataplex.catalogViewer b/roles/dataplex.catalogViewer
@@ -2,6 +2,7 @@
   "description": "Has read access to Catalog resources: Entry Groups, Entry Types, Aspect Types and Entries. Can view IAM policies on Catalog resources.",
   "etag": "AA==",
   "includedPermissions": [
+    "datacatalog.migrationConfig.get",
     "dataplex.aspectTypes.get",
     "dataplex.aspectTypes.getIamPolicy",
     "dataplex.aspectTypes.list",

diff --git a/roles/dataplex.entryOwner b/roles/dataplex.entryOwner
@@ -2,6 +2,7 @@
   "description": "Owns Metadata Entries.",
   "etag": "AA==",
   "includedPermissions": [
+    "datacatalog.migrationConfig.get",
     "dataplex.aspectTypes.get",
     "dataplex.aspectTypes.list",
     "dataplex.aspectTypes.use",

diff --git a/roles/dataplex.entryTypeUser b/roles/dataplex.entryTypeUser
@@ -2,6 +2,7 @@
   "description": "Grants access to use Entry Types to create/modify Entries of those types.",
   "etag": "AA==",
   "includedPermissions": [
+    "datacatalog.migrationConfig.get",
     "dataplex.entryTypes.get",
     "dataplex.entryTypes.list",
     "dataplex.entryTypes.use",

diff --git a/roles/dataprep.serviceAgent b/roles/dataprep.serviceAgent
@@ -199,6 +199,8 @@
     "compute.networkAttachments.listTagBindings",
     "compute.networkEdgeSecurityServices.get",
     "compute.networkEdgeSecurityServices.list",
+    "compute.networkEdgeSecurityServices.listEffectiveTags",
+    "compute.networkEdgeSecurityServices.listTagBindings",
     "compute.networkEndpointGroups.get",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",

diff --git a/roles/editor b/roles/editor
@@ -1029,6 +1029,7 @@
     "auditmanager.auditReports.get",
     "auditmanager.auditReports.list",
     "auditmanager.auditScopeReports.generate",
+    "auditmanager.billingSettings.get",
     "auditmanager.controlReports.get",
     "auditmanager.controlReports.list",
     "auditmanager.controls.list",
@@ -1546,6 +1547,17 @@
     "blockchainnodeengine.operations.delete",
     "blockchainnodeengine.operations.get",
     "blockchainnodeengine.operations.list",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.create",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.delete",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.get",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.list",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.update",
+    "blockchainvalidatormanager.locations.get",
+    "blockchainvalidatormanager.locations.list",
+    "blockchainvalidatormanager.operations.cancel",
+    "blockchainvalidatormanager.operations.delete",
+    "blockchainvalidatormanager.operations.get",
+    "blockchainvalidatormanager.operations.list",
     "capacityplanner.forecasts.list",
     "capacityplanner.usageHistories.list",
     "capacityplanner.usageHistories.summarize",
@@ -1560,27 +1572,23 @@
     "certificatemanager.certmapentries.create",
     "certificatemanager.certmapentries.delete",
     "certificatemanager.certmapentries.get",
-    "certificatemanager.certmapentries.getIamPolicy",
     "certificatemanager.certmapentries.list",
     "certificatemanager.certmapentries.update",
     "certificatemanager.certmaps.create",
     "certificatemanager.certmaps.delete",
     "certificatemanager.certmaps.get",
-    "certificatemanager.certmaps.getIamPolicy",
     "certificatemanager.certmaps.list",
     "certificatemanager.certmaps.update",
     "certificatemanager.certmaps.use",
     "certificatemanager.certs.create",
     "certificatemanager.certs.delete",
     "certificatemanager.certs.get",
-    "certificatemanager.certs.getIamPolicy",
     "certificatemanager.certs.list",
     "certificatemanager.certs.update",
     "certificatemanager.certs.use",
     "certificatemanager.dnsauthorizations.create",
     "certificatemanager.dnsauthorizations.delete",
     "certificatemanager.dnsauthorizations.get",
-    "certificatemanager.dnsauthorizations.getIamPolicy",
     "certificatemanager.dnsauthorizations.list",
     "certificatemanager.dnsauthorizations.update",
     "certificatemanager.dnsauthorizations.use",
@@ -2870,6 +2878,8 @@
     "compute.networkEdgeSecurityServices.delete",
     "compute.networkEdgeSecurityServices.get",
     "compute.networkEdgeSecurityServices.list",
+    "compute.networkEdgeSecurityServices.listEffectiveTags",
+    "compute.networkEdgeSecurityServices.listTagBindings",
     "compute.networkEdgeSecurityServices.update",
     "compute.networkEndpointGroups.attachNetworkEndpoints",
     "compute.networkEndpointGroups.create",
@@ -4251,6 +4261,8 @@
     "datamigration.migrationjobs.stop",
     "datamigration.migrationjobs.update",
     "datamigration.migrationjobs.verify",
+    "datamigration.objects.get",
+    "datamigration.objects.list",
     "datamigration.operations.cancel",
     "datamigration.operations.delete",
     "datamigration.operations.get",

diff --git a/roles/fleetengine.serviceAgent b/roles/fleetengine.serviceAgent
@@ -3,6 +3,7 @@
   "etag": "AA==",
   "includedPermissions": [
     "bigquery.config.get",
+    "bigquery.datasets.create",
     "bigquery.datasets.get",
     "bigquery.jobs.create",
     "bigquery.tables.getData",
@@ -11,7 +12,8 @@
     "dataform.repositories.create",
     "dataform.repositories.list",
     "resourcemanager.projects.get",
-    "resourcemanager.projects.list"
+    "resourcemanager.projects.list",
+    "serviceusage.services.enable"
   ],
   "name": "roles/fleetengine.serviceAgent",
   "stage": "GA",

diff --git a/roles/lookerstudio.lookerAdmin b/roles/lookerstudio.lookerAdmin
@@ -39,6 +39,6 @@
     "resourcemanager.projects.getIamPolicy"
   ],
   "name": "roles/lookerstudio.lookerAdmin",
-  "stage": "ALPHA",
+  "stage": "BETA",
   "title": "Looker Admin"
 }
diff --git a/roles/notebooks.serviceAgent b/roles/notebooks.serviceAgent
@@ -274,6 +274,8 @@
     "compute.networkAttachments.listTagBindings",
     "compute.networkEdgeSecurityServices.get",
     "compute.networkEdgeSecurityServices.list",
+    "compute.networkEdgeSecurityServices.listEffectiveTags",
+    "compute.networkEdgeSecurityServices.listTagBindings",
     "compute.networkEndpointGroups.attachNetworkEndpoints",
     "compute.networkEndpointGroups.create",
     "compute.networkEndpointGroups.createTagBinding",

diff --git a/roles/notebooks.viewer b/roles/notebooks.viewer
@@ -146,6 +146,8 @@
     "compute.networkAttachments.listTagBindings",
     "compute.networkEdgeSecurityServices.get",
     "compute.networkEdgeSecurityServices.list",
+    "compute.networkEdgeSecurityServices.listEffectiveTags",
+    "compute.networkEdgeSecurityServices.listTagBindings",
     "compute.networkEndpointGroups.get",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",

diff --git a/roles/owner b/roles/owner
@@ -1073,6 +1073,7 @@
     "auditmanager.auditReports.get",
     "auditmanager.auditReports.list",
     "auditmanager.auditScopeReports.generate",
+    "auditmanager.billingSettings.get",
     "auditmanager.controlReports.get",
     "auditmanager.controlReports.list",
     "auditmanager.controls.list",
@@ -1639,6 +1640,17 @@
     "blockchainnodeengine.operations.delete",
     "blockchainnodeengine.operations.get",
     "blockchainnodeengine.operations.list",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.create",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.delete",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.get",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.list",
+    "blockchainvalidatormanager.blockchainValidatorConfigs.update",
+    "blockchainvalidatormanager.locations.get",
+    "blockchainvalidatormanager.locations.list",
+    "blockchainvalidatormanager.operations.cancel",
+    "blockchainvalidatormanager.operations.delete",
+    "blockchainvalidatormanager.operations.get",
+    "blockchainvalidatormanager.operations.list",
     "capacityplanner.forecasts.list",
     "capacityplanner.usageHistories.list",
     "capacityplanner.usageHistories.summarize",
@@ -1653,32 +1665,24 @@
     "certificatemanager.certmapentries.create",
     "certificatemanager.certmapentries.delete",
     "certificatemanager.certmapentries.get",
-    "certificatemanager.certmapentries.getIamPolicy",
     "certificatemanager.certmapentries.list",
-    "certificatemanager.certmapentries.setIamPolicy",
     "certificatemanager.certmapentries.update",
     "certificatemanager.certmaps.create",
     "certificatemanager.certmaps.delete",
     "certificatemanager.certmaps.get",
-    "certificatemanager.certmaps.getIamPolicy",
     "certificatemanager.certmaps.list",
-    "certificatemanager.certmaps.setIamPolicy",
     "certificatemanager.certmaps.update",
     "certificatemanager.certmaps.use",
     "certificatemanager.certs.create",
     "certificatemanager.certs.delete",
     "certificatemanager.certs.get",
-    "certificatemanager.certs.getIamPolicy",
     "certificatemanager.certs.list",
-    "certificatemanager.certs.setIamPolicy",
     "certificatemanager.certs.update",
     "certificatemanager.certs.use",
     "certificatemanager.dnsauthorizations.create",
     "certificatemanager.dnsauthorizations.delete",
     "certificatemanager.dnsauthorizations.get",
-    "certificatemanager.dnsauthorizations.getIamPolicy",
     "certificatemanager.dnsauthorizations.list",
-    "certificatemanager.dnsauthorizations.setIamPolicy",
     "certificatemanager.dnsauthorizations.update",
     "certificatemanager.dnsauthorizations.use",
     "certificatemanager.locations.get",
@@ -3597,9 +3601,13 @@
     "compute.networkAttachments.setIamPolicy",
     "compute.networkAttachments.update",
     "compute.networkEdgeSecurityServices.create",
+    "compute.networkEdgeSecurityServices.createTagBinding",
     "compute.networkEdgeSecurityServices.delete",
+    "compute.networkEdgeSecurityServices.deleteTagBinding",
     "compute.networkEdgeSecurityServices.get",
     "compute.networkEdgeSecurityServices.list",
+    "compute.networkEdgeSecurityServices.listEffectiveTags",
+    "compute.networkEdgeSecurityServices.listTagBindings",
     "compute.networkEdgeSecurityServices.update",
     "compute.networkEndpointGroups.attachNetworkEndpoints",
     "compute.networkEndpointGroups.create",
@@ -5123,6 +5131,8 @@
     "datamigration.migrationjobs.stop",
     "datamigration.migrationjobs.update",
     "datamigration.migrationjobs.verify",
+    "datamigration.objects.get",
+    "datamigration.objects.list",
     "datamigration.operations.cancel",
     "datamigration.operations.delete",
     "datamigration.operations.get",