Fetch all roles

darkbitio · Jul 30, 2024 · 9367769 · 9367769
1 parent e7c206c
commit 9367769
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
@@ -306,7 +306,7 @@
 {"description":"Gives Infrastructure Manager service agent access to managed resources","etag":"AA==","includedPermissions":["cloudbuild.builds.create","cloudbuild.builds.get","cloudbuild.builds.list","cloudbuild.builds.update","cloudbuild.workerpools.use","iam.serviceAccounts.actAs","iam.serviceAccounts.getAccessToken","logging.logEntries.create","logging.logEntries.route","serviceusage.services.use","storage.buckets.create","storage.buckets.delete","storage.buckets.get","storage.buckets.list","storage.buckets.update","storage.objects.create","storage.objects.delete","storage.objects.get","storage.objects.list","storage.objects.update"],"name":"roles/cloudconfig.serviceAgent","stage":"GA","title":"Infrastructure Manager Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Read access to Firebase Remote Config resources.","etag":"AA==","includedPermissions":["cloudconfig.configs.get","firebase.clients.get","firebase.clients.list","firebase.projects.get","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/cloudconfig.viewer","stage":"GA","title":"Firebase Remote Config Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Gives the Partner Console service account access to read Access Approval Requests for workloads associated with a partner.","etag":"AA==","includedPermissions":["accessapproval.requests.get","accessapproval.requests.list"],"name":"roles/cloudcontrolspartner.accessApprovalServiceAgent","stage":"GA","title":"Cloud Controls Partner Access Approval Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"}
-{"description":"Full access to Cloud Controls Partner resources.","etag":"AA==","includedPermissions":["cloudcontrolspartner.accessapprovalrequests.list","cloudcontrolspartner.customers.list","cloudcontrolspartner.ekmconnections.get","cloudcontrolspartner.inspectabilityevents.get","cloudcontrolspartner.partnerpermissions.get","cloudcontrolspartner.partners.get","cloudcontrolspartner.platformcontrols.get","cloudcontrolspartner.violations.list","cloudcontrolspartner.workloads.list"],"name":"roles/cloudcontrolspartner.admin","stage":"GA","title":"Cloud Controls Partner Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"}
+{"description":"Full access to Cloud Controls Partner resources.","etag":"AA==","includedPermissions":["cloudcontrolspartner.accessapprovalrequests.list","cloudcontrolspartner.customers.get","cloudcontrolspartner.customers.list","cloudcontrolspartner.ekmconnections.get","cloudcontrolspartner.inspectabilityevents.get","cloudcontrolspartner.partnerpermissions.get","cloudcontrolspartner.partners.get","cloudcontrolspartner.platformcontrols.get","cloudcontrolspartner.violations.list","cloudcontrolspartner.workloads.list"],"name":"roles/cloudcontrolspartner.admin","stage":"GA","title":"Cloud Controls Partner Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Editor access to Cloud Controls Partner resources.","etag":"AA==","includedPermissions":["cloudcontrolspartner.accessapprovalrequests.list","cloudcontrolspartner.customers.get","cloudcontrolspartner.customers.list","cloudcontrolspartner.ekmconnections.get","cloudcontrolspartner.inspectabilityevents.get","cloudcontrolspartner.partnerpermissions.get","cloudcontrolspartner.partners.get","cloudcontrolspartner.platformcontrols.get","cloudcontrolspartner.violations.get","cloudcontrolspartner.violations.list","cloudcontrolspartner.workloads.get","cloudcontrolspartner.workloads.list"],"name":"roles/cloudcontrolspartner.editor","stage":"GA","title":"Cloud Controls Partner Editor","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Gives Cloud Controls Partner service agent permission to list EKM connections, get EKM connection status, and provide EKM diagnostic information.","etag":"AA==","includedPermissions":["cloudkms.ekmConnections.get","cloudkms.ekmConnections.getIamPolicy","cloudkms.ekmConnections.list","cloudkms.ekmConnections.verifyConnectivity"],"name":"roles/cloudcontrolspartner.ekmServiceAgent","stage":"GA","title":"Cloud Controls Partner EKM Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Readonly access to Cloud Controls Partner inspectability resources.","etag":"AA==","includedPermissions":["cloudcontrolspartner.customers.get","cloudcontrolspartner.customers.list","cloudcontrolspartner.inspectabilityevents.get","cloudcontrolspartner.platformcontrols.get"],"name":"roles/cloudcontrolspartner.inspectabilityReader","stage":"GA","title":"Cloud Controls Partner Inspectability Reader","asset_type":"iam.googleapis.com/ExportedIAMRole"}

diff --git a/roles/cloudcontrolspartner.admin b/roles/cloudcontrolspartner.admin
@@ -3,6 +3,7 @@
   "etag": "AA==",
   "includedPermissions": [
     "cloudcontrolspartner.accessapprovalrequests.list",
+    "cloudcontrolspartner.customers.get",
     "cloudcontrolspartner.customers.list",
     "cloudcontrolspartner.ekmconnections.get",
     "cloudcontrolspartner.inspectabilityevents.get",