Fetch all roles

darkbitio · Jul 26, 2022 · 9aa709b · 9aa709b
1 parent c3cf989
commit 9aa709b
Show file tree

Hide file tree

Showing 21 changed files with 25 additions and 50 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/assuredworkloads.admin b/roles/assuredworkloads.admin
@@ -6,7 +6,6 @@
     "assuredworkloads.operations.list",
     "assuredworkloads.violations.get",
     "assuredworkloads.violations.list",
-    "assuredworkloads.violations.update",
     "assuredworkloads.workload.create",
     "assuredworkloads.workload.delete",
     "assuredworkloads.workload.get",

diff --git a/roles/assuredworkloads.editor b/roles/assuredworkloads.editor
@@ -6,7 +6,6 @@
     "assuredworkloads.operations.list",
     "assuredworkloads.violations.get",
     "assuredworkloads.violations.list",
-    "assuredworkloads.violations.update",
     "assuredworkloads.workload.create",
     "assuredworkloads.workload.delete",
     "assuredworkloads.workload.get",

diff --git a/roles/cloudasset.owner b/roles/cloudasset.owner
@@ -85,7 +85,6 @@
     "cloudasset.assets.exportIamServiceAccountKeys",
     "cloudasset.assets.exportIamServiceAccounts",
     "cloudasset.assets.exportManagedidentitiesDomain",
-    "cloudasset.assets.exportOSInventories",
     "cloudasset.assets.exportOrgPolicy",
     "cloudasset.assets.exportPubsubSubscriptions",
     "cloudasset.assets.exportPubsubTopics",

diff --git a/roles/cloudasset.viewer b/roles/cloudasset.viewer
@@ -85,7 +85,6 @@
     "cloudasset.assets.exportIamServiceAccountKeys",
     "cloudasset.assets.exportIamServiceAccounts",
     "cloudasset.assets.exportManagedidentitiesDomain",
-    "cloudasset.assets.exportOSInventories",
     "cloudasset.assets.exportOrgPolicy",
     "cloudasset.assets.exportPubsubSubscriptions",
     "cloudasset.assets.exportPubsubTopics",

diff --git a/roles/dlp.orgdriver b/roles/dlp.orgdriver
@@ -139,7 +139,6 @@
     "cloudasset.assets.exportIamServiceAccountKeys",
     "cloudasset.assets.exportIamServiceAccounts",
     "cloudasset.assets.exportManagedidentitiesDomain",
-    "cloudasset.assets.exportOSInventories",
     "cloudasset.assets.exportOrgPolicy",
     "cloudasset.assets.exportPubsubSubscriptions",
     "cloudasset.assets.exportPubsubTopics",

diff --git a/roles/dlp.projectdriver b/roles/dlp.projectdriver
@@ -139,7 +139,6 @@
     "cloudasset.assets.exportIamServiceAccountKeys",
     "cloudasset.assets.exportIamServiceAccounts",
     "cloudasset.assets.exportManagedidentitiesDomain",
-    "cloudasset.assets.exportOSInventories",
     "cloudasset.assets.exportOrgPolicy",
     "cloudasset.assets.exportPubsubSubscriptions",
     "cloudasset.assets.exportPubsubTopics",

diff --git a/roles/editor b/roles/editor
@@ -656,7 +656,6 @@
     "assuredworkloads.operations.list",
     "assuredworkloads.violations.get",
     "assuredworkloads.violations.list",
-    "assuredworkloads.violations.update",
     "assuredworkloads.workload.delete",
     "assuredworkloads.workload.get",
     "assuredworkloads.workload.list",
@@ -5195,8 +5194,6 @@
     "timeseriesinsights.datasets.list",
     "timeseriesinsights.datasets.query",
     "timeseriesinsights.datasets.update",
-    "timeseriesinsights.locations.get",
-    "timeseriesinsights.locations.list",
     "tpu.acceleratortypes.get",
     "tpu.acceleratortypes.list",
     "tpu.locations.get",

diff --git a/roles/iam.securityAdmin b/roles/iam.securityAdmin
@@ -1411,7 +1411,6 @@
     "storagetransfer.jobs.list",
     "storagetransfer.operations.list",
     "timeseriesinsights.datasets.list",
-    "timeseriesinsights.locations.list",
     "tpu.acceleratortypes.list",
     "tpu.locations.list",
     "tpu.nodes.list",

diff --git a/roles/iam.securityReviewer b/roles/iam.securityReviewer
@@ -1197,7 +1197,6 @@
     "storagetransfer.jobs.list",
     "storagetransfer.operations.list",
     "timeseriesinsights.datasets.list",
-    "timeseriesinsights.locations.list",
     "tpu.acceleratortypes.list",
     "tpu.locations.list",
     "tpu.nodes.list",

diff --git a/roles/networkmanagement.admin b/roles/networkmanagement.admin
@@ -17,6 +17,7 @@
     "networkmanagement.locations.list",
     "networkmanagement.operations.get",
     "networkmanagement.operations.list",
+    "resourcemanager.organizations.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/owner b/roles/owner
@@ -682,7 +682,6 @@
     "assuredworkloads.operations.list",
     "assuredworkloads.violations.get",
     "assuredworkloads.violations.list",
-    "assuredworkloads.violations.update",
     "assuredworkloads.workload.delete",
     "assuredworkloads.workload.get",
     "assuredworkloads.workload.list",
@@ -1178,7 +1177,6 @@
     "cloudasset.assets.exportIamServiceAccountKeys",
     "cloudasset.assets.exportIamServiceAccounts",
     "cloudasset.assets.exportManagedidentitiesDomain",
-    "cloudasset.assets.exportOSInventories",
     "cloudasset.assets.exportOrgPolicy",
     "cloudasset.assets.exportPubsubSubscriptions",
     "cloudasset.assets.exportPubsubTopics",
@@ -5650,8 +5648,6 @@
     "timeseriesinsights.datasets.list",
     "timeseriesinsights.datasets.query",
     "timeseriesinsights.datasets.update",
-    "timeseriesinsights.locations.get",
-    "timeseriesinsights.locations.list",
     "tpu.acceleratortypes.get",
     "tpu.acceleratortypes.list",
     "tpu.locations.get",

diff --git a/roles/riskmanager.serviceAgent b/roles/riskmanager.serviceAgent
@@ -85,7 +85,6 @@
     "cloudasset.assets.exportIamServiceAccountKeys",
     "cloudasset.assets.exportIamServiceAccounts",
     "cloudasset.assets.exportManagedidentitiesDomain",
-    "cloudasset.assets.exportOSInventories",
     "cloudasset.assets.exportOrgPolicy",
     "cloudasset.assets.exportPubsubSubscriptions",
     "cloudasset.assets.exportPubsubTopics",

diff --git a/roles/securitycenter.controlServiceAgent b/roles/securitycenter.controlServiceAgent
@@ -99,7 +99,6 @@
     "cloudasset.assets.exportIamServiceAccountKeys",
     "cloudasset.assets.exportIamServiceAccounts",
     "cloudasset.assets.exportManagedidentitiesDomain",
-    "cloudasset.assets.exportOSInventories",
     "cloudasset.assets.exportOrgPolicy",
     "cloudasset.assets.exportPubsubSubscriptions",
     "cloudasset.assets.exportPubsubTopics",

diff --git a/roles/securitycenter.securityHealthAnalyticsServiceAgent b/roles/securitycenter.securityHealthAnalyticsServiceAgent
@@ -91,7 +91,6 @@
     "cloudasset.assets.exportIamServiceAccountKeys",
     "cloudasset.assets.exportIamServiceAccounts",
     "cloudasset.assets.exportManagedidentitiesDomain",
-    "cloudasset.assets.exportOSInventories",
     "cloudasset.assets.exportOrgPolicy",
     "cloudasset.assets.exportPubsubSubscriptions",
     "cloudasset.assets.exportPubsubTopics",

diff --git a/roles/securitycenter.serviceAgent b/roles/securitycenter.serviceAgent
@@ -99,7 +99,6 @@
     "cloudasset.assets.exportIamServiceAccountKeys",
     "cloudasset.assets.exportIamServiceAccounts",
     "cloudasset.assets.exportManagedidentitiesDomain",
-    "cloudasset.assets.exportOSInventories",
     "cloudasset.assets.exportOrgPolicy",
     "cloudasset.assets.exportPubsubSubscriptions",
     "cloudasset.assets.exportPubsubTopics",

diff --git a/roles/serverless.serviceAgent b/roles/serverless.serviceAgent
@@ -36,6 +36,7 @@
     "compute.addresses.list",
     "compute.globalOperations.get",
     "compute.networks.access",
+    "compute.networks.get",
     "compute.subnetworks.get",
     "compute.subnetworks.use",
     "iam.serviceAccounts.actAs",

diff --git a/roles/timeseriesinsights.datasetsEditor b/roles/timeseriesinsights.datasetsEditor
@@ -7,9 +7,7 @@
     "timeseriesinsights.datasets.evaluate",
     "timeseriesinsights.datasets.list",
     "timeseriesinsights.datasets.query",
-    "timeseriesinsights.datasets.update",
-    "timeseriesinsights.locations.get",
-    "timeseriesinsights.locations.list"
+    "timeseriesinsights.datasets.update"
   ],
   "name": "roles/timeseriesinsights.datasetsEditor",
   "stage": "BETA",

diff --git a/roles/timeseriesinsights.datasetsOwner b/roles/timeseriesinsights.datasetsOwner
@@ -7,9 +7,7 @@
     "timeseriesinsights.datasets.evaluate",
     "timeseriesinsights.datasets.list",
     "timeseriesinsights.datasets.query",
-    "timeseriesinsights.datasets.update",
-    "timeseriesinsights.locations.get",
-    "timeseriesinsights.locations.list"
+    "timeseriesinsights.datasets.update"
   ],
   "name": "roles/timeseriesinsights.datasetsOwner",
   "stage": "BETA",

diff --git a/roles/timeseriesinsights.datasetsViewer b/roles/timeseriesinsights.datasetsViewer
@@ -4,9 +4,7 @@
   "includedPermissions": [
     "timeseriesinsights.datasets.evaluate",
     "timeseriesinsights.datasets.list",
-    "timeseriesinsights.datasets.query",
-    "timeseriesinsights.locations.get",
-    "timeseriesinsights.locations.list"
+    "timeseriesinsights.datasets.query"
   ],
   "name": "roles/timeseriesinsights.datasetsViewer",
   "stage": "BETA",

diff --git a/roles/viewer b/roles/viewer
@@ -2532,8 +2532,6 @@
     "timeseriesinsights.datasets.evaluate",
     "timeseriesinsights.datasets.list",
     "timeseriesinsights.datasets.query",
-    "timeseriesinsights.locations.get",
-    "timeseriesinsights.locations.list",
     "tpu.acceleratortypes.get",
     "tpu.acceleratortypes.list",
     "tpu.locations.get",