From a5d1f1f596c675764172585d3e601649a40826f1 Mon Sep 17 00:00:00 2001 From: bgeesaman Date: Wed, 17 Aug 2022 13:21:17 +0000 Subject: [PATCH] Fetch all roles --- gcp_roles_cai.json | 16 ++++++++-------- roles/analyticshub.admin | 2 +- roles/analyticshub.listingAdmin | 2 +- roles/analyticshub.subscriber | 2 +- roles/contactcenteraiplatform.admin | 2 +- roles/contactcenteraiplatform.viewer | 2 +- roles/iam.workforcePoolAdmin | 2 +- roles/iam.workforcePoolViewer | 2 +- roles/retail.serviceAgent | 1 - 9 files changed, 15 insertions(+), 16 deletions(-) diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json index 31a86907..0869c83b 100644 --- a/gcp_roles_cai.json +++ b/gcp_roles_cai.json @@ -29,10 +29,10 @@ {"description":"Connectivity access to Cloud AlloyDB instances.","etag":"AA==","includedPermissions":["alloydb.clusters.generateClientCertificate","alloydb.clusters.get","alloydb.instances.connect","alloydb.instances.get","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/alloydb.client","stage":"BETA","title":"Cloud AlloyDB Client","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Gives the AlloyDB service account permission to manage customer resources","etag":"AA==","includedPermissions":["alloydb.clusters.list"],"name":"roles/alloydb.serviceAgent","stage":"GA","title":"AlloyDB Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Read-only access to Cloud AlloyDB all resources.","etag":"AA==","includedPermissions":["alloydb.backups.get","alloydb.backups.list","alloydb.clusters.get","alloydb.clusters.list","alloydb.instances.get","alloydb.instances.list","alloydb.locations.get","alloydb.locations.list","alloydb.operations.get","alloydb.operations.list","alloydb.supportedDatabaseFlags.get","alloydb.supportedDatabaseFlags.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/alloydb.viewer","stage":"BETA","title":"Cloud AlloyDB Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} -{"description":"Administer Data Exchanges and Listings","etag":"AA==","includedPermissions":["analyticshub.dataExchanges.create","analyticshub.dataExchanges.delete","analyticshub.dataExchanges.get","analyticshub.dataExchanges.getIamPolicy","analyticshub.dataExchanges.list","analyticshub.dataExchanges.setIamPolicy","analyticshub.dataExchanges.update","analyticshub.listings.create","analyticshub.listings.delete","analyticshub.listings.get","analyticshub.listings.getIamPolicy","analyticshub.listings.list","analyticshub.listings.setIamPolicy","analyticshub.listings.update","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/analyticshub.admin","stage":"BETA","title":"Analytics Hub Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} -{"description":"Grants full control over the Listing, including updating, deleting and setting ACLs","etag":"AA==","includedPermissions":["analyticshub.dataExchanges.get","analyticshub.dataExchanges.getIamPolicy","analyticshub.dataExchanges.list","analyticshub.listings.delete","analyticshub.listings.get","analyticshub.listings.getIamPolicy","analyticshub.listings.list","analyticshub.listings.setIamPolicy","analyticshub.listings.update","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/analyticshub.listingAdmin","stage":"GA","title":"Analytics Hub Listing Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Administer Data Exchanges and Listings","etag":"AA==","includedPermissions":["analyticshub.dataExchanges.create","analyticshub.dataExchanges.delete","analyticshub.dataExchanges.get","analyticshub.dataExchanges.getIamPolicy","analyticshub.dataExchanges.list","analyticshub.dataExchanges.setIamPolicy","analyticshub.dataExchanges.update","analyticshub.listings.create","analyticshub.listings.delete","analyticshub.listings.get","analyticshub.listings.getIamPolicy","analyticshub.listings.list","analyticshub.listings.setIamPolicy","analyticshub.listings.update","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/analyticshub.admin","stage":"GA","title":"Analytics Hub Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Grants full control over the Listing, including updating, deleting and setting ACLs","etag":"AA==","includedPermissions":["analyticshub.dataExchanges.get","analyticshub.dataExchanges.getIamPolicy","analyticshub.dataExchanges.list","analyticshub.listings.delete","analyticshub.listings.get","analyticshub.listings.getIamPolicy","analyticshub.listings.list","analyticshub.listings.setIamPolicy","analyticshub.listings.update","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/analyticshub.listingAdmin","stage":"BETA","title":"Analytics Hub Listing Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Can publish to Data Exchanges thus creating Listings","etag":"AA==","includedPermissions":["analyticshub.dataExchanges.get","analyticshub.dataExchanges.getIamPolicy","analyticshub.dataExchanges.list","analyticshub.listings.create","analyticshub.listings.get","analyticshub.listings.getIamPolicy","analyticshub.listings.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/analyticshub.publisher","stage":"GA","title":"Analytics Hub Publisher","asset_type":"iam.googleapis.com/ExportedIAMRole"} -{"description":"Can browse Data Exchanges and subscribe to Listings","etag":"AA==","includedPermissions":["analyticshub.dataExchanges.get","analyticshub.dataExchanges.getIamPolicy","analyticshub.dataExchanges.list","analyticshub.listings.get","analyticshub.listings.getIamPolicy","analyticshub.listings.list","analyticshub.listings.subscribe","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/analyticshub.subscriber","stage":"GA","title":"Analytics Hub Subscriber","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Can browse Data Exchanges and subscribe to Listings","etag":"AA==","includedPermissions":["analyticshub.dataExchanges.get","analyticshub.dataExchanges.getIamPolicy","analyticshub.dataExchanges.list","analyticshub.listings.get","analyticshub.listings.getIamPolicy","analyticshub.listings.list","analyticshub.listings.subscribe","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/analyticshub.subscriber","stage":"BETA","title":"Analytics Hub Subscriber","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Can browse Data Exchanges and Listings","etag":"AA==","includedPermissions":["analyticshub.dataExchanges.get","analyticshub.dataExchanges.getIamPolicy","analyticshub.dataExchanges.list","analyticshub.listings.get","analyticshub.listings.getIamPolicy","analyticshub.listings.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/analyticshub.viewer","stage":"GA","title":"Analytics Hub Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Full access to manage devices.","etag":"AA==","includedPermissions":["androidmanagement.enterprises.manage","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list"],"name":"roles/androidmanagement.user","stage":"GA","title":"Android Management User","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Gives the Anthos service agent access to Cloud Platformresources.","etag":"AA==","includedPermissions":["gkehub.features.get","gkehub.locations.get","gkehub.locations.list","gkehub.memberships.get","gkehub.memberships.list","serviceusage.services.get","serviceusage.services.list"],"name":"roles/anthos.serviceAgent","stage":"GA","title":"Anthos Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"} @@ -330,8 +330,8 @@ {"description":"Allows inspecting entitlements and service states for a consumer project","etag":"AA==","includedPermissions":["consumerprocurement.entitlements.get","consumerprocurement.entitlements.list","consumerprocurement.freeTrials.get","consumerprocurement.freeTrials.list","resourcemanager.projects.get","resourcemanager.projects.list","serviceusage.services.get","serviceusage.services.list"],"name":"roles/consumerprocurement.entitlementViewer","stage":"BETA","title":"Consumer Procurement Entitlement Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Allows managing purchases","etag":"AA==","includedPermissions":["commerceoffercatalog.documents.get","commerceoffercatalog.offers.get","consumerprocurement.accounts.create","consumerprocurement.accounts.delete","consumerprocurement.accounts.get","consumerprocurement.accounts.list","consumerprocurement.consents.check","consumerprocurement.consents.grant","consumerprocurement.consents.list","consumerprocurement.consents.revoke","consumerprocurement.orderAttributions.get","consumerprocurement.orderAttributions.list","consumerprocurement.orderAttributions.update","consumerprocurement.orders.cancel","consumerprocurement.orders.get","consumerprocurement.orders.list","consumerprocurement.orders.modify","consumerprocurement.orders.place"],"name":"roles/consumerprocurement.orderAdmin","stage":"BETA","title":"Consumer Procurement Order Administrator","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Allows inspecting purchases","etag":"AA==","includedPermissions":["commerceoffercatalog.documents.get","commerceoffercatalog.offers.get","consumerprocurement.accounts.get","consumerprocurement.accounts.list","consumerprocurement.consents.check","consumerprocurement.consents.list","consumerprocurement.orderAttributions.get","consumerprocurement.orderAttributions.list","consumerprocurement.orders.get","consumerprocurement.orders.list"],"name":"roles/consumerprocurement.orderViewer","stage":"BETA","title":"Consumer Procurement Order Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} -{"description":"Full access to Contact Center AI Platform resources.","etag":"AA==","includedPermissions":["contactcenteraiplatform.contactCenters.create","contactcenteraiplatform.contactCenters.delete","contactcenteraiplatform.contactCenters.get","contactcenteraiplatform.contactCenters.list","contactcenteraiplatform.contactCenters.update","contactcenteraiplatform.locations.get","contactcenteraiplatform.locations.list","contactcenteraiplatform.operations.cancel","contactcenteraiplatform.operations.delete","contactcenteraiplatform.operations.get","contactcenteraiplatform.operations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/contactcenteraiplatform.admin","stage":"GA","title":"Contact Center AI Platform Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} -{"description":"Readonly access to Contact Center AI Platform resources.","etag":"AA==","includedPermissions":["contactcenteraiplatform.contactCenters.get","contactcenteraiplatform.contactCenters.list","contactcenteraiplatform.locations.get","contactcenteraiplatform.locations.list","contactcenteraiplatform.operations.get","contactcenteraiplatform.operations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/contactcenteraiplatform.viewer","stage":"GA","title":"Contact Center AI Platform Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Full access to Contact Center AI Platform resources.","etag":"AA==","includedPermissions":["contactcenteraiplatform.contactCenters.create","contactcenteraiplatform.contactCenters.delete","contactcenteraiplatform.contactCenters.get","contactcenteraiplatform.contactCenters.list","contactcenteraiplatform.contactCenters.update","contactcenteraiplatform.locations.get","contactcenteraiplatform.locations.list","contactcenteraiplatform.operations.cancel","contactcenteraiplatform.operations.delete","contactcenteraiplatform.operations.get","contactcenteraiplatform.operations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/contactcenteraiplatform.admin","stage":"ALPHA","title":"Contact Center AI Platform Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Readonly access to Contact Center AI Platform resources.","etag":"AA==","includedPermissions":["contactcenteraiplatform.contactCenters.get","contactcenteraiplatform.contactCenters.list","contactcenteraiplatform.locations.get","contactcenteraiplatform.locations.list","contactcenteraiplatform.operations.get","contactcenteraiplatform.operations.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/contactcenteraiplatform.viewer","stage":"ALPHA","title":"Contact Center AI Platform Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Grants read and write access to all Contact Center AI Insights resources.","etag":"AA==","includedPermissions":["contactcenterinsights.analyses.create","contactcenterinsights.analyses.delete","contactcenterinsights.analyses.get","contactcenterinsights.analyses.list","contactcenterinsights.conversations.create","contactcenterinsights.conversations.delete","contactcenterinsights.conversations.get","contactcenterinsights.conversations.list","contactcenterinsights.conversations.update","contactcenterinsights.issueModels.create","contactcenterinsights.issueModels.delete","contactcenterinsights.issueModels.deploy","contactcenterinsights.issueModels.get","contactcenterinsights.issueModels.list","contactcenterinsights.issueModels.undeploy","contactcenterinsights.issueModels.update","contactcenterinsights.issues.get","contactcenterinsights.issues.list","contactcenterinsights.issues.update","contactcenterinsights.operations.get","contactcenterinsights.operations.list","contactcenterinsights.phraseMatchers.create","contactcenterinsights.phraseMatchers.delete","contactcenterinsights.phraseMatchers.get","contactcenterinsights.phraseMatchers.list","contactcenterinsights.phraseMatchers.update","contactcenterinsights.settings.get","contactcenterinsights.settings.update"],"name":"roles/contactcenterinsights.editor","stage":"BETA","title":"Contact Center AI Insights editor","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Allows Contact Center AI to read and write APIs including BigQuery, Dialogflow, and Storage.","etag":"AA==","includedPermissions":["bigquery.datasets.create","bigquery.datasets.get","bigquery.jobs.create","bigquery.jobs.get","bigquery.tables.create","bigquery.tables.get","bigquery.tables.update","bigquery.tables.updateData","datalabeling.dataitems.get","datalabeling.dataitems.list","datalabeling.datasets.create","datalabeling.datasets.delete","datalabeling.datasets.export","datalabeling.datasets.get","datalabeling.datasets.import","datalabeling.operations.get","datalabeling.operations.list","dialogflow.conversationDatasets.create","dialogflow.conversationDatasets.delete","dialogflow.conversationDatasets.get","dialogflow.conversationDatasets.import","dialogflow.conversationDatasets.list","dialogflow.conversationModels.create","dialogflow.conversationModels.delete","dialogflow.conversationModels.deploy","dialogflow.conversationModels.get","dialogflow.conversationModels.list","dialogflow.conversationModels.undeploy","dialogflow.documents.create","dialogflow.documents.delete","dialogflow.documents.get","dialogflow.documents.list","dialogflow.operations.get","dialogflow.participants.suggest","dialogflow.sessions.detectIntent","pubsub.topics.get","pubsub.topics.publish","storage.objects.get","storage.objects.list"],"name":"roles/contactcenterinsights.serviceAgent","stage":"GA","title":"Contact Center AI Insights Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Grants read access to all Contact Center AI Insights resources.","etag":"AA==","includedPermissions":["contactcenterinsights.analyses.get","contactcenterinsights.analyses.list","contactcenterinsights.conversations.get","contactcenterinsights.conversations.list","contactcenterinsights.issueModels.get","contactcenterinsights.issueModels.list","contactcenterinsights.issues.get","contactcenterinsights.issues.list","contactcenterinsights.operations.get","contactcenterinsights.operations.list","contactcenterinsights.phraseMatchers.get","contactcenterinsights.phraseMatchers.list","contactcenterinsights.settings.get"],"name":"roles/contactcenterinsights.viewer","stage":"BETA","title":"Contact Center AI Insights viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} @@ -661,9 +661,9 @@ {"description":"Impersonate service accounts (create OAuth2 access tokens, sign blobs or JWTs, etc).","etag":"AA==","includedPermissions":["iam.serviceAccounts.get","iam.serviceAccounts.getAccessToken","iam.serviceAccounts.getOpenIdToken","iam.serviceAccounts.implicitDelegation","iam.serviceAccounts.list","iam.serviceAccounts.signBlob","iam.serviceAccounts.signJwt","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/iam.serviceAccountTokenCreator","stage":"GA","title":"Service Account Token Creator","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Run operations as the service account.","etag":"AA==","includedPermissions":["iam.serviceAccounts.actAs","iam.serviceAccounts.get","iam.serviceAccounts.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/iam.serviceAccountUser","stage":"GA","title":"Service Account User","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Read access to service accounts, metadata, and keys.","etag":"AA==","includedPermissions":["iam.serviceAccountKeys.get","iam.serviceAccountKeys.list","iam.serviceAccounts.get","iam.serviceAccounts.getIamPolicy","iam.serviceAccounts.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/iam.serviceAccountViewer","stage":"GA","title":"View Service Accounts","asset_type":"iam.googleapis.com/ExportedIAMRole"} -{"description":"Full rights to create and manage all workforce pools in the org, along with the ability to delegate permissions to other admins.","etag":"AA==","includedPermissions":["iam.googleapis.com/workforcePoolProviders.create","iam.googleapis.com/workforcePoolProviders.delete","iam.googleapis.com/workforcePoolProviders.get","iam.googleapis.com/workforcePoolProviders.list","iam.googleapis.com/workforcePoolProviders.undelete","iam.googleapis.com/workforcePoolProviders.update","iam.googleapis.com/workforcePoolSubjects.delete","iam.googleapis.com/workforcePoolSubjects.undelete","iam.googleapis.com/workforcePools.create","iam.googleapis.com/workforcePools.delete","iam.googleapis.com/workforcePools.get","iam.googleapis.com/workforcePools.getIamPolicy","iam.googleapis.com/workforcePools.list","iam.googleapis.com/workforcePools.setIamPolicy","iam.googleapis.com/workforcePools.undelete","iam.googleapis.com/workforcePools.update"],"name":"roles/iam.workforcePoolAdmin","stage":"BETA","title":"IAM Workforce Pool Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Full rights to create and manage all workforce pools in the org, along with the ability to delegate permissions to other admins.","etag":"AA==","includedPermissions":["iam.googleapis.com/workforcePoolProviders.create","iam.googleapis.com/workforcePoolProviders.delete","iam.googleapis.com/workforcePoolProviders.get","iam.googleapis.com/workforcePoolProviders.list","iam.googleapis.com/workforcePoolProviders.undelete","iam.googleapis.com/workforcePoolProviders.update","iam.googleapis.com/workforcePoolSubjects.delete","iam.googleapis.com/workforcePoolSubjects.undelete","iam.googleapis.com/workforcePools.create","iam.googleapis.com/workforcePools.delete","iam.googleapis.com/workforcePools.get","iam.googleapis.com/workforcePools.getIamPolicy","iam.googleapis.com/workforcePools.list","iam.googleapis.com/workforcePools.setIamPolicy","iam.googleapis.com/workforcePools.undelete","iam.googleapis.com/workforcePools.update"],"name":"roles/iam.workforcePoolAdmin","stage":"ALPHA","title":"IAM Workforce Pool Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Rights to edit a particular instance of a workforce pool.","etag":"AA==","includedPermissions":["iam.googleapis.com/workforcePoolProviders.create","iam.googleapis.com/workforcePoolProviders.delete","iam.googleapis.com/workforcePoolProviders.get","iam.googleapis.com/workforcePoolProviders.list","iam.googleapis.com/workforcePoolProviders.undelete","iam.googleapis.com/workforcePoolProviders.update","iam.googleapis.com/workforcePools.get","iam.googleapis.com/workforcePools.list","iam.googleapis.com/workforcePools.update"],"name":"roles/iam.workforcePoolEditor","stage":"BETA","title":"IAM Workforce Pool Editor","asset_type":"iam.googleapis.com/ExportedIAMRole"} -{"description":"Rights to read workforce pool.","etag":"AA==","includedPermissions":["iam.googleapis.com/workforcePoolProviders.get","iam.googleapis.com/workforcePoolProviders.list","iam.googleapis.com/workforcePools.get","iam.googleapis.com/workforcePools.list"],"name":"roles/iam.workforcePoolViewer","stage":"ALPHA","title":"IAM Workforce Pool Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Rights to read workforce pool.","etag":"AA==","includedPermissions":["iam.googleapis.com/workforcePoolProviders.get","iam.googleapis.com/workforcePoolProviders.list","iam.googleapis.com/workforcePools.get","iam.googleapis.com/workforcePools.list"],"name":"roles/iam.workforcePoolViewer","stage":"BETA","title":"IAM Workforce Pool Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Full rights to create and manage workload identity pools.","etag":"AA==","includedPermissions":["iam.googleapis.com/workloadIdentityPoolProviders.create","iam.googleapis.com/workloadIdentityPoolProviders.delete","iam.googleapis.com/workloadIdentityPoolProviders.get","iam.googleapis.com/workloadIdentityPoolProviders.list","iam.googleapis.com/workloadIdentityPoolProviders.undelete","iam.googleapis.com/workloadIdentityPoolProviders.update","iam.googleapis.com/workloadIdentityPools.create","iam.googleapis.com/workloadIdentityPools.delete","iam.googleapis.com/workloadIdentityPools.get","iam.googleapis.com/workloadIdentityPools.list","iam.googleapis.com/workloadIdentityPools.undelete","iam.googleapis.com/workloadIdentityPools.update","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/iam.workloadIdentityPoolAdmin","stage":"BETA","title":"IAM Workload Identity Pool Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Read access to workload identity pools.","etag":"AA==","includedPermissions":["iam.googleapis.com/workloadIdentityPoolProviders.get","iam.googleapis.com/workloadIdentityPoolProviders.list","iam.googleapis.com/workloadIdentityPools.get","iam.googleapis.com/workloadIdentityPools.list","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/iam.workloadIdentityPoolViewer","stage":"BETA","title":"IAM Workload Identity Pool Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Impersonate service accounts from GKE Workloads","etag":"AA==","includedPermissions":["iam.serviceAccounts.get","iam.serviceAccounts.getAccessToken","iam.serviceAccounts.getOpenIdToken","iam.serviceAccounts.list"],"name":"roles/iam.workloadIdentityUser","stage":"GA","title":"Workload Identity User","asset_type":"iam.googleapis.com/ExportedIAMRole"} @@ -920,7 +920,7 @@ {"description":"Provides capabilities to view Resource Settings and Resource Setting Values on resources.","etag":"AA==","includedPermissions":["resourcesettings.settings.get","resourcesettings.settings.list"],"name":"roles/resourcesettings.viewer","stage":"GA","title":"Resource Settings Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Full access to Retail api resources.","etag":"AA==","includedPermissions":["automlrecommendations.apiKeys.create","automlrecommendations.apiKeys.delete","automlrecommendations.catalogItems.create","automlrecommendations.catalogItems.delete","automlrecommendations.catalogItems.get","automlrecommendations.catalogItems.list","automlrecommendations.catalogItems.update","automlrecommendations.catalogs.getStats","automlrecommendations.catalogs.list","automlrecommendations.catalogs.update","automlrecommendations.eventStores.getStats","automlrecommendations.events.create","automlrecommendations.events.list","automlrecommendations.events.purge","automlrecommendations.events.rejoin","automlrecommendations.placements.create","automlrecommendations.placements.delete","automlrecommendations.placements.getStats","automlrecommendations.placements.list","automlrecommendations.recommendations.create","automlrecommendations.recommendations.delete","automlrecommendations.recommendations.list","automlrecommendations.recommendations.pause","automlrecommendations.recommendations.resume","automlrecommendations.recommendations.update","retail.attributesConfigs.addCatalogAttribute","retail.attributesConfigs.batchRemoveCatalogAttributes","retail.attributesConfigs.exportCatalogAttributes","retail.attributesConfigs.get","retail.attributesConfigs.importCatalogAttributes","retail.attributesConfigs.removeCatalogAttribute","retail.attributesConfigs.replaceCatalogAttribute","retail.attributesConfigs.update","retail.catalogs.completeQuery","retail.catalogs.import","retail.catalogs.list","retail.catalogs.update","retail.controls.create","retail.controls.delete","retail.controls.export","retail.controls.get","retail.controls.import","retail.controls.list","retail.controls.update","retail.models.create","retail.models.delete","retail.models.list","retail.operations.get","retail.operations.list","retail.placements.predict","retail.placements.search","retail.products.create","retail.products.delete","retail.products.export","retail.products.get","retail.products.import","retail.products.list","retail.products.setSponsorship","retail.products.update","retail.retailProjects.get","retail.servingConfigs.create","retail.servingConfigs.delete","retail.servingConfigs.get","retail.servingConfigs.list","retail.servingConfigs.predict","retail.servingConfigs.search","retail.servingConfigs.update","retail.userEvents.create","retail.userEvents.import","retail.userEvents.purge","retail.userEvents.rejoin"],"name":"roles/retail.admin","stage":"GA","title":"Retail Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Full access to Retail api resources except purge, rejoin, and setSponsorship.","etag":"AA==","includedPermissions":["automlrecommendations.apiKeys.create","automlrecommendations.apiKeys.delete","automlrecommendations.catalogItems.create","automlrecommendations.catalogItems.delete","automlrecommendations.catalogItems.get","automlrecommendations.catalogItems.list","automlrecommendations.catalogItems.update","automlrecommendations.catalogs.getStats","automlrecommendations.catalogs.list","automlrecommendations.catalogs.update","automlrecommendations.eventStores.getStats","automlrecommendations.events.create","automlrecommendations.events.list","automlrecommendations.placements.create","automlrecommendations.placements.delete","automlrecommendations.placements.getStats","automlrecommendations.placements.list","automlrecommendations.recommendations.create","automlrecommendations.recommendations.delete","automlrecommendations.recommendations.list","automlrecommendations.recommendations.pause","automlrecommendations.recommendations.resume","automlrecommendations.recommendations.update","retail.attributesConfigs.addCatalogAttribute","retail.attributesConfigs.exportCatalogAttributes","retail.attributesConfigs.get","retail.attributesConfigs.importCatalogAttributes","retail.attributesConfigs.replaceCatalogAttribute","retail.attributesConfigs.update","retail.catalogs.completeQuery","retail.catalogs.import","retail.catalogs.list","retail.catalogs.update","retail.controls.create","retail.controls.delete","retail.controls.export","retail.controls.get","retail.controls.import","retail.controls.list","retail.controls.update","retail.models.create","retail.models.delete","retail.models.list","retail.operations.get","retail.operations.list","retail.placements.predict","retail.placements.search","retail.products.create","retail.products.delete","retail.products.export","retail.products.get","retail.products.import","retail.products.list","retail.products.update","retail.retailProjects.get","retail.servingConfigs.create","retail.servingConfigs.delete","retail.servingConfigs.get","retail.servingConfigs.list","retail.servingConfigs.predict","retail.servingConfigs.search","retail.servingConfigs.update","retail.userEvents.create","retail.userEvents.import"],"name":"roles/retail.editor","stage":"GA","title":"Retail Editor","asset_type":"iam.googleapis.com/ExportedIAMRole"} -{"description":"Retail service uploads product feeds and user events from Cloud Storage and BigQuery, reports results to the customer Cloud Storage bucket, writes logs to customer projects, and writes and reads Stackdriver metrics for customer projects.","etag":"AA==","includedPermissions":["bigquery.datasets.create","bigquery.datasets.get","bigquery.jobs.create","bigquery.jobs.get","bigquery.jobs.list","bigquery.jobs.update","bigquery.tables.create","bigquery.tables.export","bigquery.tables.get","bigquery.tables.getData","bigquery.tables.list","bigquery.tables.update","bigquery.tables.updateData","cloudnotifications.activities.list","dataflow.jobs.cancel","dataflow.jobs.create","dataflow.jobs.get","dataflow.jobs.list","dataflow.jobs.snapshot","dataflow.jobs.updateContents","dataflow.messages.list","dataflow.metrics.get","logging.logEntries.create","monitoring.alertPolicies.get","monitoring.alertPolicies.list","monitoring.dashboards.get","monitoring.dashboards.list","monitoring.groups.get","monitoring.groups.list","monitoring.metricDescriptors.create","monitoring.metricDescriptors.get","monitoring.metricDescriptors.list","monitoring.monitoredResourceDescriptors.get","monitoring.monitoredResourceDescriptors.list","monitoring.notificationChannelDescriptors.get","monitoring.notificationChannelDescriptors.list","monitoring.notificationChannels.get","monitoring.notificationChannels.list","monitoring.publicWidgets.get","monitoring.publicWidgets.list","monitoring.services.get","monitoring.services.list","monitoring.slos.get","monitoring.slos.list","monitoring.timeSeries.create","monitoring.timeSeries.list","monitoring.uptimeCheckConfigs.get","monitoring.uptimeCheckConfigs.list","opsconfigmonitoring.resourceMetadata.list","resourcemanager.projects.get","resourcemanager.projects.list","stackdriver.projects.get","storage.buckets.create","storage.buckets.get","storage.objects.create","storage.objects.delete","storage.objects.get","storage.objects.list","storage.objects.update"],"name":"roles/retail.serviceAgent","stage":"GA","title":"Retail Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"} +{"description":"Retail service uploads product feeds and user events from Cloud Storage and BigQuery, reports results to the customer Cloud Storage bucket, writes logs to customer projects, and writes and reads Stackdriver metrics for customer projects.","etag":"AA==","includedPermissions":["bigquery.datasets.create","bigquery.datasets.get","bigquery.jobs.create","bigquery.jobs.get","bigquery.jobs.list","bigquery.jobs.update","bigquery.tables.create","bigquery.tables.export","bigquery.tables.get","bigquery.tables.getData","bigquery.tables.list","bigquery.tables.updateData","cloudnotifications.activities.list","dataflow.jobs.cancel","dataflow.jobs.create","dataflow.jobs.get","dataflow.jobs.list","dataflow.jobs.snapshot","dataflow.jobs.updateContents","dataflow.messages.list","dataflow.metrics.get","logging.logEntries.create","monitoring.alertPolicies.get","monitoring.alertPolicies.list","monitoring.dashboards.get","monitoring.dashboards.list","monitoring.groups.get","monitoring.groups.list","monitoring.metricDescriptors.create","monitoring.metricDescriptors.get","monitoring.metricDescriptors.list","monitoring.monitoredResourceDescriptors.get","monitoring.monitoredResourceDescriptors.list","monitoring.notificationChannelDescriptors.get","monitoring.notificationChannelDescriptors.list","monitoring.notificationChannels.get","monitoring.notificationChannels.list","monitoring.publicWidgets.get","monitoring.publicWidgets.list","monitoring.services.get","monitoring.services.list","monitoring.slos.get","monitoring.slos.list","monitoring.timeSeries.create","monitoring.timeSeries.list","monitoring.uptimeCheckConfigs.get","monitoring.uptimeCheckConfigs.list","opsconfigmonitoring.resourceMetadata.list","resourcemanager.projects.get","resourcemanager.projects.list","stackdriver.projects.get","storage.buckets.create","storage.buckets.get","storage.objects.create","storage.objects.delete","storage.objects.get","storage.objects.list","storage.objects.update"],"name":"roles/retail.serviceAgent","stage":"GA","title":"Retail Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Grants access to read all resources in Retail.","etag":"AA==","includedPermissions":["automlrecommendations.catalogItems.get","automlrecommendations.catalogItems.list","automlrecommendations.catalogs.getStats","automlrecommendations.catalogs.list","automlrecommendations.eventStores.getStats","automlrecommendations.events.list","automlrecommendations.placements.getStats","automlrecommendations.placements.list","automlrecommendations.recommendations.list","retail.attributesConfigs.exportCatalogAttributes","retail.attributesConfigs.get","retail.catalogs.completeQuery","retail.catalogs.list","retail.controls.export","retail.controls.get","retail.controls.list","retail.models.list","retail.operations.get","retail.operations.list","retail.placements.predict","retail.placements.search","retail.products.export","retail.products.get","retail.products.list","retail.retailProjects.get","retail.servingConfigs.get","retail.servingConfigs.list","retail.servingConfigs.predict","retail.servingConfigs.search"],"name":"roles/retail.viewer","stage":"GA","title":"Retail Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Grants all Risk Manager permissions","etag":"AA==","includedPermissions":["resourcemanager.projects.get","resourcemanager.projects.list","riskmanager.operations.delete","riskmanager.operations.get","riskmanager.operations.list","riskmanager.policies.get","riskmanager.policies.list","riskmanager.reports.create","riskmanager.reports.delete","riskmanager.reports.get","riskmanager.reports.list","riskmanager.reports.review","riskmanager.reports.share","riskmanager.serviceAccount.create","riskmanager.settings.get","riskmanager.settings.update"],"name":"roles/riskmanager.admin","stage":"BETA","title":"Risk Manager Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"} {"description":"Access to edit Risk Manager resources","etag":"AA==","includedPermissions":["resourcemanager.projects.get","resourcemanager.projects.list","riskmanager.operations.delete","riskmanager.operations.get","riskmanager.operations.list","riskmanager.policies.get","riskmanager.policies.list","riskmanager.reports.create","riskmanager.reports.delete","riskmanager.reports.get","riskmanager.reports.list","riskmanager.serviceAccount.create","riskmanager.settings.get","riskmanager.settings.update"],"name":"roles/riskmanager.editor","stage":"BETA","title":"Risk Manager Editor","asset_type":"iam.googleapis.com/ExportedIAMRole"} diff --git a/roles/analyticshub.admin b/roles/analyticshub.admin index be96ba91..a5c1e89d 100644 --- a/roles/analyticshub.admin +++ b/roles/analyticshub.admin @@ -20,6 +20,6 @@ "resourcemanager.projects.list" ], "name": "roles/analyticshub.admin", - "stage": "BETA", + "stage": "GA", "title": "Analytics Hub Admin" } diff --git a/roles/analyticshub.listingAdmin b/roles/analyticshub.listingAdmin index f420d5ba..9cfa979d 100644 --- a/roles/analyticshub.listingAdmin +++ b/roles/analyticshub.listingAdmin @@ -15,6 +15,6 @@ "resourcemanager.projects.list" ], "name": "roles/analyticshub.listingAdmin", - "stage": "GA", + "stage": "BETA", "title": "Analytics Hub Listing Admin" } diff --git a/roles/analyticshub.subscriber b/roles/analyticshub.subscriber index c2f3f86f..425635b1 100644 --- a/roles/analyticshub.subscriber +++ b/roles/analyticshub.subscriber @@ -13,6 +13,6 @@ "resourcemanager.projects.list" ], "name": "roles/analyticshub.subscriber", - "stage": "GA", + "stage": "BETA", "title": "Analytics Hub Subscriber" } diff --git a/roles/contactcenteraiplatform.admin b/roles/contactcenteraiplatform.admin index 11ef09ed..62a61928 100644 --- a/roles/contactcenteraiplatform.admin +++ b/roles/contactcenteraiplatform.admin @@ -17,6 +17,6 @@ "resourcemanager.projects.list" ], "name": "roles/contactcenteraiplatform.admin", - "stage": "GA", + "stage": "ALPHA", "title": "Contact Center AI Platform Admin" } diff --git a/roles/contactcenteraiplatform.viewer b/roles/contactcenteraiplatform.viewer index c04af1e9..fc21716b 100644 --- a/roles/contactcenteraiplatform.viewer +++ b/roles/contactcenteraiplatform.viewer @@ -12,6 +12,6 @@ "resourcemanager.projects.list" ], "name": "roles/contactcenteraiplatform.viewer", - "stage": "GA", + "stage": "ALPHA", "title": "Contact Center AI Platform Viewer" } diff --git a/roles/iam.workforcePoolAdmin b/roles/iam.workforcePoolAdmin index 4b705c2b..6ceb6932 100644 --- a/roles/iam.workforcePoolAdmin +++ b/roles/iam.workforcePoolAdmin @@ -20,6 +20,6 @@ "iam.googleapis.com/workforcePools.update" ], "name": "roles/iam.workforcePoolAdmin", - "stage": "BETA", + "stage": "ALPHA", "title": "IAM Workforce Pool Admin" } diff --git a/roles/iam.workforcePoolViewer b/roles/iam.workforcePoolViewer index 92b48a3a..7a0aefa9 100644 --- a/roles/iam.workforcePoolViewer +++ b/roles/iam.workforcePoolViewer @@ -8,6 +8,6 @@ "iam.googleapis.com/workforcePools.list" ], "name": "roles/iam.workforcePoolViewer", - "stage": "ALPHA", + "stage": "BETA", "title": "IAM Workforce Pool Viewer" } diff --git a/roles/retail.serviceAgent b/roles/retail.serviceAgent index ae12aed3..679f4df0 100644 --- a/roles/retail.serviceAgent +++ b/roles/retail.serviceAgent @@ -13,7 +13,6 @@ "bigquery.tables.get", "bigquery.tables.getData", "bigquery.tables.list", - "bigquery.tables.update", "bigquery.tables.updateData", "cloudnotifications.activities.list", "dataflow.jobs.cancel",