Fetch all roles

darkbitio · Sep 19, 2024 · a7ef7d0 · a7ef7d0
1 parent ec558bb
commit a7ef7d0
Show file tree

Hide file tree

Showing 34 changed files with 235 additions and 45 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/aiplatform.batchPredictionServiceAgent b/roles/aiplatform.batchPredictionServiceAgent
@@ -0,0 +1,37 @@
+{
+  "description": "Vertex AI Batch Prediction Service Agent for serving batch prediction requests.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "bigquery.datasets.create",
+    "bigquery.datasets.get",
+    "bigquery.jobs.create",
+    "bigquery.jobs.get",
+    "bigquery.models.create",
+    "bigquery.models.export",
+    "bigquery.models.getData",
+    "bigquery.readsessions.create",
+    "bigquery.readsessions.getData",
+    "bigquery.tables.create",
+    "bigquery.tables.createSnapshot",
+    "bigquery.tables.deleteSnapshot",
+    "bigquery.tables.export",
+    "bigquery.tables.get",
+    "bigquery.tables.getData",
+    "bigquery.tables.restoreSnapshot",
+    "bigquery.tables.update",
+    "bigquery.tables.updateData",
+    "storage.buckets.create",
+    "storage.buckets.delete",
+    "storage.buckets.get",
+    "storage.buckets.list",
+    "storage.buckets.update",
+    "storage.objects.create",
+    "storage.objects.delete",
+    "storage.objects.get",
+    "storage.objects.list",
+    "storage.objects.update"
+  ],
+  "name": "roles/aiplatform.batchPredictionServiceAgent",
+  "stage": "GA",
+  "title": "Vertex AI Batch Prediction Service Agent"
+}
diff --git a/roles/apigee.deploymentInvoker b/roles/apigee.deploymentInvoker
@@ -5,6 +5,6 @@
     "apigee.deployments.invoke"
   ],
   "name": "roles/apigee.deploymentInvoker",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Apigee Deployment Invoker"
 }
diff --git a/roles/artifactregistry.repoAdmin b/roles/artifactregistry.repoAdmin
@@ -3,13 +3,18 @@
   "etag": "AA==",
   "includedPermissions": [
     "artifactregistry.aptartifacts.create",
+    "artifactregistry.attachments.create",
+    "artifactregistry.attachments.delete",
+    "artifactregistry.attachments.get",
+    "artifactregistry.attachments.list",
     "artifactregistry.dockerimages.get",
     "artifactregistry.dockerimages.list",
     "artifactregistry.files.delete",
     "artifactregistry.files.download",
     "artifactregistry.files.get",
     "artifactregistry.files.list",
     "artifactregistry.files.update",
+    "artifactregistry.files.upload",
     "artifactregistry.kfpartifacts.create",
     "artifactregistry.locations.get",
     "artifactregistry.locations.list",

diff --git a/roles/assuredoss.reader b/roles/assuredoss.reader
@@ -2,6 +2,8 @@
   "description": "Access to use Assured OSS and view Assured OSS configuration.",
   "etag": "AA==",
   "includedPermissions": [
+    "artifactregistry.attachments.get",
+    "artifactregistry.attachments.list",
     "artifactregistry.dockerimages.get",
     "artifactregistry.dockerimages.list",
     "artifactregistry.files.download",

diff --git a/roles/chronicle.globalDataAccess b/roles/chronicle.globalDataAccess
@@ -0,0 +1,10 @@
+{
+  "description": "Grants global access to data i.e. all data can be accessed.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "chronicle.globalDataAccessScopes.permit"
+  ],
+  "name": "roles/chronicle.globalDataAccess",
+  "stage": "BETA",
+  "title": "Chronicle API Global Data Access"
+}
diff --git a/roles/chroniclesm.viewer b/roles/chroniclesm.viewer
@@ -3,6 +3,7 @@
   "etag": "AA==",
   "includedPermissions": [
     "chroniclesm.gcpAssociations.get",
+    "chroniclesm.gcpLogFlowFilters.get",
     "chroniclesm.gcpSettings.get"
   ],
   "name": "roles/chroniclesm.viewer",

diff --git a/roles/cloudaicompanion.codeRepositoryIndexesAdmin b/roles/cloudaicompanion.codeRepositoryIndexesAdmin
@@ -23,5 +23,5 @@
   ],
   "name": "roles/cloudaicompanion.codeRepositoryIndexesAdmin",
   "stage": "BETA",
-  "title": "Cloud AI Companion Code Repository Indexes Admin"
+  "title": "Code Repository Indexes Admin"
 }
diff --git a/roles/cloudaicompanion.codeRepositoryIndexesViewer b/roles/cloudaicompanion.codeRepositoryIndexesViewer
@@ -14,5 +14,5 @@
   ],
   "name": "roles/cloudaicompanion.codeRepositoryIndexesViewer",
   "stage": "BETA",
-  "title": "Cloud AI Companion Code Repository Indexes Viewer"
+  "title": "Code Repository Indexes Viewer"
 }
diff --git a/roles/cloudaicompanion.repositoryGroupsUser b/roles/cloudaicompanion.repositoryGroupsUser
@@ -9,5 +9,5 @@
   ],
   "name": "roles/cloudaicompanion.repositoryGroupsUser",
   "stage": "BETA",
-  "title": "Cloud AI Companion Repository Groups User"
+  "title": "Repository Groups User"
 }
diff --git a/roles/cloudaicompanion.user b/roles/cloudaicompanion.user
@@ -1,5 +1,5 @@
 {
-  "description": "A user who can receive assistance from Cloud AI Companion",
+  "description": "A user who can use Gemini for Google Cloud",
   "etag": "AA==",
   "includedPermissions": [
     "cloudaicompanion.companions.generateChat",
@@ -14,5 +14,5 @@
   ],
   "name": "roles/cloudaicompanion.user",
   "stage": "BETA",
-  "title": "Cloud AI Companion User"
+  "title": "Gemini for Google Cloud User"
 }
diff --git a/roles/cloudkms.autokeyUser b/roles/cloudkms.autokeyUser
@@ -5,6 +5,7 @@
     "cloudkms.keyHandles.create",
     "cloudkms.keyHandles.get",
     "cloudkms.keyHandles.list",
+    "cloudkms.operations.get",
     "cloudkms.projects.showEffectiveAutokeyConfig"
   ],
   "name": "roles/cloudkms.autokeyUser",

diff --git a/roles/cloudsql.studioUser b/roles/cloudsql.studioUser
@@ -0,0 +1,14 @@
+{
+  "description": "Role allowing access to Cloud SQL Studio",
+  "etag": "AA==",
+  "includedPermissions": [
+    "cloudsql.databases.list",
+    "cloudsql.instances.executeSql",
+    "cloudsql.instances.get",
+    "cloudsql.instances.login",
+    "cloudsql.users.list"
+  ],
+  "name": "roles/cloudsql.studioUser",
+  "stage": "GA",
+  "title": "Cloud SQL Studio User"
+}
diff --git a/roles/cloudtrace.admin b/roles/cloudtrace.admin
@@ -12,6 +12,7 @@
     "cloudtrace.traces.get",
     "cloudtrace.traces.list",
     "cloudtrace.traces.patch",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/cloudtrace.user b/roles/cloudtrace.user
@@ -11,6 +11,7 @@
     "cloudtrace.tasks.list",
     "cloudtrace.traces.get",
     "cloudtrace.traces.list",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/contactcenterinsights.viewer b/roles/contactcenterinsights.viewer
@@ -4,6 +4,8 @@
   "includedPermissions": [
     "contactcenterinsights.analyses.get",
     "contactcenterinsights.analyses.list",
+    "contactcenterinsights.analysisRules.get",
+    "contactcenterinsights.analysisRules.list",
     "contactcenterinsights.conversations.get",
     "contactcenterinsights.conversations.list",
     "contactcenterinsights.faqEntries.get",

diff --git a/roles/datacatalog.glossaryOwner b/roles/datacatalog.glossaryOwner
@@ -31,7 +31,8 @@
     "datacatalog.relationships.deleteIsDescribedBy",
     "datacatalog.relationships.deleteIsRelatedTo",
     "datacatalog.relationships.deleteIsSynonymousTo",
-    "datacatalog.relationships.list"
+    "datacatalog.relationships.list",
+    "dataplex.projects.search"
   ],
   "name": "roles/datacatalog.glossaryOwner",
   "stage": "BETA",

diff --git a/roles/datacatalog.glossaryUser b/roles/datacatalog.glossaryUser
@@ -14,7 +14,8 @@
     "datacatalog.relationships.deleteIsDescribedBy",
     "datacatalog.relationships.deleteIsRelatedTo",
     "datacatalog.relationships.deleteIsSynonymousTo",
-    "datacatalog.relationships.list"
+    "datacatalog.relationships.list",
+    "dataplex.projects.search"
   ],
   "name": "roles/datacatalog.glossaryUser",
   "stage": "BETA",

diff --git a/roles/dialogflow.serviceAgent b/roles/dialogflow.serviceAgent
@@ -102,8 +102,12 @@
     "dialogflow.versions.list",
     "dialogflow.webhooks.get",
     "dialogflow.webhooks.list",
+    "discoveryengine.collections.list",
+    "discoveryengine.dataStores.list",
+    "discoveryengine.engines.create",
     "discoveryengine.engines.delete",
     "discoveryengine.engines.get",
+    "discoveryengine.engines.update",
     "discoveryengine.servingConfigs.search",
     "dlp.deidentifyTemplates.get",
     "dlp.deidentifyTemplates.list",

diff --git a/roles/firebase.developViewer b/roles/firebase.developViewer
@@ -2,6 +2,8 @@
   "description": "Read access to Firebase Develop products and Analytics.",
   "etag": "AA==",
   "includedPermissions": [
+    "apikeys.keys.get",
+    "apikeys.keys.list",
     "automl.annotationSpecs.get",
     "automl.annotationSpecs.list",
     "automl.annotations.list",

diff --git a/roles/firebase.growthAdmin b/roles/firebase.growthAdmin
@@ -2,6 +2,8 @@
   "description": "Full access to Firebase Grow products and Analytics.",
   "etag": "AA==",
   "includedPermissions": [
+    "apikeys.keys.get",
+    "apikeys.keys.list",
     "clientauthconfig.clients.get",
     "clientauthconfig.clients.list",
     "cloudconfig.configs.get",

diff --git a/roles/firebase.growthViewer b/roles/firebase.growthViewer
@@ -2,6 +2,8 @@
   "description": "Read access to Firebase Grow products and Analytics.",
   "etag": "AA==",
   "includedPermissions": [
+    "apikeys.keys.get",
+    "apikeys.keys.list",
     "cloudconfig.configs.get",
     "cloudnotifications.activities.list",
     "fcmdata.deliverydata.list",

diff --git a/roles/firebase.qualityAdmin b/roles/firebase.qualityAdmin
@@ -2,6 +2,8 @@
   "description": "Full access to Firebase Quality products and Analytics.",
   "etag": "AA==",
   "includedPermissions": [
+    "apikeys.keys.get",
+    "apikeys.keys.list",
     "cloudnotifications.activities.list",
     "firebase.billingPlans.get",
     "firebase.clients.get",

diff --git a/roles/firebase.qualityViewer b/roles/firebase.qualityViewer
@@ -2,6 +2,8 @@
   "description": "Read access to Firebase Quality products and Analytics.",
   "etag": "AA==",
   "includedPermissions": [
+    "apikeys.keys.get",
+    "apikeys.keys.list",
     "cloudnotifications.activities.list",
     "firebase.billingPlans.get",
     "firebase.clients.get",

diff --git a/roles/firebase.viewer b/roles/firebase.viewer
@@ -2,6 +2,8 @@
   "description": "Read-only access to Firebase products.",
   "etag": "AA==",
   "includedPermissions": [
+    "apikeys.keys.get",
+    "apikeys.keys.list",
     "automl.annotationSpecs.get",
     "automl.annotationSpecs.list",
     "automl.annotations.list",

diff --git a/roles/managedkafka.serviceAgent b/roles/managedkafka.serviceAgent
@@ -30,6 +30,7 @@
     "dns.resourceRecordSets.list",
     "dns.resourceRecordSets.update",
     "managedkafka.clusters.connect",
+    "privateca.caPools.get",
     "servicedirectory.namespaces.create",
     "servicedirectory.services.create",
     "servicedirectory.services.delete"

diff --git a/roles/metastore.serviceAgent b/roles/metastore.serviceAgent
@@ -41,6 +41,7 @@
     "metastore.databases.get",
     "metastore.databases.setIamPolicy",
     "metastore.databases.update",
+    "metastore.federations.use",
     "metastore.services.get",
     "metastore.tables.get",
     "metastore.tables.setIamPolicy",

diff --git a/roles/osconfig.admin b/roles/osconfig.admin
@@ -0,0 +1,46 @@
+{
+  "description": "Full access to OS Config resources",
+  "etag": "AA==",
+  "includedPermissions": [
+    "osconfig.guestPolicies.create",
+    "osconfig.guestPolicies.delete",
+    "osconfig.guestPolicies.get",
+    "osconfig.guestPolicies.list",
+    "osconfig.guestPolicies.update",
+    "osconfig.instanceOSPoliciesCompliances.get",
+    "osconfig.instanceOSPoliciesCompliances.list",
+    "osconfig.inventories.get",
+    "osconfig.inventories.list",
+    "osconfig.osPolicyAssignmentReports.get",
+    "osconfig.osPolicyAssignmentReports.list",
+    "osconfig.osPolicyAssignmentReports.searchSummaries",
+    "osconfig.osPolicyAssignments.create",
+    "osconfig.osPolicyAssignments.delete",
+    "osconfig.osPolicyAssignments.get",
+    "osconfig.osPolicyAssignments.list",
+    "osconfig.osPolicyAssignments.searchPolicies",
+    "osconfig.osPolicyAssignments.update",
+    "osconfig.patchDeployments.create",
+    "osconfig.patchDeployments.delete",
+    "osconfig.patchDeployments.execute",
+    "osconfig.patchDeployments.get",
+    "osconfig.patchDeployments.list",
+    "osconfig.patchDeployments.pause",
+    "osconfig.patchDeployments.resume",
+    "osconfig.patchDeployments.update",
+    "osconfig.patchJobs.exec",
+    "osconfig.patchJobs.get",
+    "osconfig.patchJobs.list",
+    "osconfig.projectFeatureSettings.get",
+    "osconfig.projectFeatureSettings.update",
+    "osconfig.upgradeReports.get",
+    "osconfig.upgradeReports.getSummary",
+    "osconfig.upgradeReports.list",
+    "osconfig.upgradeReports.searchSummaries",
+    "osconfig.vulnerabilityReports.get",
+    "osconfig.vulnerabilityReports.list"
+  ],
+  "name": "roles/osconfig.admin",
+  "stage": "BETA",
+  "title": "OS Config Admin"
+}
diff --git a/roles/osconfig.viewer b/roles/osconfig.viewer
@@ -0,0 +1,32 @@
+{
+  "description": "Readonly access to OS Config resources",
+  "etag": "AA==",
+  "includedPermissions": [
+    "osconfig.guestPolicies.get",
+    "osconfig.guestPolicies.list",
+    "osconfig.instanceOSPoliciesCompliances.get",
+    "osconfig.instanceOSPoliciesCompliances.list",
+    "osconfig.inventories.get",
+    "osconfig.inventories.list",
+    "osconfig.osPolicyAssignmentReports.get",
+    "osconfig.osPolicyAssignmentReports.list",
+    "osconfig.osPolicyAssignmentReports.searchSummaries",
+    "osconfig.osPolicyAssignments.get",
+    "osconfig.osPolicyAssignments.list",
+    "osconfig.osPolicyAssignments.searchPolicies",
+    "osconfig.patchDeployments.get",
+    "osconfig.patchDeployments.list",
+    "osconfig.patchJobs.get",
+    "osconfig.patchJobs.list",
+    "osconfig.projectFeatureSettings.get",
+    "osconfig.upgradeReports.get",
+    "osconfig.upgradeReports.getSummary",
+    "osconfig.upgradeReports.list",
+    "osconfig.upgradeReports.searchSummaries",
+    "osconfig.vulnerabilityReports.get",
+    "osconfig.vulnerabilityReports.list"
+  ],
+  "name": "roles/osconfig.viewer",
+  "stage": "BETA",
+  "title": "OS Config Viewer"
+}