Fetch all roles

darkbitio · Jul 25, 2024 · e1ebb80 · e1ebb80
1 parent f4b1f7c
commit e1ebb80
Show file tree

Hide file tree

Showing 24 changed files with 279 additions and 24 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/apigee.readOnlyAdmin b/roles/apigee.readOnlyAdmin
@@ -99,6 +99,7 @@
     "apigee.securityActions.get",
     "apigee.securityActions.list",
     "apigee.securityActionsConfig.get",
+    "apigee.securityAssessmentResults.compute",
     "apigee.securityFeedback.get",
     "apigee.securityFeedback.list",
     "apigee.securityIncidents.get",

diff --git a/roles/apigee.securityViewer b/roles/apigee.securityViewer
@@ -18,6 +18,7 @@
     "apigee.securityActions.get",
     "apigee.securityActions.list",
     "apigee.securityActionsConfig.get",
+    "apigee.securityAssessmentResults.compute",
     "apigee.securityFeedback.get",
     "apigee.securityFeedback.list",
     "apigee.securityIncidents.get",

diff --git a/roles/batch.serviceAgent b/roles/batch.serviceAgent
@@ -47,6 +47,8 @@
     "compute.disks.useReadOnly",
     "compute.externalVpnGateways.get",
     "compute.externalVpnGateways.list",
+    "compute.externalVpnGateways.listEffectiveTags",
+    "compute.externalVpnGateways.listTagBindings",
     "compute.firewalls.get",
     "compute.firewalls.list",
     "compute.firewalls.listEffectiveTags",
@@ -194,12 +196,16 @@
     "compute.instantSnapshots.useReadOnly",
     "compute.interconnectAttachments.get",
     "compute.interconnectAttachments.list",
+    "compute.interconnectAttachments.listEffectiveTags",
+    "compute.interconnectAttachments.listTagBindings",
     "compute.interconnectLocations.get",
     "compute.interconnectLocations.list",
     "compute.interconnectRemoteLocations.get",
     "compute.interconnectRemoteLocations.list",
     "compute.interconnects.get",
     "compute.interconnects.list",
+    "compute.interconnects.listEffectiveTags",
+    "compute.interconnects.listTagBindings",
     "compute.licenseCodes.get",
     "compute.licenseCodes.getIamPolicy",
     "compute.licenseCodes.list",
@@ -302,7 +308,9 @@
     "compute.routers.getRoutePolicy",
     "compute.routers.list",
     "compute.routers.listBgpRoutes",
+    "compute.routers.listEffectiveTags",
     "compute.routers.listRoutePolicies",
+    "compute.routers.listTagBindings",
     "compute.routes.get",
     "compute.routes.list",
     "compute.routes.listEffectiveTags",
@@ -366,14 +374,20 @@
     "compute.targetTcpProxies.listTagBindings",
     "compute.targetVpnGateways.get",
     "compute.targetVpnGateways.list",
+    "compute.targetVpnGateways.listEffectiveTags",
+    "compute.targetVpnGateways.listTagBindings",
     "compute.urlMaps.get",
     "compute.urlMaps.list",
     "compute.urlMaps.listEffectiveTags",
     "compute.urlMaps.listTagBindings",
     "compute.vpnGateways.get",
     "compute.vpnGateways.list",
+    "compute.vpnGateways.listEffectiveTags",
+    "compute.vpnGateways.listTagBindings",
     "compute.vpnTunnels.get",
     "compute.vpnTunnels.list",
+    "compute.vpnTunnels.listEffectiveTags",
+    "compute.vpnTunnels.listTagBindings",
     "compute.zoneOperations.get",
     "compute.zoneOperations.list",
     "compute.zones.get",

diff --git a/roles/cloudtpu.serviceAgent b/roles/cloudtpu.serviceAgent
@@ -72,9 +72,13 @@
     "compute.disks.use",
     "compute.disks.useReadOnly",
     "compute.externalVpnGateways.create",
+    "compute.externalVpnGateways.createTagBinding",
     "compute.externalVpnGateways.delete",
+    "compute.externalVpnGateways.deleteTagBinding",
     "compute.externalVpnGateways.get",
     "compute.externalVpnGateways.list",
+    "compute.externalVpnGateways.listEffectiveTags",
+    "compute.externalVpnGateways.listTagBindings",
     "compute.externalVpnGateways.setLabels",
     "compute.externalVpnGateways.use",
     "compute.firewallPolicies.get",
@@ -291,9 +295,13 @@
     "compute.instantSnapshots.setLabels",
     "compute.instantSnapshots.useReadOnly",
     "compute.interconnectAttachments.create",
+    "compute.interconnectAttachments.createTagBinding",
     "compute.interconnectAttachments.delete",
+    "compute.interconnectAttachments.deleteTagBinding",
     "compute.interconnectAttachments.get",
     "compute.interconnectAttachments.list",
+    "compute.interconnectAttachments.listEffectiveTags",
+    "compute.interconnectAttachments.listTagBindings",
     "compute.interconnectAttachments.setLabels",
     "compute.interconnectAttachments.update",
     "compute.interconnectAttachments.use",
@@ -302,10 +310,14 @@
     "compute.interconnectRemoteLocations.get",
     "compute.interconnectRemoteLocations.list",
     "compute.interconnects.create",
+    "compute.interconnects.createTagBinding",
     "compute.interconnects.delete",
+    "compute.interconnects.deleteTagBinding",
     "compute.interconnects.get",
     "compute.interconnects.getMacsecConfig",
     "compute.interconnects.list",
+    "compute.interconnects.listEffectiveTags",
+    "compute.interconnects.listTagBindings",
     "compute.interconnects.setLabels",
     "compute.interconnects.update",
     "compute.interconnects.use",
@@ -505,13 +517,17 @@
     "compute.resourcePolicies.use",
     "compute.resourcePolicies.useReadOnly",
     "compute.routers.create",
+    "compute.routers.createTagBinding",
     "compute.routers.delete",
     "compute.routers.deleteRoutePolicy",
+    "compute.routers.deleteTagBinding",
     "compute.routers.get",
     "compute.routers.getRoutePolicy",
     "compute.routers.list",
     "compute.routers.listBgpRoutes",
+    "compute.routers.listEffectiveTags",
     "compute.routers.listRoutePolicies",
+    "compute.routers.listTagBindings",
     "compute.routers.update",
     "compute.routers.updateRoutePolicy",
     "compute.routers.use",
@@ -665,9 +681,13 @@
     "compute.targetTcpProxies.update",
     "compute.targetTcpProxies.use",
     "compute.targetVpnGateways.create",
+    "compute.targetVpnGateways.createTagBinding",
     "compute.targetVpnGateways.delete",
+    "compute.targetVpnGateways.deleteTagBinding",
     "compute.targetVpnGateways.get",
     "compute.targetVpnGateways.list",
+    "compute.targetVpnGateways.listEffectiveTags",
+    "compute.targetVpnGateways.listTagBindings",
     "compute.targetVpnGateways.setLabels",
     "compute.targetVpnGateways.use",
     "compute.urlMaps.create",
@@ -683,15 +703,23 @@
     "compute.urlMaps.use",
     "compute.urlMaps.validate",
     "compute.vpnGateways.create",
+    "compute.vpnGateways.createTagBinding",
     "compute.vpnGateways.delete",
+    "compute.vpnGateways.deleteTagBinding",
     "compute.vpnGateways.get",
     "compute.vpnGateways.list",
+    "compute.vpnGateways.listEffectiveTags",
+    "compute.vpnGateways.listTagBindings",
     "compute.vpnGateways.setLabels",
     "compute.vpnGateways.use",
     "compute.vpnTunnels.create",
+    "compute.vpnTunnels.createTagBinding",
     "compute.vpnTunnels.delete",
+    "compute.vpnTunnels.deleteTagBinding",
     "compute.vpnTunnels.get",
     "compute.vpnTunnels.list",
+    "compute.vpnTunnels.listEffectiveTags",
+    "compute.vpnTunnels.listTagBindings",
     "compute.vpnTunnels.setLabels",
     "compute.zoneOperations.get",
     "compute.zoneOperations.list",

diff --git a/roles/composer.serviceAgent b/roles/composer.serviceAgent
@@ -155,9 +155,13 @@
     "compute.disks.use",
     "compute.disks.useReadOnly",
     "compute.externalVpnGateways.create",
+    "compute.externalVpnGateways.createTagBinding",
     "compute.externalVpnGateways.delete",
+    "compute.externalVpnGateways.deleteTagBinding",
     "compute.externalVpnGateways.get",
     "compute.externalVpnGateways.list",
+    "compute.externalVpnGateways.listEffectiveTags",
+    "compute.externalVpnGateways.listTagBindings",
     "compute.externalVpnGateways.setLabels",
     "compute.externalVpnGateways.use",
     "compute.firewallPolicies.get",
@@ -371,9 +375,13 @@
     "compute.instantSnapshots.setLabels",
     "compute.instantSnapshots.useReadOnly",
     "compute.interconnectAttachments.create",
+    "compute.interconnectAttachments.createTagBinding",
     "compute.interconnectAttachments.delete",
+    "compute.interconnectAttachments.deleteTagBinding",
     "compute.interconnectAttachments.get",
     "compute.interconnectAttachments.list",
+    "compute.interconnectAttachments.listEffectiveTags",
+    "compute.interconnectAttachments.listTagBindings",
     "compute.interconnectAttachments.setLabels",
     "compute.interconnectAttachments.update",
     "compute.interconnectAttachments.use",
@@ -382,10 +390,14 @@
     "compute.interconnectRemoteLocations.get",
     "compute.interconnectRemoteLocations.list",
     "compute.interconnects.create",
+    "compute.interconnects.createTagBinding",
     "compute.interconnects.delete",
+    "compute.interconnects.deleteTagBinding",
     "compute.interconnects.get",
     "compute.interconnects.getMacsecConfig",
     "compute.interconnects.list",
+    "compute.interconnects.listEffectiveTags",
+    "compute.interconnects.listTagBindings",
     "compute.interconnects.setLabels",
     "compute.interconnects.update",
     "compute.interconnects.use",
@@ -585,13 +597,17 @@
     "compute.resourcePolicies.use",
     "compute.resourcePolicies.useReadOnly",
     "compute.routers.create",
+    "compute.routers.createTagBinding",
     "compute.routers.delete",
     "compute.routers.deleteRoutePolicy",
+    "compute.routers.deleteTagBinding",
     "compute.routers.get",
     "compute.routers.getRoutePolicy",
     "compute.routers.list",
     "compute.routers.listBgpRoutes",
+    "compute.routers.listEffectiveTags",
     "compute.routers.listRoutePolicies",
+    "compute.routers.listTagBindings",
     "compute.routers.update",
     "compute.routers.updateRoutePolicy",
     "compute.routers.use",
@@ -745,9 +761,13 @@
     "compute.targetTcpProxies.update",
     "compute.targetTcpProxies.use",
     "compute.targetVpnGateways.create",
+    "compute.targetVpnGateways.createTagBinding",
     "compute.targetVpnGateways.delete",
+    "compute.targetVpnGateways.deleteTagBinding",
     "compute.targetVpnGateways.get",
     "compute.targetVpnGateways.list",
+    "compute.targetVpnGateways.listEffectiveTags",
+    "compute.targetVpnGateways.listTagBindings",
     "compute.targetVpnGateways.setLabels",
     "compute.targetVpnGateways.use",
     "compute.urlMaps.create",
@@ -763,15 +783,23 @@
     "compute.urlMaps.use",
     "compute.urlMaps.validate",
     "compute.vpnGateways.create",
+    "compute.vpnGateways.createTagBinding",
     "compute.vpnGateways.delete",
+    "compute.vpnGateways.deleteTagBinding",
     "compute.vpnGateways.get",
     "compute.vpnGateways.list",
+    "compute.vpnGateways.listEffectiveTags",
+    "compute.vpnGateways.listTagBindings",
     "compute.vpnGateways.setLabels",
     "compute.vpnGateways.use",
     "compute.vpnTunnels.create",
+    "compute.vpnTunnels.createTagBinding",
     "compute.vpnTunnels.delete",
+    "compute.vpnTunnels.deleteTagBinding",
     "compute.vpnTunnels.get",
     "compute.vpnTunnels.list",
+    "compute.vpnTunnels.listEffectiveTags",
+    "compute.vpnTunnels.listTagBindings",
     "compute.vpnTunnels.setLabels",
     "compute.zoneOperations.get",
     "compute.zoneOperations.list",
@@ -1533,6 +1561,7 @@
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
     "networkservices.tlsRoutes.use",
+    "observability.scopes.get",
     "opsconfigmonitoring.resourceMetadata.list",
     "orgpolicy.policy.get",
     "pubsub.schemas.attach",

diff --git a/roles/compute.networkViewer b/roles/compute.networkViewer
@@ -20,6 +20,8 @@
     "compute.disks.listTagBindings",
     "compute.externalVpnGateways.get",
     "compute.externalVpnGateways.list",
+    "compute.externalVpnGateways.listEffectiveTags",
+    "compute.externalVpnGateways.listTagBindings",
     "compute.firewalls.get",
     "compute.firewalls.list",
     "compute.firewalls.listEffectiveTags",
@@ -66,12 +68,16 @@
     "compute.instances.listTagBindings",
     "compute.interconnectAttachments.get",
     "compute.interconnectAttachments.list",
+    "compute.interconnectAttachments.listEffectiveTags",
+    "compute.interconnectAttachments.listTagBindings",
     "compute.interconnectLocations.get",
     "compute.interconnectLocations.list",
     "compute.interconnectRemoteLocations.get",
     "compute.interconnectRemoteLocations.list",
     "compute.interconnects.get",
     "compute.interconnects.list",
+    "compute.interconnects.listEffectiveTags",
+    "compute.interconnects.listTagBindings",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
     "compute.networkAttachments.get",
@@ -125,7 +131,9 @@
     "compute.routers.getRoutePolicy",
     "compute.routers.list",
     "compute.routers.listBgpRoutes",
+    "compute.routers.listEffectiveTags",
     "compute.routers.listRoutePolicies",
+    "compute.routers.listTagBindings",
     "compute.routes.get",
     "compute.routes.list",
     "compute.routes.listEffectiveTags",
@@ -175,14 +183,20 @@
     "compute.targetTcpProxies.listTagBindings",
     "compute.targetVpnGateways.get",
     "compute.targetVpnGateways.list",
+    "compute.targetVpnGateways.listEffectiveTags",
+    "compute.targetVpnGateways.listTagBindings",
     "compute.urlMaps.get",
     "compute.urlMaps.list",
     "compute.urlMaps.listEffectiveTags",
     "compute.urlMaps.listTagBindings",
     "compute.vpnGateways.get",
     "compute.vpnGateways.list",
+    "compute.vpnGateways.listEffectiveTags",
+    "compute.vpnGateways.listTagBindings",
     "compute.vpnTunnels.get",
     "compute.vpnTunnels.list",
+    "compute.vpnTunnels.listEffectiveTags",
+    "compute.vpnTunnels.listTagBindings",
     "compute.zones.get",
     "compute.zones.list",
     "networkconnectivity.internalRanges.get",

diff --git a/roles/compute.securityAdmin b/roles/compute.securityAdmin
@@ -100,7 +100,9 @@
     "compute.routers.getRoutePolicy",
     "compute.routers.list",
     "compute.routers.listBgpRoutes",
+    "compute.routers.listEffectiveTags",
     "compute.routers.listRoutePolicies",
+    "compute.routers.listTagBindings",
     "compute.routes.get",
     "compute.routes.list",
     "compute.routes.listEffectiveTags",

diff --git a/roles/contactcenterinsights.editor b/roles/contactcenterinsights.editor
@@ -48,11 +48,20 @@
     "contactcenterinsights.phraseMatchers.get",
     "contactcenterinsights.phraseMatchers.list",
     "contactcenterinsights.phraseMatchers.update",
+    "contactcenterinsights.qaQuestions.create",
+    "contactcenterinsights.qaQuestions.delete",
     "contactcenterinsights.qaQuestions.get",
     "contactcenterinsights.qaQuestions.list",
+    "contactcenterinsights.qaQuestions.update",
+    "contactcenterinsights.qaScorecardRevisions.create",
+    "contactcenterinsights.qaScorecardRevisions.deploy",
     "contactcenterinsights.qaScorecardRevisions.get",
+    "contactcenterinsights.qaScorecardRevisions.list",
+    "contactcenterinsights.qaScorecards.create",
+    "contactcenterinsights.qaScorecards.delete",
     "contactcenterinsights.qaScorecards.get",
     "contactcenterinsights.qaScorecards.list",
+    "contactcenterinsights.qaScorecards.update",
     "contactcenterinsights.settings.get",
     "contactcenterinsights.settings.update",
     "contactcenterinsights.views.create",

diff --git a/roles/datacatalog.entryGroupCreator b/roles/datacatalog.entryGroupCreator
@@ -5,6 +5,7 @@
     "datacatalog.entryGroups.create",
     "datacatalog.entryGroups.get",
     "datacatalog.entryGroups.list",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],