Fetch all roles

darkbitio · Jul 28, 2024 · e7c206c · e7c206c
1 parent 547df9f
commit e7c206c
Show file tree

Hide file tree

Showing 38 changed files with 87 additions and 42 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/aiplatform.extensionServiceAgent b/roles/aiplatform.extensionServiceAgent
@@ -3,6 +3,7 @@
   "etag": "AA==",
   "includedPermissions": [
     "aiplatform.endpoints.predict",
+    "aiplatform.locations.get",
     "discoveryengine.servingConfigs.search",
     "iam.serviceAccounts.getAccessToken",
     "iam.serviceAccounts.getOpenIdToken",

diff --git a/roles/anthosservicemesh.serviceAgent b/roles/anthosservicemesh.serviceAgent
@@ -35,6 +35,13 @@
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.use",
     "compute.networks.updatePolicy",
+    "compute.regionNetworkEndpointGroups.attachNetworkEndpoints",
+    "compute.regionNetworkEndpointGroups.create",
+    "compute.regionNetworkEndpointGroups.delete",
+    "compute.regionNetworkEndpointGroups.detachNetworkEndpoints",
+    "compute.regionNetworkEndpointGroups.get",
+    "compute.regionNetworkEndpointGroups.list",
+    "compute.regionNetworkEndpointGroups.use",
     "compute.regions.list",
     "compute.zones.list",
     "container.backendConfigs.create",

diff --git a/roles/bigquery.studioAdmin b/roles/bigquery.studioAdmin
@@ -189,6 +189,7 @@
     "dataform.workspaces.searchFiles",
     "dataform.workspaces.setIamPolicy",
     "dataform.workspaces.writeFile",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/bigquery.studioUser b/roles/bigquery.studioUser
@@ -19,6 +19,7 @@
     "dataform.locations.list",
     "dataform.repositories.create",
     "dataform.repositories.list",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/bigquery.user b/roles/bigquery.user
@@ -29,6 +29,7 @@
     "dataform.locations.list",
     "dataform.repositories.create",
     "dataform.repositories.list",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/chronicle.limitedViewer b/roles/chronicle.limitedViewer
@@ -15,6 +15,7 @@
     "chronicle.dashboards.get",
     "chronicle.dashboards.list",
     "chronicle.dashboards.schedule",
+    "chronicle.dataAccessScopes.list",
     "chronicle.entities.find",
     "chronicle.entities.findRelatedEntities",
     "chronicle.entities.get",

diff --git a/roles/chronicle.restrictedDataAccessViewer b/roles/chronicle.restrictedDataAccessViewer
@@ -5,6 +5,11 @@
     "chronicle.ais.createFeedback",
     "chronicle.ais.translateUdmQuery",
     "chronicle.ais.translateYlRule",
+    "chronicle.dashboardCharts.get",
+    "chronicle.dashboardCharts.list",
+    "chronicle.dashboardQueries.execute",
+    "chronicle.dashboardQueries.get",
+    "chronicle.dashboardQueries.list",
     "chronicle.dataAccessScopes.list",
     "chronicle.entities.find",
     "chronicle.entities.findRelatedEntities",
@@ -57,6 +62,8 @@
     "chronicle.logs.get",
     "chronicle.logs.list",
     "chronicle.multitenantDirectories.get",
+    "chronicle.nativeDashboards.get",
+    "chronicle.nativeDashboards.list",
     "chronicle.operations.get",
     "chronicle.operations.list",
     "chronicle.operations.streamSearch",

diff --git a/roles/composer.serviceAgent b/roles/composer.serviceAgent
@@ -1561,6 +1561,7 @@
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
     "networkservices.tlsRoutes.use",
+    "observability.scopes.get",
     "opsconfigmonitoring.resourceMetadata.list",
     "orgpolicy.policy.get",
     "pubsub.schemas.attach",

diff --git a/roles/datacatalog.admin b/roles/datacatalog.admin
@@ -69,6 +69,7 @@
     "datacatalog.taxonomies.list",
     "datacatalog.taxonomies.setIamPolicy",
     "datacatalog.taxonomies.update",
+    "dataplex.projects.search",
     "pubsub.topics.get",
     "pubsub.topics.updateTag",
     "resourcemanager.projects.get",

diff --git a/roles/datacatalog.dataSteward b/roles/datacatalog.dataSteward
@@ -8,6 +8,7 @@
     "datacatalog.entries.updateOverview",
     "datacatalog.entryGroups.get",
     "datacatalog.relationships.list",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/datacatalog.entryGroupCreator b/roles/datacatalog.entryGroupCreator
@@ -5,6 +5,7 @@
     "datacatalog.entryGroups.create",
     "datacatalog.entryGroups.get",
     "datacatalog.entryGroups.list",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/datacatalog.entryGroupOwner b/roles/datacatalog.entryGroupOwner
@@ -29,6 +29,7 @@
     "datacatalog.entryGroups.setIamPolicy",
     "datacatalog.entryGroups.update",
     "datacatalog.entryGroups.updateTag",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/datacatalog.entryOwner b/roles/datacatalog.entryOwner
@@ -22,6 +22,7 @@
     "datacatalog.entries.updateOverview",
     "datacatalog.entries.updateTag",
     "datacatalog.entryGroups.get",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/datacatalog.entryViewer b/roles/datacatalog.entryViewer
@@ -6,6 +6,7 @@
     "datacatalog.entries.list",
     "datacatalog.entryGroups.get",
     "datacatalog.relationships.list",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/datacatalog.searchAdmin b/roles/datacatalog.searchAdmin
@@ -3,6 +3,7 @@
   "etag": "AA==",
   "includedPermissions": [
     "datacatalog.catalogs.searchAll",
+    "dataplex.projects.search",
     "resourcemanager.organizations.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"

diff --git a/roles/datacatalog.tagTemplateCreator b/roles/datacatalog.tagTemplateCreator
@@ -3,7 +3,8 @@
   "etag": "AA==",
   "includedPermissions": [
     "datacatalog.tagTemplates.create",
-    "datacatalog.tagTemplates.get"
+    "datacatalog.tagTemplates.get",
+    "dataplex.projects.search"
   ],
   "name": "roles/datacatalog.tagTemplateCreator",
   "stage": "GA",

diff --git a/roles/datacatalog.tagTemplateOwner b/roles/datacatalog.tagTemplateOwner
@@ -10,6 +10,7 @@
     "datacatalog.tagTemplates.setIamPolicy",
     "datacatalog.tagTemplates.update",
     "datacatalog.tagTemplates.use",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/datacatalog.tagTemplateUser b/roles/datacatalog.tagTemplateUser
@@ -5,6 +5,7 @@
     "datacatalog.tagTemplates.get",
     "datacatalog.tagTemplates.getTag",
     "datacatalog.tagTemplates.use",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/datacatalog.tagTemplateViewer b/roles/datacatalog.tagTemplateViewer
@@ -4,6 +4,7 @@
   "includedPermissions": [
     "datacatalog.tagTemplates.get",
     "datacatalog.tagTemplates.getTag",
+    "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/datacatalog.viewer b/roles/datacatalog.viewer
@@ -17,6 +17,7 @@
     "datacatalog.tagTemplates.getTag",
     "datacatalog.taxonomies.get",
     "datacatalog.taxonomies.list",
+    "dataplex.projects.search",
     "pubsub.topics.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"

diff --git a/roles/dataplex.metadataJobOwner b/roles/dataplex.metadataJobOwner
@@ -11,6 +11,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/dataplex.metadataJobOwner",
-  "stage": "ALPHA",
+  "stage": "BETA",
   "title": "Dataplex Metadata Job Owner"
 }
diff --git a/roles/dataplex.metadataJobViewer b/roles/dataplex.metadataJobViewer
@@ -9,6 +9,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/dataplex.metadataJobViewer",
-  "stage": "ALPHA",
+  "stage": "BETA",
   "title": "Dataplex Metadata Job Viewer"
 }
diff --git a/roles/dataplex.serviceAgent b/roles/dataplex.serviceAgent
@@ -186,6 +186,7 @@
     "dataplex.environments.list",
     "dataplex.lakes.get",
     "dataplex.lakes.getIamPolicy",
+    "dataplex.projects.search",
     "dataplex.zones.getIamPolicy",
     "dataproc.batches.cancel",
     "dataproc.batches.create",

diff --git a/roles/dataprep.serviceAgent b/roles/dataprep.serviceAgent
@@ -385,6 +385,7 @@
     "dataform.locations.list",
     "dataform.repositories.create",
     "dataform.repositories.list",
+    "dataplex.projects.search",
     "iam.serviceAccounts.actAs",
     "iam.serviceAccounts.get",
     "iam.serviceAccounts.list",

diff --git a/roles/dataproc.hubAgent b/roles/dataproc.hubAgent
@@ -48,6 +48,7 @@
     "logging.usage.get",
     "logging.views.get",
     "logging.views.list",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "storage.buckets.get",

diff --git a/roles/dlp.orgdriver b/roles/dlp.orgdriver
@@ -863,6 +863,7 @@
     "datafusion.instances.deleteTagBinding",
     "datafusion.instances.listEffectiveTags",
     "datafusion.instances.listTagBindings",
+    "dataplex.projects.search",
     "datastore.databases.createTagBinding",
     "datastore.databases.deleteTagBinding",
     "datastore.databases.listEffectiveTags",

diff --git a/roles/dlp.projectdriver b/roles/dlp.projectdriver
@@ -863,6 +863,7 @@
     "datafusion.instances.deleteTagBinding",
     "datafusion.instances.listEffectiveTags",
     "datafusion.instances.listTagBindings",
+    "dataplex.projects.search",
     "datastore.databases.createTagBinding",
     "datastore.databases.deleteTagBinding",
     "datastore.databases.listEffectiveTags",

diff --git a/roles/dlp.serviceAgent b/roles/dlp.serviceAgent
@@ -92,6 +92,7 @@
     "dataform.locations.list",
     "dataform.repositories.create",
     "dataform.repositories.list",
+    "dataplex.projects.search",
     "datastore.databases.get",
     "datastore.databases.getMetadata",
     "datastore.databases.list",

diff --git a/roles/firebaseapphosting.serviceAgent b/roles/firebaseapphosting.serviceAgent
@@ -35,6 +35,6 @@
     "serviceusage.services.use"
   ],
   "name": "roles/firebaseapphosting.serviceAgent",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Firebase App Hosting Service Agent"
 }
diff --git a/roles/logging.admin b/roles/logging.admin
@@ -68,6 +68,7 @@
     "logging.views.listResourceValues",
     "logging.views.setIamPolicy",
     "logging.views.update",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/logging.configWriter b/roles/logging.configWriter
@@ -48,6 +48,7 @@
     "logging.views.getIamPolicy",
     "logging.views.list",
     "logging.views.update",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/logging.privateLogViewer b/roles/logging.privateLogViewer
@@ -26,6 +26,7 @@
     "logging.views.access",
     "logging.views.get",
     "logging.views.list",
+    "observability.scopes.get",
     "resourcemanager.projects.get"
   ],
   "name": "roles/logging.privateLogViewer",

diff --git a/roles/logging.viewer b/roles/logging.viewer
@@ -26,6 +26,7 @@
     "logging.usage.get",
     "logging.views.get",
     "logging.views.list",
+    "observability.scopes.get",
     "resourcemanager.projects.get"
   ],
   "name": "roles/logging.viewer",

diff --git a/roles/memorystore.serviceAgent b/roles/memorystore.serviceAgent
@@ -21,6 +21,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/memorystore.serviceAgent",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Cloud Memorystore Service Agent"
 }
diff --git a/roles/telcoautomation.admin b/roles/telcoautomation.admin
@@ -27,6 +27,7 @@
     "logging.views.get",
     "logging.views.list",
     "monitoring.timeSeries.list",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "serviceusage.quotas.get",
     "serviceusage.quotas.update",

diff --git a/roles/telcoautomation.opsAdminTier1 b/roles/telcoautomation.opsAdminTier1
@@ -26,6 +26,7 @@
     "logging.usage.get",
     "logging.views.get",
     "logging.views.list",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "telcoautomation.blueprints.get",
     "telcoautomation.blueprints.list",

diff --git a/roles/telcoautomation.opsAdminTier4 b/roles/telcoautomation.opsAdminTier4
@@ -26,6 +26,7 @@
     "logging.usage.get",
     "logging.views.get",
     "logging.views.list",
+    "observability.scopes.get",
     "resourcemanager.projects.get",
     "telcoautomation.blueprints.get",
     "telcoautomation.blueprints.list",