Fetch all roles

darkbitio · Sep 14, 2024 · ec558bb · ec558bb
1 parent 3bbd3eb
commit ec558bb
Show file tree

Hide file tree

Showing 17 changed files with 142 additions and 193 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/cloudsql.studioUser b/roles/cloudsql.studioUser
diff --git a/roles/compute.networkAdmin b/roles/compute.networkAdmin
@@ -163,6 +163,8 @@
     "compute.instanceGroupManagers.use",
     "compute.instanceGroups.get",
     "compute.instanceGroups.list",
+    "compute.instanceGroups.listEffectiveTags",
+    "compute.instanceGroups.listTagBindings",
     "compute.instanceGroups.update",
     "compute.instanceGroups.use",
     "compute.instanceSettings.get",
@@ -242,6 +244,8 @@
     "compute.networks.useExternalIp",
     "compute.packetMirrorings.get",
     "compute.packetMirrorings.list",
+    "compute.packetMirrorings.listEffectiveTags",
+    "compute.packetMirrorings.listTagBindings",
     "compute.projects.get",
     "compute.publicDelegatedPrefixes.delete",
     "compute.publicDelegatedPrefixes.get",
@@ -306,10 +310,14 @@
     "compute.regionSslCertificates.listEffectiveTags",
     "compute.regionSslCertificates.listTagBindings",
     "compute.regionSslPolicies.create",
+    "compute.regionSslPolicies.createTagBinding",
     "compute.regionSslPolicies.delete",
+    "compute.regionSslPolicies.deleteTagBinding",
     "compute.regionSslPolicies.get",
     "compute.regionSslPolicies.list",
     "compute.regionSslPolicies.listAvailableFeatures",
+    "compute.regionSslPolicies.listEffectiveTags",
+    "compute.regionSslPolicies.listTagBindings",
     "compute.regionSslPolicies.update",
     "compute.regionSslPolicies.use",
     "compute.regionTargetHttpProxies.create",
@@ -336,9 +344,13 @@
     "compute.regionTargetHttpsProxies.update",
     "compute.regionTargetHttpsProxies.use",
     "compute.regionTargetTcpProxies.create",
+    "compute.regionTargetTcpProxies.createTagBinding",
     "compute.regionTargetTcpProxies.delete",
+    "compute.regionTargetTcpProxies.deleteTagBinding",
     "compute.regionTargetTcpProxies.get",
     "compute.regionTargetTcpProxies.list",
+    "compute.regionTargetTcpProxies.listEffectiveTags",
+    "compute.regionTargetTcpProxies.listTagBindings",
     "compute.regionTargetTcpProxies.use",
     "compute.regionUrlMaps.create",
     "compute.regionUrlMaps.createTagBinding",
@@ -424,9 +436,13 @@
     "compute.subnetworks.use",
     "compute.subnetworks.useExternalIp",
     "compute.targetGrpcProxies.create",
+    "compute.targetGrpcProxies.createTagBinding",
     "compute.targetGrpcProxies.delete",
+    "compute.targetGrpcProxies.deleteTagBinding",
     "compute.targetGrpcProxies.get",
     "compute.targetGrpcProxies.list",
+    "compute.targetGrpcProxies.listEffectiveTags",
+    "compute.targetGrpcProxies.listTagBindings",
     "compute.targetGrpcProxies.update",
     "compute.targetGrpcProxies.use",
     "compute.targetHttpProxies.create",
@@ -689,22 +705,11 @@
     "networkservices.authzExtensions.list",
     "networkservices.authzExtensions.update",
     "networkservices.authzExtensions.use",
-    "networkservices.endpointConfigSelectors.create",
-    "networkservices.endpointConfigSelectors.delete",
-    "networkservices.endpointConfigSelectors.get",
-    "networkservices.endpointConfigSelectors.getIamPolicy",
-    "networkservices.endpointConfigSelectors.list",
-    "networkservices.endpointConfigSelectors.setIamPolicy",
-    "networkservices.endpointConfigSelectors.update",
-    "networkservices.endpointConfigSelectors.use",
     "networkservices.endpointPolicies.create",
     "networkservices.endpointPolicies.delete",
     "networkservices.endpointPolicies.get",
-    "networkservices.endpointPolicies.getIamPolicy",
     "networkservices.endpointPolicies.list",
-    "networkservices.endpointPolicies.setIamPolicy",
     "networkservices.endpointPolicies.update",
-    "networkservices.endpointPolicies.use",
     "networkservices.gateways.create",
     "networkservices.gateways.delete",
     "networkservices.gateways.get",
@@ -714,27 +719,18 @@
     "networkservices.grpcRoutes.create",
     "networkservices.grpcRoutes.delete",
     "networkservices.grpcRoutes.get",
-    "networkservices.grpcRoutes.getIamPolicy",
     "networkservices.grpcRoutes.list",
-    "networkservices.grpcRoutes.setIamPolicy",
     "networkservices.grpcRoutes.update",
-    "networkservices.grpcRoutes.use",
     "networkservices.httpFilters.create",
     "networkservices.httpFilters.delete",
     "networkservices.httpFilters.get",
-    "networkservices.httpFilters.getIamPolicy",
     "networkservices.httpFilters.list",
-    "networkservices.httpFilters.setIamPolicy",
     "networkservices.httpFilters.update",
-    "networkservices.httpFilters.use",
     "networkservices.httpRoutes.create",
     "networkservices.httpRoutes.delete",
     "networkservices.httpRoutes.get",
-    "networkservices.httpRoutes.getIamPolicy",
     "networkservices.httpRoutes.list",
-    "networkservices.httpRoutes.setIamPolicy",
     "networkservices.httpRoutes.update",
-    "networkservices.httpRoutes.use",
     "networkservices.httpfilters.create",
     "networkservices.httpfilters.delete",
     "networkservices.httpfilters.get",
@@ -758,9 +754,7 @@
     "networkservices.meshes.create",
     "networkservices.meshes.delete",
     "networkservices.meshes.get",
-    "networkservices.meshes.getIamPolicy",
     "networkservices.meshes.list",
-    "networkservices.meshes.setIamPolicy",
     "networkservices.meshes.update",
     "networkservices.meshes.use",
     "networkservices.operations.cancel",
@@ -782,17 +776,13 @@
     "networkservices.tcpRoutes.create",
     "networkservices.tcpRoutes.delete",
     "networkservices.tcpRoutes.get",
-    "networkservices.tcpRoutes.getIamPolicy",
     "networkservices.tcpRoutes.list",
-    "networkservices.tcpRoutes.setIamPolicy",
     "networkservices.tcpRoutes.update",
-    "networkservices.tcpRoutes.use",
     "networkservices.tlsRoutes.create",
     "networkservices.tlsRoutes.delete",
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
-    "networkservices.tlsRoutes.use",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "servicedirectory.namespaces.create",

diff --git a/roles/compute.securityAdmin b/roles/compute.securityAdmin
@@ -4,7 +4,6 @@
   "includedPermissions": [
     "compute.backendBuckets.list",
     "compute.backendServices.list",
-    "compute.firewallPolicies.addAssociation",
     "compute.firewallPolicies.cloneRules",
     "compute.firewallPolicies.copyRules",
     "compute.firewallPolicies.create",
@@ -17,7 +16,6 @@
     "compute.firewallPolicies.listEffectiveTags",
     "compute.firewallPolicies.listTagBindings",
     "compute.firewallPolicies.move",
-    "compute.firewallPolicies.removeAssociation",
     "compute.firewallPolicies.setIamPolicy",
     "compute.firewallPolicies.update",
     "compute.firewallPolicies.use",
@@ -48,9 +46,13 @@
     "compute.networks.listTagBindings",
     "compute.networks.updatePolicy",
     "compute.packetMirrorings.create",
+    "compute.packetMirrorings.createTagBinding",
     "compute.packetMirrorings.delete",
+    "compute.packetMirrorings.deleteTagBinding",
     "compute.packetMirrorings.get",
     "compute.packetMirrorings.list",
+    "compute.packetMirrorings.listEffectiveTags",
+    "compute.packetMirrorings.listTagBindings",
     "compute.packetMirrorings.update",
     "compute.projects.get",
     "compute.regionBackendServices.list",
@@ -88,10 +90,14 @@
     "compute.regionSslCertificates.listEffectiveTags",
     "compute.regionSslCertificates.listTagBindings",
     "compute.regionSslPolicies.create",
+    "compute.regionSslPolicies.createTagBinding",
     "compute.regionSslPolicies.delete",
+    "compute.regionSslPolicies.deleteTagBinding",
     "compute.regionSslPolicies.get",
     "compute.regionSslPolicies.list",
     "compute.regionSslPolicies.listAvailableFeatures",
+    "compute.regionSslPolicies.listEffectiveTags",
+    "compute.regionSslPolicies.listTagBindings",
     "compute.regionSslPolicies.update",
     "compute.regionSslPolicies.use",
     "compute.regions.get",

diff --git a/roles/compute.serviceAgent b/roles/compute.serviceAgent
@@ -48,8 +48,6 @@
     "monitoring.notificationChannelDescriptors.list",
     "monitoring.notificationChannels.get",
     "monitoring.notificationChannels.list",
-    "monitoring.publicWidgets.get",
-    "monitoring.publicWidgets.list",
     "monitoring.services.get",
     "monitoring.services.list",
     "monitoring.slos.get",

diff --git a/roles/containersecurity.viewer b/roles/containersecurity.viewer
@@ -7,7 +7,6 @@
     "containersecurity.findings.list",
     "containersecurity.locations.get",
     "containersecurity.locations.list",
-    "containersecurity.workloadConfigAudits.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/dataproc.serviceAgent b/roles/dataproc.serviceAgent
@@ -64,9 +64,13 @@
     "compute.instanceGroupManagers.update",
     "compute.instanceGroupManagers.use",
     "compute.instanceGroups.create",
+    "compute.instanceGroups.createTagBinding",
     "compute.instanceGroups.delete",
+    "compute.instanceGroups.deleteTagBinding",
     "compute.instanceGroups.get",
     "compute.instanceGroups.list",
+    "compute.instanceGroups.listEffectiveTags",
+    "compute.instanceGroups.listTagBindings",
     "compute.instanceGroups.update",
     "compute.instanceGroups.use",
     "compute.instanceSettings.get",
@@ -78,7 +82,6 @@
     "compute.instanceTemplates.setIamPolicy",
     "compute.instanceTemplates.useReadOnly",
     "compute.instances.addAccessConfig",
-    "compute.instances.addMaintenancePolicies",
     "compute.instances.addResourcePolicies",
     "compute.instances.attachDisk",
     "compute.instances.create",
@@ -102,7 +105,6 @@
     "compute.instances.osAdminLogin",
     "compute.instances.osLogin",
     "compute.instances.pscInterfaceCreate",
-    "compute.instances.removeMaintenancePolicies",
     "compute.instances.removeResourcePolicies",
     "compute.instances.reset",
     "compute.instances.resume",

diff --git a/roles/discoveryengine.editor b/roles/discoveryengine.editor
@@ -26,6 +26,7 @@
     "discoveryengine.dataStores.get",
     "discoveryengine.dataStores.list",
     "discoveryengine.documentProcessingConfigs.get",
+    "discoveryengine.documents.batchGetDocumentsMetadata",
     "discoveryengine.documents.create",
     "discoveryengine.documents.delete",
     "discoveryengine.documents.get",

diff --git a/roles/monitoring.admin b/roles/monitoring.admin
@@ -35,11 +35,6 @@
     "monitoring.notificationChannels.sendVerificationCode",
     "monitoring.notificationChannels.update",
     "monitoring.notificationChannels.verify",
-    "monitoring.publicWidgets.create",
-    "monitoring.publicWidgets.delete",
-    "monitoring.publicWidgets.get",
-    "monitoring.publicWidgets.list",
-    "monitoring.publicWidgets.update",
     "monitoring.services.create",
     "monitoring.services.delete",
     "monitoring.services.get",

diff --git a/roles/monitoring.editor b/roles/monitoring.editor
@@ -33,11 +33,6 @@
     "monitoring.notificationChannels.sendVerificationCode",
     "monitoring.notificationChannels.update",
     "monitoring.notificationChannels.verify",
-    "monitoring.publicWidgets.create",
-    "monitoring.publicWidgets.delete",
-    "monitoring.publicWidgets.get",
-    "monitoring.publicWidgets.list",
-    "monitoring.publicWidgets.update",
     "monitoring.services.create",
     "monitoring.services.delete",
     "monitoring.services.get",

diff --git a/roles/notebooks.legacyAdmin b/roles/notebooks.legacyAdmin
@@ -86,7 +86,6 @@
     "compute.externalVpnGateways.listTagBindings",
     "compute.externalVpnGateways.setLabels",
     "compute.externalVpnGateways.use",
-    "compute.firewallPolicies.addAssociation",
     "compute.firewallPolicies.cloneRules",
     "compute.firewallPolicies.copyRules",
     "compute.firewallPolicies.create",
@@ -99,7 +98,6 @@
     "compute.firewallPolicies.listEffectiveTags",
     "compute.firewallPolicies.listTagBindings",
     "compute.firewallPolicies.move",
-    "compute.firewallPolicies.removeAssociation",
     "compute.firewallPolicies.setIamPolicy",
     "compute.firewallPolicies.update",
     "compute.firewallPolicies.use",
@@ -244,9 +242,13 @@
     "compute.instanceGroupManagers.update",
     "compute.instanceGroupManagers.use",
     "compute.instanceGroups.create",
+    "compute.instanceGroups.createTagBinding",
     "compute.instanceGroups.delete",
+    "compute.instanceGroups.deleteTagBinding",
     "compute.instanceGroups.get",
     "compute.instanceGroups.list",
+    "compute.instanceGroups.listEffectiveTags",
+    "compute.instanceGroups.listTagBindings",
     "compute.instanceGroups.update",
     "compute.instanceGroups.use",
     "compute.instanceSettings.get",
@@ -259,7 +261,6 @@
     "compute.instanceTemplates.setIamPolicy",
     "compute.instanceTemplates.useReadOnly",
     "compute.instances.addAccessConfig",
-    "compute.instances.addMaintenancePolicies",
     "compute.instances.addResourcePolicies",
     "compute.instances.attachDisk",
     "compute.instances.create",
@@ -283,7 +284,6 @@
     "compute.instances.osAdminLogin",
     "compute.instances.osLogin",
     "compute.instances.pscInterfaceCreate",
-    "compute.instances.removeMaintenancePolicies",
     "compute.instances.removeResourcePolicies",
     "compute.instances.reset",
     "compute.instances.resume",
@@ -458,9 +458,13 @@
     "compute.organizations.setSecurityPolicy",
     "compute.oslogin.updateExternalUser",
     "compute.packetMirrorings.create",
+    "compute.packetMirrorings.createTagBinding",
     "compute.packetMirrorings.delete",
+    "compute.packetMirrorings.deleteTagBinding",
     "compute.packetMirrorings.get",
     "compute.packetMirrorings.list",
+    "compute.packetMirrorings.listEffectiveTags",
+    "compute.packetMirrorings.listTagBindings",
     "compute.packetMirrorings.update",
     "compute.projects.get",
     "compute.projects.setCloudArmorTier",
@@ -567,10 +571,14 @@
     "compute.regionSslCertificates.listEffectiveTags",
     "compute.regionSslCertificates.listTagBindings",
     "compute.regionSslPolicies.create",
+    "compute.regionSslPolicies.createTagBinding",
     "compute.regionSslPolicies.delete",
+    "compute.regionSslPolicies.deleteTagBinding",
     "compute.regionSslPolicies.get",
     "compute.regionSslPolicies.list",
     "compute.regionSslPolicies.listAvailableFeatures",
+    "compute.regionSslPolicies.listEffectiveTags",
+    "compute.regionSslPolicies.listTagBindings",
     "compute.regionSslPolicies.update",
     "compute.regionSslPolicies.use",
     "compute.regionTargetHttpProxies.create",
@@ -597,9 +605,13 @@
     "compute.regionTargetHttpsProxies.update",
     "compute.regionTargetHttpsProxies.use",
     "compute.regionTargetTcpProxies.create",
+    "compute.regionTargetTcpProxies.createTagBinding",
     "compute.regionTargetTcpProxies.delete",
+    "compute.regionTargetTcpProxies.deleteTagBinding",
     "compute.regionTargetTcpProxies.get",
     "compute.regionTargetTcpProxies.list",
+    "compute.regionTargetTcpProxies.listEffectiveTags",
+    "compute.regionTargetTcpProxies.listTagBindings",
     "compute.regionTargetTcpProxies.use",
     "compute.regionUrlMaps.create",
     "compute.regionUrlMaps.createTagBinding",
@@ -736,9 +748,13 @@
     "compute.subnetworks.use",
     "compute.subnetworks.useExternalIp",
     "compute.targetGrpcProxies.create",
+    "compute.targetGrpcProxies.createTagBinding",
     "compute.targetGrpcProxies.delete",
+    "compute.targetGrpcProxies.deleteTagBinding",
     "compute.targetGrpcProxies.get",
     "compute.targetGrpcProxies.list",
+    "compute.targetGrpcProxies.listEffectiveTags",
+    "compute.targetGrpcProxies.listTagBindings",
     "compute.targetGrpcProxies.update",
     "compute.targetGrpcProxies.use",
     "compute.targetHttpProxies.create",