Fetch all roles

darkbitio · Oct 11, 2024 · ece6230 · ece6230
1 parent 06f43d2
commit ece6230
Show file tree

Hide file tree

Showing 37 changed files with 304 additions and 90 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/backupdr.backupvaultAccessor b/roles/backupdr.backupvaultAccessor
@@ -23,6 +23,6 @@
     "backupdr.operations.list"
   ],
   "name": "roles/backupdr.backupvaultAccessor",
-  "stage": "BETA",
+  "stage": "GA",
   "title": "Backup and DR Backup Vault Accessor"
 }
diff --git a/roles/backupdr.backupvaultViewer b/roles/backupdr.backupvaultViewer
@@ -12,6 +12,6 @@
     "backupdr.operations.list"
   ],
   "name": "roles/backupdr.backupvaultViewer",
-  "stage": "BETA",
+  "stage": "GA",
   "title": "Backup and DR Backup Vault Viewer"
 }
diff --git a/roles/cloudcontrolspartner.admin b/roles/cloudcontrolspartner.admin
@@ -3,6 +3,8 @@
   "etag": "AA==",
   "includedPermissions": [
     "cloudcontrolspartner.accessapprovalrequests.list",
+    "cloudcontrolspartner.customers.create",
+    "cloudcontrolspartner.customers.delete",
     "cloudcontrolspartner.customers.get",
     "cloudcontrolspartner.customers.list",
     "cloudcontrolspartner.ekmconnections.get",

diff --git a/roles/cloudcontrolspartner.supportCaseServiceAgent b/roles/cloudcontrolspartner.supportCaseServiceAgent
@@ -5,6 +5,6 @@
     "cloudsupport.techCases.get"
   ],
   "name": "roles/cloudcontrolspartner.supportCaseServiceAgent",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Cloud Controls Partner Support Case Service Agent"
 }
diff --git a/roles/cloudfunctions.admin b/roles/cloudfunctions.admin
@@ -37,16 +37,46 @@
     "eventarc.channels.setIamPolicy",
     "eventarc.channels.undelete",
     "eventarc.channels.update",
+    "eventarc.enrollments.create",
+    "eventarc.enrollments.delete",
+    "eventarc.enrollments.get",
+    "eventarc.enrollments.getIamPolicy",
+    "eventarc.enrollments.list",
+    "eventarc.enrollments.setIamPolicy",
+    "eventarc.enrollments.update",
     "eventarc.events.receiveAuditLogWritten",
     "eventarc.events.receiveEvent",
+    "eventarc.googleApiSources.create",
+    "eventarc.googleApiSources.delete",
+    "eventarc.googleApiSources.get",
+    "eventarc.googleApiSources.getIamPolicy",
+    "eventarc.googleApiSources.list",
+    "eventarc.googleApiSources.setIamPolicy",
+    "eventarc.googleApiSources.update",
     "eventarc.googleChannelConfigs.get",
     "eventarc.googleChannelConfigs.update",
     "eventarc.locations.get",
     "eventarc.locations.list",
+    "eventarc.messageBuses.create",
+    "eventarc.messageBuses.delete",
+    "eventarc.messageBuses.get",
+    "eventarc.messageBuses.getIamPolicy",
+    "eventarc.messageBuses.list",
+    "eventarc.messageBuses.publish",
+    "eventarc.messageBuses.setIamPolicy",
+    "eventarc.messageBuses.update",
+    "eventarc.messageBuses.use",
     "eventarc.operations.cancel",
     "eventarc.operations.delete",
     "eventarc.operations.get",
     "eventarc.operations.list",
+    "eventarc.pipelines.create",
+    "eventarc.pipelines.delete",
+    "eventarc.pipelines.get",
+    "eventarc.pipelines.getIamPolicy",
+    "eventarc.pipelines.list",
+    "eventarc.pipelines.setIamPolicy",
+    "eventarc.pipelines.update",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.create",

diff --git a/roles/cloudmigration.inframanager b/roles/cloudmigration.inframanager
@@ -53,7 +53,6 @@
     "compute.licenseCodes.get",
     "compute.licenseCodes.list",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.get",
     "compute.licenses.list",
     "compute.machineTypes.get",

diff --git a/roles/cloudtpu.serviceAgent b/roles/cloudtpu.serviceAgent
@@ -335,7 +335,6 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -369,11 +368,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.access",
     "compute.networks.addPeering",

diff --git a/roles/compute.admin b/roles/compute.admin
@@ -364,7 +364,6 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -403,11 +402,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.access",
     "compute.networks.addPeering",
@@ -676,13 +673,11 @@
     "compute.securityPolicies.delete",
     "compute.securityPolicies.deleteTagBinding",
     "compute.securityPolicies.get",
-    "compute.securityPolicies.getIamPolicy",
     "compute.securityPolicies.list",
     "compute.securityPolicies.listEffectiveTags",
     "compute.securityPolicies.listTagBindings",
     "compute.securityPolicies.move",
     "compute.securityPolicies.removeAssociation",
-    "compute.securityPolicies.setIamPolicy",
     "compute.securityPolicies.setLabels",
     "compute.securityPolicies.update",
     "compute.securityPolicies.use",

diff --git a/roles/compute.instanceAdmin b/roles/compute.instanceAdmin
@@ -157,11 +157,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.get",
     "compute.networks.list",

diff --git a/roles/compute.instanceAdmin.v1 b/roles/compute.instanceAdmin.v1
@@ -222,7 +222,6 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -249,11 +248,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.get",
     "compute.networks.list",

diff --git a/roles/compute.loadBalancerAdmin b/roles/compute.loadBalancerAdmin
@@ -167,11 +167,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.get",
     "compute.networks.list",

diff --git a/roles/compute.securityAdmin b/roles/compute.securityAdmin
@@ -120,13 +120,11 @@
     "compute.securityPolicies.delete",
     "compute.securityPolicies.deleteTagBinding",
     "compute.securityPolicies.get",
-    "compute.securityPolicies.getIamPolicy",
     "compute.securityPolicies.list",
     "compute.securityPolicies.listEffectiveTags",
     "compute.securityPolicies.listTagBindings",
     "compute.securityPolicies.move",
     "compute.securityPolicies.removeAssociation",
-    "compute.securityPolicies.setIamPolicy",
     "compute.securityPolicies.setLabels",
     "compute.securityPolicies.update",
     "compute.securityPolicies.use",

diff --git a/roles/compute.viewer b/roles/compute.viewer
@@ -143,7 +143,6 @@
     "compute.networkEdgeSecurityServices.get",
     "compute.networkEdgeSecurityServices.list",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
@@ -248,7 +247,6 @@
     "compute.routes.listEffectiveTags",
     "compute.routes.listTagBindings",
     "compute.securityPolicies.get",
-    "compute.securityPolicies.getIamPolicy",
     "compute.securityPolicies.list",
     "compute.securityPolicies.listEffectiveTags",
     "compute.securityPolicies.listTagBindings",

diff --git a/roles/container.cloudKmsKeyUser b/roles/container.cloudKmsKeyUser
@@ -11,6 +11,6 @@
     "resourcemanager.projects.get"
   ],
   "name": "roles/container.cloudKmsKeyUser",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Kubernetes Engine KMS Crypto Key User"
 }
diff --git a/roles/dataflow.serviceAgent b/roles/dataflow.serviceAgent
@@ -447,7 +447,6 @@
     "compute.licenseCodes.list",
     "compute.licenseCodes.setIamPolicy",
     "compute.licenseCodes.update",
-    "compute.licenseCodes.use",
     "compute.licenses.create",
     "compute.licenses.delete",
     "compute.licenses.get",
@@ -481,11 +480,9 @@
     "compute.networkEndpointGroups.deleteTagBinding",
     "compute.networkEndpointGroups.detachNetworkEndpoints",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
-    "compute.networkEndpointGroups.setIamPolicy",
     "compute.networkEndpointGroups.use",
     "compute.networks.access",
     "compute.networks.addPeering",
@@ -945,6 +942,7 @@
     "dataform.workspaces.setIamPolicy",
     "dataform.workspaces.writeFile",
     "dataplex.projects.search",
+    "dns.networks.targetWithPeeringZone",
     "firebase.projects.get",
     "iam.serviceAccounts.actAs",
     "iam.serviceAccounts.get",
@@ -999,6 +997,8 @@
     "logging.sinks.get",
     "logging.sinks.list",
     "logging.sinks.update",
+    "logging.sqlAlerts.create",
+    "logging.sqlAlerts.update",
     "logging.views.create",
     "logging.views.delete",
     "logging.views.get",

diff --git a/roles/dataprep.serviceAgent b/roles/dataprep.serviceAgent
@@ -200,7 +200,6 @@
     "compute.networkEdgeSecurityServices.get",
     "compute.networkEdgeSecurityServices.list",
     "compute.networkEndpointGroups.get",
-    "compute.networkEndpointGroups.getIamPolicy",
     "compute.networkEndpointGroups.list",
     "compute.networkEndpointGroups.listEffectiveTags",
     "compute.networkEndpointGroups.listTagBindings",
@@ -305,7 +304,6 @@
     "compute.routes.listEffectiveTags",
     "compute.routes.listTagBindings",
     "compute.securityPolicies.get",
-    "compute.securityPolicies.getIamPolicy",
     "compute.securityPolicies.list",
     "compute.securityPolicies.listEffectiveTags",
     "compute.securityPolicies.listTagBindings",

diff --git a/roles/dataprocrm.nodeServiceAgent b/roles/dataprocrm.nodeServiceAgent
@@ -15,6 +15,6 @@
     "monitoring.timeSeries.create"
   ],
   "name": "roles/dataprocrm.nodeServiceAgent",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Dataproc Resource Manager Node Service Agent"
 }
diff --git a/roles/eventarc.admin b/roles/eventarc.admin
@@ -19,16 +19,46 @@
     "eventarc.channels.setIamPolicy",
     "eventarc.channels.undelete",
     "eventarc.channels.update",
+    "eventarc.enrollments.create",
+    "eventarc.enrollments.delete",
+    "eventarc.enrollments.get",
+    "eventarc.enrollments.getIamPolicy",
+    "eventarc.enrollments.list",
+    "eventarc.enrollments.setIamPolicy",
+    "eventarc.enrollments.update",
     "eventarc.events.receiveAuditLogWritten",
     "eventarc.events.receiveEvent",
+    "eventarc.googleApiSources.create",
+    "eventarc.googleApiSources.delete",
+    "eventarc.googleApiSources.get",
+    "eventarc.googleApiSources.getIamPolicy",
+    "eventarc.googleApiSources.list",
+    "eventarc.googleApiSources.setIamPolicy",
+    "eventarc.googleApiSources.update",
     "eventarc.googleChannelConfigs.get",
     "eventarc.googleChannelConfigs.update",
     "eventarc.locations.get",
     "eventarc.locations.list",
+    "eventarc.messageBuses.create",
+    "eventarc.messageBuses.delete",
+    "eventarc.messageBuses.get",
+    "eventarc.messageBuses.getIamPolicy",
+    "eventarc.messageBuses.list",
+    "eventarc.messageBuses.publish",
+    "eventarc.messageBuses.setIamPolicy",
+    "eventarc.messageBuses.update",
+    "eventarc.messageBuses.use",
     "eventarc.operations.cancel",
     "eventarc.operations.delete",
     "eventarc.operations.get",
     "eventarc.operations.list",
+    "eventarc.pipelines.create",
+    "eventarc.pipelines.delete",
+    "eventarc.pipelines.get",
+    "eventarc.pipelines.getIamPolicy",
+    "eventarc.pipelines.list",
+    "eventarc.pipelines.setIamPolicy",
+    "eventarc.pipelines.update",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.create",

diff --git a/roles/eventarc.messageBusAdmin b/roles/eventarc.messageBusAdmin
@@ -1,7 +1,17 @@
 {
   "description": "Full control over Message Buses resources.",
   "etag": "AA==",
+  "includedPermissions": [
+    "eventarc.messageBuses.create",
+    "eventarc.messageBuses.delete",
+    "eventarc.messageBuses.get",
+    "eventarc.messageBuses.getIamPolicy",
+    "eventarc.messageBuses.list",
+    "eventarc.messageBuses.publish",
+    "eventarc.messageBuses.update",
+    "eventarc.messageBuses.use"
+  ],
   "name": "roles/eventarc.messageBusAdmin",
-  "stage": "ALPHA",
+  "stage": "BETA",
   "title": "Eventarc Message Bus Admin"
 }
diff --git a/roles/eventarc.serviceAgent b/roles/eventarc.serviceAgent
@@ -26,6 +26,7 @@
     "container.services.list",
     "dns.networks.targetWithPeeringZone",
     "eventarc.channels.publish",
+    "eventarc.messageBuses.publish",
     "eventarc.operations.get",
     "iam.serviceAccounts.actAs",
     "iam.serviceAccounts.getAccessToken",

diff --git a/roles/eventarc.viewer b/roles/eventarc.viewer
@@ -8,11 +8,24 @@
     "eventarc.channels.get",
     "eventarc.channels.getIamPolicy",
     "eventarc.channels.list",
+    "eventarc.enrollments.get",
+    "eventarc.enrollments.getIamPolicy",
+    "eventarc.enrollments.list",
+    "eventarc.googleApiSources.get",
+    "eventarc.googleApiSources.getIamPolicy",
+    "eventarc.googleApiSources.list",
     "eventarc.googleChannelConfigs.get",
     "eventarc.locations.get",
     "eventarc.locations.list",
+    "eventarc.messageBuses.get",
+    "eventarc.messageBuses.getIamPolicy",
+    "eventarc.messageBuses.list",
+    "eventarc.messageBuses.use",
     "eventarc.operations.get",
     "eventarc.operations.list",
+    "eventarc.pipelines.get",
+    "eventarc.pipelines.getIamPolicy",
+    "eventarc.pipelines.list",
     "eventarc.providers.get",
     "eventarc.providers.list",
     "eventarc.triggers.get",