Fetch all roles

roles/aiplatform.colabEnterpriseAdmin

@@ -30,6 +30,16 @@
     "aiplatform.schedules.update",
     "compute.reservations.get",
     "compute.reservations.list",
+    "dataform.commentThreads.create",
+    "dataform.commentThreads.delete",
+    "dataform.commentThreads.get",
+    "dataform.commentThreads.list",
+    "dataform.commentThreads.update",
+    "dataform.comments.create",
+    "dataform.comments.delete",
+    "dataform.comments.get",
+    "dataform.comments.list",
+    "dataform.comments.update",
     "dataform.compilationResults.create",
     "dataform.compilationResults.get",
     "dataform.compilationResults.list",

roles/aiplatform.colabEnterpriseUser

@@ -20,6 +20,10 @@
     "aiplatform.schedules.get",
     "aiplatform.schedules.list",
     "aiplatform.schedules.update",
+    "dataform.commentThreads.get",
+    "dataform.commentThreads.list",
+    "dataform.comments.get",
+    "dataform.comments.list",
     "dataform.locations.get",
     "dataform.locations.list",
     "dataform.repositories.create",

roles/automlrecommendations.serviceAgent

@@ -28,6 +28,8 @@
     "logging.logEntries.route",
     "monitoring.alertPolicies.get",
     "monitoring.alertPolicies.list",
+    "monitoring.alertPolicies.listEffectiveTags",
+    "monitoring.alertPolicies.listTagBindings",
     "monitoring.dashboards.get",
     "monitoring.dashboards.list",
     "monitoring.groups.get",

roles/clouddeploy.operator

@@ -25,6 +25,7 @@
     "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.update",
     "clouddeploy.deployPolicies.get",
+    "clouddeploy.deployPolicies.getIamPolicy",
     "clouddeploy.deployPolicies.list",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",

roles/cloudfunctions.invoker

@@ -1,9 +1,6 @@
 {
   "description": "Ability to invoke 1st gen HTTP functions with restricted access. 2nd gen functions need the Cloud Run Invoker role instead.",
   "etag": "AA==",
-  "includedPermissions": [
-    "cloudfunctions.functions.invoke"
-  ],
   "name": "roles/cloudfunctions.invoker",
   "stage": "GA",
   "title": "Cloud Functions Invoker"

roles/contactcenterinsights.editor

@@ -79,7 +79,8 @@
     "contactcenterinsights.views.delete",
     "contactcenterinsights.views.get",
     "contactcenterinsights.views.list",
-    "contactcenterinsights.views.update"
+    "contactcenterinsights.views.update",
+    "contactcenterinsights.visibilityLabels.list"
   ],
   "name": "roles/contactcenterinsights.editor",
   "stage": "GA",

roles/dataform.admin

@@ -2,6 +2,16 @@
   "description": "Full access to all Dataform resources.",
   "etag": "AA==",
   "includedPermissions": [
+    "dataform.commentThreads.create",
+    "dataform.commentThreads.delete",
+    "dataform.commentThreads.get",
+    "dataform.commentThreads.list",
+    "dataform.commentThreads.update",
+    "dataform.comments.create",
+    "dataform.comments.delete",
+    "dataform.comments.get",
+    "dataform.comments.list",
+    "dataform.comments.update",
     "dataform.compilationResults.create",
     "dataform.compilationResults.get",
     "dataform.compilationResults.list",

roles/dataplex.serviceAgent

@@ -124,6 +124,16 @@
     "datacatalog.taxonomies.get",
     "datacatalog.taxonomies.list",
     "datacatalog.taxonomies.update",
+    "dataform.commentThreads.create",
+    "dataform.commentThreads.delete",
+    "dataform.commentThreads.get",
+    "dataform.commentThreads.list",
+    "dataform.commentThreads.update",
+    "dataform.comments.create",
+    "dataform.comments.delete",
+    "dataform.comments.get",
+    "dataform.comments.list",
+    "dataform.comments.update",
     "dataform.compilationResults.create",
     "dataform.compilationResults.get",
     "dataform.compilationResults.list",

roles/designcenter.admin

@@ -0,0 +1,90 @@
+{
+  "description": "Full access to Application Design Center resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "apphub.serviceProjectAttachments.list",
+    "designcenter.applicationTemplateRevisions.delete",
+    "designcenter.applicationTemplateRevisions.get",
+    "designcenter.applicationTemplateRevisions.list",
+    "designcenter.applicationTemplates.create",
+    "designcenter.applicationTemplates.delete",
+    "designcenter.applicationTemplates.get",
+    "designcenter.applicationTemplates.list",
+    "designcenter.applicationTemplates.update",
+    "designcenter.applications.create",
+    "designcenter.applications.delete",
+    "designcenter.applications.get",
+    "designcenter.applications.list",
+    "designcenter.applications.update",
+    "designcenter.catalogTemplateRevisions.create",
+    "designcenter.catalogTemplateRevisions.delete",
+    "designcenter.catalogTemplateRevisions.get",
+    "designcenter.catalogTemplateRevisions.list",
+    "designcenter.catalogTemplates.create",
+    "designcenter.catalogTemplates.delete",
+    "designcenter.catalogTemplates.get",
+    "designcenter.catalogTemplates.list",
+    "designcenter.catalogTemplates.update",
+    "designcenter.catalogs.create",
+    "designcenter.catalogs.delete",
+    "designcenter.catalogs.get",
+    "designcenter.catalogs.list",
+    "designcenter.catalogs.update",
+    "designcenter.components.create",
+    "designcenter.components.delete",
+    "designcenter.components.get",
+    "designcenter.components.list",
+    "designcenter.components.update",
+    "designcenter.connections.create",
+    "designcenter.connections.delete",
+    "designcenter.connections.get",
+    "designcenter.connections.list",
+    "designcenter.connections.update",
+    "designcenter.locations.get",
+    "designcenter.locations.list",
+    "designcenter.operations.cancel",
+    "designcenter.operations.delete",
+    "designcenter.operations.get",
+    "designcenter.operations.list",
+    "designcenter.sharedTemplateRevisions.get",
+    "designcenter.sharedTemplateRevisions.list",
+    "designcenter.sharedTemplates.get",
+    "designcenter.sharedTemplates.list",
+    "designcenter.shares.create",
+    "designcenter.shares.delete",
+    "designcenter.shares.get",
+    "designcenter.shares.list",
+    "designcenter.spaces.create",
+    "designcenter.spaces.delete",
+    "designcenter.spaces.get",
+    "designcenter.spaces.getIamPolicy",
+    "designcenter.spaces.list",
+    "designcenter.spaces.setIamPolicy",
+    "designcenter.spaces.update",
+    "orgpolicy.policy.get",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list",
+    "storage.folders.create",
+    "storage.folders.delete",
+    "storage.folders.get",
+    "storage.folders.list",
+    "storage.folders.rename",
+    "storage.managedFolders.create",
+    "storage.managedFolders.delete",
+    "storage.managedFolders.get",
+    "storage.managedFolders.list",
+    "storage.multipartUploads.abort",
+    "storage.multipartUploads.create",
+    "storage.multipartUploads.list",
+    "storage.multipartUploads.listParts",
+    "storage.objects.create",
+    "storage.objects.delete",
+    "storage.objects.get",
+    "storage.objects.list",
+    "storage.objects.restore",
+    "storage.objects.update"
+  ],
+  "name": "roles/designcenter.admin",
+  "stage": "BETA",
+  "title": "Application Design Center Admin"
+}

roles/designcenter.applicationAdmin

@@ -0,0 +1,51 @@
+{
+  "description": "Admin access to Application.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "apphub.applications.create",
+    "apphub.applications.delete",
+    "apphub.applications.get",
+    "apphub.applications.list",
+    "apphub.applications.update",
+    "apphub.locations.get",
+    "apphub.locations.list",
+    "apphub.serviceProjectAttachments.list",
+    "config.deployments.get",
+    "config.deployments.getIamPolicy",
+    "config.deployments.list",
+    "config.locations.get",
+    "config.locations.list",
+    "config.operations.get",
+    "config.operations.list",
+    "config.previews.get",
+    "config.previews.list",
+    "config.resources.get",
+    "config.resources.list",
+    "config.revisions.get",
+    "config.revisions.list",
+    "config.terraformversions.get",
+    "config.terraformversions.list",
+    "designcenter.applicationTemplateRevisions.get",
+    "designcenter.applicationTemplateRevisions.list",
+    "designcenter.applicationTemplates.get",
+    "designcenter.applicationTemplates.list",
+    "designcenter.applications.create",
+    "designcenter.applications.delete",
+    "designcenter.applications.get",
+    "designcenter.applications.list",
+    "designcenter.applications.update",
+    "designcenter.sharedTemplateRevisions.get",
+    "designcenter.sharedTemplateRevisions.list",
+    "designcenter.sharedTemplates.get",
+    "designcenter.sharedTemplates.list",
+    "designcenter.shares.get",
+    "designcenter.shares.list",
+    "designcenter.spaces.get",
+    "designcenter.spaces.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/designcenter.applicationAdmin",
+  "stage": "BETA",
+  "title": "Application Admin"
+}

roles/designcenter.applicationEditor

@@ -0,0 +1,51 @@
+{
+  "description": "Read and Write access to Application.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "apphub.applications.create",
+    "apphub.applications.delete",
+    "apphub.applications.get",
+    "apphub.applications.list",
+    "apphub.applications.update",
+    "apphub.locations.get",
+    "apphub.locations.list",
+    "apphub.serviceProjectAttachments.list",
+    "config.deployments.get",
+    "config.deployments.getIamPolicy",
+    "config.deployments.list",
+    "config.locations.get",
+    "config.locations.list",
+    "config.operations.get",
+    "config.operations.list",
+    "config.previews.get",
+    "config.previews.list",
+    "config.resources.get",
+    "config.resources.list",
+    "config.revisions.get",
+    "config.revisions.list",
+    "config.terraformversions.get",
+    "config.terraformversions.list",
+    "designcenter.applicationTemplateRevisions.get",
+    "designcenter.applicationTemplateRevisions.list",
+    "designcenter.applicationTemplates.get",
+    "designcenter.applicationTemplates.list",
+    "designcenter.applications.create",
+    "designcenter.applications.delete",
+    "designcenter.applications.get",
+    "designcenter.applications.list",
+    "designcenter.applications.update",
+    "designcenter.sharedTemplateRevisions.get",
+    "designcenter.sharedTemplateRevisions.list",
+    "designcenter.sharedTemplates.get",
+    "designcenter.sharedTemplates.list",
+    "designcenter.shares.get",
+    "designcenter.shares.list",
+    "designcenter.spaces.get",
+    "designcenter.spaces.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/designcenter.applicationEditor",
+  "stage": "BETA",
+  "title": "Application Editor"
+}

roles/designcenter.applicationViewer

@@ -0,0 +1,44 @@
+{
+  "description": "Readonly access to Application.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "apphub.applications.get",
+    "apphub.applications.list",
+    "apphub.locations.get",
+    "apphub.locations.list",
+    "config.deployments.get",
+    "config.deployments.getIamPolicy",
+    "config.deployments.list",
+    "config.locations.get",
+    "config.locations.list",
+    "config.operations.get",
+    "config.operations.list",
+    "config.previews.get",
+    "config.previews.list",
+    "config.resources.get",
+    "config.resources.list",
+    "config.revisions.get",
+    "config.revisions.list",
+    "config.terraformversions.get",
+    "config.terraformversions.list",
+    "designcenter.applicationTemplateRevisions.get",
+    "designcenter.applicationTemplateRevisions.list",
+    "designcenter.applicationTemplates.get",
+    "designcenter.applicationTemplates.list",
+    "designcenter.applications.get",
+    "designcenter.applications.list",
+    "designcenter.sharedTemplateRevisions.get",
+    "designcenter.sharedTemplateRevisions.list",
+    "designcenter.sharedTemplates.get",
+    "designcenter.sharedTemplates.list",
+    "designcenter.shares.get",
+    "designcenter.shares.list",
+    "designcenter.spaces.get",
+    "designcenter.spaces.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/designcenter.applicationViewer",
+  "stage": "BETA",
+  "title": "Application Viewer"
+}