Fetch all roles

darkbitio · Feb 13, 2025 · 23e2ef2 · 23e2ef2
1 parent 099207b
commit 23e2ef2
Show file tree

Hide file tree

Showing 23 changed files with 307 additions and 37 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/apigateway.admin b/roles/apigateway.admin
@@ -10,17 +10,25 @@
     "apigateway.apiconfigs.setIamPolicy",
     "apigateway.apiconfigs.update",
     "apigateway.apis.create",
+    "apigateway.apis.createTagBinding",
     "apigateway.apis.delete",
+    "apigateway.apis.deleteTagBinding",
     "apigateway.apis.get",
     "apigateway.apis.getIamPolicy",
     "apigateway.apis.list",
+    "apigateway.apis.listEffectiveTags",
+    "apigateway.apis.listTagBindings",
     "apigateway.apis.setIamPolicy",
     "apigateway.apis.update",
     "apigateway.gateways.create",
+    "apigateway.gateways.createTagBinding",
     "apigateway.gateways.delete",
+    "apigateway.gateways.deleteTagBinding",
     "apigateway.gateways.get",
     "apigateway.gateways.getIamPolicy",
     "apigateway.gateways.list",
+    "apigateway.gateways.listEffectiveTags",
+    "apigateway.gateways.listTagBindings",
     "apigateway.gateways.setIamPolicy",
     "apigateway.gateways.update",
     "apigateway.locations.get",

diff --git a/roles/apigateway.viewer b/roles/apigateway.viewer
@@ -8,9 +8,13 @@
     "apigateway.apis.get",
     "apigateway.apis.getIamPolicy",
     "apigateway.apis.list",
+    "apigateway.apis.listEffectiveTags",
+    "apigateway.apis.listTagBindings",
     "apigateway.gateways.get",
     "apigateway.gateways.getIamPolicy",
     "apigateway.gateways.list",
+    "apigateway.gateways.listEffectiveTags",
+    "apigateway.gateways.listTagBindings",
     "apigateway.locations.get",
     "apigateway.locations.list",
     "apigateway.operations.get",

diff --git a/roles/apigee.analyticsEditor b/roles/apigee.analyticsEditor
@@ -2,7 +2,6 @@
   "description": "Analytics editor for an Apigee Organization",
   "etag": "AA==",
   "includedPermissions": [
-    "apigee.addonsconfig.get",
     "apigee.datacollectors.create",
     "apigee.datacollectors.delete",
     "apigee.datacollectors.get",

diff --git a/roles/certificatemanager.owner b/roles/certificatemanager.owner
@@ -3,32 +3,52 @@
   "etag": "AA==",
   "includedPermissions": [
     "certificatemanager.certissuanceconfigs.create",
+    "certificatemanager.certissuanceconfigs.createTagBinding",
     "certificatemanager.certissuanceconfigs.delete",
+    "certificatemanager.certissuanceconfigs.deleteTagBinding",
     "certificatemanager.certissuanceconfigs.get",
     "certificatemanager.certissuanceconfigs.list",
+    "certificatemanager.certissuanceconfigs.listEffectiveTags",
+    "certificatemanager.certissuanceconfigs.listTagBindings",
     "certificatemanager.certissuanceconfigs.update",
     "certificatemanager.certissuanceconfigs.use",
     "certificatemanager.certmapentries.create",
+    "certificatemanager.certmapentries.createTagBinding",
     "certificatemanager.certmapentries.delete",
+    "certificatemanager.certmapentries.deleteTagBinding",
     "certificatemanager.certmapentries.get",
     "certificatemanager.certmapentries.list",
+    "certificatemanager.certmapentries.listEffectiveTags",
+    "certificatemanager.certmapentries.listTagBindings",
     "certificatemanager.certmapentries.update",
     "certificatemanager.certmaps.create",
+    "certificatemanager.certmaps.createTagBinding",
     "certificatemanager.certmaps.delete",
+    "certificatemanager.certmaps.deleteTagBinding",
     "certificatemanager.certmaps.get",
     "certificatemanager.certmaps.list",
+    "certificatemanager.certmaps.listEffectiveTags",
+    "certificatemanager.certmaps.listTagBindings",
     "certificatemanager.certmaps.update",
     "certificatemanager.certmaps.use",
     "certificatemanager.certs.create",
+    "certificatemanager.certs.createTagBinding",
     "certificatemanager.certs.delete",
+    "certificatemanager.certs.deleteTagBinding",
     "certificatemanager.certs.get",
     "certificatemanager.certs.list",
+    "certificatemanager.certs.listEffectiveTags",
+    "certificatemanager.certs.listTagBindings",
     "certificatemanager.certs.update",
     "certificatemanager.certs.use",
     "certificatemanager.dnsauthorizations.create",
+    "certificatemanager.dnsauthorizations.createTagBinding",
     "certificatemanager.dnsauthorizations.delete",
+    "certificatemanager.dnsauthorizations.deleteTagBinding",
     "certificatemanager.dnsauthorizations.get",
     "certificatemanager.dnsauthorizations.list",
+    "certificatemanager.dnsauthorizations.listEffectiveTags",
+    "certificatemanager.dnsauthorizations.listTagBindings",
     "certificatemanager.dnsauthorizations.update",
     "certificatemanager.dnsauthorizations.use",
     "certificatemanager.locations.get",
@@ -38,9 +58,13 @@
     "certificatemanager.operations.get",
     "certificatemanager.operations.list",
     "certificatemanager.trustconfigs.create",
+    "certificatemanager.trustconfigs.createTagBinding",
     "certificatemanager.trustconfigs.delete",
+    "certificatemanager.trustconfigs.deleteTagBinding",
     "certificatemanager.trustconfigs.get",
     "certificatemanager.trustconfigs.list",
+    "certificatemanager.trustconfigs.listEffectiveTags",
+    "certificatemanager.trustconfigs.listTagBindings",
     "certificatemanager.trustconfigs.update",
     "certificatemanager.trustconfigs.use",
     "resourcemanager.projects.get",

diff --git a/roles/cloudsql.admin b/roles/cloudsql.admin
@@ -9,6 +9,7 @@
     "cloudaicompanion.instances.generateCode",
     "cloudsql.backupRuns.create",
     "cloudsql.backupRuns.delete",
+    "cloudsql.backupRuns.export",
     "cloudsql.backupRuns.get",
     "cloudsql.backupRuns.list",
     "cloudsql.databases.create",

diff --git a/roles/composer.serviceAgent b/roles/composer.serviceAgent
@@ -52,6 +52,7 @@
     "cloudnotifications.activities.list",
     "cloudsql.backupRuns.create",
     "cloudsql.backupRuns.delete",
+    "cloudsql.backupRuns.export",
     "cloudsql.backupRuns.get",
     "cloudsql.backupRuns.list",
     "cloudsql.databases.create",

diff --git a/roles/dlp.orgdriver b/roles/dlp.orgdriver
@@ -171,6 +171,14 @@
     "alloydb.users.get",
     "alloydb.users.list",
     "alloydb.users.login",
+    "apigateway.apis.createTagBinding",
+    "apigateway.apis.deleteTagBinding",
+    "apigateway.apis.listEffectiveTags",
+    "apigateway.apis.listTagBindings",
+    "apigateway.gateways.createTagBinding",
+    "apigateway.gateways.deleteTagBinding",
+    "apigateway.gateways.listEffectiveTags",
+    "apigateway.gateways.listTagBindings",
     "artifactregistry.repositories.createTagBinding",
     "artifactregistry.repositories.deleteTagBinding",
     "artifactregistry.repositories.listEffectiveTags",
@@ -248,6 +256,30 @@
     "bigtable.instances.deleteTagBinding",
     "bigtable.instances.listEffectiveTags",
     "bigtable.instances.listTagBindings",
+    "certificatemanager.certissuanceconfigs.createTagBinding",
+    "certificatemanager.certissuanceconfigs.deleteTagBinding",
+    "certificatemanager.certissuanceconfigs.listEffectiveTags",
+    "certificatemanager.certissuanceconfigs.listTagBindings",
+    "certificatemanager.certmapentries.createTagBinding",
+    "certificatemanager.certmapentries.deleteTagBinding",
+    "certificatemanager.certmapentries.listEffectiveTags",
+    "certificatemanager.certmapentries.listTagBindings",
+    "certificatemanager.certmaps.createTagBinding",
+    "certificatemanager.certmaps.deleteTagBinding",
+    "certificatemanager.certmaps.listEffectiveTags",
+    "certificatemanager.certmaps.listTagBindings",
+    "certificatemanager.certs.createTagBinding",
+    "certificatemanager.certs.deleteTagBinding",
+    "certificatemanager.certs.listEffectiveTags",
+    "certificatemanager.certs.listTagBindings",
+    "certificatemanager.dnsauthorizations.createTagBinding",
+    "certificatemanager.dnsauthorizations.deleteTagBinding",
+    "certificatemanager.dnsauthorizations.listEffectiveTags",
+    "certificatemanager.dnsauthorizations.listTagBindings",
+    "certificatemanager.trustconfigs.createTagBinding",
+    "certificatemanager.trustconfigs.deleteTagBinding",
+    "certificatemanager.trustconfigs.listEffectiveTags",
+    "certificatemanager.trustconfigs.listTagBindings",
     "cloudaicompanion.entitlements.get",
     "cloudasset.assets.analyzeIamPolicy",
     "cloudasset.assets.analyzeMove",
@@ -1184,6 +1216,14 @@
     "monitoring.alertPolicies.deleteTagBinding",
     "monitoring.alertPolicies.listEffectiveTags",
     "monitoring.alertPolicies.listTagBindings",
+    "privateca.caPools.createTagBinding",
+    "privateca.caPools.deleteTagBinding",
+    "privateca.caPools.listEffectiveTags",
+    "privateca.caPools.listTagBindings",
+    "privateca.certificateTemplates.createTagBinding",
+    "privateca.certificateTemplates.deleteTagBinding",
+    "privateca.certificateTemplates.listEffectiveTags",
+    "privateca.certificateTemplates.listTagBindings",
     "pubsub.topics.updateTag",
     "recommender.alloydbClusterPerformanceInsights.get",
     "recommender.alloydbClusterPerformanceInsights.list",
@@ -1232,6 +1272,7 @@
     "spanner.instances.listTagBindings",
     "storage.buckets.createTagBinding",
     "storage.buckets.deleteTagBinding",
+    "storage.buckets.get",
     "storage.buckets.getIamPolicy",
     "storage.buckets.listEffectiveTags",
     "storage.buckets.listTagBindings",

diff --git a/roles/dlp.projectdriver b/roles/dlp.projectdriver
@@ -171,6 +171,14 @@
     "alloydb.users.get",
     "alloydb.users.list",
     "alloydb.users.login",
+    "apigateway.apis.createTagBinding",
+    "apigateway.apis.deleteTagBinding",
+    "apigateway.apis.listEffectiveTags",
+    "apigateway.apis.listTagBindings",
+    "apigateway.gateways.createTagBinding",
+    "apigateway.gateways.deleteTagBinding",
+    "apigateway.gateways.listEffectiveTags",
+    "apigateway.gateways.listTagBindings",
     "artifactregistry.repositories.createTagBinding",
     "artifactregistry.repositories.deleteTagBinding",
     "artifactregistry.repositories.listEffectiveTags",
@@ -248,6 +256,30 @@
     "bigtable.instances.deleteTagBinding",
     "bigtable.instances.listEffectiveTags",
     "bigtable.instances.listTagBindings",
+    "certificatemanager.certissuanceconfigs.createTagBinding",
+    "certificatemanager.certissuanceconfigs.deleteTagBinding",
+    "certificatemanager.certissuanceconfigs.listEffectiveTags",
+    "certificatemanager.certissuanceconfigs.listTagBindings",
+    "certificatemanager.certmapentries.createTagBinding",
+    "certificatemanager.certmapentries.deleteTagBinding",
+    "certificatemanager.certmapentries.listEffectiveTags",
+    "certificatemanager.certmapentries.listTagBindings",
+    "certificatemanager.certmaps.createTagBinding",
+    "certificatemanager.certmaps.deleteTagBinding",
+    "certificatemanager.certmaps.listEffectiveTags",
+    "certificatemanager.certmaps.listTagBindings",
+    "certificatemanager.certs.createTagBinding",
+    "certificatemanager.certs.deleteTagBinding",
+    "certificatemanager.certs.listEffectiveTags",
+    "certificatemanager.certs.listTagBindings",
+    "certificatemanager.dnsauthorizations.createTagBinding",
+    "certificatemanager.dnsauthorizations.deleteTagBinding",
+    "certificatemanager.dnsauthorizations.listEffectiveTags",
+    "certificatemanager.dnsauthorizations.listTagBindings",
+    "certificatemanager.trustconfigs.createTagBinding",
+    "certificatemanager.trustconfigs.deleteTagBinding",
+    "certificatemanager.trustconfigs.listEffectiveTags",
+    "certificatemanager.trustconfigs.listTagBindings",
     "cloudaicompanion.entitlements.get",
     "cloudasset.assets.analyzeIamPolicy",
     "cloudasset.assets.analyzeMove",
@@ -1184,6 +1216,14 @@
     "monitoring.alertPolicies.deleteTagBinding",
     "monitoring.alertPolicies.listEffectiveTags",
     "monitoring.alertPolicies.listTagBindings",
+    "privateca.caPools.createTagBinding",
+    "privateca.caPools.deleteTagBinding",
+    "privateca.caPools.listEffectiveTags",
+    "privateca.caPools.listTagBindings",
+    "privateca.certificateTemplates.createTagBinding",
+    "privateca.certificateTemplates.deleteTagBinding",
+    "privateca.certificateTemplates.listEffectiveTags",
+    "privateca.certificateTemplates.listTagBindings",
     "pubsub.topics.updateTag",
     "recommender.alloydbClusterPerformanceInsights.get",
     "recommender.alloydbClusterPerformanceInsights.list",
@@ -1232,6 +1272,7 @@
     "spanner.instances.listTagBindings",
     "storage.buckets.createTagBinding",
     "storage.buckets.deleteTagBinding",
+    "storage.buckets.get",
     "storage.buckets.getIamPolicy",
     "storage.buckets.listEffectiveTags",
     "storage.buckets.listTagBindings",

diff --git a/roles/editor b/roles/editor
@@ -475,12 +475,16 @@
     "apigateway.apis.get",
     "apigateway.apis.getIamPolicy",
     "apigateway.apis.list",
+    "apigateway.apis.listEffectiveTags",
+    "apigateway.apis.listTagBindings",
     "apigateway.apis.update",
     "apigateway.gateways.create",
     "apigateway.gateways.delete",
     "apigateway.gateways.get",
     "apigateway.gateways.getIamPolicy",
     "apigateway.gateways.list",
+    "apigateway.gateways.listEffectiveTags",
+    "apigateway.gateways.listTagBindings",
     "apigateway.gateways.update",
     "apigateway.locations.get",
     "apigateway.locations.list",
@@ -1594,29 +1598,39 @@
     "certificatemanager.certissuanceconfigs.delete",
     "certificatemanager.certissuanceconfigs.get",
     "certificatemanager.certissuanceconfigs.list",
+    "certificatemanager.certissuanceconfigs.listEffectiveTags",
+    "certificatemanager.certissuanceconfigs.listTagBindings",
     "certificatemanager.certissuanceconfigs.update",
     "certificatemanager.certissuanceconfigs.use",
     "certificatemanager.certmapentries.create",
     "certificatemanager.certmapentries.delete",
     "certificatemanager.certmapentries.get",
     "certificatemanager.certmapentries.list",
+    "certificatemanager.certmapentries.listEffectiveTags",
+    "certificatemanager.certmapentries.listTagBindings",
     "certificatemanager.certmapentries.update",
     "certificatemanager.certmaps.create",
     "certificatemanager.certmaps.delete",
     "certificatemanager.certmaps.get",
     "certificatemanager.certmaps.list",
+    "certificatemanager.certmaps.listEffectiveTags",
+    "certificatemanager.certmaps.listTagBindings",
     "certificatemanager.certmaps.update",
     "certificatemanager.certmaps.use",
     "certificatemanager.certs.create",
     "certificatemanager.certs.delete",
     "certificatemanager.certs.get",
     "certificatemanager.certs.list",
+    "certificatemanager.certs.listEffectiveTags",
+    "certificatemanager.certs.listTagBindings",
     "certificatemanager.certs.update",
     "certificatemanager.certs.use",
     "certificatemanager.dnsauthorizations.create",
     "certificatemanager.dnsauthorizations.delete",
     "certificatemanager.dnsauthorizations.get",
     "certificatemanager.dnsauthorizations.list",
+    "certificatemanager.dnsauthorizations.listEffectiveTags",
+    "certificatemanager.dnsauthorizations.listTagBindings",
     "certificatemanager.dnsauthorizations.update",
     "certificatemanager.dnsauthorizations.use",
     "certificatemanager.locations.get",
@@ -1629,6 +1643,8 @@
     "certificatemanager.trustconfigs.delete",
     "certificatemanager.trustconfigs.get",
     "certificatemanager.trustconfigs.list",
+    "certificatemanager.trustconfigs.listEffectiveTags",
+    "certificatemanager.trustconfigs.listTagBindings",
     "certificatemanager.trustconfigs.update",
     "certificatemanager.trustconfigs.use",
     "chat.bots.get",
@@ -1895,6 +1911,7 @@
     "cloudaicompanion.instances.exportMetrics",
     "cloudaicompanion.instances.generateCode",
     "cloudaicompanion.instances.generateText",
+    "cloudaicompanion.instances.queryEffectiveSetting",
     "cloudaicompanion.instances.queryEffectiveSettingBindings",
     "cloudaicompanion.licenses.selfAssign",
     "cloudaicompanion.loggingSettings.create",
@@ -2317,6 +2334,7 @@
     "cloudsecurityscanner.scans.update",
     "cloudsql.backupRuns.create",
     "cloudsql.backupRuns.delete",
+    "cloudsql.backupRuns.export",
     "cloudsql.backupRuns.get",
     "cloudsql.backupRuns.list",
     "cloudsql.databases.create",
@@ -6135,6 +6153,7 @@
     "healthcare.hl7V2Messages.update",
     "healthcare.hl7V2Stores.create",
     "healthcare.hl7V2Stores.delete",
+    "healthcare.hl7V2Stores.export",
     "healthcare.hl7V2Stores.get",
     "healthcare.hl7V2Stores.getIamPolicy",
     "healthcare.hl7V2Stores.import",
@@ -7477,6 +7496,8 @@
     "privateca.caPools.get",
     "privateca.caPools.getIamPolicy",
     "privateca.caPools.list",
+    "privateca.caPools.listEffectiveTags",
+    "privateca.caPools.listTagBindings",
     "privateca.caPools.update",
     "privateca.caPools.use",
     "privateca.certificateAuthorities.create",
@@ -7495,6 +7516,8 @@
     "privateca.certificateTemplates.get",
     "privateca.certificateTemplates.getIamPolicy",
     "privateca.certificateTemplates.list",
+    "privateca.certificateTemplates.listEffectiveTags",
+    "privateca.certificateTemplates.listTagBindings",
     "privateca.certificateTemplates.update",
     "privateca.certificateTemplates.use",
     "privateca.certificates.create",
@@ -8598,6 +8621,7 @@
     "spanner.databaseOperations.get",
     "spanner.databaseOperations.list",
     "spanner.databaseRoles.list",
+    "spanner.databases.addSplitPoints",
     "spanner.databases.beginOrRollbackReadWriteTransaction",
     "spanner.databases.beginPartitionedDmlTransaction",
     "spanner.databases.beginReadOnlyTransaction",

diff --git a/roles/healthcare.hl7V2StoreAdmin b/roles/healthcare.hl7V2StoreAdmin
@@ -6,6 +6,7 @@
     "healthcare.datasets.list",
     "healthcare.hl7V2Stores.create",
     "healthcare.hl7V2Stores.delete",
+    "healthcare.hl7V2Stores.export",
     "healthcare.hl7V2Stores.get",
     "healthcare.hl7V2Stores.getIamPolicy",
     "healthcare.hl7V2Stores.import",