Fetch all roles

darkbitio · Jan 31, 2025 · 65cfa54 · 65cfa54
1 parent 94d3be3
commit 65cfa54
Show file tree

Hide file tree

Showing 11 changed files with 60 additions and 8 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/dataflow.serviceAgent b/roles/dataflow.serviceAgent
@@ -1382,6 +1382,7 @@
     "storage.buckets.list",
     "storage.buckets.listEffectiveTags",
     "storage.buckets.listTagBindings",
+    "storage.buckets.relocate",
     "storage.buckets.restore",
     "storage.buckets.setIamPolicy",
     "storage.buckets.setIpFilter",

diff --git a/roles/discoveryengine.notebookEditor b/roles/discoveryengine.notebookEditor
@@ -0,0 +1,7 @@
+{
+  "description": "Grants read and write access to a Cloud NotebookLM Notebook.",
+  "etag": "AA==",
+  "name": "roles/discoveryengine.notebookEditor",
+  "stage": "ALPHA",
+  "title": "Cloud NotebookLM Notebook Editor"
+}
diff --git a/roles/discoveryengine.notebookLmOwner b/roles/discoveryengine.notebookLmOwner
@@ -0,0 +1,13 @@
+{
+  "description": "Grants full access to Cloud NotebookLM resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "discoveryengine.aclConfigs.get",
+    "discoveryengine.aclConfigs.update",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/discoveryengine.notebookLmOwner",
+  "stage": "ALPHA",
+  "title": "Cloud NotebookLM Owner"
+}
diff --git a/roles/discoveryengine.notebookLmUser b/roles/discoveryengine.notebookLmUser
@@ -0,0 +1,11 @@
+{
+  "description": "Grants user-level access to Cloud NotebookLM resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/discoveryengine.notebookLmUser",
+  "stage": "ALPHA",
+  "title": "Cloud NotebookLM User"
+}
diff --git a/roles/discoveryengine.notebookOwner b/roles/discoveryengine.notebookOwner
@@ -0,0 +1,7 @@
+{
+  "description": "Grants full access to a Cloud NotebookLM Notebook.",
+  "etag": "AA==",
+  "name": "roles/discoveryengine.notebookOwner",
+  "stage": "ALPHA",
+  "title": "Cloud NotebookLM Notebook Owner"
+}
diff --git a/roles/discoveryengine.notebookViewer b/roles/discoveryengine.notebookViewer
@@ -0,0 +1,7 @@
+{
+  "description": "Grants read-only access to a Cloud NotebookLM Notebook.",
+  "etag": "AA==",
+  "name": "roles/discoveryengine.notebookViewer",
+  "stage": "ALPHA",
+  "title": "Cloud NotebookLM Notebook Viewer"
+}
diff --git a/roles/dlp.serviceAgent b/roles/dlp.serviceAgent
@@ -203,6 +203,7 @@
     "storage.buckets.list",
     "storage.buckets.listEffectiveTags",
     "storage.buckets.listTagBindings",
+    "storage.buckets.relocate",
     "storage.buckets.restore",
     "storage.buckets.setIamPolicy",
     "storage.buckets.setIpFilter",

diff --git a/roles/iam.securityAdmin b/roles/iam.securityAdmin
@@ -38,9 +38,7 @@
     "aiplatform.entityTypes.setIamPolicy",
     "aiplatform.executions.list",
     "aiplatform.extensions.list",
-    "aiplatform.featureGroups.getIamPolicy",
     "aiplatform.featureGroups.list",
-    "aiplatform.featureGroups.setIamPolicy",
     "aiplatform.featureOnlineStores.getIamPolicy",
     "aiplatform.featureOnlineStores.list",
     "aiplatform.featureOnlineStores.setIamPolicy",

diff --git a/roles/storage.legacyBucketOwner b/roles/storage.legacyBucketOwner
@@ -20,7 +20,6 @@
     "storage.buckets.getIpFilter",
     "storage.buckets.listEffectiveTags",
     "storage.buckets.listTagBindings",
-    "storage.buckets.relocate",
     "storage.buckets.restore",
     "storage.buckets.setIamPolicy",
     "storage.buckets.setIpFilter",

diff --git a/roles/visualinspection.serviceAgent b/roles/visualinspection.serviceAgent
@@ -137,7 +137,9 @@
     "aiplatform.featureGroups.create",
     "aiplatform.featureGroups.delete",
     "aiplatform.featureGroups.get",
+    "aiplatform.featureGroups.getIamPolicy",
     "aiplatform.featureGroups.list",
+    "aiplatform.featureGroups.setIamPolicy",
     "aiplatform.featureGroups.update",
     "aiplatform.featureOnlineStores.create",
     "aiplatform.featureOnlineStores.delete",
@@ -459,6 +461,7 @@
     "storage.buckets.list",
     "storage.buckets.listEffectiveTags",
     "storage.buckets.listTagBindings",
+    "storage.buckets.relocate",
     "storage.buckets.restore",
     "storage.buckets.setIamPolicy",
     "storage.buckets.setIpFilter",