Fetch all roles

darkbitio · Feb 21, 2025 · d3ed2bc · d3ed2bc
1 parent 2a9a26a
commit d3ed2bc
Show file tree

Hide file tree

Showing 17 changed files with 99 additions and 15 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/appengine.appAdmin b/roles/appengine.appAdmin
@@ -26,6 +26,9 @@
     "appengine.versions.list",
     "appengine.versions.update",
     "artifactregistry.projectsettings.get",
+    "artifactregistry.repositories.deleteArtifacts",
+    "artifactregistry.repositories.downloadArtifacts",
+    "artifactregistry.repositories.uploadArtifacts",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

diff --git a/roles/cloudfunctions.admin b/roles/cloudfunctions.admin
@@ -11,6 +11,7 @@
     "cloudfunctions.functions.delete",
     "cloudfunctions.functions.get",
     "cloudfunctions.functions.getIamPolicy",
+    "cloudfunctions.functions.invoke",
     "cloudfunctions.functions.list",
     "cloudfunctions.functions.setIamPolicy",
     "cloudfunctions.functions.sourceCodeGet",

diff --git a/roles/cloudfunctions.developer b/roles/cloudfunctions.developer
@@ -10,6 +10,7 @@
     "cloudfunctions.functions.create",
     "cloudfunctions.functions.delete",
     "cloudfunctions.functions.get",
+    "cloudfunctions.functions.invoke",
     "cloudfunctions.functions.list",
     "cloudfunctions.functions.sourceCodeGet",
     "cloudfunctions.functions.sourceCodeSet",

diff --git a/roles/cloudfunctions.serviceAgent b/roles/cloudfunctions.serviceAgent
@@ -69,6 +69,7 @@
     "cloudbuild.operations.list",
     "cloudbuild.workerpools.use",
     "cloudfunctions.functions.get",
+    "cloudfunctions.functions.invoke",
     "cloudfunctions.functions.list",
     "cloudfunctions.operations.get",
     "cloudfunctions.operations.list",

diff --git a/roles/compute.viewer b/roles/compute.viewer
@@ -22,6 +22,8 @@
     "compute.backendServices.listTagBindings",
     "compute.commitments.get",
     "compute.commitments.list",
+    "compute.crossSiteNetworks.get",
+    "compute.crossSiteNetworks.list",
     "compute.diskTypes.get",
     "compute.diskTypes.list",
     "compute.disks.get",
@@ -332,6 +334,8 @@
     "compute.vpnTunnels.list",
     "compute.vpnTunnels.listEffectiveTags",
     "compute.vpnTunnels.listTagBindings",
+    "compute.wireGroups.get",
+    "compute.wireGroups.list",
     "compute.zoneOperations.get",
     "compute.zoneOperations.getIamPolicy",
     "compute.zoneOperations.list",

diff --git a/roles/container.serviceAgent b/roles/container.serviceAgent
@@ -114,6 +114,11 @@
     "compute.backendServices.setSecurityPolicy",
     "compute.backendServices.update",
     "compute.backendServices.use",
+    "compute.crossSiteNetworks.create",
+    "compute.crossSiteNetworks.delete",
+    "compute.crossSiteNetworks.get",
+    "compute.crossSiteNetworks.list",
+    "compute.crossSiteNetworks.update",
     "compute.diskTypes.get",
     "compute.diskTypes.list",
     "compute.disks.addResourcePolicies",
@@ -876,6 +881,11 @@
     "compute.vpnTunnels.listEffectiveTags",
     "compute.vpnTunnels.listTagBindings",
     "compute.vpnTunnels.setLabels",
+    "compute.wireGroups.create",
+    "compute.wireGroups.delete",
+    "compute.wireGroups.get",
+    "compute.wireGroups.list",
+    "compute.wireGroups.update",
     "compute.zoneOperations.get",
     "compute.zoneOperations.list",
     "compute.zones.get",

diff --git a/roles/databasecenter.admin b/roles/databasecenter.admin
@@ -0,0 +1,18 @@
+{
+  "description": "Admin role for Database Center resource data",
+  "etag": "AA==",
+  "includedPermissions": [
+    "cloudaicompanion.entitlements.get",
+    "databasecenter.fleetHealthStats.list",
+    "databasecenter.fleetStats.list",
+    "databasecenter.locations.list",
+    "databasecenter.products.list",
+    "databasecenter.resourceGroups.list",
+    "databasecenter.userLabels.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/databasecenter.admin",
+  "stage": "ALPHA",
+  "title": "Database center admin"
+}
diff --git a/roles/datamigration.serviceAgent b/roles/datamigration.serviceAgent
@@ -60,6 +60,7 @@
     "compute.subnetworks.use",
     "networkmanagement.connectivitytests.list",
     "serviceusage.services.use",
+    "storage.folders.delete",
     "storage.objects.get",
     "storage.objects.list"
   ],

diff --git a/roles/designcenter.admin b/roles/designcenter.admin
@@ -81,6 +81,7 @@
     "storage.objects.delete",
     "storage.objects.get",
     "storage.objects.list",
+    "storage.objects.move",
     "storage.objects.restore",
     "storage.objects.update"
   ],

diff --git a/roles/discoveryengine.user b/roles/discoveryengine.user
@@ -10,6 +10,7 @@
     "discoveryengine.sessions.get",
     "discoveryengine.sessions.list",
     "discoveryengine.sessions.update",
+    "discoveryengine.userEvents.create",
     "discoveryengine.widgetConfigs.get"
   ],
   "name": "roles/discoveryengine.user",

diff --git a/roles/editor b/roles/editor
@@ -2183,6 +2183,7 @@
     "cloudfunctions.functions.delete",
     "cloudfunctions.functions.get",
     "cloudfunctions.functions.getIamPolicy",
+    "cloudfunctions.functions.invoke",
     "cloudfunctions.functions.list",
     "cloudfunctions.functions.sourceCodeGet",
     "cloudfunctions.functions.sourceCodeSet",
@@ -2676,6 +2677,11 @@
     "compute.commitments.list",
     "compute.commitments.update",
     "compute.commitments.updateReservations",
+    "compute.crossSiteNetworks.create",
+    "compute.crossSiteNetworks.delete",
+    "compute.crossSiteNetworks.get",
+    "compute.crossSiteNetworks.list",
+    "compute.crossSiteNetworks.update",
     "compute.diskTypes.get",
     "compute.diskTypes.list",
     "compute.disks.addResourcePolicies",
@@ -3378,6 +3384,11 @@
     "compute.vpnTunnels.listEffectiveTags",
     "compute.vpnTunnels.listTagBindings",
     "compute.vpnTunnels.setLabels",
+    "compute.wireGroups.create",
+    "compute.wireGroups.delete",
+    "compute.wireGroups.get",
+    "compute.wireGroups.list",
+    "compute.wireGroups.update",
     "compute.zoneOperations.delete",
     "compute.zoneOperations.get",
     "compute.zoneOperations.getIamPolicy",
@@ -7074,6 +7085,12 @@
     "networksecurity.authzPolicies.getIamPolicy",
     "networksecurity.authzPolicies.list",
     "networksecurity.authzPolicies.update",
+    "networksecurity.backendAuthenticationConfigs.create",
+    "networksecurity.backendAuthenticationConfigs.delete",
+    "networksecurity.backendAuthenticationConfigs.get",
+    "networksecurity.backendAuthenticationConfigs.list",
+    "networksecurity.backendAuthenticationConfigs.update",
+    "networksecurity.backendAuthenticationConfigs.use",
     "networksecurity.clientTlsPolicies.create",
     "networksecurity.clientTlsPolicies.delete",
     "networksecurity.clientTlsPolicies.get",
@@ -8439,6 +8456,7 @@
     "securitycenter.websecurityscannersettings.calculate",
     "securitycenter.websecurityscannersettings.get",
     "securitycenter.websecurityscannersettings.update",
+    "securitycentermanagement.billingMetadata.get",
     "securitycentermanagement.effectiveEventThreatDetectionCustomModules.get",
     "securitycentermanagement.effectiveEventThreatDetectionCustomModules.list",
     "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get",

diff --git a/roles/iam.securityAdmin b/roles/iam.securityAdmin
@@ -625,6 +625,7 @@
     "compute.backendServices.list",
     "compute.backendServices.setIamPolicy",
     "compute.commitments.list",
+    "compute.crossSiteNetworks.list",
     "compute.diskTypes.list",
     "compute.disks.getIamPolicy",
     "compute.disks.list",
@@ -748,6 +749,7 @@
     "compute.urlMaps.list",
     "compute.vpnGateways.list",
     "compute.vpnTunnels.list",
+    "compute.wireGroups.list",
     "compute.zoneOperations.getIamPolicy",
     "compute.zoneOperations.list",
     "compute.zoneOperations.setIamPolicy",
@@ -1703,6 +1705,7 @@
     "networksecurity.authzPolicies.getIamPolicy",
     "networksecurity.authzPolicies.list",
     "networksecurity.authzPolicies.setIamPolicy",
+    "networksecurity.backendAuthenticationConfigs.list",
     "networksecurity.clientTlsPolicies.getIamPolicy",
     "networksecurity.clientTlsPolicies.list",
     "networksecurity.clientTlsPolicies.setIamPolicy",

diff --git a/roles/owner b/roles/owner
@@ -2833,6 +2833,7 @@
     "cloudfunctions.functions.delete",
     "cloudfunctions.functions.get",
     "cloudfunctions.functions.getIamPolicy",
+    "cloudfunctions.functions.invoke",
     "cloudfunctions.functions.list",
     "cloudfunctions.functions.setIamPolicy",
     "cloudfunctions.functions.sourceCodeGet",
@@ -3372,6 +3373,11 @@
     "compute.commitments.list",
     "compute.commitments.update",
     "compute.commitments.updateReservations",
+    "compute.crossSiteNetworks.create",
+    "compute.crossSiteNetworks.delete",
+    "compute.crossSiteNetworks.get",
+    "compute.crossSiteNetworks.list",
+    "compute.crossSiteNetworks.update",
     "compute.diskTypes.get",
     "compute.diskTypes.list",
     "compute.disks.addResourcePolicies",
@@ -4204,6 +4210,11 @@
     "compute.vpnTunnels.listEffectiveTags",
     "compute.vpnTunnels.listTagBindings",
     "compute.vpnTunnels.setLabels",
+    "compute.wireGroups.create",
+    "compute.wireGroups.delete",
+    "compute.wireGroups.get",
+    "compute.wireGroups.list",
+    "compute.wireGroups.update",
     "compute.zoneOperations.delete",
     "compute.zoneOperations.get",
     "compute.zoneOperations.getIamPolicy",
@@ -8218,6 +8229,12 @@
     "networksecurity.authzPolicies.list",
     "networksecurity.authzPolicies.setIamPolicy",
     "networksecurity.authzPolicies.update",
+    "networksecurity.backendAuthenticationConfigs.create",
+    "networksecurity.backendAuthenticationConfigs.delete",
+    "networksecurity.backendAuthenticationConfigs.get",
+    "networksecurity.backendAuthenticationConfigs.list",
+    "networksecurity.backendAuthenticationConfigs.update",
+    "networksecurity.backendAuthenticationConfigs.use",
     "networksecurity.clientTlsPolicies.create",
     "networksecurity.clientTlsPolicies.delete",
     "networksecurity.clientTlsPolicies.get",
@@ -9675,6 +9692,7 @@
     "securitycenter.websecurityscannersettings.calculate",
     "securitycenter.websecurityscannersettings.get",
     "securitycenter.websecurityscannersettings.update",
+    "securitycentermanagement.billingMetadata.get",
     "securitycentermanagement.effectiveEventThreatDetectionCustomModules.get",
     "securitycentermanagement.effectiveEventThreatDetectionCustomModules.list",
     "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get",

diff --git a/roles/securitycenter.adminEditor b/roles/securitycenter.adminEditor
@@ -150,6 +150,7 @@
     "securitycenter.vulnerabilitysnapshots.list",
     "securitycenter.websecurityscannersettings.calculate",
     "securitycenter.websecurityscannersettings.get",
+    "securitycentermanagement.billingMetadata.get",
     "securitycentermanagement.effectiveEventThreatDetectionCustomModules.get",
     "securitycentermanagement.effectiveEventThreatDetectionCustomModules.list",
     "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get",

diff --git a/roles/securitycenter.settingsEditor b/roles/securitycenter.settingsEditor
@@ -57,6 +57,7 @@
     "securitycenter.websecurityscannersettings.calculate",
     "securitycenter.websecurityscannersettings.get",
     "securitycenter.websecurityscannersettings.update",
+    "securitycentermanagement.billingMetadata.get",
     "securitycentermanagement.effectiveEventThreatDetectionCustomModules.get",
     "securitycentermanagement.effectiveEventThreatDetectionCustomModules.list",
     "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get",

diff --git a/roles/storage.objectUser b/roles/storage.objectUser
@@ -22,6 +22,7 @@
     "storage.objects.delete",
     "storage.objects.get",
     "storage.objects.list",
+    "storage.objects.move",
     "storage.objects.restore",
     "storage.objects.update"
   ],