Fetch all roles

darkbitio · Nov 3, 2024 · c38ff55 · c38ff55
1 parent 0cd489e
commit c38ff55
Show file tree

Hide file tree

Showing 30 changed files with 226 additions and 33 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/aiplatform.expressAdmin b/roles/aiplatform.expressAdmin
@@ -0,0 +1,20 @@
+{
+  "description": "Grants admin access to Vertex AI Express",
+  "etag": "AA==",
+  "includedPermissions": [
+    "aiplatform.datasetVersions.create",
+    "aiplatform.datasetVersions.delete",
+    "aiplatform.datasetVersions.get",
+    "aiplatform.datasetVersions.list",
+    "aiplatform.datasetVersions.restore",
+    "aiplatform.datasets.create",
+    "aiplatform.datasets.delete",
+    "aiplatform.datasets.get",
+    "aiplatform.datasets.list",
+    "aiplatform.datasets.update",
+    "aiplatform.endpoints.predict"
+  ],
+  "name": "roles/aiplatform.expressAdmin",
+  "stage": "BETA",
+  "title": "Vertex AI Platform Express Admin"
+}
diff --git a/roles/aiplatform.expressUser b/roles/aiplatform.expressUser
@@ -0,0 +1,10 @@
+{
+  "description": "Grants user access to Vertex AI Express",
+  "etag": "AA==",
+  "includedPermissions": [
+    "aiplatform.endpoints.predict"
+  ],
+  "name": "roles/aiplatform.expressUser",
+  "stage": "BETA",
+  "title": "Vertex AI Platform Express User"
+}
diff --git a/roles/artifactregistry.containerRegistryMigrationAdmin b/roles/artifactregistry.containerRegistryMigrationAdmin
@@ -21,6 +21,6 @@
     "storage.objects.list"
   ],
   "name": "roles/artifactregistry.containerRegistryMigrationAdmin",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Container Registry -> Artifact Registry Migration Admin"
 }
diff --git a/roles/batch.serviceAgent b/roles/batch.serviceAgent
@@ -234,6 +234,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.list",
     "compute.networkAttachments.listEffectiveTags",

diff --git a/roles/cloudtpu.serviceAgent b/roles/cloudtpu.serviceAgent
@@ -355,6 +355,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.create",
     "compute.networkAttachments.createTagBinding",
     "compute.networkAttachments.delete",
@@ -987,6 +991,12 @@
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
+    "networkservices.wasmPlugins.create",
+    "networkservices.wasmPlugins.delete",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
+    "networkservices.wasmPlugins.update",
+    "networkservices.wasmPlugins.use",
     "pubsub.schemas.attach",
     "pubsub.schemas.commit",
     "pubsub.schemas.create",

diff --git a/roles/compute.instanceAdmin b/roles/compute.instanceAdmin
@@ -155,6 +155,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkEndpointGroups.attachNetworkEndpoints",
     "compute.networkEndpointGroups.create",
     "compute.networkEndpointGroups.createTagBinding",

diff --git a/roles/compute.instanceAdmin.v1 b/roles/compute.instanceAdmin.v1
@@ -242,6 +242,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.list",
     "compute.networkAttachments.listEffectiveTags",

diff --git a/roles/compute.networkAdmin b/roles/compute.networkAdmin
@@ -799,6 +799,12 @@
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
+    "networkservices.wasmPlugins.create",
+    "networkservices.wasmPlugins.delete",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
+    "networkservices.wasmPlugins.update",
+    "networkservices.wasmPlugins.use",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "servicedirectory.namespaces.create",

diff --git a/roles/compute.networkUser b/roles/compute.networkUser
@@ -174,6 +174,9 @@
     "networkservices.tcpRoutes.list",
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
+    "networkservices.wasmPlugins.use",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "servicenetworking.services.get",

diff --git a/roles/compute.networkViewer b/roles/compute.networkViewer
@@ -291,6 +291,8 @@
     "networkservices.tcpRoutes.list",
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "servicenetworking.services.get",

diff --git a/roles/container.serviceAgent b/roles/container.serviceAgent
@@ -400,6 +400,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.create",
     "compute.networkAttachments.createTagBinding",
     "compute.networkAttachments.delete",
@@ -1561,6 +1565,24 @@
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
+    "networkservices.wasmPlugins.create",
+    "networkservices.wasmPlugins.delete",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
+    "networkservices.wasmPlugins.update",
+    "networkservices.wasmPlugins.use",
+    "parallelstore.instances.create",
+    "parallelstore.instances.delete",
+    "parallelstore.instances.get",
+    "parallelstore.instances.importData",
+    "parallelstore.instances.list",
+    "parallelstore.instances.update",
+    "parallelstore.locations.get",
+    "parallelstore.locations.list",
+    "parallelstore.operations.cancel",
+    "parallelstore.operations.delete",
+    "parallelstore.operations.get",
+    "parallelstore.operations.list",
     "pubsub.topics.create",
     "pubsub.topics.get",
     "pubsub.topics.publish",

diff --git a/roles/dataprep.serviceAgent b/roles/dataprep.serviceAgent
@@ -192,6 +192,8 @@
     "compute.machineImages.list",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.getIamPolicy",
     "compute.networkAttachments.list",

diff --git a/roles/dataproc.serviceAgent b/roles/dataproc.serviceAgent
@@ -158,6 +158,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkEndpointGroups.attachNetworkEndpoints",
     "compute.networkEndpointGroups.create",
     "compute.networkEndpointGroups.createTagBinding",

diff --git a/roles/genomics.serviceAgent b/roles/genomics.serviceAgent
@@ -242,6 +242,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.list",
     "compute.networkAttachments.listEffectiveTags",

diff --git a/roles/iam.securityAdmin b/roles/iam.securityAdmin
@@ -661,6 +661,7 @@
     "compute.machineImages.list",
     "compute.machineImages.setIamPolicy",
     "compute.machineTypes.list",
+    "compute.multiMig.list",
     "compute.networkAttachments.getIamPolicy",
     "compute.networkAttachments.list",
     "compute.networkAttachments.setIamPolicy",
@@ -1688,6 +1689,7 @@
     "networkservices.serviceLbPolicies.list",
     "networkservices.tcpRoutes.list",
     "networkservices.tlsRoutes.list",
+    "networkservices.wasmPlugins.list",
     "notebooks.environments.getIamPolicy",
     "notebooks.environments.list",
     "notebooks.environments.setIamPolicy",
@@ -1726,12 +1728,18 @@
     "osconfig.guestPolicies.list",
     "osconfig.instanceOSPoliciesCompliances.list",
     "osconfig.inventories.list",
+    "osconfig.locations.list",
+    "osconfig.operations.list",
     "osconfig.osPolicyAssignmentReports.list",
     "osconfig.osPolicyAssignments.list",
     "osconfig.patchDeployments.list",
     "osconfig.patchJobs.list",
+    "osconfig.policyOrchestrators.list",
     "osconfig.upgradeReports.list",
     "osconfig.vulnerabilityReports.list",
+    "parallelstore.instances.list",
+    "parallelstore.locations.list",
+    "parallelstore.operations.list",
     "paymentsresellersubscription.products.list",
     "paymentsresellersubscription.promotions.list",
     "policyremediatormanager.locations.list",

diff --git a/roles/iam.securityReviewer b/roles/iam.securityReviewer
@@ -588,6 +588,7 @@
     "compute.machineImages.getIamPolicy",
     "compute.machineImages.list",
     "compute.machineTypes.list",
+    "compute.multiMig.list",
     "compute.networkAttachments.getIamPolicy",
     "compute.networkAttachments.list",
     "compute.networkEdgeSecurityServices.list",
@@ -1476,6 +1477,7 @@
     "networkservices.serviceLbPolicies.list",
     "networkservices.tcpRoutes.list",
     "networkservices.tlsRoutes.list",
+    "networkservices.wasmPlugins.list",
     "notebooks.environments.getIamPolicy",
     "notebooks.environments.list",
     "notebooks.executions.getIamPolicy",
@@ -1509,12 +1511,18 @@
     "osconfig.guestPolicies.list",
     "osconfig.instanceOSPoliciesCompliances.list",
     "osconfig.inventories.list",
+    "osconfig.locations.list",
+    "osconfig.operations.list",
     "osconfig.osPolicyAssignmentReports.list",
     "osconfig.osPolicyAssignments.list",
     "osconfig.patchDeployments.list",
     "osconfig.patchJobs.list",
+    "osconfig.policyOrchestrators.list",
     "osconfig.upgradeReports.list",
     "osconfig.vulnerabilityReports.list",
+    "parallelstore.instances.list",
+    "parallelstore.locations.list",
+    "parallelstore.operations.list",
     "paymentsresellersubscription.products.list",
     "paymentsresellersubscription.promotions.list",
     "policyremediatormanager.locations.list",

diff --git a/roles/lifesciences.serviceAgent b/roles/lifesciences.serviceAgent
@@ -242,6 +242,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.list",
     "compute.networkAttachments.listEffectiveTags",

diff --git a/roles/networkservices.serviceExtensionsViewer b/roles/networkservices.serviceExtensionsViewer
@@ -8,10 +8,12 @@
     "networkservices.lbRouteExtensions.list",
     "networkservices.lbTrafficExtensions.get",
     "networkservices.lbTrafficExtensions.list",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],
   "name": "roles/networkservices.serviceExtensionsViewer",
-  "stage": "ALPHA",
+  "stage": "BETA",
   "title": "Service Extensions Viewer"
 }
diff --git a/roles/notebooks.legacyAdmin b/roles/notebooks.legacyAdmin
@@ -384,6 +384,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.create",
     "compute.networkAttachments.createTagBinding",
     "compute.networkAttachments.delete",

diff --git a/roles/notebooks.runner b/roles/notebooks.runner
@@ -146,6 +146,8 @@
     "compute.machineImages.list",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.getIamPolicy",
     "compute.networkAttachments.list",

diff --git a/roles/notebooks.serviceAgent b/roles/notebooks.serviceAgent
@@ -272,6 +272,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.getIamPolicy",
     "compute.networkAttachments.list",

diff --git a/roles/osconfig.admin b/roles/osconfig.admin
@@ -11,6 +11,12 @@
     "osconfig.instanceOSPoliciesCompliances.list",
     "osconfig.inventories.get",
     "osconfig.inventories.list",
+    "osconfig.locations.get",
+    "osconfig.locations.list",
+    "osconfig.operations.cancel",
+    "osconfig.operations.delete",
+    "osconfig.operations.get",
+    "osconfig.operations.list",
     "osconfig.osPolicyAssignmentReports.get",
     "osconfig.osPolicyAssignmentReports.list",
     "osconfig.osPolicyAssignmentReports.searchSummaries",
@@ -31,6 +37,11 @@
     "osconfig.patchJobs.exec",
     "osconfig.patchJobs.get",
     "osconfig.patchJobs.list",
+    "osconfig.policyOrchestrators.create",
+    "osconfig.policyOrchestrators.delete",
+    "osconfig.policyOrchestrators.get",
+    "osconfig.policyOrchestrators.list",
+    "osconfig.policyOrchestrators.update",
     "osconfig.projectFeatureSettings.get",
     "osconfig.projectFeatureSettings.update",
     "osconfig.upgradeReports.get",

diff --git a/roles/osconfig.policyOrchestratorAdmin b/roles/osconfig.policyOrchestratorAdmin
@@ -1,7 +1,17 @@
 {
   "description": "Admin of PolicyOrchestrator resources",
   "etag": "AA==",
+  "includedPermissions": [
+    "osconfig.locations.get",
+    "osconfig.locations.list",
+    "osconfig.operations.get",
+    "osconfig.policyOrchestrators.create",
+    "osconfig.policyOrchestrators.delete",
+    "osconfig.policyOrchestrators.get",
+    "osconfig.policyOrchestrators.list",
+    "osconfig.policyOrchestrators.update"
+  ],
   "name": "roles/osconfig.policyOrchestratorAdmin",
-  "stage": "ALPHA",
+  "stage": "BETA",
   "title": "PolicyOrchestrator Admin"
 }
diff --git a/roles/osconfig.viewer b/roles/osconfig.viewer
@@ -8,6 +8,10 @@
     "osconfig.instanceOSPoliciesCompliances.list",
     "osconfig.inventories.get",
     "osconfig.inventories.list",
+    "osconfig.locations.get",
+    "osconfig.locations.list",
+    "osconfig.operations.get",
+    "osconfig.operations.list",
     "osconfig.osPolicyAssignmentReports.get",
     "osconfig.osPolicyAssignmentReports.list",
     "osconfig.osPolicyAssignmentReports.searchSummaries",
@@ -18,6 +22,8 @@
     "osconfig.patchDeployments.list",
     "osconfig.patchJobs.get",
     "osconfig.patchJobs.list",
+    "osconfig.policyOrchestrators.get",
+    "osconfig.policyOrchestrators.list",
     "osconfig.projectFeatureSettings.get",
     "osconfig.upgradeReports.get",
     "osconfig.upgradeReports.getSummary",