此页面由 Cloud Translation API 翻译。

查看 Application Integration 支持的连接器。

预定义的 Application Integration IAM 角色

预定义角色可授予对特定 Google Cloud 资源的精细访问权限。这些角色由 Google 创建和维护。Google 会根据需要自动更新其权限，例如 Google Cloud 添加新功能或服务时。

下表列出了适用于 Application Integration 的所有预定义 IAM 角色：

其他角色

权限

Advisory Notifications Admin

（roles/advisorynotifications.admin）

授予对 Advisory Notifications 中的设置的写入权限

advisorynotifications.*

resourcemanager.organizations.get

resourcemanager.projects.get

Advisory Notifications Viewer

(roles/advisorynotifications.viewer)

授予在 Advisory Notifications 中查看消息的访问权限

advisorynotifications.notifications.*

advisorynotifications.settings.get

resourcemanager.organizations.get

resourcemanager.projects.get

Cloud API Hub Admin ^{Beta 版}

（roles/apihub.admin）

拥有对所有 API Hub 资源的完整访问权限。

apihub.*

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API Hub Attributes Admin ^{Beta 版}

（roles/apihub.attributeAdmin）

拥有对所有 Cloud API hub 属性资源的完整访问权限。

apihub.attributes.*

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API Hub Editor ^{Beta 版}

（roles/apihub.editor）

对大多数 Cloud API Hub 资源拥有修改权限。

apihub.apiHubInstances.get

apihub.apiHubInstances.list

apihub.apiOperations.*

apihub.apis.*

apihub.attributes.get

apihub.attributes.list

apihub.curations.get

apihub.curations.list

apihub.definitions.*

apihub.dependencies.*

apihub.deployments.*

apihub.externalApis.*

apihub.hostProjectRegistrations.get

apihub.hostProjectRegistrations.list

apihub.llmEnablements.*

apihub.locations.*

apihub.operations.get

apihub.operations.list

apihub.plugininstances.get

apihub.plugininstances.list

apihub.plugins.get

apihub.plugins.list

apihub.runTimeProjectAttachments.get

apihub.runTimeProjectAttachments.list

apihub.specs.*

apihub.styleGuides.get

apihub.versions.*

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API Hub Plugins Admin ^{Beta 版}

（roles/apihub.pluginAdmin）

拥有对所有 Cloud API Hub 插件资源的完整访问权限。

apihub.curations.*

apihub.locations.collectApiData

apihub.operations.*

apihub.plugininstances.*

apihub.plugins.*

apihub.specs.lint

apihub.styleGuides.*

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API Hub Provisioning Admin ^{Beta 版}

（roles/apihub.provisioningAdmin）

拥有对 Cloud API hub 预配相关资源的完整访问权限。

apihub.apiHubInstances.*

apihub.hostProjectRegistrations.*

apihub.operations.*

apihub.runTimeProjectAttachments.*

resourcemanager.projects.get

resourcemanager.projects.list

Cloud API hub Runtime Project Attachment Editor ^{Beta 版}

（roles/apihub.runTimeProjectAttachmentsEditor）

拥有相关权限，可以添加/删除作为运行时项目关联到 API Hub 宿主项目的项目。

apihub.runTimeProjectAttachments.attach

Cloud API Hub Viewer ^{Beta 版}

（roles/apihub.viewer）

拥有对所有 Cloud API hub 资源的查看权限。

apihub.apiHubInstances.get

apihub.apiHubInstances.list

apihub.apiOperations.get

apihub.apiOperations.list

apihub.apis.get

apihub.apis.list

apihub.apis.listEffectiveTags

apihub.apis.listTagBindings

apihub.attributes.get

apihub.attributes.list

apihub.curations.get

apihub.curations.list

apihub.definitions.get

apihub.definitions.list

apihub.dependencies.get

apihub.dependencies.list

apihub.deployments.get

apihub.deployments.list

apihub.deployments.listEffectiveTags

apihub.deployments.listTagBindings

apihub.externalApis.get

apihub.externalApis.list

apihub.hostProjectRegistrations.get

apihub.hostProjectRegistrations.list

apihub.llmEnablements.get

apihub.llmEnablements.list

apihub.locations.searchResources

apihub.operations.get

apihub.operations.list

apihub.plugininstances.get

apihub.plugininstances.list

apihub.plugins.get

apihub.plugins.list

apihub.runTimeProjectAttachments.get

apihub.runTimeProjectAttachments.list

apihub.specs.get

apihub.specs.list

apihub.styleGuides.get

apihub.versions.get

apihub.versions.list

resourcemanager.projects.get

resourcemanager.projects.list

API Management Admin ^{Beta 版}

（roles/apim.admin）

拥有对 API 管理资源的完整访问权限。

apim.*

resourcemanager.projects.get

resourcemanager.projects.list

API Management Viewer ^{Beta 版}

（roles/apim.viewer）

拥有对 API 管理资源的只读权限。

apim.apiObservations.get

apim.apiObservations.list

apim.apiOperations.*

apim.locations.*

apim.observationJobs.get

apim.observationJobs.list

apim.observationSources.get

apim.observationSources.list

apim.operations.get

apim.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

App Hub Admin

（roles/apphub.admin）

拥有对 App Hub 资源的完整访问权限。

apphub.*

resourcemanager.projects.get

resourcemanager.projects.list

App Management Viewer ^{Beta 版}

（roles/apphub.appManagementViewer）

此角色汇总了多个以应用为中心的产品的读取权限。

apphub.applications.get

apphub.applications.list

apphub.discoveredServices.get

apphub.discoveredServices.list

apphub.discoveredWorkloads.get

apphub.discoveredWorkloads.list

apphub.locations.*

apphub.operations.get

apphub.operations.list

apphub.serviceProjectAttachments.lookup

apphub.services.get

apphub.services.list

apphub.workloads.get

apphub.workloads.list

billing.resourceCosts.get

cloudasset.assets.analyzeIamPolicy

cloudasset.assets.analyzeMove

cloudasset.assets.analyzeOrgPolicy

cloudasset.assets.exportAccessLevel

cloudasset.assets.exportAccessPolicy

cloudasset.assets.exportAiplatformBatchPredictionJobs

cloudasset.assets.exportAiplatformCustomJobs

cloudasset.assets.exportAiplatformDataLabelingJobs

cloudasset.assets.exportAiplatformDatasets

cloudasset.assets.exportAiplatformEndpoints

cloudasset.assets.exportAiplatformHyperparameterTuningJobs

cloudasset.assets.exportAiplatformMetadataStores

cloudasset.assets.exportAiplatformModelDeploymentMonitoringJobs

cloudasset.assets.exportAiplatformModels

cloudasset.assets.exportAiplatformPipelineJobs

cloudasset.assets.exportAiplatformSpecialistPools

cloudasset.assets.exportAiplatformTrainingPipelines

cloudasset.assets.exportAllAccessPolicy

cloudasset.assets.exportAnthosConnectedCluster

cloudasset.assets.exportAnthosedgeCluster

cloudasset.assets.exportApigatewayApi

cloudasset.assets.exportApigatewayApiConfig

cloudasset.assets.exportApigatewayGateway

cloudasset.assets.exportApikeysKeys

cloudasset.assets.exportAppengineApplications

cloudasset.assets.exportAppengineServices

cloudasset.assets.exportAppengineVersions

cloudasset.assets.exportArtifactregistryDockerImages

cloudasset.assets.exportArtifactregistryRepositories

cloudasset.assets.exportAssuredWorkloadsWorkloads

cloudasset.assets.exportBeyondCorpApiGateways

cloudasset.assets.exportBeyondCorpAppConnections

cloudasset.assets.exportBeyondCorpAppConnectors

cloudasset.assets.exportBeyondCorpAppGateways

cloudasset.assets.exportBeyondCorpClientConnectorServices

cloudasset.assets.exportBeyondCorpClientGateways

cloudasset.assets.exportBigqueryDatasets

cloudasset.assets.exportBigqueryModels

cloudasset.assets.exportBigqueryTables

cloudasset.assets.exportBigtableAppProfile

cloudasset.assets.exportBigtableBackup

cloudasset.assets.exportBigtableCluster

cloudasset.assets.exportBigtableInstance

cloudasset.assets.exportBigtableTable

cloudasset.assets.exportCloudAssetFeeds

cloudasset.assets.exportCloudDeployDeliveryPipelines

cloudasset.assets.exportCloudDeployReleases

cloudasset.assets.exportCloudDeployRollouts

cloudasset.assets.exportCloudDeployTargets

cloudasset.assets.exportCloudDocumentAIEvaluation

cloudasset.assets.exportCloudDocumentAIHumanReviewConfig

cloudasset.assets.exportCloudDocumentAILabelerPool

cloudasset.assets.exportCloudDocumentAIProcessor

cloudasset.assets.exportCloudDocumentAIProcessorVersion

cloudasset.assets.exportCloudbillingBillingAccounts

cloudasset.assets.exportCloudbillingProjectBillingInfos

cloudasset.assets.exportCloudfunctionsFunctions

cloudasset.assets.exportCloudfunctionsGen2Functions

cloudasset.assets.exportCloudkmsCryptoKeyVersions

cloudasset.assets.exportCloudkmsCryptoKeys

cloudasset.assets.exportCloudkmsEkmConnections

cloudasset.assets.exportCloudkmsImportJobs

cloudasset.assets.exportCloudkmsKeyRings

cloudasset.assets.exportCloudmemcacheInstances

cloudasset.assets.exportCloudresourcemanagerFolders

cloudasset.assets.exportCloudresourcemanagerOrganizations

cloudasset.assets.exportCloudresourcemanagerProjects

cloudasset.assets.exportCloudresourcemanagerTagBindings

cloudasset.assets.exportCloudresourcemanagerTagKeys

cloudasset.assets.exportCloudresourcemanagerTagValues

cloudasset.assets.exportComposerEnvironments

cloudasset.assets.exportComputeAddress

cloudasset.assets.exportComputeAutoscalers

cloudasset.assets.exportComputeBackendBuckets

cloudasset.assets.exportComputeBackendServices

cloudasset.assets.exportComputeCommitments

cloudasset.assets.exportComputeDisks

cloudasset.assets.exportComputeExternalVpnGateways

cloudasset.assets.exportComputeFirewallPolicies

cloudasset.assets.exportComputeFirewalls

cloudasset.assets.exportComputeForwardingRules

cloudasset.assets.exportComputeGlobalAddress

cloudasset.assets.exportComputeGlobalForwardingRules

cloudasset.assets.exportComputeHealthChecks

cloudasset.assets.exportComputeHttpHealthChecks

cloudasset.assets.exportComputeHttpsHealthChecks

cloudasset.assets.exportComputeImages

cloudasset.assets.exportComputeInstanceGroupManagers

cloudasset.assets.exportComputeInstanceGroups

cloudasset.assets.exportComputeInstanceTemplates

cloudasset.assets.exportComputeInstances

cloudasset.assets.exportComputeInterconnect

cloudasset.assets.exportComputeInterconnectAttachment

cloudasset.assets.exportComputeLicenses

cloudasset.assets.exportComputeNetworkEndpointGroups

cloudasset.assets.exportComputeNetworks

cloudasset.assets.exportComputeNodeGroups

cloudasset.assets.exportComputeNodeTemplates

cloudasset.assets.exportComputePacketMirrorings

cloudasset.assets.exportComputeProjects

cloudasset.assets.exportComputeRegionAutoscaler

cloudasset.assets.exportComputeRegionBackendServices

cloudasset.assets.exportComputeRegionDisk

cloudasset.assets.exportComputeRegionInstanceGroup

cloudasset.assets.exportComputeRegionInstanceGroupManager

cloudasset.assets.exportComputeReservations

cloudasset.assets.exportComputeResourcePolicies

cloudasset.assets.exportComputeRouters

cloudasset.assets.exportComputeRoutes

cloudasset.assets.exportComputeSecurityPolicy

cloudasset.assets.exportComputeServiceAttachments

cloudasset.assets.exportComputeSnapshots

cloudasset.assets.exportComputeSslCertificates

cloudasset.assets.exportComputeSslPolicies

cloudasset.assets.exportComputeSubnetworks

cloudasset.assets.exportComputeTargetHttpProxies

cloudasset.assets.exportComputeTargetHttpsProxies

cloudasset.assets.exportComputeTargetInstances

cloudasset.assets.exportComputeTargetPools

cloudasset.assets.exportComputeTargetSslProxies

cloudasset.assets.exportComputeTargetTcpProxies

cloudasset.assets.exportComputeTargetVpnGateways

cloudasset.assets.exportComputeUrlMaps

cloudasset.assets.exportComputeVpnGateways

cloudasset.assets.exportComputeVpnTunnels

cloudasset.assets.exportConnectorsConnections

cloudasset.assets.exportConnectorsConnectorVersions

cloudasset.assets.exportConnectorsConnectors

cloudasset.assets.exportConnectorsProviders

cloudasset.assets.exportConnectorsRuntimeConfigs

cloudasset.assets.exportContainerAppsDeployment

cloudasset.assets.exportContainerAppsReplicaSets

cloudasset.assets.exportContainerBatchJobs

cloudasset.assets.exportContainerClusterrole

cloudasset.assets.exportContainerClusterrolebinding

cloudasset.assets.exportContainerClusters

cloudasset.assets.exportContainerExtensionsIngresses

cloudasset.assets.exportContainerJobs

cloudasset.assets.exportContainerNamespace

cloudasset.assets.exportContainerNetworkingIngresses

cloudasset.assets.exportContainerNetworkingNetworkPolicies

cloudasset.assets.exportContainerNode

cloudasset.assets.exportContainerNodepool

cloudasset.assets.exportContainerPod

cloudasset.assets.exportContainerReplicaSets

cloudasset.assets.exportContainerRole

cloudasset.assets.exportContainerRolebinding

cloudasset.assets.exportContainerServices

cloudasset.assets.exportContainerregistryImage

cloudasset.assets.exportDataMigrationConnectionProfiles

cloudasset.assets.exportDataMigrationMigrationJobs

cloudasset.assets.exportDataflowJobs

cloudasset.assets.exportDatafusionInstance

cloudasset.assets.exportDataplexAssets

cloudasset.assets.exportDataplexLakes

cloudasset.assets.exportDataplexTasks

cloudasset.assets.exportDataplexZones

cloudasset.assets.exportDataprocAutoscalingPolicies

cloudasset.assets.exportDataprocBatches

cloudasset.assets.exportDataprocClusters

cloudasset.assets.exportDataprocJobs

cloudasset.assets.exportDataprocSessions

cloudasset.assets.exportDataprocWorkflowTemplates

cloudasset.assets.exportDatastreamConnectionProfile

cloudasset.assets.exportDatastreamPrivateConnection

cloudasset.assets.exportDatastreamStream

cloudasset.assets.exportDialogflowAgents

cloudasset.assets.exportDialogflowConversationProfiles

cloudasset.assets.exportDialogflowKnowledgeBases

cloudasset.assets.exportDialogflowLocationSettings

cloudasset.assets.exportDlpDeidentifyTemplates

cloudasset.assets.exportDlpDlpJobs

cloudasset.assets.exportDlpInspectTemplates

cloudasset.assets.exportDlpJobTriggers

cloudasset.assets.exportDlpStoredInfoTypes

cloudasset.assets.exportDnsManagedZones

cloudasset.assets.exportDnsPolicies

cloudasset.assets.exportDomainsRegistrations

cloudasset.assets.exportEventarcTriggers

cloudasset.assets.exportFileBackups

cloudasset.assets.exportFileInstances

cloudasset.assets.exportFirebaseAppInfos

cloudasset.assets.exportFirebaseProjects

cloudasset.assets.exportFirestoreDatabases

cloudasset.assets.exportGKEHubFeatures

cloudasset.assets.exportGKEHubMemberships

cloudasset.assets.exportGameservicesGameServerClusters

cloudasset.assets.exportGameservicesGameServerConfigs

cloudasset.assets.exportGameservicesGameServerDeployments

cloudasset.assets.exportGameservicesRealms

cloudasset.assets.exportGkeBackupBackupPlans

cloudasset.assets.exportGkeBackupBackups

cloudasset.assets.exportGkeBackupRestorePlans

cloudasset.assets.exportGkeBackupRestores

cloudasset.assets.exportGkeBackupVolumeBackups

cloudasset.assets.exportGkeBackupVolumeRestores

cloudasset.assets.exportHealthcareConsentStores

cloudasset.assets.exportHealthcareDatasets

cloudasset.assets.exportHealthcareDicomStores

cloudasset.assets.exportHealthcareFhirStores

cloudasset.assets.exportHealthcareHl7V2Stores

cloudasset.assets.exportIamPolicy

cloudasset.assets.exportIamRoles

cloudasset.assets.exportIamServiceAccountKeys

cloudasset.assets.exportIamServiceAccounts

cloudasset.assets.exportIapTunnel

cloudasset.assets.exportIapTunnelInstances

cloudasset.assets.exportIapTunnelZones

cloudasset.assets.exportIapWeb

cloudasset.assets.exportIapWebServiceVersion

cloudasset.assets.exportIapWebServices

cloudasset.assets.exportIapWebType

cloudasset.assets.exportIdsEndpoints

cloudasset.assets.exportIntegrationsAuthConfigs

cloudasset.assets.exportIntegrationsCertificates

cloudasset.assets.exportIntegrationsExecutions

cloudasset.assets.exportIntegrationsIntegrationVersions

cloudasset.assets.exportIntegrationsIntegrations

cloudasset.assets.exportIntegrationsSfdcChannels

cloudasset.assets.exportIntegrationsSfdcInstances

cloudasset.assets.exportIntegrationsSuspensions

cloudasset.assets.exportLoggingLogMetrics

cloudasset.assets.exportLoggingLogSinks

cloudasset.assets.exportManagedidentitiesDomain

cloudasset.assets.exportMetastoreBackups

cloudasset.assets.exportMetastoreMetadataImports

cloudasset.assets.exportMetastoreServices

cloudasset.assets.exportMonitoringAlertPolicies

cloudasset.assets.exportNetworkConnectivityHubs

cloudasset.assets.exportNetworkConnectivitySpokes

cloudasset.assets.exportNetworkManagementConnectivityTests

cloudasset.assets.exportNetworkServicesEndpointPolicies

cloudasset.assets.exportNetworkServicesGateways

cloudasset.assets.exportNetworkServicesGrpcRoutes

cloudasset.assets.exportNetworkServicesHttpRoutes

cloudasset.assets.exportNetworkServicesMeshes

cloudasset.assets.exportNetworkServicesServiceBindings

cloudasset.assets.exportNetworkServicesTcpRoutes

cloudasset.assets.exportNetworkServicesTlsRoutes

cloudasset.assets.exportOSConfigOSPolicyAssignmentReports

cloudasset.assets.exportOSConfigOSPolicyAssignments

cloudasset.assets.exportOSConfigVulnerabilityReports

cloudasset.assets.exportOSInventories

cloudasset.assets.exportOrgPolicy

cloudasset.assets.exportPatchDeployments

cloudasset.assets.exportPubsubSnapshots

cloudasset.assets.exportPubsubSubscriptions

cloudasset.assets.exportPubsubTopics

cloudasset.assets.exportRedisInstances

cloudasset.assets.exportResource

cloudasset.assets.exportSecretManagerSecretVersions

cloudasset.assets.exportSecretManagerSecrets

cloudasset.assets.exportServiceDirectoryNamespaces

cloudasset.assets.exportServicePerimeter

cloudasset.assets.exportServiceconsumermanagementConsumerProperty

cloudasset.assets.exportServiceconsumermanagementConsumerQuotaLimits

cloudasset.assets.exportServiceconsumermanagementConsumers

cloudasset.assets.exportServiceconsumermanagementProducerOverrides

cloudasset.assets.exportServiceconsumermanagementTenancyUnits

cloudasset.assets.exportServiceconsumermanagementVisibility

cloudasset.assets.exportServicemanagementServices

cloudasset.assets.exportServiceusageAdminOverrides

cloudasset.assets.exportServiceusageConsumerOverrides

cloudasset.assets.exportServiceusageServices

cloudasset.assets.exportSpannerBackups

cloudasset.assets.exportSpannerDatabases

cloudasset.assets.exportSpannerInstances

cloudasset.assets.exportSpeakerIdPhrases

cloudasset.assets.exportSpeakerIdSettings

cloudasset.assets.exportSpeakerIdSpeakers

cloudasset.assets.exportSpeechCustomClasses

cloudasset.assets.exportSpeechPhraseSets

cloudasset.assets.exportSqladminBackupRuns

cloudasset.assets.exportSqladminInstances

cloudasset.assets.exportStorageBuckets

cloudasset.assets.exportTpuNodes

cloudasset.assets.exportVpcaccessConnector

cloudasset.assets.listAccessLevel

cloudasset.assets.listAccessPolicy

cloudasset.assets.listAiplatformBatchPredictionJobs

cloudasset.assets.listAiplatformCustomJobs

cloudasset.assets.listAiplatformDataLabelingJobs

cloudasset.assets.listAiplatformDatasets

cloudasset.assets.listAiplatformEndpoints

cloudasset.assets.listAiplatformHyperparameterTuningJobs

cloudasset.assets.listAiplatformMetadataStores

cloudasset.assets.listAiplatformModelDeploymentMonitoringJobs

cloudasset.assets.listAiplatformModels

cloudasset.assets.listAiplatformPipelineJobs

cloudasset.assets.listAiplatformSpecialistPools

cloudasset.assets.listAiplatformTrainingPipelines

cloudasset.assets.listAllAccessPolicy

cloudasset.assets.listAnthosConnectedCluster

cloudasset.assets.listAnthosedgeCluster

cloudasset.assets.listApigatewayApi

cloudasset.assets.listApigatewayApiConfig

cloudasset.assets.listApigatewayGateway

cloudasset.assets.listApikeysKeys

cloudasset.assets.listAppengineApplications

cloudasset.assets.listAppengineServices

cloudasset.assets.listAppengineVersions

cloudasset.assets.listArtifactregistryDockerImages

cloudasset.assets.listArtifactregistryRepositories

cloudasset.assets.listAssuredWorkloadsWorkloads

cloudasset.assets.listBeyondCorpApiGateways

cloudasset.assets.listBeyondCorpAppConnections

cloudasset.assets.listBeyondCorpAppConnectors

cloudasset.assets.listBeyondCorpAppGateways

cloudasset.assets.listBeyondCorpClientConnectorServices

cloudasset.assets.listBeyondCorpClientGateways

cloudasset.assets.listBigqueryDatasets

cloudasset.assets.listBigqueryModels

cloudasset.assets.listBigqueryTables

cloudasset.assets.listBigtableAppProfile

cloudasset.assets.listBigtableBackup

cloudasset.assets.listBigtableCluster

cloudasset.assets.listBigtableInstance

cloudasset.assets.listBigtableTable

cloudasset.assets.listCloudAssetFeeds

cloudasset.assets.listCloudDeployDeliveryPipelines

cloudasset.assets.listCloudDeployReleases

cloudasset.assets.listCloudDeployRollouts

cloudasset.assets.listCloudDeployTargets

cloudasset.assets.listCloudDocumentAIEvaluation

cloudasset.assets.listCloudDocumentAIHumanReviewConfig

cloudasset.assets.listCloudDocumentAILabelerPool

cloudasset.assets.listCloudDocumentAIProcessor

cloudasset.assets.listCloudDocumentAIProcessorVersion

cloudasset.assets.listCloudbillingBillingAccounts

cloudasset.assets.listCloudbillingProjectBillingInfos

cloudasset.assets.listCloudfunctionsFunctions

cloudasset.assets.listCloudfunctionsGen2Functions

cloudasset.assets.listCloudkmsCryptoKeyVersions

cloudasset.assets.listCloudkmsCryptoKeys

cloudasset.assets.listCloudkmsEkmConnections

cloudasset.assets.listCloudkmsImportJobs

cloudasset.assets.listCloudkmsKeyRings

cloudasset.assets.listCloudmemcacheInstances

cloudasset.assets.listCloudresourcemanagerFolders

cloudasset.assets.listCloudresourcemanagerOrganizations

cloudasset.assets.listCloudresourcemanagerProjects

cloudasset.assets.listCloudresourcemanagerTagBindings

cloudasset.assets.listCloudresourcemanagerTagKeys

cloudasset.assets.listCloudresourcemanagerTagValues

cloudasset.assets.listComposerEnvironments

cloudasset.assets.listComputeAddress

cloudasset.assets.listComputeAutoscalers

cloudasset.assets.listComputeBackendBuckets

cloudasset.assets.listComputeBackendServices

cloudasset.assets.listComputeCommitments

cloudasset.assets.listComputeDisks

cloudasset.assets.listComputeExternalVpnGateways

cloudasset.assets.listComputeFirewallPolicies

cloudasset.assets.listComputeFirewalls

cloudasset.assets.listComputeForwardingRules

cloudasset.assets.listComputeGlobalAddress

cloudasset.assets.listComputeGlobalForwardingRules

cloudasset.assets.listComputeHealthChecks

cloudasset.assets.listComputeHttpHealthChecks

cloudasset.assets.listComputeHttpsHealthChecks

cloudasset.assets.listComputeImages

cloudasset.assets.listComputeInstanceGroupManagers

cloudasset.assets.listComputeInstanceGroups

cloudasset.assets.listComputeInstanceTemplates

cloudasset.assets.listComputeInstances

cloudasset.assets.listComputeInterconnect

cloudasset.assets.listComputeInterconnectAttachment

cloudasset.assets.listComputeLicenses

cloudasset.assets.listComputeNetworkEndpointGroups

cloudasset.assets.listComputeNetworks

cloudasset.assets.listComputeNodeGroups

cloudasset.assets.listComputeNodeTemplates

cloudasset.assets.listComputePacketMirrorings

cloudasset.assets.listComputeProjects

cloudasset.assets.listComputeRegionAutoscaler

cloudasset.assets.listComputeRegionBackendServices

cloudasset.assets.listComputeRegionDisk

cloudasset.assets.listComputeRegionInstanceGroup

cloudasset.assets.listComputeRegionInstanceGroupManager

cloudasset.assets.listComputeReservations

cloudasset.assets.listComputeResourcePolicies

cloudasset.assets.listComputeRouters

cloudasset.assets.listComputeRoutes

cloudasset.assets.listComputeSecurityPolicy

cloudasset.assets.listComputeServiceAttachments

cloudasset.assets.listComputeSnapshots

cloudasset.assets.listComputeSslCertificates

cloudasset.assets.listComputeSslPolicies

cloudasset.assets.listComputeSubnetworks

cloudasset.assets.listComputeTargetHttpProxies

cloudasset.assets.listComputeTargetHttpsProxies

cloudasset.assets.listComputeTargetInstances

cloudasset.assets.listComputeTargetPools

cloudasset.assets.listComputeTargetSslProxies

cloudasset.assets.listComputeTargetTcpProxies

cloudasset.assets.listComputeTargetVpnGateways

cloudasset.assets.listComputeUrlMaps

cloudasset.assets.listComputeVpnGateways

cloudasset.assets.listComputeVpnTunnels

cloudasset.assets.listConnectorsConnections

cloudasset.assets.listConnectorsConnectorVersions

cloudasset.assets.listConnectorsConnectors

cloudasset.assets.listConnectorsProviders

cloudasset.assets.listConnectorsRuntimeConfigs

cloudasset.assets.listContainerAppsDeployment

cloudasset.assets.listContainerAppsReplicaSets

cloudasset.assets.listContainerBatchJobs

cloudasset.assets.listContainerClusterrole

cloudasset.assets.listContainerClusterrolebinding

cloudasset.assets.listContainerClusters

cloudasset.assets.listContainerExtensionsIngresses

cloudasset.assets.listContainerJobs

cloudasset.assets.listContainerNamespace

cloudasset.assets.listContainerNetworkingIngresses

cloudasset.assets.listContainerNetworkingNetworkPolicies

cloudasset.assets.listContainerNode

cloudasset.assets.listContainerNodepool

cloudasset.assets.listContainerPod

cloudasset.assets.listContainerReplicaSets

cloudasset.assets.listContainerRole

cloudasset.assets.listContainerRolebinding

cloudasset.assets.listContainerServices

cloudasset.assets.listContainerregistryImage

cloudasset.assets.listDataMigrationConnectionProfiles

cloudasset.assets.listDataMigrationMigrationJobs

cloudasset.assets.listDataflowJobs

cloudasset.assets.listDatafusionInstance

cloudasset.assets.listDataplexAssets

cloudasset.assets.listDataplexLakes

cloudasset.assets.listDataplexTasks

cloudasset.assets.listDataplexZones

cloudasset.assets.listDataprocAutoscalingPolicies

cloudasset.assets.listDataprocBatches

cloudasset.assets.listDataprocClusters

cloudasset.assets.listDataprocJobs

cloudasset.assets.listDataprocSessions

cloudasset.assets.listDataprocWorkflowTemplates

cloudasset.assets.listDatastreamConnectionProfile

cloudasset.assets.listDatastreamPrivateConnection

cloudasset.assets.listDatastreamStream

cloudasset.assets.listDialogflowAgents

cloudasset.assets.listDialogflowConversationProfiles

cloudasset.assets.listDialogflowKnowledgeBases

cloudasset.assets.listDialogflowLocationSettings

cloudasset.assets.listDlpDeidentifyTemplates

cloudasset.assets.listDlpDlpJobs

cloudasset.assets.listDlpInspectTemplates

cloudasset.assets.listDlpJobTriggers

cloudasset.assets.listDlpStoredInfoTypes

cloudasset.assets.listDnsManagedZones

cloudasset.assets.listDnsPolicies

cloudasset.assets.listDomainsRegistrations

cloudasset.assets.listEventarcTriggers

cloudasset.assets.listFileBackups

cloudasset.assets.listFileInstances

cloudasset.assets.listFirebaseAppInfos

cloudasset.assets.listFirebaseProjects

cloudasset.assets.listFirestoreDatabases

cloudasset.assets.listGKEHubFeatures

cloudasset.assets.listGKEHubMemberships

cloudasset.assets.listGameservicesGameServerClusters

cloudasset.assets.listGameservicesGameServerConfigs

cloudasset.assets.listGameservicesGameServerDeployments

cloudasset.assets.listGameservicesRealms

cloudasset.assets.listGkeBackupBackupPlans

cloudasset.assets.listGkeBackupBackups

cloudasset.assets.listGkeBackupRestorePlans

cloudasset.assets.listGkeBackupRestores

cloudasset.assets.listGkeBackupVolumeBackups

cloudasset.assets.listGkeBackupVolumeRestores

cloudasset.assets.listHealthcareConsentStores

cloudasset.assets.listHealthcareDatasets

cloudasset.assets.listHealthcareDicomStores

cloudasset.assets.listHealthcareFhirStores

cloudasset.assets.listHealthcareHl7V2Stores

cloudasset.assets.listIamPolicy

cloudasset.assets.listIamRoles

cloudasset.assets.listIamServiceAccountKeys

cloudasset.assets.listIamServiceAccounts

cloudasset.assets.listIapTunnel

cloudasset.assets.listIapTunnelInstances

cloudasset.assets.listIapTunnelZones

cloudasset.assets.listIapWeb

cloudasset.assets.listIapWebServiceVersion

cloudasset.assets.listIapWebServices

cloudasset.assets.listIapWebType

cloudasset.assets.listIdsEndpoints

cloudasset.assets.listIntegrationsAuthConfigs

cloudasset.assets.listIntegrationsCertificates

cloudasset.assets.listIntegrationsExecutions

cloudasset.assets.listIntegrationsIntegrationVersions

cloudasset.assets.listIntegrationsIntegrations

cloudasset.assets.listIntegrationsSfdcChannels

cloudasset.assets.listIntegrationsSfdcInstances

cloudasset.assets.listIntegrationsSuspensions

cloudasset.assets.listLoggingLogMetrics

cloudasset.assets.listLoggingLogSinks

cloudasset.assets.listManagedidentitiesDomain

cloudasset.assets.listMetastoreBackups

cloudasset.assets.listMetastoreMetadataImports

cloudasset.assets.listMetastoreServices

cloudasset.assets.listMonitoringAlertPolicies

cloudasset.assets.listNetworkConnectivityHubs

cloudasset.assets.listNetworkConnectivitySpokes

cloudasset.assets.listNetworkManagementConnectivityTests

cloudasset.assets.listNetworkServicesEndpointPolicies

cloudasset.assets.listNetworkServicesGateways

cloudasset.assets.listNetworkServicesGrpcRoutes

cloudasset.assets.listNetworkServicesHttpRoutes

cloudasset.assets.listNetworkServicesMeshes

cloudasset.assets.listNetworkServicesServiceBindings

cloudasset.assets.listNetworkServicesTcpRoutes

cloudasset.assets.listNetworkServicesTlsRoutes

cloudasset.assets.listOSConfigOSPolicyAssignmentReports

cloudasset.assets.listOSConfigOSPolicyAssignments

cloudasset.assets.listOSConfigVulnerabilityReports

cloudasset.assets.listOSInventories

cloudasset.assets.listOrgPolicy

cloudasset.assets.listPatchDeployments

cloudasset.assets.listPubsubSnapshots

cloudasset.assets.listPubsubSubscriptions

cloudasset.assets.listPubsubTopics

cloudasset.assets.listRedisInstances

cloudasset.assets.listResource

cloudasset.assets.listRunDomainMapping

cloudasset.assets.listRunRevision

cloudasset.assets.listRunService

cloudasset.assets.listSecretManagerSecretVersions

cloudasset.assets.listSecretManagerSecrets

cloudasset.assets.listServiceDirectoryNamespaces

cloudasset.assets.listServicePerimeter

cloudasset.assets.listServiceconsumermanagementConsumerProperty

cloudasset.assets.listServiceconsumermanagementConsumerQuotaLimits

cloudasset.assets.listServiceconsumermanagementConsumers

cloudasset.assets.listServiceconsumermanagementProducerOverrides

cloudasset.assets.listServiceconsumermanagementTenancyUnits

cloudasset.assets.listServiceconsumermanagementVisibility

cloudasset.assets.listServicemanagementServices

cloudasset.assets.listServiceusageAdminOverrides

cloudasset.assets.listServiceusageConsumerOverrides

cloudasset.assets.listServiceusageServices

cloudasset.assets.listSpannerBackups

cloudasset.assets.listSpannerDatabases

cloudasset.assets.listSpannerInstances

cloudasset.assets.listSpeakerIdPhrases

cloudasset.assets.listSpeakerIdSettings

cloudasset.assets.listSpeakerIdSpeakers

cloudasset.assets.listSpeechCustomClasses

cloudasset.assets.listSpeechPhraseSets

cloudasset.assets.listSqladminBackupRuns

cloudasset.assets.listSqladminInstances

cloudasset.assets.listStorageBuckets

cloudasset.assets.listTpuNodes

cloudasset.assets.listVpcaccessConnector

cloudasset.assets.queryAccessPolicy

cloudasset.assets.queryIamPolicy

cloudasset.assets.queryOSInventories

cloudasset.assets.queryResource

cloudasset.assets.searchAllIamPolicies

cloudasset.assets.searchAllResources

cloudasset.othercloudconnections.get

cloudasset.othercloudconnections.list

cloudasset.othercloudconnections.verify

cloudnotifications.activities.list

config.deployments.get

config.deployments.getIamPolicy

config.deployments.list

config.locations.*

config.operations.get

config.operations.list

config.previews.get

config.previews.list

config.resources.*

config.revisions.get

config.revisions.list

config.terraformversions.*

designcenter.applicationTemplateRevisions.get

designcenter.applicationTemplateRevisions.list

designcenter.applicationTemplates.get

designcenter.applicationTemplates.list

designcenter.applications.get

designcenter.applications.list

designcenter.catalogTemplateRevisions.get

designcenter.catalogTemplateRevisions.list

designcenter.catalogTemplates.get

designcenter.catalogTemplates.list

designcenter.catalogs.get

designcenter.catalogs.list

designcenter.components.get

designcenter.components.list

designcenter.connections.get

designcenter.connections.list

designcenter.locations.*

designcenter.operations.get

designcenter.operations.list

designcenter.sharedTemplateRevisions.*

designcenter.sharedTemplates.*

designcenter.shares.get

designcenter.shares.list

designcenter.spaces.get

designcenter.spaces.getIamPolicy

designcenter.spaces.list

developerconnect.locations.*

developerconnect.operations.get

developerconnect.operations.list

monitoring.alertPolicies.get

monitoring.alertPolicies.list

monitoring.alertPolicies.listEffectiveTags

monitoring.alertPolicies.listTagBindings

monitoring.dashboards.get

monitoring.dashboards.list

monitoring.groups.get

monitoring.groups.list

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.notificationChannelDescriptors.*

monitoring.notificationChannels.get

monitoring.notificationChannels.list

monitoring.services.get

monitoring.services.list

monitoring.slos.get

monitoring.slos.list

monitoring.snoozes.get

monitoring.snoozes.list

monitoring.timeSeries.list

monitoring.uptimeCheckConfigs.get

monitoring.uptimeCheckConfigs.list

opsconfigmonitoring.resourceMetadata.list

recommender.alloydbClusterPerformanceInsights.get

recommender.alloydbClusterPerformanceInsights.list

recommender.alloydbClusterPerformanceRecommendations.get

recommender.alloydbClusterPerformanceRecommendations.list

recommender.alloydbClusterReliabilityInsights.get

recommender.alloydbClusterReliabilityInsights.list

recommender.alloydbClusterReliabilityRecommendations.get

recommender.alloydbClusterReliabilityRecommendations.list

recommender.alloydbInstanceSecurityInsights.get

recommender.alloydbInstanceSecurityInsights.list

recommender.alloydbInstanceSecurityRecommendations.get

recommender.alloydbInstanceSecurityRecommendations.list

recommender.bigqueryCapacityCommitmentsInsights.get

recommender.bigqueryCapacityCommitmentsInsights.list

recommender.bigqueryCapacityCommitmentsRecommendations.get

recommender.bigqueryCapacityCommitmentsRecommendations.list

recommender.bigqueryMaterializedViewInsights.get

recommender.bigqueryMaterializedViewInsights.list

recommender.bigqueryMaterializedViewRecommendations.get

recommender.bigqueryMaterializedViewRecommendations.list

recommender.bigqueryPartitionClusterRecommendations.get

recommender.bigqueryPartitionClusterRecommendations.list

recommender.bigqueryTableStatsInsights.get

recommender.bigqueryTableStatsInsights.list

recommender.cloudAssetInsights.get

recommender.cloudAssetInsights.list

recommender.cloudCostGeneralInsights.get

recommender.cloudCostGeneralInsights.list

recommender.cloudCostGeneralRecommendations.get

recommender.cloudCostGeneralRecommendations.list

recommender.cloudDeprecationGeneralInsights.get

recommender.cloudDeprecationGeneralInsights.list

recommender.cloudDeprecationGeneralRecommendations.get

recommender.cloudDeprecationGeneralRecommendations.list

recommender.cloudFunctionsPerformanceInsights.get

recommender.cloudFunctionsPerformanceInsights.list

recommender.cloudFunctionsPerformanceRecommendations.get

recommender.cloudFunctionsPerformanceRecommendations.list

recommender.cloudManageabilityGeneralInsights.get

recommender.cloudManageabilityGeneralInsights.list

recommender.cloudManageabilityGeneralRecommendations.get

recommender.cloudManageabilityGeneralRecommendations.list

recommender.cloudPerformanceGeneralInsights.get

recommender.cloudPerformanceGeneralInsights.list

recommender.cloudPerformanceGeneralRecommendations.get

recommender.cloudPerformanceGeneralRecommendations.list

recommender.cloudRecentChangeInsights.get

recommender.cloudRecentChangeInsights.list

recommender.cloudRecentChangeRecommendations.get

recommender.cloudRecentChangeRecommendations.list

recommender.cloudRecentChangeRecommenderConfig.get

recommender.cloudReliabilityGeneralInsights.get

recommender.cloudReliabilityGeneralInsights.list

recommender.cloudReliabilityGeneralRecommendations.get

recommender.cloudReliabilityGeneralRecommendations.list

recommender.cloudSecurityGeneralInsights.get

recommender.cloudSecurityGeneralInsights.list

recommender.cloudSecurityGeneralRecommendations.get

recommender.cloudSecurityGeneralRecommendations.list

recommender.cloudsqlIdleInstanceRecommendations.get

recommender.cloudsqlIdleInstanceRecommendations.list

recommender.cloudsqlInstanceActivityInsights.get

recommender.cloudsqlInstanceActivityInsights.list

recommender.cloudsqlInstanceCpuUsageInsights.get

recommender.cloudsqlInstanceCpuUsageInsights.list

recommender.cloudsqlInstanceDiskUsageTrendInsights.get

recommender.cloudsqlInstanceDiskUsageTrendInsights.list

recommender.cloudsqlInstanceMemoryUsageInsights.get

recommender.cloudsqlInstanceMemoryUsageInsights.list

recommender.cloudsqlInstanceOomProbabilityInsights.get

recommender.cloudsqlInstanceOomProbabilityInsights.list

recommender.cloudsqlInstanceOutOfDiskRecommendations.get

recommender.cloudsqlInstanceOutOfDiskRecommendations.list

recommender.cloudsqlInstancePerformanceInsights.get

recommender.cloudsqlInstancePerformanceInsights.list

recommender.cloudsqlInstancePerformanceRecommendations.get

recommender.cloudsqlInstancePerformanceRecommendations.list

recommender.cloudsqlInstanceReliabilityInsights.get

recommender.cloudsqlInstanceReliabilityInsights.list

recommender.cloudsqlInstanceReliabilityRecommendations.get

recommender.cloudsqlInstanceReliabilityRecommendations.list

recommender.cloudsqlInstanceSecurityInsights.get

recommender.cloudsqlInstanceSecurityInsights.list

recommender.cloudsqlInstanceSecurityRecommendations.get

recommender.cloudsqlInstanceSecurityRecommendations.list

recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.get

recommender.cloudsqlInstanceUnderprovisionedCpuUsageInsights.list

recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.get

recommender.cloudsqlInstanceUnderprovisionedMemoryUsageInsights.list

recommender.cloudsqlOverprovisionedInstanceRecommendations.get

recommender.cloudsqlOverprovisionedInstanceRecommendations.list

recommender.cloudsqlUnderProvisionedInstanceRecommendations.get

recommender.cloudsqlUnderProvisionedInstanceRecommendations.list

recommender.commitmentUtilizationInsights.get

recommender.commitmentUtilizationInsights.list

recommender.computeAddressIdleResourceInsights.get

recommender.computeAddressIdleResourceInsights.list

recommender.computeAddressIdleResourceRecommendations.get

recommender.computeAddressIdleResourceRecommendations.list

recommender.computeDiskIdleResourceInsights.get

recommender.computeDiskIdleResourceInsights.list

recommender.computeDiskIdleResourceRecommendations.get

recommender.computeDiskIdleResourceRecommendations.list

recommender.computeFirewallInsightTypeConfigs.get

recommender.computeFirewallInsights.get

recommender.computeFirewallInsights.list

recommender.computeImageIdleResourceInsights.get

recommender.computeImageIdleResourceInsights.list

recommender.computeImageIdleResourceRecommendations.get

recommender.computeImageIdleResourceRecommendations.list

recommender.computeInstanceCpuUsageInsights.get

recommender.computeInstanceCpuUsageInsights.list

recommender.computeInstanceCpuUsagePredictionInsights.get

recommender.computeInstanceCpuUsagePredictionInsights.list

recommender.computeInstanceCpuUsageTrendInsights.get

recommender.computeInstanceCpuUsageTrendInsights.list

recommender.computeInstanceGroupManagerCpuUsageInsights.get

recommender.computeInstanceGroupManagerCpuUsageInsights.list

recommender.computeInstanceGroupManagerCpuUsagePredictionInsights.get

recommender.computeInstanceGroupManagerCpuUsagePredictionInsights.list

recommender.computeInstanceGroupManagerCpuUsageTrendInsights.get

recommender.computeInstanceGroupManagerCpuUsageTrendInsights.list

recommender.computeInstanceGroupManagerMachineTypeRecommendations.get

recommender.computeInstanceGroupManagerMachineTypeRecommendations.list

recommender.computeInstanceGroupManagerMemoryUsageInsights.get

recommender.computeInstanceGroupManagerMemoryUsageInsights.list

recommender.computeInstanceGroupManagerMemoryUsagePredictionInsights.get

recommender.computeInstanceGroupManagerMemoryUsagePredictionInsights.list

recommender.computeInstanceIdleResourceRecommendations.get

recommender.computeInstanceIdleResourceRecommendations.list

recommender.computeInstanceIdleResourceRecommenderConfig.get

recommender.computeInstanceMachineTypeRecommendations.get

recommender.computeInstanceMachineTypeRecommendations.list

recommender.computeInstanceMemoryUsageInsights.get

recommender.computeInstanceMemoryUsageInsights.list

recommender.computeInstanceMemoryUsagePredictionInsights.get

recommender.computeInstanceMemoryUsagePredictionInsights.list

recommender.computeInstanceNetworkThroughputInsights.get

recommender.computeInstanceNetworkThroughputInsights.list

recommender.containerDiagnosisInsights.get

recommender.containerDiagnosisInsights.list

recommender.containerDiagnosisRecommendations.get

recommender.containerDiagnosisRecommendations.list

recommender.costInsights.get

recommender.costInsights.list

recommender.dataflowDiagnosticsInsights.get

recommender.dataflowDiagnosticsInsights.list

recommender.errorReportingInsights.get

recommender.errorReportingInsights.list

recommender.errorReportingRecommendations.get

recommender.errorReportingRecommendations.list

recommender.firestoreDatabaseReliabilityInsights.get

recommender.firestoreDatabaseReliabilityInsights.list

recommender.firestoreDatabaseReliabilityRecommendations.get

recommender.firestoreDatabaseReliabilityRecommendations.list

recommender.gmpGuidedExperienceInsights.get

recommender.gmpGuidedExperienceInsights.list

recommender.gmpGuidedExperienceRecommendations.get

recommender.gmpGuidedExperienceRecommendations.list

recommender.gmpProjectManagementInsights.get

recommender.gmpProjectManagementInsights.list

recommender.gmpProjectManagementRecommendations.get

recommender.gmpProjectManagementRecommendations.list

recommender.gmpProjectProductSuggestionsInsights.get

recommender.gmpProjectProductSuggestionsInsights.list

recommender.gmpProjectProductSuggestionsRecommendations.get

recommender.gmpProjectProductSuggestionsRecommendations.list

recommender.iamPolicyChangeRiskInsights.get

recommender.iamPolicyChangeRiskInsights.list

recommender.iamPolicyChangeRiskRecommendations.get

recommender.iamPolicyChangeRiskRecommendations.list

recommender.iamPolicyInsights.get

recommender.iamPolicyInsights.list

recommender.iamPolicyLateralMovementInsights.get

recommender.iamPolicyLateralMovementInsights.list

recommender.iamPolicyRecommendations.get

recommender.iamPolicyRecommendations.list

recommender.iamPolicyRecommenderConfig.get

recommender.iamServiceAccountChangeRiskInsights.get

recommender.iamServiceAccountChangeRiskInsights.list

recommender.iamServiceAccountChangeRiskRecommendations.get

recommender.iamServiceAccountChangeRiskRecommendations.list

recommender.iamServiceAccountInsights.get

recommender.iamServiceAccountInsights.list

recommender.locations.*

recommender.loggingProductSuggestionContainerInsights.get

recommender.loggingProductSuggestionContainerInsights.list

recommender.loggingProductSuggestionContainerRecommendations.get

recommender.loggingProductSuggestionContainerRecommendations.list

recommender.monitoringProductSuggestionComputeInsights.get

recommender.monitoringProductSuggestionComputeInsights.list

recommender.monitoringProductSuggestionComputeRecommendations.get

recommender.monitoringProductSuggestionComputeRecommendations.list

recommender.networkAnalyzerCloudSqlInsights.get

recommender.networkAnalyzerCloudSqlInsights.list

recommender.networkAnalyzerDynamicRouteInsights.get

recommender.networkAnalyzerDynamicRouteInsights.list

recommender.networkAnalyzerGkeConnectivityInsights.get

recommender.networkAnalyzerGkeConnectivityInsights.list

recommender.networkAnalyzerGkeIpAddressInsights.get

recommender.networkAnalyzerGkeIpAddressInsights.list

recommender.networkAnalyzerGkeServiceAccountInsights.get

recommender.networkAnalyzerGkeServiceAccountInsights.list

recommender.networkAnalyzerIpAddressInsights.get

recommender.networkAnalyzerIpAddressInsights.list

recommender.networkAnalyzerLoadBalancerInsights.get

recommender.networkAnalyzerLoadBalancerInsights.list

recommender.networkAnalyzerVpcConnectivityInsights.get

recommender.networkAnalyzerVpcConnectivityInsights.list

recommender.orgPolicyInsights.get

recommender.orgPolicyInsights.list

recommender.orgPolicyRecommendations.get

recommender.orgPolicyRecommendations.list

recommender.resourcemanagerProjectChangeRiskInsights.get

recommender.resourcemanagerProjectChangeRiskInsights.list

recommender.resourcemanagerProjectChangeRiskRecommendations.get

recommender.resourcemanagerProjectChangeRiskRecommendations.list

recommender.resourcemanagerProjectUtilizationInsightTypeConfigs.get

recommender.resourcemanagerProjectUtilizationInsights.get

recommender.resourcemanagerProjectUtilizationInsights.list

recommender.resourcemanagerProjectUtilizationRecommendations.get

recommender.resourcemanagerProjectUtilizationRecommendations.list

recommender.resourcemanagerProjectUtilizationRecommenderConfigs.get

recommender.resourcemanagerServiceLimitInsights.get

recommender.resourcemanagerServiceLimitInsights.list

recommender.resourcemanagerServiceLimitRecommendations.get

recommender.resourcemanagerServiceLimitRecommendations.list

recommender.runServiceCostInsights.get

recommender.runServiceCostInsights.list

recommender.runServiceCostRecommendations.get

recommender.runServiceCostRecommendations.list

recommender.runServiceIdentityInsights.get

recommender.runServiceIdentityInsights.list

recommender.runServiceIdentityRecommendations.get

recommender.runServiceIdentityRecommendations.list

recommender.runServicePerformanceInsights.get

recommender.runServicePerformanceInsights.list

recommender.runServicePerformanceRecommendations.get

recommender.runServicePerformanceRecommendations.list

recommender.runServiceSecurityInsights.get

recommender.runServiceSecurityInsights.list

recommender.runServiceSecurityRecommendations.get

recommender.runServiceSecurityRecommendations.list

recommender.spannerProjectReliabilityInsights.get

recommender.spannerProjectReliabilityInsights.list

recommender.spannerProjectReliabilityRecommendations.get

recommender.spannerProjectReliabilityRecommendations.list

recommender.spendBasedCommitmentInsights.get

recommender.spendBasedCommitmentInsights.list

recommender.spendBasedCommitmentRecommendations.get

recommender.spendBasedCommitmentRecommendations.list

recommender.spendBasedCommitmentRecommenderConfig.get

recommender.storageBucketSoftDeleteInsights.get

recommender.storageBucketSoftDeleteInsights.list

recommender.storageBucketSoftDeleteRecommendations.get

recommender.storageBucketSoftDeleteRecommendations.list

recommender.usageCommitmentRecommendations.get

recommender.usageCommitmentRecommendations.list

resourcemanager.folders.get

resourcemanager.folders.list

resourcemanager.projects.get

resourcemanager.projects.list

servicehealth.*

stackdriver.projects.get

stackdriver.resourceMetadata.list

storage.folders.get

storage.folders.list

storage.managedFolders.get

storage.managedFolders.list

storage.objects.get

storage.objects.list

App Hub Editor

（roles/apphub.editor）

拥有对 App Hub 资源的编辑权限。

apphub.applications.create

apphub.applications.delete

apphub.applications.get

apphub.applications.list

apphub.applications.update

apphub.discoveredServices.*

apphub.discoveredWorkloads.*

apphub.locations.*

apphub.operations.*

apphub.serviceProjectAttachments.lookup

apphub.services.*

apphub.workloads.*

resourcemanager.projects.get

resourcemanager.projects.list

App Hub Viewer

（roles/apphub.viewer）

拥有对 App Hub 资源的查看权限。

apphub.applications.get

apphub.applications.list

apphub.discoveredServices.get

apphub.discoveredServices.list

apphub.discoveredWorkloads.get

apphub.discoveredWorkloads.list

apphub.locations.*

apphub.operations.get

apphub.operations.list

apphub.serviceProjectAttachments.lookup

apphub.services.get

apphub.services.list

apphub.workloads.get

apphub.workloads.list

resourcemanager.projects.get

resourcemanager.projects.list

Appliance troubleshooting commands approver ^{Beta 版}

(roles/applianceactivation.approver)

可授予用于批准要在设备上运行的命令的权限

applianceactivation.rttCommands.approve

applianceactivation.rttCommands.get

resourcemanager.projects.get

resourcemanager.projects.list

On-appliance troubleshooting client ^{Beta 版}

(roles/applianceactivation.client)

可授予读取设备命令及发送其结果的权限。

applianceactivation.rttCommands.get

applianceactivation.rttCommands.sendResult

Appliance troubleshooter ^{Beta 版}

(roles/applianceactivation.troubleshooter)

可授予用于发送要在设备上运行的新命令和查看输出的权限

applianceactivation.rttCommands.create

applianceactivation.rttCommands.get

applianceactivation.rttCommands.list

resourcemanager.projects.get

resourcemanager.projects.list

Assured OSS Admin

（roles/assuredoss.admin）

拥有使用 Assured OSS 和管理配置的权限。

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

artifactregistry.mavenartifacts.*

artifactregistry.npmpackages.*

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

artifactregistry.repositories.create

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

assuredoss.*

iam.serviceAccountKeys.create

iam.serviceAccounts.create

iam.serviceAccounts.get

pubsub.schemas.get

pubsub.schemas.list

pubsub.schemas.listRevisions

pubsub.schemas.validate

pubsub.snapshots.get

pubsub.snapshots.list

pubsub.subscriptions.create

pubsub.subscriptions.get

pubsub.subscriptions.list

pubsub.subscriptions.update

pubsub.topics.get

pubsub.topics.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.enable

serviceusage.services.get

serviceusage.services.list

Assured OSS Project Admin ^{Beta 版}

（roles/assuredoss.projectAdmin）

拥有使用 Assured OSS 和管理配置的权限。

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

artifactregistry.mavenartifacts.*

artifactregistry.npmpackages.*

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

artifactregistry.repositories.create

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

assuredoss.*

iam.serviceAccounts.create

iam.serviceAccounts.get

pubsub.schemas.get

pubsub.schemas.list

pubsub.schemas.listRevisions

pubsub.schemas.validate

pubsub.snapshots.get

pubsub.snapshots.list

pubsub.subscriptions.get

pubsub.subscriptions.list

pubsub.topics.get

pubsub.topics.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.enable

serviceusage.services.get

serviceusage.services.list

Assured OSS Reader

（roles/assuredoss.reader）

拥有使用 Assured OSS 和查看 Assured OSS 配置的权限。

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

artifactregistry.mavenartifacts.*

artifactregistry.npmpackages.*

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

assuredoss.config.get

assuredoss.locations.*

assuredoss.metadata.*

assuredoss.operations.get

assuredoss.operations.list

pubsub.schemas.get

pubsub.schemas.list

pubsub.schemas.listRevisions

pubsub.schemas.validate

pubsub.snapshots.get

pubsub.snapshots.list

pubsub.subscriptions.get

pubsub.subscriptions.list

pubsub.topics.get

pubsub.topics.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Assured OSS User

（roles/assuredoss.user）

拥有使用 Assured OSS 的权限。

artifactregistry.attachments.get

artifactregistry.attachments.list

artifactregistry.dockerimages.*

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

artifactregistry.mavenartifacts.*

artifactregistry.npmpackages.*

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.rules.get

artifactregistry.rules.list

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

assuredoss.locations.*

assuredoss.metadata.*

assuredoss.operations.get

assuredoss.operations.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

Audit Manager Admin ^{Beta 版}

（roles/auditmanager.admin）

拥有对 Audit Manager 资源的完整访问权限。

auditmanager.auditReports.*

auditmanager.auditScopeReports.generate

auditmanager.billingSettings.get

auditmanager.controlReports.*

auditmanager.controls.list

auditmanager.findings.*

auditmanager.locations.*

auditmanager.operations.*

auditmanager.resourceEnrollmentStatuses.*

cloudasset.assets.searchAllResources

resourcemanager.folders.get

resourcemanager.folders.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

Audit Manager Auditor ^{Beta 版}

（roles/auditmanager.auditor）

允许创建和查看审核报告。

auditmanager.auditReports.*

auditmanager.auditScopeReports.generate

auditmanager.billingSettings.get

auditmanager.controlReports.*

auditmanager.controls.list

auditmanager.findings.*

auditmanager.locations.get

auditmanager.locations.list

auditmanager.operations.*

auditmanager.resourceEnrollmentStatuses.*

cloudasset.assets.searchAllResources

resourcemanager.folders.get

resourcemanager.folders.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

Custom Compliance Framework Admin ^{Beta 版}

（roles/auditmanager.ccfAdmin）

拥有对 Custom Compliance Framework 资源的完整访问权限。

auditmanager.billingSettings.get

auditmanager.customComplianceFrameworks.*

auditmanager.locations.get

auditmanager.locations.list

auditmanager.operations.*

resourcemanager.organizations.get

Custom Compliance Framework Viewer ^{Beta 版}

（roles/auditmanager.ccfViewer）

允许查看 Custom Compliance Framework 资源。

auditmanager.billingSettings.get

auditmanager.customComplianceFrameworks.get

auditmanager.customComplianceFrameworks.list

auditmanager.locations.get

auditmanager.locations.list

auditmanager.operations.*

resourcemanager.organizations.get

Autoscaling Metrics Writer ^{Beta 版}

（roles/autoscaling.metricsWriter）

能够写入针对自动扩缩站点的指标

autoscaling.sites.writeMetrics

Autoscaling Recommendations Reader ^{Beta 版}

（roles/autoscaling.recommendationsReader）

拥有从自动扩缩网站读取推荐内容的权限

autoscaling.sites.readRecommendations

Autoscaling Site Admin ^{Beta 版}

（roles/autoscaling.sitesAdmin）

具有对所有自动扩缩站点功能的完整访问权限

autoscaling.*

resourcemanager.projects.get

resourcemanager.projects.list

Autoscaling State Writer ^{Beta 版}

（roles/autoscaling.stateWriter）

拥有写入自动扩缩网站状态的权限

autoscaling.sites.writeState

Batch Administrator

（roles/batch.admin）

Batch 资源的管理员

batch.jobs.*

batch.locations.*

batch.operations.*

batch.resourceAllowances.*

batch.tasks.*

resourcemanager.projects.get

resourcemanager.projects.list

Batch Agent Reporter

（roles/batch.agentReporter）

Batch 代理状态的报告者。

batch.states.report

Batch Job Editor

（roles/batch.jobsEditor）

Batch 作业的编辑者

batch.jobs.*

batch.locations.*

batch.operations.*

batch.tasks.*

resourcemanager.projects.get

resourcemanager.projects.list

Batch Job Viewer

（roles/batch.jobsViewer）

可以查看批量作业、任务组和任务

batch.jobs.get

batch.jobs.list

batch.locations.*

batch.operations.*

batch.tasks.*

resourcemanager.projects.get

resourcemanager.projects.list

Batch ResourceAllowance Editor

（roles/batch.resourceAllowancesEditor）

Batch ResourceAllowances 的编辑者

batch.locations.*

batch.operations.*

batch.resourceAllowances.*

resourcemanager.projects.get

resourcemanager.projects.list

Batch ResourceAllowance Viewer

（roles/batch.resourceAllowancesViewer）

Batch ResourceAllowances 的查看者

batch.locations.*

batch.operations.*

batch.resourceAllowances.get

batch.resourceAllowances.list

resourcemanager.projects.get

resourcemanager.projects.list

BigLake Admin

(roles/biglake.admin)

提供对所有 BigLake 资源的完整访问权限。

biglake.*

resourcemanager.projects.get

resourcemanager.projects.list

BigLake Viewer

(roles/biglake.viewer)

提供对所有 BigLake 资源的只读权限。

biglake.catalogs.get

biglake.catalogs.list

biglake.databases.get

biglake.databases.list

biglake.locks.list

biglake.tables.get

biglake.tables.list

resourcemanager.projects.get

resourcemanager.projects.list

MigrationWorkflow Editor

（roles/bigquerymigration.editor）

可以修改 EDW 迁移工作流。

bigquerymigration.subtasks.*

bigquerymigration.workflows.create

bigquerymigration.workflows.delete

bigquerymigration.workflows.enableAiOutputTypes

bigquerymigration.workflows.enableLineageOutputTypes

bigquerymigration.workflows.enableOutputTypePermissions

bigquerymigration.workflows.get

bigquerymigration.workflows.list

bigquerymigration.workflows.update

Task Orchestrator

（roles/bigquerymigration.orchestrator）

可以编排 EDW 迁移任务。

bigquerymigration.workflows.orchestrateTask

storage.objects.list

Migration Translation User

(roles/bigquerymigration.translationUser)

可以使用 EDW 迁移交互式 SQL 转换服务。

bigquerymigration.translation.translate

MigrationWorkflow Viewer

（roles/bigquerymigration.viewer）

可以查看 EDW 迁移 MigrationWorkflow。

bigquerymigration.subtasks.*

bigquerymigration.workflows.get

bigquerymigration.workflows.list

Task Worker

（roles/bigquerymigration.worker）

执行 EDW 迁移子任务的工作器。

storage.objects.create

storage.objects.get

storage.objects.list

Carbon Footprint Viewer

（roles/billing.carbonViewer）

billing.accounts.get

billing.accounts.getCarbonInformation

billing.accounts.list

Blockchain Node Engine Admin

（roles/blockchainnodeengine.admin）

拥有对 Blockchain Node Engine 资源的完整访问权限。

blockchainnodeengine.*

resourcemanager.projects.get

resourcemanager.projects.list

Blockchain Node Engine Viewer

（roles/blockchainnodeengine.viewer）

拥有对 Blockchain Node Engine 资源的只读权限。

blockchainnodeengine.blockchainNodes.get

blockchainnodeengine.blockchainNodes.list

blockchainnodeengine.locations.*

blockchainnodeengine.operations.get

blockchainnodeengine.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Blockchain Validator Manager Admin ^{Beta 版}

（roles/blockchainvalidatormanager.admin）

拥有对 Blockchain Validator Manager 资源的完整访问权限。

blockchainvalidatormanager.*

resourcemanager.projects.get

resourcemanager.projects.list

Blockchain Validator Viewer ^{Beta 版}

（roles/blockchainvalidatormanager.viewer）

拥有对 Blockchain Validator Manager 资源的只读权限。

blockchainvalidatormanager.blockchainValidatorConfigs.get

blockchainvalidatormanager.blockchainValidatorConfigs.list

blockchainvalidatormanager.locations.*

blockchainvalidatormanager.operations.get

blockchainvalidatormanager.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Capacity Planner Usage Viewer ^{Beta 版}

（roles/capacityplanner.viewer）

拥有对容量规划工具使用情况资源的只读权限

capacityplanner.*

cloudquotas.quotas.get

compute.futureReservations.get

compute.futureReservations.list

compute.reservations.get

compute.reservations.list

monitoring.timeSeries.list

resourcemanager.folders.get

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

Care Studio Patients Viewer

（roles/carestudio.viewer）

此角色可以查看患者的所有属性。

carestudio.*

resourcemanager.projects.get

resourcemanager.projects.list

Chronicle Service Admin

（roles/chroniclesm.admin）

Admin 可以查看和修改 Chronicle 服务详情。

chroniclesm.*

Chronicle Service Viewer

（roles/chroniclesm.viewer）

Viewer 可以查看 Chronicle 服务详情，但无法对其进行更改。

chroniclesm.gcpAssociations.get

chroniclesm.gcpAssociations.list

chroniclesm.gcpLogFlowFilters.get

chroniclesm.gcpSettings.get

Location reader ^{Beta 版}

(roles/cloud.locationReader)

可以读取和枚举可用于创建资源的位置。

cloud.*

Code Repository Indexes Admin ^{Beta 版}

（roles/cloudaicompanion.codeRepositoryIndexesAdmin）

授予对代码库索引资源的完整访问权限。

cloudaicompanion.codeRepositoryIndexes.*

cloudaicompanion.operations.*

cloudaicompanion.repositoryGroups.create

cloudaicompanion.repositoryGroups.delete

cloudaicompanion.repositoryGroups.get

cloudaicompanion.repositoryGroups.getIamPolicy

cloudaicompanion.repositoryGroups.list

cloudaicompanion.repositoryGroups.setIamPolicy

cloudaicompanion.repositoryGroups.update

resourcemanager.projects.get

resourcemanager.projects.list

Code Repository Indexes Viewer ^{Beta 版}

（roles/cloudaicompanion.codeRepositoryIndexesViewer）

授予对代码库索引资源的只读权限。

cloudaicompanion.codeRepositoryIndexes.get

cloudaicompanion.codeRepositoryIndexes.list

cloudaicompanion.operations.get

cloudaicompanion.operations.list

cloudaicompanion.repositoryGroups.get

cloudaicompanion.repositoryGroups.getIamPolicy

cloudaicompanion.repositoryGroups.list

resourcemanager.projects.get

resourcemanager.projects.list

Repository Groups User ^{Beta 版}

（roles/cloudaicompanion.repositoryGroupsUser）

授予对代码库索引代码库组的读取/使用权限。

cloudaicompanion.codeRepositoryIndexes.get

cloudaicompanion.repositoryGroups.get

cloudaicompanion.repositoryGroups.getIamPolicy

cloudaicompanion.repositoryGroups.use

Gemini for Google Cloud Settings Admin ^{Beta 版}

（roles/cloudaicompanion.settingsAdmin）

授予对 Gemini for Cloud 设置及其绑定的读写权限。

cloudaicompanion.codeToolsSettings.*

cloudaicompanion.dataSharingWithGoogleSettings.*

cloudaicompanion.geminiGcpEnablementSettings.*

cloudaicompanion.loggingSettings.*

cloudaicompanion.releaseChannelSettings.*

cloudaicompanion.settingBindings.*

Gemini for Google Cloud Settings User ^{Beta 版}

（roles/cloudaicompanion.settingsUser）

授予对 Gemini for Cloud 设置及其绑定的读取权限。

cloudaicompanion.dataSharingWithGoogleSettings.get

cloudaicompanion.dataSharingWithGoogleSettings.list

cloudaicompanion.geminiGcpEnablementSettings.get

cloudaicompanion.geminiGcpEnablementSettings.list

cloudaicompanion.loggingSettings.get

cloudaicompanion.loggingSettings.list

cloudaicompanion.releaseChannelSettings.get

cloudaicompanion.releaseChannelSettings.list

cloudaicompanion.settingBindings.codeToolsSettingsGet

cloudaicompanion.settingBindings.codeToolsSettingsList

cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsGet

cloudaicompanion.settingBindings.dataSharingWithGoogleSettingsList

cloudaicompanion.settingBindings.geminiGcpEnablementSettingsGet

cloudaicompanion.settingBindings.geminiGcpEnablementSettingsList

cloudaicompanion.settingBindings.loggingSettingsGet

cloudaicompanion.settingBindings.loggingSettingsList

cloudaicompanion.settingBindings.releaseChannelSettingsGet

cloudaicompanion.settingBindings.releaseChannelSettingsList

Topic Admin ^{Beta 版}

（roles/cloudaicompanion.topicAdmin）

授予对 Topic 资源的读写权限及权限管理权限。

cloudaicompanion.topics.delete

cloudaicompanion.topics.get

cloudaicompanion.topics.getIamPolicy

cloudaicompanion.topics.setIamPolicy

cloudaicompanion.topics.update

Topic Reader ^{Beta 版}

（roles/cloudaicompanion.topicReader）

授予对 Topic 资源的只读权限。

cloudaicompanion.topics.get

Gemini for Google Cloud User ^{Beta 版}

（roles/cloudaicompanion.user）

可以使用 Gemini for Google Cloud 的用户

cloudaicompanion.companions.*

cloudaicompanion.entitlements.get

cloudaicompanion.instances.*

cloudaicompanion.licenses.selfAssign

cloudaicompanion.operations.get

cloudaicompanion.topics.create

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Controls Partner Admin

（roles/cloudcontrolspartner.admin）

拥有对 Cloud Controls 合作伙伴资源的完全访问权限。

cloudcontrolspartner.accessapprovalrequests.list

cloudcontrolspartner.customers.*

cloudcontrolspartner.ekmconnections.get

cloudcontrolspartner.inspectabilityevents.get

cloudcontrolspartner.partnerpermissions.get

cloudcontrolspartner.partners.get

cloudcontrolspartner.platformcontrols.get

cloudcontrolspartner.violations.list

cloudcontrolspartner.workloads.list

Cloud Controls Partner Editor

（roles/cloudcontrolspartner.editor）

拥有对 Cloud Controls 合作伙伴资源的修改权限。

cloudcontrolspartner.*

Cloud Controls Partner Inspectability Reader

（roles/cloudcontrolspartner.inspectabilityReader）

拥有对 Cloud Controls 合作伙伴可检查性资源的只读权限。

cloudcontrolspartner.customers.get

cloudcontrolspartner.customers.list

cloudcontrolspartner.inspectabilityevents.get

cloudcontrolspartner.platformcontrols.get

Cloud Controls Partner Monitoring Reader

（roles/cloudcontrolspartner.monitoringReader）

拥有对 Cloud Controls 合作伙伴监控资源的只读权限。

cloudcontrolspartner.customers.get

cloudcontrolspartner.customers.list

cloudcontrolspartner.violations.*

cloudcontrolspartner.workloads.*

Cloud Controls Partner Reader

（roles/cloudcontrolspartner.reader）

拥有对 Cloud Controls 合作伙伴资源的只读权限。

cloudcontrolspartner.accessapprovalrequests.list

cloudcontrolspartner.customers.get

cloudcontrolspartner.customers.list

cloudcontrolspartner.ekmconnections.get

cloudcontrolspartner.inspectabilityevents.get

cloudcontrolspartner.partnerpermissions.get

cloudcontrolspartner.partners.get

cloudcontrolspartner.platformcontrols.get

cloudcontrolspartner.violations.*

cloudcontrolspartner.workloads.*

Cloud Optimization AI Admin

(roles/cloudoptimization.admin)

Cloud Optimization AI 资源的管理员

cloudoptimization.*

Cloud Optimization AI Editor

(roles/cloudoptimization.editor)

Cloud Optimization AI 资源的编辑者

cloudoptimization.*

Cloud Optimization AI Viewer

(roles/cloudoptimization.viewer)

Cloud Optimization AI 资源的查看者

cloudoptimization.operations.get

Cloud Quotas Admin ^{Beta 版}

（roles/cloudquotas.admin）

拥有对 Cloud 配额资源的完整访问权限。

cloudquotas.*

monitoring.timeSeries.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Quotas Viewer ^{Beta 版}

（roles/cloudquotas.viewer）

拥有对 Cloud 配额资源的只读权限。

cloudquotas.quotas.get

resourcemanager.projects.get

resourcemanager.projects.list

Commerce Agreement Publishing Admin ^{Beta 版}

（roles/commerceagreementpublishing.admin）

可以管理 Commerce Agreement Publishing 服务

commerceagreementpublishing.*

resourcemanager.projects.get

resourcemanager.projects.list

Commerce Agreement Publishing Viewer ^{Beta 版}

（roles/commerceagreementpublishing.viewer）

可以查看 Commerce Agreement Publishing 服务

commerceagreementpublishing.agreements.get

commerceagreementpublishing.agreements.list

commerceagreementpublishing.documents.get

commerceagreementpublishing.documents.list

resourcemanager.projects.get

resourcemanager.projects.list

Confidential Space Workload User

(roles/confidentialcomputing.workloadUser)

授予生成证明令牌并在虚拟机中运行工作负载的权限。适用于在 Confidential Space 虚拟机上运行的服务账号。

confidentialcomputing.*

logging.logEntries.create

ConfigDelivery Admin ^{Beta 版}

（roles/configdelivery.configDeliveryAdmin）

授予对所有 Config Delivery 资源的完整访问权限。让用户能够创建、移除和管理舰队软件包及资源包。

configdelivery.*

resourcemanager.projects.get

resourcemanager.projects.list

ConfigDelivery Viewer ^{Beta 版}

（roles/configdelivery.configDeliveryViewer）

授予对所有 Config Delivery 资源的读取权限。让用户能够查看现有的舰队软件包和资源包，但不能进行任何更改。

configdelivery.fleetPackages.get

configdelivery.fleetPackages.list

configdelivery.locations.*

configdelivery.operations.get

configdelivery.operations.list

configdelivery.releases.get

configdelivery.releases.list

configdelivery.resourceBundles.get

configdelivery.resourceBundles.list

configdelivery.rollouts.get

configdelivery.rollouts.list

resourcemanager.projects.get

resourcemanager.projects.list

Config Delivery Resource Bundle Publisher ^{Beta 版}

（roles/configdelivery.resourceBundlePublisher）

授予对 Config Delivery ResourceBundle 和 Release 的读取和写入权限。

configdelivery.locations.*

configdelivery.operations.get

configdelivery.operations.list

configdelivery.releases.create

configdelivery.releases.get

configdelivery.releases.list

configdelivery.releases.update

configdelivery.resourceBundles.create

configdelivery.resourceBundles.get

configdelivery.resourceBundles.list

configdelivery.resourceBundles.update

resourcemanager.projects.get

resourcemanager.projects.list

Contact Center AI Platform Admin

（roles/contactcenteraiplatform.admin）

拥有对 Contact Center AI Platform 资源的完整访问权限。

contactcenteraiplatform.*

resourcemanager.projects.get

resourcemanager.projects.list

Contact Center AI Platform Viewer

(roles/contactcenteraiplatform.viewer)

拥有对 Contact Center AI Platform 资源的只读权限。

contactcenteraiplatform.contactCenters.get

contactcenteraiplatform.contactCenters.list

contactcenteraiplatform.locations.*

contactcenteraiplatform.operations.get

contactcenteraiplatform.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Contact Center AI Insights 管理中心 ^{Beta 版}

（roles/contactcenterinsights.admin）

授予对所有 Contact Center AI Insights 资源的完整访问权限。

contactcenterinsights.*

Contact Center AI Insights authorized editor ^{Beta 版}

（roles/contactcenterinsights.authorizedEditor）

授予对授权资源的读写权限。

contactcenterinsights.authorizedAnalyses.*

contactcenterinsights.authorizedConversations.*

contactcenterinsights.authorizedFeedbackLabels.*

contactcenterinsights.authorizedOperations.*

contactcenterinsights.authorizedViewSets.get

contactcenterinsights.authorizedViews.get

Contact Center AI Insights 授权查看者 ^{Beta 版}

（roles/contactcenterinsights.authorizedViewer）

授予对授权资源的读取权限。

contactcenterinsights.authorizedAnalyses.get

contactcenterinsights.authorizedAnalyses.list

contactcenterinsights.authorizedConversations.get

contactcenterinsights.authorizedConversations.list

contactcenterinsights.authorizedFeedbackLabels.get

contactcenterinsights.authorizedFeedbackLabels.list

contactcenterinsights.authorizedOperations.*

contactcenterinsights.authorizedViewSets.get

contactcenterinsights.authorizedViewSets.list

contactcenterinsights.authorizedViews.get

contactcenterinsights.authorizedViews.list

Contact Center AI Insights Editor

(roles/contactcenterinsights.editor)

可授予所有 Contact Center AI Insights 资源的读写权限。

contactcenterinsights.analyses.*

contactcenterinsights.analysisRules.*

contactcenterinsights.authorizedAnalyses.*

contactcenterinsights.authorizedConversations.*

contactcenterinsights.authorizedFeedbackLabels.create

contactcenterinsights.authorizedFeedbackLabels.delete

contactcenterinsights.authorizedFeedbackLabels.get

contactcenterinsights.authorizedFeedbackLabels.list

contactcenterinsights.authorizedFeedbackLabels.update

contactcenterinsights.authorizedOperations.*

contactcenterinsights.authorizedViewSets.*

contactcenterinsights.authorizedViews.create

contactcenterinsights.authorizedViews.delete

contactcenterinsights.authorizedViews.get

contactcenterinsights.authorizedViews.list

contactcenterinsights.authorizedViews.update

contactcenterinsights.conversations.*

contactcenterinsights.faqEntries.*

contactcenterinsights.faqModels.*

contactcenterinsights.feedbackLabels.*

contactcenterinsights.issueModels.*

contactcenterinsights.issues.*

contactcenterinsights.operations.*

contactcenterinsights.phraseMatchers.*

contactcenterinsights.qaQuestionTags.*

contactcenterinsights.qaQuestions.*

contactcenterinsights.qaScorecardRevisions.*

contactcenterinsights.qaScorecards.*

contactcenterinsights.settings.*

contactcenterinsights.views.*

contactcenterinsights.visibilityLabels.list

Contact Center AI Insights Viewer

(roles/contactcenterinsights.viewer)

授予对所有 Contact Center AI Insights 资源的读取访问权限。

contactcenterinsights.analyses.get

contactcenterinsights.analyses.list

contactcenterinsights.analysisRules.get

contactcenterinsights.analysisRules.list

contactcenterinsights.assessmentRules.get

contactcenterinsights.assessmentRules.list

contactcenterinsights.authorizedAnalyses.get

contactcenterinsights.authorizedAnalyses.list

contactcenterinsights.authorizedConversations.get

contactcenterinsights.authorizedConversations.list

contactcenterinsights.authorizedFeedbackLabels.get

contactcenterinsights.authorizedFeedbackLabels.list

contactcenterinsights.authorizedOperations.*

contactcenterinsights.authorizedViewSets.get

contactcenterinsights.authorizedViewSets.list

contactcenterinsights.authorizedViews.get

contactcenterinsights.authorizedViews.list

contactcenterinsights.conversations.get

contactcenterinsights.conversations.list

contactcenterinsights.faqEntries.get

contactcenterinsights.faqEntries.list

contactcenterinsights.faqModels.get

contactcenterinsights.faqModels.list

contactcenterinsights.feedbackLabels.download

contactcenterinsights.feedbackLabels.get

contactcenterinsights.feedbackLabels.list

contactcenterinsights.issueModels.get

contactcenterinsights.issueModels.list

contactcenterinsights.issues.get

contactcenterinsights.issues.list

contactcenterinsights.operations.get

contactcenterinsights.operations.list

contactcenterinsights.phraseMatchers.get

contactcenterinsights.phraseMatchers.list

contactcenterinsights.qaQuestions.get

contactcenterinsights.qaQuestions.list

contactcenterinsights.qaScorecardRevisions.get

contactcenterinsights.qaScorecardRevisions.list

contactcenterinsights.qaScorecards.get

contactcenterinsights.qaScorecards.list

contactcenterinsights.settings.get

contactcenterinsights.views.get

contactcenterinsights.views.list

contactcenterinsights.visibilityLabels.list

GKE Security Posture Viewer ^{Beta 版}

(roles/containersecurity.viewer)

拥有对 GKE Security Posture 资源的只读权限。

container.clusters.list

containersecurity.*

resourcemanager.projects.get

resourcemanager.projects.list

Content Warehouse Admin

（roles/contentwarehouse.admin）

授予对 Content Warehouse 中所有资源的完整访问权限

contentwarehouse.corpora.*

contentwarehouse.dataExportJobs.*

contentwarehouse.documentSchemas.*

contentwarehouse.documents.*

contentwarehouse.locations.*

contentwarehouse.operations.get

contentwarehouse.rawDocuments.*

contentwarehouse.ruleSets.*

contentwarehouse.synonymSets.*

resourcemanager.projects.get

resourcemanager.projects.list

Content Warehouse Document Admin

（roles/contentwarehouse.documentAdmin）

授予对 Content Warehouse 中的文档资源的完整访问权限

contentwarehouse.documentSchemas.get

contentwarehouse.documents.create

contentwarehouse.documents.delete

contentwarehouse.documents.get

contentwarehouse.documents.getIamPolicy

contentwarehouse.documents.setIamPolicy

contentwarehouse.documents.update

contentwarehouse.links.*

contentwarehouse.locations.getStatus

contentwarehouse.rawDocuments.*

resourcemanager.projects.get

resourcemanager.projects.list

Content Warehouse Document Creator

（roles/contentwarehouse.documentCreator）

授予在 Content Warehouse 中创建文档的权限

contentwarehouse.documentSchemas.get

contentwarehouse.documentSchemas.list

contentwarehouse.documents.create

contentwarehouse.locations.getStatus

resourcemanager.projects.get

resourcemanager.projects.list

Content Warehouse Document Editor

（roles/contentwarehouse.documentEditor）

授予对 Content Warehouse 中的文档资源的更新权限

contentwarehouse.documentSchemas.get

contentwarehouse.documents.get

contentwarehouse.documents.getIamPolicy

contentwarehouse.documents.update

contentwarehouse.links.*

contentwarehouse.locations.getStatus

contentwarehouse.rawDocuments.*

resourcemanager.projects.get

resourcemanager.projects.list

Content Warehouse Document Schema Viewer

（roles/contentwarehouse.documentSchemaViewer）

授予在 Content Warehouse 中查看文档架构的权限

contentwarehouse.documentSchemas.get

contentwarehouse.documentSchemas.list

contentwarehouse.locations.getStatus

resourcemanager.projects.get

resourcemanager.projects.list

Content Warehouse Viewer

（roles/contentwarehouse.documentViewer）

授予查看 Content Warehouse 中所有资源的权限

contentwarehouse.documentSchemas.get

contentwarehouse.documents.get

contentwarehouse.documents.getIamPolicy

contentwarehouse.links.get

contentwarehouse.locations.getStatus

contentwarehouse.rawDocuments.download

resourcemanager.projects.get

resourcemanager.projects.list

Database Center Admin ^{Beta 版}

（roles/databasecenter.admin）

可管理数据库中心资源数据的管理员角色

cloudaicompanion.entitlements.get

databasecenter.*

databasesconsole.locations.*

resourcemanager.projects.get

resourcemanager.projects.list

Database Center Viewer ^{Beta 版}

（roles/databasecenter.viewer）

可查看数据库中心资源数据的查看者角色

cloudaicompanion.entitlements.get

databasecenter.*

databasesconsole.locations.*

resourcemanager.projects.get

resourcemanager.projects.list

Database Insights Assistant Viewer ^{Beta 版}

（roles/databaseinsights.assistantViewer）

Database Insights 助理数据的 Viewer 角色

databaseinsights.performanceIssues.*

Events Service Viewer ^{Beta 版}

（roles/databaseinsights.eventsViewer）

可以查看事件服务数据

databaseinsights.aggregatedEvents.query

databaseinsights.clusterEvents.query

databaseinsights.instanceEvents.query

Database Insights Monitoring Viewer ^{Beta 版}

（roles/databaseinsights.monitoringViewer）

可以查看 Database Insights 监控数据

databaseinsights.activeQueries.fetch

databaseinsights.activitySummary.fetch

databaseinsights.aggregatedStats.query

databaseinsights.locations.*

databaseinsights.timeSeries.query

databaseinsights.workloadRecommendations.fetch

resourcemanager.projects.get

resourcemanager.projects.list

Database Insights Performing Operations ^{Beta 版}

（roles/databaseinsights.operationsAdmin）

可执行 Database Insights 操作的管理员角色

databaseinsights.activeQuery.terminate

Database Insights Recommendation Viewer ^{Beta 版}

（roles/databaseinsights.recommendationViewer）

可以查看 Database Insights 建议数据

databaseinsights.locations.*

databaseinsights.recommendations.query

databaseinsights.resourceRecommendations.query

databaseinsights.workloadRecommendations.fetch

resourcemanager.projects.get

resourcemanager.projects.list

Database Insights Viewer ^{Beta 版}

（roles/databaseinsights.viewer）

可以查看 Database Insights 数据

databaseinsights.activeQueries.fetch

databaseinsights.activitySummary.fetch

databaseinsights.aggregatedStats.query

databaseinsights.locations.*

databaseinsights.performanceIssues.*

databaseinsights.recommendations.query

databaseinsights.resourceRecommendations.query

databaseinsights.timeSeries.query

databaseinsights.workloadRecommendations.fetch

resourcemanager.projects.get

resourcemanager.projects.list

Studio Query Admin ^{Beta 版}

（roles/databasesconsole.studioQueryAdmin）

拥有对 Studio 查询资源的完整访问权限。

databasesconsole.*

resourcemanager.projects.get

resourcemanager.projects.list

Studio Query User ^{Beta 版}

（roles/databasesconsole.studioQueryUser）

可以创建、更新、搜索和删除 Studio 查询。

databasesconsole.locations.*

databasesconsole.operations.get

databasesconsole.operations.list

databasesconsole.studioQueries.create

databasesconsole.studioQueries.delete

databasesconsole.studioQueries.search

databasesconsole.studioQueries.update

resourcemanager.projects.get

resourcemanager.projects.list

Data Lineage Administrator

(roles/datalineage.admin)

可授予对 Data Lineage API 中所有资源的完整访问权限

datalineage.*

resourcemanager.projects.get

resourcemanager.projects.list

Data Lineage Editor

(roles/datalineage.editor)

可授予对 Data Lineage API 中所有资源的修改权限

datalineage.events.*

datalineage.locations.searchLinks

datalineage.operations.get

datalineage.processes.create

datalineage.processes.get

datalineage.processes.list

datalineage.processes.update

datalineage.runs.create

datalineage.runs.get

datalineage.runs.list

datalineage.runs.update

resourcemanager.projects.get

resourcemanager.projects.list

Data Lineage Events Producer

(roles/datalineage.producer)

可授予在 Data Lineage API 中创建所有资源的权限

datalineage.events.create

datalineage.processes.create

datalineage.processes.get

datalineage.processes.update

datalineage.runs.create

datalineage.runs.get

datalineage.runs.update

resourcemanager.projects.get

resourcemanager.projects.list

Data Lineage Viewer

(roles/datalineage.viewer)

可授予对 Data Lineage API 中所有资源的读取权限

datalineage.events.get

datalineage.events.list

datalineage.locations.searchLinks

datalineage.processes.get

datalineage.processes.list

datalineage.runs.get

datalineage.runs.list

resourcemanager.projects.get

resourcemanager.projects.list

Data Processing Controls Resource Admin

（roles/dataprocessing.admin）

能够完全管理数据处理控制设置并查看所有数据源数据的 Data processing controls admin。

billing.accounts.get

billing.accounts.list

dataprocessing.*

Data Processing Controls Data Source Manager

（roles/dataprocessing.dataSourceManager）

可以获取、列出并更新底层数据的数据处理控制数据源管理员。

dataprocessing.datasources.list

dataprocessing.datasources.update

Dataproc Resource Manager Admin ^{Beta 版}

（roles/dataprocrm.admin）

授予对所有 Dataproc Resource Manager 资源的完整访问权限。适用于需要创建和删除任何 Dataproc Resource Manager 资源的用户。

dataprocrm.*

resourcemanager.projects.get

resourcemanager.projects.list

Dataproc Resource Manager Viewer ^{Beta 版}

（roles/dataprocrm.viewer）

授予对所有 Dataproc Resource Manager 资源的读取权限。适用于需要对 Dataproc Resource Manager 资源进行只读访问的用户。

dataprocrm.locations.*

dataprocrm.nodePools.get

dataprocrm.nodePools.list

dataprocrm.nodes.get

dataprocrm.nodes.list

dataprocrm.nodes.mintOAuthToken

dataprocrm.operations.get

dataprocrm.operations.list

dataprocrm.workloads.get

dataprocrm.workloads.list

resourcemanager.projects.get

resourcemanager.projects.list

Application Design Center Admin ^{Beta 版}

（roles/designcenter.admin）

拥有对应用设计中心资源的完整访问权限。

apphub.serviceProjectAttachments.list

designcenter.*

orgpolicy.policy.get

resourcemanager.projects.get

resourcemanager.projects.list

storage.folders.*

storage.managedFolders.create

storage.managedFolders.delete

storage.managedFolders.get

storage.managedFolders.list

storage.multipartUploads.*

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.move

storage.objects.restore

storage.objects.update

应用管理员 ^{Beta 版}

（roles/designcenter.applicationAdmin）

拥有对应用的管理员访问权限。

apphub.applications.create

apphub.applications.delete

apphub.applications.get

apphub.applications.list

apphub.applications.update

apphub.locations.*

apphub.serviceProjectAttachments.list

config.deployments.get

config.deployments.getIamPolicy

config.deployments.list

config.locations.*

config.operations.get

config.operations.list

config.previews.get

config.previews.list

config.resources.*

config.revisions.get

config.revisions.list

config.terraformversions.*

designcenter.applicationTemplateRevisions.get

designcenter.applicationTemplateRevisions.list

designcenter.applicationTemplates.get

designcenter.applicationTemplates.list

designcenter.applications.*

designcenter.sharedTemplateRevisions.*

designcenter.sharedTemplates.*

designcenter.shares.get

designcenter.shares.list

designcenter.spaces.get

designcenter.spaces.list

resourcemanager.projects.get

resourcemanager.projects.list

Application Editor ^{Beta 版}

（roles/designcenter.applicationEditor）

拥有对应用的读写权限。

apphub.applications.create

apphub.applications.delete

apphub.applications.get

apphub.applications.list

apphub.applications.update

apphub.locations.*

apphub.serviceProjectAttachments.list

config.deployments.get

config.deployments.getIamPolicy

config.deployments.list

config.locations.*

config.operations.get

config.operations.list

config.previews.get

config.previews.list

config.resources.*

config.revisions.get

config.revisions.list

config.terraformversions.*

designcenter.applicationTemplateRevisions.get

designcenter.applicationTemplateRevisions.list

designcenter.applicationTemplates.get

designcenter.applicationTemplates.list

designcenter.applications.*

designcenter.sharedTemplateRevisions.*

designcenter.sharedTemplates.*

designcenter.shares.get

designcenter.shares.list

designcenter.spaces.get

designcenter.spaces.list

resourcemanager.projects.get

resourcemanager.projects.list

Application Viewer ^{Beta 版}

（roles/designcenter.applicationViewer）

拥有对应用的只读权限。

apphub.applications.get

apphub.applications.list

apphub.locations.*

config.deployments.get

config.deployments.getIamPolicy

config.deployments.list

config.locations.*

config.operations.get

config.operations.list

config.previews.get

config.previews.list

config.resources.*

config.revisions.get

config.revisions.list

config.terraformversions.*

designcenter.applicationTemplateRevisions.get

designcenter.applicationTemplateRevisions.list

designcenter.applicationTemplates.get

designcenter.applicationTemplates.list

designcenter.applications.get

designcenter.applications.list

designcenter.sharedTemplateRevisions.*

designcenter.sharedTemplates.*

designcenter.shares.get

designcenter.shares.list

designcenter.spaces.get

designcenter.spaces.list

resourcemanager.projects.get

resourcemanager.projects.list

Application Design Center User ^{Beta 版}

（roles/designcenter.user）

拥有对应用设计中心资源的只读权限。

apphub.serviceProjectAttachments.list

designcenter.applicationTemplateRevisions.*

designcenter.applicationTemplates.*

designcenter.applications.get

designcenter.applications.list

designcenter.catalogTemplateRevisions.get

designcenter.catalogTemplateRevisions.list

designcenter.catalogTemplates.get

designcenter.catalogTemplates.list

designcenter.catalogs.get

designcenter.catalogs.list

designcenter.components.*

designcenter.connections.*

designcenter.locations.*

designcenter.operations.get

designcenter.operations.list

designcenter.sharedTemplateRevisions.*

designcenter.sharedTemplates.*

designcenter.shares.get

designcenter.shares.list

designcenter.spaces.get

designcenter.spaces.getIamPolicy

designcenter.spaces.list

orgpolicy.policy.get

resourcemanager.projects.get

resourcemanager.projects.list

storage.folders.*

storage.managedFolders.create

storage.managedFolders.delete

storage.managedFolders.get

storage.managedFolders.list

storage.multipartUploads.*

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.move

storage.objects.restore

storage.objects.update

Application Design Center Viewer ^{Beta 版}

（roles/designcenter.viewer）

拥有对应用设计中心资源的只读权限。

designcenter.applicationTemplateRevisions.get

designcenter.applicationTemplateRevisions.list

designcenter.applicationTemplates.get

designcenter.applicationTemplates.list

designcenter.applications.get

designcenter.applications.list

designcenter.catalogTemplateRevisions.get

designcenter.catalogTemplateRevisions.list

designcenter.catalogTemplates.get

designcenter.catalogTemplates.list

designcenter.catalogs.get

designcenter.catalogs.list

designcenter.components.get

designcenter.components.list

designcenter.connections.get

designcenter.connections.list

designcenter.locations.*

designcenter.operations.get

designcenter.operations.list

designcenter.sharedTemplateRevisions.*

designcenter.sharedTemplates.*

designcenter.shares.get

designcenter.shares.list

designcenter.spaces.get

designcenter.spaces.getIamPolicy

designcenter.spaces.list

resourcemanager.projects.get

resourcemanager.projects.list

storage.folders.get

storage.folders.list

storage.managedFolders.get

storage.managedFolders.list

storage.objects.get

storage.objects.list

Developer Connect Admin ^{Beta 版}

（roles/developerconnect.admin）

拥有对 Developer Connect 资源的完整访问权限。

developerconnect.connections.*

developerconnect.gitRepositoryLinks.create

developerconnect.gitRepositoryLinks.delete

developerconnect.gitRepositoryLinks.fetchGitRefs

developerconnect.gitRepositoryLinks.get

developerconnect.gitRepositoryLinks.gitProxyRead

developerconnect.gitRepositoryLinks.gitProxyWrite

developerconnect.gitRepositoryLinks.list

developerconnect.locations.*

developerconnect.operations.*

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect Git Proxy Reader ^{Beta 版}

（roles/developerconnect.gitProxyReader）

授予通过 Git Proxy 对代码库进行只读访问的权限。

developerconnect.gitRepositoryLinks.gitProxyRead

Developer Connect Git Proxy User ^{Beta 版}

（roles/developerconnect.gitProxyUser）

授予通过 Git Proxy 对代码库进行读写访问的权限。

developerconnect.gitRepositoryLinks.gitProxyRead

developerconnect.gitRepositoryLinks.gitProxyWrite

Developer Connect OAuth Admin ^{Beta 版}

（roles/developerconnect.oauthAdmin）

授予对 AccountConnector 资源的读写权限。

developerconnect.accountConnectors.*

developerconnect.locations.*

developerconnect.operations.get

developerconnect.operations.list

developerconnect.providers.list

developerconnect.users.*

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect OAuth User ^{Beta 版}

（roles/developerconnect.oauthUser）

授予对 User 资源的读写权限，以及对 AccountConnector 的读取权限。

developerconnect.accountConnectors.get

developerconnect.accountConnectors.list

developerconnect.locations.*

developerconnect.operations.get

developerconnect.operations.list

developerconnect.users.deleteSelf

developerconnect.users.fetchAccessToken

developerconnect.users.finishOAuth

developerconnect.users.getSelf

developerconnect.users.startOAuth

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect Read Token Accessor ^{Beta 版}

（roles/developerconnect.readTokenAccessor）

授予对只读令牌（PAT 和短期有效的令牌）的访问权限。此外，还可以授予查看 Git 代码库链接的权限。

developerconnect.connections.get

developerconnect.gitRepositoryLinks.fetchReadToken

developerconnect.gitRepositoryLinks.get

Developer Connect Token Accessor ^{Beta 版}

（roles/developerconnect.tokenAccessor）

授予对读写和只读令牌（PAT 和短期有效的令牌）的访问权限。此外，还可以授予查看 Git 代码库链接的权限。

developerconnect.connections.get

developerconnect.gitRepositoryLinks.fetchReadToken

developerconnect.gitRepositoryLinks.fetchReadWriteToken

developerconnect.gitRepositoryLinks.get

Developer Connect User ^{Beta 版}

（roles/developerconnect.user）

授予查看连接和使用与实际代码库进行交互（例如，从代码库中读取内容）的功能的权限

developerconnect.connections.fetchGitHubInstallations

developerconnect.connections.fetchLinkableGitRepositories

developerconnect.connections.get

developerconnect.connections.list

developerconnect.gitRepositoryLinks.fetchGitRefs

developerconnect.gitRepositoryLinks.get

developerconnect.gitRepositoryLinks.list

developerconnect.locations.*

developerconnect.operations.get

developerconnect.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Developer Connect Viewer ^{Beta 版}

（roles/developerconnect.viewer）

拥有对 Developer Connect 资源的只读权限。

developerconnect.connections.get

developerconnect.connections.list

developerconnect.gitRepositoryLinks.get

developerconnect.gitRepositoryLinks.list

developerconnect.locations.*

developerconnect.operations.get

developerconnect.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Discovery Engine Admin

（roles/discoveryengine.admin）

授予对所有 Discovery Engine 资源的完整访问权限。

discoveryengine.*

resourcemanager.projects.get

resourcemanager.projects.list

Discovery Engine Editor

（roles/discoveryengine.editor）

授予对所有 Discovery Engine 资源的读写权限。

discoveryengine.aclConfigs.get

discoveryengine.analytics.*

discoveryengine.answers.get

discoveryengine.branches.*

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.*

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.dataStores.trainCustomModel

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.create

discoveryengine.documents.delete

discoveryengine.documents.get

discoveryengine.documents.import

discoveryengine.documents.list

discoveryengine.documents.update

discoveryengine.engines.get

discoveryengine.engines.list

discoveryengine.engines.pause

discoveryengine.engines.resume

discoveryengine.engines.tune

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.models.*

discoveryengine.operations.*

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.*

discoveryengine.sampleQuerySets.*

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.*

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.create

discoveryengine.userEvents.fetchStats

discoveryengine.userEvents.import

discoveryengine.widgetConfigs.*

resourcemanager.projects.get

resourcemanager.projects.list

Cloud NotebookLM Notebook Editor ^{Beta 版}

（roles/discoveryengine.notebookEditor）

授予对 Cloud NotebookLM Notebook 的读写权限。

Cloud NotebookLM Admin ^{Beta 版}

（roles/discoveryengine.notebookLmOwner）

授予对 Cloud NotebookLM 资源的完整访问权限。

discoveryengine.aclConfigs.*

resourcemanager.projects.get

resourcemanager.projects.list

Cloud NotebookLM User ^{Beta 版}

（roles/discoveryengine.notebookLmUser）

授予对 Cloud NotebookLM 资源的用户级访问权限。

resourcemanager.projects.get

resourcemanager.projects.list

Cloud NotebookLM Notebook Owner ^{Beta 版}

（roles/discoveryengine.notebookOwner）

授予对 Cloud NotebookLM Notebook 的完整访问权限。

Cloud NotebookLM Notebook Viewer ^{Beta 版}

（roles/discoveryengine.notebookViewer）

授予对 Cloud NotebookLM Notebook 的只读权限。

Discovery Engine User ^{Beta 版}

（roles/discoveryengine.user）

授予对 Discovery Engine 资源的用户级访问权限。

discoveryengine.answers.get

discoveryengine.completionConfigs.completeQuery

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.search

discoveryengine.sessions.delete

discoveryengine.sessions.get

discoveryengine.sessions.list

discoveryengine.sessions.update

discoveryengine.userEvents.create

discoveryengine.widgetConfigs.get

Discovery Engine Viewer

（roles/discoveryengine.viewer）

授予对所有 Discovery Engine 资源的读取权限。

discoveryengine.aclConfigs.get

discoveryengine.analytics.*

discoveryengine.answers.get

discoveryengine.branches.*

discoveryengine.cmekConfigs.get

discoveryengine.cmekConfigs.list

discoveryengine.collections.get

discoveryengine.collections.list

discoveryengine.completionConfigs.completeQuery

discoveryengine.completionConfigs.get

discoveryengine.controls.get

discoveryengine.controls.list

discoveryengine.conversations.converse

discoveryengine.conversations.get

discoveryengine.conversations.list

discoveryengine.dataStores.completeQuery

discoveryengine.dataStores.get

discoveryengine.dataStores.list

discoveryengine.dataStores.listCustomModels

discoveryengine.documentProcessingConfigs.get

discoveryengine.documents.batchGetDocumentsMetadata

discoveryengine.documents.get

discoveryengine.documents.list

discoveryengine.engines.get

discoveryengine.engines.list

discoveryengine.evaluations.get

discoveryengine.evaluations.list

discoveryengine.groundingConfigs.check

discoveryengine.models.get

discoveryengine.models.list

discoveryengine.operations.*

discoveryengine.projects.get

discoveryengine.rankingConfigs.rank

discoveryengine.sampleQueries.get

discoveryengine.sampleQueries.list

discoveryengine.sampleQuerySets.get

discoveryengine.sampleQuerySets.list

discoveryengine.schemas.get

discoveryengine.schemas.list

discoveryengine.schemas.preview

discoveryengine.schemas.validate

discoveryengine.servingConfigs.answer

discoveryengine.servingConfigs.get

discoveryengine.servingConfigs.list

discoveryengine.servingConfigs.recommend

discoveryengine.servingConfigs.search

discoveryengine.sessions.get

discoveryengine.sessions.list

discoveryengine.siteSearchEngines.get

discoveryengine.targetSites.get

discoveryengine.targetSites.list

discoveryengine.userEvents.fetchStats

discoveryengine.widgetConfigs.get

resourcemanager.projects.get

resourcemanager.projects.list

Enterprise Purchasing Admin ^{Beta 版}

（roles/enterprisepurchasing.admin）

拥有对 Enterprise Purchasing 资源的完整访问权限。

enterprisepurchasing.*

resourcemanager.projects.get

resourcemanager.projects.list

Enterprise Purchasing Editor ^{Beta 版}

（roles/enterprisepurchasing.editor）

拥有对 Enterprise Purchasing 资源的编辑权限。

enterprisepurchasing.gcveCuds.get

enterprisepurchasing.gcveCuds.list

enterprisepurchasing.gcveNodePricingInfo.list

enterprisepurchasing.locations.*

enterprisepurchasing.operations.get

enterprisepurchasing.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Enterprise Purchasing Viewer ^{Beta 版}

（roles/enterprisepurchasing.viewer）

拥有对 Enterprise Purchasing 资源的只读权限。

enterprisepurchasing.gcveCuds.get

enterprisepurchasing.gcveCuds.list

enterprisepurchasing.gcveNodePricingInfo.list

enterprisepurchasing.locations.*

enterprisepurchasing.operations.get

enterprisepurchasing.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Essential Contacts Admin

（roles/essentialcontacts.admin）

能够全面访问所有重要联系人

essentialcontacts.*

Essential Contacts Viewer

（roles/essentialcontacts.viewer）

能查看所有重要联系人

essentialcontacts.contacts.get

essentialcontacts.contacts.list

Firebase Cloud Messaging API Admin ^{Beta 版}

（roles/firebasecloudmessaging.admin）

拥有对 Firebase Cloud Messaging API 资源的完整读写权限。

cloudmessaging.messages.create

fcmdata.deliverydata.list

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Crash Symbol Uploader

（roles/firebasecrash.symbolMappingsAdmin）

拥有 Firebase 崩溃报告符号映射文件资源的完全读写权限。

firebase.clients.get

firebase.clients.list

resourcemanager.projects.get

Firebase Data Connect API Admin ^{Beta 版}

（roles/firebasedataconnect.admin）

拥有对 Firebase Data Connect API 资源（包括数据）的完整访问权限。

firebasedataconnect.*

resourcemanager.projects.get

resourcemanager.projects.list

Firebase Data Connect API Data Admin ^{Beta 版}

（roles/firebasedataconnect.dataAdmin）

拥有对数据源的完整访问权限。

firebasedataconnect.services.executeGraphql

firebasedataconnect.services.executeGraphqlRead

Firebase Data Connect API Data Viewer ^{Beta 版}

（roles/firebasedataconnect.dataViewer）

拥有对数据源的只读权限。

firebasedataconnect.services.executeGraphqlRead

Firebase Data Connect API Viewer ^{Beta 版}

（roles/firebasedataconnect.viewer）

拥有对 Firebase Data Connect API 资源的只读权限。角色不授予对数据的访问权限。

firebasedataconnect.connectorRevisions.get

firebasedataconnect.connectorRevisions.list

firebasedataconnect.connectors.get

firebasedataconnect.connectors.list

firebasedataconnect.locations.*

firebasedataconnect.operations.get

firebasedataconnect.operations.list

firebasedataconnect.schemaRevisions.get

firebasedataconnect.schemaRevisions.list

firebasedataconnect.schemas.get

firebasedataconnect.schemas.list

firebasedataconnect.services.get

firebasedataconnect.services.list

resourcemanager.projects.get

resourcemanager.projects.list

GDC Hardware Management Admin ^{Beta 版}

（roles/gdchardwaremanagement.admin）

拥有对 GDC Hardware Management 资源的完整访问权限。

gdchardwaremanagement.*

resourcemanager.projects.get

resourcemanager.projects.list

GDC Hardware Management Operator ^{Beta 版}

（roles/gdchardwaremanagement.operator）

可以创建、读取和更新支持此类操作的 GDC Hardware Management 资源。还会授予对 HardwareGroup 资源的删除权限。

gdchardwaremanagement.changeLogEntries.*

gdchardwaremanagement.comments.*

gdchardwaremanagement.hardware.*

gdchardwaremanagement.hardwareGroups.*

gdchardwaremanagement.locations.*

gdchardwaremanagement.operations.get

gdchardwaremanagement.operations.list

gdchardwaremanagement.orders.create

gdchardwaremanagement.orders.get

gdchardwaremanagement.orders.list

gdchardwaremanagement.orders.update

gdchardwaremanagement.sites.*

gdchardwaremanagement.skus.*

gdchardwaremanagement.zones.*

resourcemanager.projects.get

resourcemanager.projects.list

GDC Hardware Management Reader ^{Beta 版}

（roles/gdchardwaremanagement.reader）

拥有对 GDC Hardware Management 资源的只读权限。

gdchardwaremanagement.changeLogEntries.*

gdchardwaremanagement.comments.get

gdchardwaremanagement.comments.list

gdchardwaremanagement.hardware.get

gdchardwaremanagement.hardware.list

gdchardwaremanagement.hardwareGroups.get

gdchardwaremanagement.hardwareGroups.list

gdchardwaremanagement.locations.*

gdchardwaremanagement.operations.get

gdchardwaremanagement.operations.list

gdchardwaremanagement.orders.get

gdchardwaremanagement.orders.list

gdchardwaremanagement.sites.get

gdchardwaremanagement.sites.list

gdchardwaremanagement.skus.*

gdchardwaremanagement.zones.get

gdchardwaremanagement.zones.list

resourcemanager.projects.get

resourcemanager.projects.list

Gemini Cloud Assist User ^{Beta 版}

（roles/geminicloudassist.user）

可以使用 Gemini Cloud Assist 的用户

cloudaicompanion.companions.*

cloudaicompanion.entitlements.get

cloudaicompanion.instances.*

cloudaicompanion.licenses.selfAssign

cloudaicompanion.topics.create

resourcemanager.projects.get

resourcemanager.projects.list

Identity Platform Admin ^{Beta 版}

（roles/identityplatform.admin）

拥有对 Identity Platform 资源的完全访问权限。

firebaseauth.*

identitytoolkit.*

Identity Platform Viewer ^{Beta 版}

（roles/identityplatform.viewer）

拥有对 Identity Platform 资源的读取权限。

firebaseauth.configs.get

firebaseauth.users.get

identitytoolkit.tenants.get

identitytoolkit.tenants.getIamPolicy

identitytoolkit.tenants.list

Identity Toolkit Admin

（roles/identitytoolkit.admin）

拥有对 Identity Toolkit 资源的完整访问权限。

firebaseauth.*

identitytoolkit.*

Identity Toolkit Viewer

（roles/identitytoolkit.viewer）

拥有对 Identity Toolkit 资源的读取权限。

firebaseauth.configs.get

firebaseauth.users.get

identitytoolkit.tenants.get

identitytoolkit.tenants.getIamPolicy

identitytoolkit.tenants.list

Apigee Integration Admin

（roles/integrations.apigeeIntegrationAdminRole）

拥有对所有 Apigee 集成的完整访问权限的用户。

connectors.actions.*

connectors.connections.executeSqlQuery

connectors.entities.*

connectors.entityTypes.list

integrations.apigeeAuthConfigs.*

integrations.apigeeCertificates.*

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

integrations.apigeeIntegrations.*

integrations.apigeeSfdcChannels.*

integrations.apigeeSfdcInstances.*

integrations.apigeeSuspensions.*

integrations.authConfigs.*

integrations.certificates.*

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.create

integrations.integrations.delete

integrations.integrations.deploy

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.integrations.update

integrations.sfdcChannels.*

integrations.sfdcInstances.*

integrations.suspensions.*

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Integration Deployer

（roles/integrations.apigeeIntegrationDeployerRole）

可在集成运行时中部署/取消部署 Apigee 集成的开发者。

integrations.apigeeIntegrationVers.deploy

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.deploy

integrations.integrations.get

integrations.integrations.list

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Integration Editor

（roles/integrations.apigeeIntegrationEditorRole）

可以列出、创建和更新 Apigee 集成的开发者。

connectors.actions.*

connectors.connections.executeSqlQuery

connectors.entities.*

connectors.entityTypes.list

integrations.apigeeAuthConfigs.create

integrations.apigeeAuthConfigs.get

integrations.apigeeAuthConfigs.list

integrations.apigeeAuthConfigs.update

integrations.apigeeCertificates.create

integrations.apigeeCertificates.get

integrations.apigeeCertificates.list

integrations.apigeeCertificates.update

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

integrations.apigeeIntegrations.*

integrations.apigeeSfdcChannels.create

integrations.apigeeSfdcChannels.get

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcChannels.update

integrations.apigeeSfdcInstances.create

integrations.apigeeSfdcInstances.get

integrations.apigeeSfdcInstances.list

integrations.apigeeSfdcInstances.update

integrations.authConfigs.create

integrations.authConfigs.get

integrations.authConfigs.list

integrations.authConfigs.update

integrations.certificates.get

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.create

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.integrations.update

integrations.sfdcChannels.*

integrations.sfdcInstances.*

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Integration Invoker

（roles/integrations.apigeeIntegrationInvokerRole）

可以调用 Apigee 集成的角色。

connectors.actions.*

connectors.connections.executeSqlQuery

connectors.entities.*

connectors.entityTypes.list

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.*

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.get

integrations.integrationVersions.invoke

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Integration Viewer

（roles/integrations.apigeeIntegrationsViewer）

可以列出和查看 Apigee 集成的开发者。

integrations.apigeeAuthConfigs.list

integrations.apigeeCertificates.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcInstances.list

integrations.authConfigs.get

integrations.authConfigs.list

integrations.certificates.get

integrations.certificates.list

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.list

integrations.sfdcChannels.list

integrations.sfdcInstances.list

resourcemanager.projects.get

resourcemanager.projects.list

Apigee Integration Approver

（roles/integrations.apigeeSuspensionResolver）

可以批准/拒绝包含暂停/等待任务的 Apigee 集成的角色。

integrations.apigeeSuspensions.*

integrations.suspensions.*

resourcemanager.projects.get

resourcemanager.projects.list

Certificate Viewer

（roles/integrations.certificateViewer）

可以列出和查看证书的开发者。

integrations.certificates.get

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Admin

（roles/integrations.integrationAdmin）

拥有对所有集成的完整访问权限 (CRUD) 的用户。

integrations.apigeeAuthConfigs.*

integrations.apigeeCertificates.*

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

integrations.apigeeIntegrations.*

integrations.apigeeSfdcChannels.*

integrations.apigeeSfdcInstances.*

integrations.apigeeSuspensions.*

integrations.authConfigs.*

integrations.certificates.*

integrations.executions.*

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.*

integrations.sfdcChannels.*

integrations.sfdcInstances.*

integrations.suspensions.*

integrations.testCases.*

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Deployer

（roles/integrations.integrationDeployer）

可在集成运行时中部署/取消部署集成的开发者。

integrations.apigeeIntegrationVers.deploy

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.deploy

integrations.integrations.get

integrations.integrations.list

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Editor

（roles/integrations.integrationEditor）

可以列出、创建和更新集成的开发者。

integrations.apigeeAuthConfigs.create

integrations.apigeeAuthConfigs.get

integrations.apigeeAuthConfigs.list

integrations.apigeeAuthConfigs.update

integrations.apigeeCertificates.create

integrations.apigeeCertificates.get

integrations.apigeeCertificates.list

integrations.apigeeCertificates.update

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.*

integrations.apigeeIntegrations.*

integrations.apigeeSfdcChannels.create

integrations.apigeeSfdcChannels.get

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcChannels.update

integrations.apigeeSfdcInstances.create

integrations.apigeeSfdcInstances.get

integrations.apigeeSfdcInstances.list

integrations.apigeeSfdcInstances.update

integrations.authConfigs.create

integrations.authConfigs.get

integrations.authConfigs.list

integrations.authConfigs.update

integrations.certificates.get

integrations.executions.*

integrations.integrationVersions.create

integrations.integrationVersions.delete

integrations.integrationVersions.deploy

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrationVersions.update

integrations.integrations.create

integrations.integrations.generateOpenApiSpec

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.integrations.update

integrations.sfdcChannels.*

integrations.sfdcInstances.*

integrations.testCases.*

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Invoker

（roles/integrations.integrationInvoker）

可以调用集成的角色。

integrations.apigeeExecutions.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.*

integrations.executions.*

integrations.integrationVersions.get

integrations.integrationVersions.invoke

integrations.integrationVersions.list

integrations.integrations.get

integrations.integrations.invoke

integrations.integrations.list

integrations.testCases.get

integrations.testCases.invoke

integrations.testCases.list

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Viewer

（roles/integrations.integrationViewer）

可以列出和查看集成的开发者。

integrations.apigeeAuthConfigs.list

integrations.apigeeCertificates.list

integrations.apigeeIntegrationVers.get

integrations.apigeeIntegrationVers.list

integrations.apigeeIntegrations.list

integrations.apigeeSfdcChannels.list

integrations.apigeeSfdcInstances.list

integrations.authConfigs.get

integrations.authConfigs.list

integrations.certificates.get

integrations.certificates.list

integrations.executions.get

integrations.executions.list

integrations.integrationVersions.get

integrations.integrationVersions.list

integrations.integrations.generateOpenApiSpec

integrations.integrations.get

integrations.integrations.list

integrations.sfdcChannels.list

integrations.sfdcInstances.list

integrations.testCases.get

integrations.testCases.list

resourcemanager.projects.get

resourcemanager.projects.list

Security Integration Admin ^{Beta 版}

（roles/integrations.securityIntegrationAdmin）

拥有对所有安全集成的完整访问权限的用户。

integrations.securityAuthConfigs.*

integrations.securityExecutions.*

integrations.securityIntegTempVers.*

integrations.securityIntegrationVers.*

integrations.securityIntegrations.*

Application Integration SFDC Instance Admin

（roles/integrations.sfdcInstanceAdmin）

拥有对所有 SFDC 实例的完整访问权限 (CRUD) 的用户。

integrations.sfdcChannels.*

integrations.sfdcInstances.*

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration SFDC Instance Editor

（roles/integrations.sfdcInstanceEditor）

可以列出、创建和更新集成的开发者。

integrations.sfdcChannels.create

integrations.sfdcChannels.get

integrations.sfdcChannels.list

integrations.sfdcChannels.update

integrations.sfdcInstances.create

integrations.sfdcInstances.get

integrations.sfdcInstances.list

integrations.sfdcInstances.update

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration SFDC Instance Viewer

（roles/integrations.sfdcInstanceViewer）

可以列出和查看 SFDC 实例的开发者。

integrations.sfdcChannels.get

integrations.sfdcChannels.list

integrations.sfdcInstances.get

integrations.sfdcInstances.list

resourcemanager.projects.get

resourcemanager.projects.list

Application Integration Approver

（roles/integrations.suspensionResolver）

此角色可以解决已暂停的集成的相关问题。

integrations.apigeeSuspensions.*

integrations.suspensions.*

resourcemanager.projects.get

resourcemanager.projects.list

Issuerswitch Account Manager Admin ^{Beta 版}

（roles/issuerswitch.accountManagerAdmin）

此角色可以执行所有与账号管理员相关的操作

issuerswitch.accountManagerTransactions.*

issuerswitch.managedAccounts.*

issuerswitch.operations.get

issuerswitch.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Issuerswitch Account Manager Transactions Admin ^{Beta 版}

（roles/issuerswitch.accountManagerTransactionsAdmin）

此角色可以执行所有与账号管理员事务相关的操作

issuerswitch.accountManagerTransactions.*

issuerswitch.operations.get

issuerswitch.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Issuerswitch Account Manager Transactions Viewer ^{Beta 版}

（roles/issuerswitch.accountManagerTransactionsViewer）

此角色可以查看所有账号管理员事务

issuerswitch.accountManagerTransactions.list

issuerswitch.operations.get

issuerswitch.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Issuerswitch Admin ^{Beta 版}

（roles/issuerswitch.admin）

拥有对所有颁发机构切换角色的权限

issuerswitch.*

resourcemanager.projects.get

resourcemanager.projects.list

Issuerswitch Participants Admin ^{Beta 版}

（roles/issuerswitch.issuerParticipantsAdmin）

拥有对 Issuerswitch 参与者的完整访问权限

issuerswitch.issuerParticipants.*

resourcemanager.projects.get

resourcemanager.projects.list

Issuerswitch Resolutions Admin ^{Beta 版}

（roles/issuerswitch.resolutionsAdmin）

拥有对颁发机构切换解决方案的完整访问权限

issuerswitch.complaintTransactions.list

issuerswitch.complaints.*

issuerswitch.disputes.*

issuerswitch.operations.get

resourcemanager.projects.get

resourcemanager.projects.list

Issuerswitch Rules Admin ^{Beta 版}

（roles/issuerswitch.rulesAdmin）

拥有对颁发机构切换规则的完整访问权限

issuerswitch.ruleMetadata.list

issuerswitch.ruleMetadataValues.*

issuerswitch.rules.list

resourcemanager.projects.get

resourcemanager.projects.list

Issuerswitch Rules Viewer ^{Beta 版}

（roles/issuerswitch.rulesViewer）

此角色可以查看规则和相关元数据。

issuerswitch.ruleMetadata.list

issuerswitch.ruleMetadataValues.list

issuerswitch.rules.list

resourcemanager.projects.get

resourcemanager.projects.list

Issuerswitch Transactions Viewer ^{Beta 版}

（roles/issuerswitch.transactionsViewer）

此角色可以查看所有事务

issuerswitch.complaintTransactions.list

issuerswitch.financialTransactions.list

issuerswitch.mandateTransactions.list

issuerswitch.metadataTransactions.list

issuerswitch.operations.get

issuerswitch.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Metadata Publisher ^{Beta 版}

（roles/kubernetesmetadata.publisher）

Kubernetes 集群元数据的发布方

kubernetesmetadata.*

Cloud License Manager Admin

（roles/licensemanager.admin）

拥有对 Cloud License Manager 资源的完整访问权限。

licensemanager.*

resourcemanager.projects.get

resourcemanager.projects.list

Cloud License Manager Viewer

（roles/licensemanager.viewer）

拥有对 Cloud License Manager 资源的只读权限。

licensemanager.configurations.get

licensemanager.configurations.list

licensemanager.instances.*

licensemanager.locations.*

licensemanager.operations.get

licensemanager.operations.list

licensemanager.products.*

resourcemanager.projects.get

resourcemanager.projects.list

Maintenance API Viewer ^{Beta 版}

（roles/maintenance.viewer）

拥有对 Maintenance API 资源的只读权限。

maintenance.*

resourcemanager.projects.get

resourcemanager.projects.list

Managed Flink Admin ^{Beta 版}

（roles/managedflink.admin）

拥有对托管式 Flink 资源的完整访问权限。

managedflink.*

resourcemanager.projects.get

resourcemanager.projects.list

Managed Flink Developer ^{Beta 版}

（roles/managedflink.developer）

拥有对托管式 Flink 作业和会话的完整访问权限以及对部署的读取权限。

managedflink.deployments.get

managedflink.deployments.list

managedflink.jobs.*

managedflink.locations.*

managedflink.operations.get

managedflink.operations.list

managedflink.sessions.*

resourcemanager.projects.get

resourcemanager.projects.list

Managed Flink Viewer ^{Beta 版}

（roles/managedflink.viewer）

拥有对托管式 Flink 资源的只读权限。

managedflink.deployments.get

managedflink.deployments.list

managedflink.jobs.get

managedflink.jobs.list

managedflink.locations.*

managedflink.operations.get

managedflink.operations.list

managedflink.sessions.get

managedflink.sessions.list

resourcemanager.projects.get

resourcemanager.projects.list

Managed Kafka Admin

（roles/managedkafka.admin）

拥有对托管 Kafka 资源的完整访问权限。

cloudasset.assets.searchAllResources

managedkafka.*

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Managed Kafka Client

（roles/managedkafka.client）

提供连接集群中 Kafka 服务器的权限，例如提供 Kafka 数据平面访问权限。适用于一些用户，如提供方和使用方。

cloudasset.assets.searchAllResources

managedkafka.clusters.attachConnectCluster

managedkafka.clusters.connect

managedkafka.clusters.get

managedkafka.clusters.list

managedkafka.connectClusters.get

managedkafka.connectClusters.list

managedkafka.connectors.get

managedkafka.connectors.list

managedkafka.consumerGroups.*

managedkafka.locations.*

managedkafka.operations.get

managedkafka.operations.list

managedkafka.topics.*

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Managed Kafka Cluster Editor

（roles/managedkafka.clusterEditor）

提供对 Kafka 集群的读写权限。适用于一些用户，例如，需要预配 Kafka 集群，但不需要能够读取或者修改主题或使用方群组的 IT 部门。

cloudasset.assets.searchAllResources

managedkafka.clusters.create

managedkafka.clusters.delete

managedkafka.clusters.get

managedkafka.clusters.list

managedkafka.clusters.update

managedkafka.connectClusters.get

managedkafka.connectClusters.list

managedkafka.connectors.get

managedkafka.connectors.list

managedkafka.consumerGroups.get

managedkafka.consumerGroups.list

managedkafka.locations.*

managedkafka.operations.get

managedkafka.operations.list

managedkafka.topics.get

managedkafka.topics.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Managed Kafka Connect Cluster Editor ^{Beta 版}

（roles/managedkafka.connectClusterEditor）

提供对 Kafka Connect 集群的读写权限。适用于一些用户，例如，需要预配 Kafka Connect 集群，但不需要能够读取或修改连接器的 IT 部门。

managedkafka.connectClusters.*

managedkafka.connectors.get

managedkafka.connectors.list

Managed Kafka Connector Editor ^{Beta 版}

（roles/managedkafka.connectorEditor）

提供对连接器的读写权限。适用于配置和操作连接器的开发者等用户。

cloudasset.assets.searchAllResources

managedkafka.clusters.get

managedkafka.clusters.list

managedkafka.connectClusters.get

managedkafka.connectClusters.list

managedkafka.connectors.*

managedkafka.consumerGroups.get

managedkafka.consumerGroups.list

managedkafka.locations.*

managedkafka.operations.get

managedkafka.operations.list

managedkafka.topics.get

managedkafka.topics.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Managed Kafka Consumer Group Editor

（roles/managedkafka.consumerGroupEditor）

提供对使用方群组元数据的读写权限。适用于配置使用方群组的开发者等用户。

cloudasset.assets.searchAllResources

managedkafka.clusters.get

managedkafka.clusters.list

managedkafka.connectClusters.get

managedkafka.connectClusters.list

managedkafka.connectors.get

managedkafka.connectors.list

managedkafka.consumerGroups.*

managedkafka.locations.*

managedkafka.operations.get

managedkafka.operations.list

managedkafka.topics.get

managedkafka.topics.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Managed Kafka Topic Editor

（roles/managedkafka.topicEditor）

提供对主题元数据的读写权限。适用于配置主题的开发者等用户。

cloudasset.assets.searchAllResources

managedkafka.clusters.get

managedkafka.clusters.list

managedkafka.connectClusters.get

managedkafka.connectClusters.list

managedkafka.connectors.get

managedkafka.connectors.list

managedkafka.consumerGroups.get

managedkafka.consumerGroups.list

managedkafka.locations.*

managedkafka.operations.get

managedkafka.operations.list

managedkafka.topics.*

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Managed Kafka Viewer

（roles/managedkafka.viewer）

拥有对 Managed Kafka 资源的只读权限。

cloudasset.assets.searchAllResources

managedkafka.clusters.get

managedkafka.clusters.list

managedkafka.connectClusters.get

managedkafka.connectClusters.list

managedkafka.connectors.get

managedkafka.connectors.list

managedkafka.consumerGroups.get

managedkafka.consumerGroups.list

managedkafka.locations.*

managedkafka.operations.get

managedkafka.operations.list

managedkafka.topics.get

managedkafka.topics.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Mandiant Attack Surface Management Editor ^{Beta 版}

（roles/mandiant.attackSurfaceManagementEditor）

拥有对 Attack Surface Management 的写入权限

mandiant.genericAttackSurfaceManagements.create

mandiant.genericAttackSurfaceManagements.delete

mandiant.genericAttackSurfaceManagements.update

mandiant.genericPlatforms.create

mandiant.genericPlatforms.delete

mandiant.genericPlatforms.update

resourcemanager.projects.get

resourcemanager.projects.list

Mandiant Attack Surface Management Viewer ^{Beta 版}

（roles/mandiant.attackSurfaceManagementViewer）

拥有对 Attack Surface Management 的读取权限

mandiant.genericAttackSurfaceManagements.get

mandiant.genericPlatforms.get

resourcemanager.projects.get

resourcemanager.projects.list

Mandiant Digital Threat Monitoring Editor ^{Beta 版}

（roles/mandiant.digitalThreatMonitoringEditor）

拥有对 Digital Threat Monitoring 的写入权限

mandiant.genericDigitalThreatMonitorings.create

mandiant.genericDigitalThreatMonitorings.update

mandiant.genericPlatforms.create

mandiant.genericPlatforms.update

resourcemanager.projects.get

resourcemanager.projects.list

Mandiant Digital Threat Monitoring Viewer ^{Beta 版}

（roles/mandiant.digitalThreatMonitoringViewer）

拥有对 Digital Threat Monitoring 的读取权限

mandiant.genericDigitalThreatMonitorings.get

mandiant.genericPlatforms.get

resourcemanager.projects.get

resourcemanager.projects.list

Mandiant Expertise On Demand Editor ^{Beta 版}

（roles/mandiant.expertiseOnDemandEditor）

拥有对 Expertise On Demand 的写入权限

mandiant.genericExpertiseOnDemands.create

mandiant.genericExpertiseOnDemands.delete

mandiant.genericExpertiseOnDemands.update

mandiant.genericPlatforms.create

mandiant.genericPlatforms.delete

mandiant.genericPlatforms.update

resourcemanager.projects.get

resourcemanager.projects.list

Mandiant Expertise On Demand Viewer ^{Beta 版}

（roles/mandiant.expertiseOnDemandViewer）

拥有对 Expertise On Demand 的读取权限

mandiant.genericExpertiseOnDemands.get

mandiant.genericPlatforms.get

resourcemanager.projects.get

resourcemanager.projects.list

Mandiant Threat Intel Editor ^{Beta 版}

（roles/mandiant.threatIntelEditor）

拥有对 Threat Intel 的写入权限

mandiant.genericPlatforms.create

mandiant.genericPlatforms.delete

mandiant.genericPlatforms.update

mandiant.genericThreatIntels.create

mandiant.genericThreatIntels.delete

mandiant.genericThreatIntels.update

resourcemanager.projects.get

resourcemanager.projects.list

Mandiant Threat Intel Viewer ^{Beta 版}

（roles/mandiant.threatIntelViewer）

拥有对 Threat Intel 的读取权限

mandiant.genericPlatforms.get

mandiant.genericThreatIntels.get

resourcemanager.projects.get

resourcemanager.projects.list

Mandiant Validation Editor ^{Beta 版}

（roles/mandiant.validationEditor）

拥有对 Validation 的写入权限

mandiant.genericPlatforms.create

mandiant.genericPlatforms.delete

mandiant.genericPlatforms.update

mandiant.genericValidations.create

mandiant.genericValidations.delete

mandiant.genericValidations.update

resourcemanager.projects.get

resourcemanager.projects.list

Mandiant Validation Viewer ^{Beta 版}

（roles/mandiant.validationViewer）

拥有对 Validation 的读取权限

mandiant.genericPlatforms.get

mandiant.genericValidations.get

resourcemanager.projects.get

resourcemanager.projects.list

Mobility Solutions Overages Viewer ^{Beta 版}

（roles/mapsanalytics.mobilitySolutionsOverageViewer）

授予对移动解决方案超额用量指标数据的只读权限。

mapsanalytics.metricData.queryMobilitySolutionsOverageData

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.list

Maps Analytics Viewer ^{Beta 版}

（roles/mapsanalytics.viewer）

可授予对所有 Maps Analytics 资源的只读权限。

mapsanalytics.metricData.query

mapsanalytics.metricMetadata.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.list

Maps Platform Datasets Admin ^{Beta 版}

(roles/mapsplatformdatasets.admin)

授予对所有 Maps Platform Datasets API 资源的读写权限

mapsadmin.clientStyles.*

mapsplatformdatasets.*

resourcemanager.projects.get

resourcemanager.projects.list

Maps Platform Datasets Viewer ^{Beta 版}

(roles/mapsplatformdatasets.viewer)

授予对所有 Maps Platform Datasets API 资源的只读权限

mapsadmin.clientStyles.get

mapsadmin.clientStyles.list

mapsplatformdatasets.datasets.export

mapsplatformdatasets.datasets.get

mapsplatformdatasets.datasets.list

resourcemanager.projects.get

resourcemanager.projects.list

Marketplace Solutions Admin ^{Beta 版}

（roles/marketplacesolutions.admin）

拥有对 Marketplace 解决方案资源的完整访问权限。

marketplacesolutions.*

resourcemanager.projects.get

resourcemanager.projects.list

Marketplace Solutions Editor ^{Beta 版}

（roles/marketplacesolutions.editor）

拥有对 Marketplace 解决方案资源的修改权限。

marketplacesolutions.locations.*

marketplacesolutions.operations.get

marketplacesolutions.operations.list

marketplacesolutions.powerImages.*

marketplacesolutions.powerInstances.get

marketplacesolutions.powerInstances.list

marketplacesolutions.powerInstances.update

marketplacesolutions.powerNetworks.*

marketplacesolutions.powerSshKeys.*

marketplacesolutions.powerVolumes.*

resourcemanager.projects.get

resourcemanager.projects.list

Marketplace Solutions Viewer ^{Beta 版}

（roles/marketplacesolutions.viewer）

拥有对 Marketplace 解决方案资源的只读权限。

marketplacesolutions.locations.*

marketplacesolutions.operations.get

marketplacesolutions.operations.list

marketplacesolutions.powerImages.*

marketplacesolutions.powerInstances.get

marketplacesolutions.powerInstances.list

marketplacesolutions.powerNetworks.*

marketplacesolutions.powerSshKeys.*

marketplacesolutions.powerVolumes.*

resourcemanager.projects.get

resourcemanager.projects.list

Memorystore Admin

（roles/memorystore.admin）

拥有对 Memorystore 资源的完整访问权限。

memorystore.*

resourcemanager.projects.get

resourcemanager.projects.list

Memorystore DB Connector User

（roles/memorystore.dbConnectionUser）

连接到 Memorystore Server 数据库的权限。

memorystore.instances.connect

Memorystore Viewer

（roles/memorystore.viewer）

拥有对 Memorystore 资源的只读权限。

memorystore.backupCollections.*

memorystore.backups.get

memorystore.backups.list

memorystore.instances.get

memorystore.instances.list

memorystore.locations.*

memorystore.operations.get

memorystore.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Model Armor Admin

（roles/modelarmor.admin）

授予对所有 Model Armor 资源的完整访问权限。适用于管理员和所有者。

modelarmor.locations.*

modelarmor.templates.*

resourcemanager.projects.get

resourcemanager.projects.list

Model Armor Floor Setting Admin

（roles/modelarmor.floorSettingsAdmin）

授予对所有 Model Armor Floor Setting 资源的完整访问权限。适用于管理员和所有者。

modelarmor.floorSettings.*

modelarmor.locations.*

resourcemanager.folders.get

resourcemanager.folders.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

Model Armor Floor Setting Viewer

（roles/modelarmor.floorSettingsViewer）

授予对所有 Model Armor Floor Setting 资源的读取权限。适用于观看者。

modelarmor.floorSettings.get

modelarmor.locations.*

resourcemanager.folders.get

resourcemanager.folders.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

Model Armor User

（roles/modelarmor.user）

授予清理模板 API 的访问权限。适用于计划使用模板的用户和应用。

modelarmor.locations.*

modelarmor.templates.useToSanitizeModelResponse

modelarmor.templates.useToSanitizeUserPrompt

resourcemanager.projects.get

resourcemanager.projects.list

Model Armor Viewer

（roles/modelarmor.viewer）

授予对所有 Model Armor 资源的读取权限。适用于观看者。

modelarmor.locations.*

modelarmor.templates.get

modelarmor.templates.list

resourcemanager.projects.get

resourcemanager.projects.list

Google Home Developer Console Admin

(roles/nestconsole.homeDeveloperAdmin)

拥有对 Google Home 开发者控制台资源的管理员权限

nestconsole.*

resourcemanager.projects.get

resourcemanager.projects.list

Google Home Developer Console Editor

(roles/nestconsole.homeDeveloperEditor)

拥有对 Google Home 开发者控制台资源的读写权限

nestconsole.smarthomePreviews.update

nestconsole.smarthomeProjects.get

nestconsole.smarthomeProjects.update

nestconsole.smarthomeVersions.*

resourcemanager.projects.get

resourcemanager.projects.list

Google Home Developer Console Reader

(roles/nestconsole.homeDeveloperViewer)

拥有对 Google Home 开发者控制台资源的只读权限

nestconsole.smarthomeProjects.get

nestconsole.smarthomeVersions.get

resourcemanager.projects.get

resourcemanager.projects.list

Google Cloud NetApp Volumes Admin ^{Beta 版}

（roles/netapp.admin）

拥有对 Google Cloud NetApp Volumes 资源的完整访问权限。

netapp.*

resourcemanager.projects.get

resourcemanager.projects.list

Google Cloud NetApp Volumes Viewer ^{Beta 版}

（roles/netapp.viewer）

拥有对 Google Cloud NetApp Volumes 资源的只读权限。

netapp.activeDirectories.get

netapp.activeDirectories.list

netapp.backupPolicies.get

netapp.backupPolicies.list

netapp.backupVaults.get

netapp.backupVaults.list

netapp.backups.get

netapp.backups.list

netapp.kmsConfigs.get

netapp.kmsConfigs.list

netapp.locations.*

netapp.operations.get

netapp.operations.list

netapp.quotaRules.get

netapp.quotaRules.list

netapp.replications.get

netapp.replications.list

netapp.snapshots.get

netapp.snapshots.list

netapp.storagePools.get

netapp.storagePools.list

netapp.volumes.get

netapp.volumes.list

resourcemanager.projects.get

resourcemanager.projects.list

OAuth Config Editor ^{Beta 版}

（roles/oauthconfig.editor）

拥有对 OAuth 配置资源的读写权限

clientauthconfig.*

firebase.clients.create

firebase.clients.get

firebase.clients.list

firebase.clients.update

firebaseappcheck.resourcePolicies.*

oauthconfig.*

OAuth Config Viewer ^{Beta 版}

（roles/oauthconfig.viewer）

拥有对 OAuth 配置资源的只读权限

clientauthconfig.brands.get

clientauthconfig.brands.list

clientauthconfig.clients.get

clientauthconfig.clients.list

firebase.clients.get

firebase.clients.list

firebaseappcheck.resourcePolicies.get

oauthconfig.clientpolicy.get

oauthconfig.testusers.get

oauthconfig.verification.get

Oracle Database@Google Cloud admin

（roles/oracledatabase.admin）

授予对 Oracle 数据库所有资源的完整管理权限。

oracledatabase.*

resourcemanager.projects.get

resourcemanager.projects.list

Oracle Database@Google Cloud Autonomous Database Admin

（roles/oracledatabase.autonomousDatabaseAdmin）

授予对自治数据库所有资源的完整管理权限。

oracledatabase.autonomousDatabaseBackups.*

oracledatabase.autonomousDatabaseCharacterSets.list

oracledatabase.autonomousDatabases.*

oracledatabase.autonomousDbVersions.list

oracledatabase.entitlements.list

oracledatabase.locations.*

oracledatabase.operations.*

resourcemanager.projects.get

resourcemanager.projects.list

Oracle Database@Google Cloud Autonomous Database Viewer

（roles/oracledatabase.autonomousDatabaseViewer）

授予查看自治数据库所有资源的读取权限。

oracledatabase.autonomousDatabaseBackups.get

oracledatabase.autonomousDatabaseBackups.list

oracledatabase.autonomousDatabaseCharacterSets.list

oracledatabase.autonomousDatabases.get

oracledatabase.autonomousDatabases.list

oracledatabase.autonomousDbVersions.list

oracledatabase.entitlements.list

oracledatabase.locations.*

oracledatabase.operations.get

oracledatabase.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Oracle Database@Google Cloud Exadata Infrastructure Admin

（roles/oracledatabase.cloudExadataInfrastructureAdmin）

授予管理所有 Exadata Infrastructure 资源的完整权限。

oracledatabase.cloudExadataInfrastructures.create

oracledatabase.cloudExadataInfrastructures.delete

oracledatabase.cloudExadataInfrastructures.get

oracledatabase.cloudExadataInfrastructures.list

oracledatabase.cloudExadataInfrastructures.update

oracledatabase.dbServers.list

oracledatabase.dbSystemShapes.list

oracledatabase.entitlements.list

oracledatabase.giVersions.list

oracledatabase.locations.*

oracledatabase.operations.*

resourcemanager.projects.get

resourcemanager.projects.list

Oracle Database@Google Cloud Exadata Infrastructure Viewer

（roles/oracledatabase.cloudExadataInfrastructureViewer）

授予查看所有 Exadata Infrastructure 资源的读取权限。

oracledatabase.cloudExadataInfrastructures.get

oracledatabase.cloudExadataInfrastructures.list

oracledatabase.dbServers.list

oracledatabase.dbSystemShapes.list

oracledatabase.entitlements.list

oracledatabase.giVersions.list

oracledatabase.locations.*

oracledatabase.operations.get

oracledatabase.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Oracle Database@Google Cloud VM Cluster Admin

（roles/oracledatabase.cloudVmClusterAdmin）

授予管理所有虚拟机集群资源的完整权限。

oracledatabase.cloudExadataInfrastructures.list

oracledatabase.cloudExadataInfrastructures.use

oracledatabase.cloudVmClusters.*

oracledatabase.dbNodes.list

oracledatabase.dbServers.list

oracledatabase.entitlements.list

oracledatabase.giVersions.list

oracledatabase.locations.*

oracledatabase.operations.*

resourcemanager.projects.get

resourcemanager.projects.list

Oracle Database@Google Cloud VM Cluster Viewer

（roles/oracledatabase.cloudVmClusterViewer）

授予查看所有虚拟机集群资源的读取权限。

oracledatabase.cloudVmClusters.get

oracledatabase.cloudVmClusters.list

oracledatabase.dbNodes.list

oracledatabase.entitlements.list

oracledatabase.locations.*

oracledatabase.operations.get

oracledatabase.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Oracle Database@Google Cloud viewer

（roles/oracledatabase.viewer）

授予对所有 Oracle 数据库资源的查看权限。

oracledatabase.autonomousDatabaseBackups.get

oracledatabase.autonomousDatabaseBackups.list

oracledatabase.autonomousDatabaseCharacterSets.list

oracledatabase.autonomousDatabases.get

oracledatabase.autonomousDatabases.list

oracledatabase.autonomousDbVersions.list

oracledatabase.cloudExadataInfrastructures.get

oracledatabase.cloudExadataInfrastructures.list

oracledatabase.cloudVmClusters.get

oracledatabase.cloudVmClusters.list

oracledatabase.dbNodes.list

oracledatabase.dbServers.list

oracledatabase.dbSystemShapes.list

oracledatabase.entitlements.list

oracledatabase.giVersions.list

oracledatabase.locations.*

oracledatabase.operations.get

oracledatabase.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Parallelstore Admin

（roles/parallelstore.admin）

拥有对 Parallelstore 资源的完整访问权限。

parallelstore.*

resourcemanager.projects.get

resourcemanager.projects.list

Parallelstore Viewer

（roles/parallelstore.viewer）

拥有对 Parallelstore 资源的只读权限。

parallelstore.instances.get

parallelstore.instances.list

parallelstore.locations.*

parallelstore.operations.get

parallelstore.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Admin ^{Beta 版}

（roles/parametermanager.admin）

授予对于所有 Parameter Manager 资源的完整访问权限。适合需要执行所有管理任务的项目管理员和所有者。

parametermanager.*

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Accessor ^{Beta 版}

（roles/parametermanager.parameterAccessor）

授予对于 ParameterManager ParameterVersion 资源的读取权限。适合仅需要在 ParameterVersion 上执行读取操作的用户和应用。

parametermanager.locations.*

parametermanager.parameterVersions.render

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Version Adder ^{Beta 版}

（roles/parametermanager.parameterVersionAdder）

授予对于 Parameter Manager ParameterVersion 资源的创建权限。适合仅需要在 ParameterVersions 上执行创建操作的用户和应用。

parametermanager.locations.*

parametermanager.parameterVersions.create

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Version Manager ^{Beta 版}

（roles/parametermanager.parameterVersionManager）

授予对于所有 Parameter Manager ParameterVersion 资源的读写权限。适合仅需要查看 Parameters 以及在 ParameterVersions 上执行创建/读取/更新/删除/列出操作的用户和应用。

parametermanager.locations.*

parametermanager.parameterVersions.create

parametermanager.parameterVersions.delete

parametermanager.parameterVersions.get

parametermanager.parameterVersions.list

parametermanager.parameterVersions.update

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Parameter Manager Parameter Viewer ^{Beta 版}

（roles/parametermanager.parameterViewer）

授予对于 Parameter Manager Parameter 和 ParameterVersion 资源的读取权限。适合仅需要在 Parameters 和 ParameterVersions 上执行读取/列出操作的用户和应用。

parametermanager.locations.*

parametermanager.parameterVersions.get

parametermanager.parameterVersions.list

parametermanager.parameters.get

parametermanager.parameters.list

resourcemanager.projects.get

resourcemanager.projects.list

Payments Reseller Admin ^{Beta 版}

（roles/paymentsresellersubscription.partnerAdmin）

拥有对所有 Payments Reseller 资源（包括订阅、产品和促销活动）的完全访问权限

paymentsresellersubscription.*

resourcemanager.projects.get

resourcemanager.projects.list

Payments Reseller Viewer ^{Beta 版}

（roles/paymentsresellersubscription.partnerViewer）

拥有对所有 Payments Reseller 资源（包括订阅、产品和促销活动）的读取权限

paymentsresellersubscription.products.list

paymentsresellersubscription.promotions.list

paymentsresellersubscription.subscriptions.get

resourcemanager.projects.get

resourcemanager.projects.list

Payments Reseller Products Viewer ^{Beta 版}

（roles/paymentsresellersubscription.productViewer）

拥有对 Payments Reseller 产品资源的读取权限

paymentsresellersubscription.products.list

resourcemanager.projects.get

resourcemanager.projects.list

Payments Reseller Promotions Viewer ^{Beta 版}

（roles/paymentsresellersubscription.promotionViewer）

拥有对 Payments Reseller 促销活动资源的读取权限

paymentsresellersubscription.promotions.list

resourcemanager.projects.get

resourcemanager.projects.list

Payments Reseller Subscriptions Editor ^{Beta 版}

（roles/paymentsresellersubscription.subscriptionEditor）

拥有对 Payments Reseller 订阅资源的写入权限

paymentsresellersubscription.subscriptions.*

resourcemanager.projects.get

resourcemanager.projects.list

Payments Reseller Subscriptions Viewer ^{Beta 版}

（roles/paymentsresellersubscription.subscriptionViewer）

拥有对 Payments Reseller 订阅资源的读取权限

paymentsresellersubscription.subscriptions.get

resourcemanager.projects.get

resourcemanager.projects.list

Payments Partner UserSessions Editor ^{Beta 版}

（roles/paymentsresellersubscription.userSessionEditor）

付款合作伙伴的 UserSessions 的编辑者

paymentsresellersubscription.userSessions.generate

Activity Analysis Viewer ^{Beta 版}

（roles/policyanalyzer.activityAnalysisViewer）

可以读取所有活动分析数据的 Viewer 用户。

policyanalyzer.*

Policy Remediator Admin ^{Beta 版}

（roles/policyremediatormanager.policyRemediatorAdmin）

授予启用和停用组织 Policy Remediator 的权限

policyremediatormanager.*

Policy Remediator Reader ^{Beta 版}

（roles/policyremediatormanager.policyRemediatorReader）

授予读取/查看组织 Policy Remediator 状态的权限

policyremediatormanager.locations.*

policyremediatormanager.operations.get

policyremediatormanager.operations.list

policyremediatormanager.remediatorServices.get

Simulator Admin ^{Beta 版}

（roles/policysimulator.admin）

可以运行和访问重放的管理员用户。

policysimulator.accessPolicySimulationResults.list

policysimulator.accessPolicySimulations.*

policysimulator.replayResults.list

policysimulator.replays.*

OrgPolicy Simulator Admin ^{Beta 版}

（roles/policysimulator.orgPolicyAdmin）

可以运行和访问模拟的组织政策管理员。

cloudasset.assets.analyzeOrgPolicy

cloudasset.assets.exportResource

cloudasset.assets.listResource

cloudasset.assets.searchAllResources

orgpolicy.customConstraints.get

orgpolicy.customConstraints.list

orgpolicy.policies.list

orgpolicy.policy.get

policysimulator.orgPolicyViolations.list

policysimulator.orgPolicyViolationsPreviews.*

resourcemanager.organizations.get

External Account Key Creator ^{Beta 版}

(roles/publicca.externalAccountKeyCreator)

此角色可以创建新的 externalAccountKey 资源。

publicca.externalAccountKeys.create

resourcemanager.projects.get

resourcemanager.projects.list

Subscription Linking Admin

（roles/readerrevenuesubscriptionlinking.admin）

拥有对出版物读者资源的完整访问权限

readerrevenuesubscriptionlinking.*

resourcemanager.projects.get

resourcemanager.projects.list

Subscription Linking Entitlements Viewer

（roles/readerrevenuesubscriptionlinking.entitlementsViewer）

此角色可以查看所有出版物读者权益

readerrevenuesubscriptionlinking.readerEntitlements.get

Subscription Linking Viewer

（roles/readerrevenuesubscriptionlinking.viewer）

此角色可以查看所有出版物读者资源

readerrevenuesubscriptionlinking.readerEntitlements.get

readerrevenuesubscriptionlinking.readers.get

resourcemanager.projects.get

resourcemanager.projects.list

Recommendations Exporter

（roles/recommender.exporter）

建议的导出方

recommender.resources.export

Remote Build Execution Action Cache Writer ^测试版

（roles/remotebuildexecution.actionCacheWriter）

Remote Build Execution 操作缓存写入者

remotebuildexecution.actions.set

remotebuildexecution.blobs.create

Remote Build Execution Artifact Admin ^测试版

（roles/remotebuildexecution.artifactAdmin）

Remote Build Execution 工件管理员

remotebuildexecution.actions.create

remotebuildexecution.actions.delete

remotebuildexecution.actions.get

remotebuildexecution.blobs.*

remotebuildexecution.logstreams.*

Remote Build Execution Artifact Creator ^测试版

（roles/remotebuildexecution.artifactCreator）

Remote Build Execution 工件创建者

remotebuildexecution.actions.create

remotebuildexecution.actions.get

remotebuildexecution.blobs.*

remotebuildexecution.logstreams.*

Remote Build Execution Artifact Viewer ^测试版

（roles/remotebuildexecution.artifactViewer）

Remote Build Execution 工件查看者

remotebuildexecution.actions.get

remotebuildexecution.blobs.get

remotebuildexecution.logstreams.get

Remote Build Execution Configuration Admin ^测试版

（roles/remotebuildexecution.configurationAdmin）

Remote Build Execution 配置管理员

remotebuildexecution.instances.*

remotebuildexecution.workerpools.*

Remote Build Execution Configuration Viewer ^测试版

（roles/remotebuildexecution.configurationViewer）

Remote Build Execution 配置查看者

remotebuildexecution.instances.get

remotebuildexecution.instances.list

remotebuildexecution.workerpools.get

remotebuildexecution.workerpools.list

Remote Build Execution Logstream Writer ^测试版

（roles/remotebuildexecution.logstreamWriter）

Remote Build Execution 日志流写入者

remotebuildexecution.logstreams.create

remotebuildexecution.logstreams.update

Remote Build Execution Reservation Admin ^{Beta 版}

（roles/remotebuildexecution.reservationAdmin）

Remote Build Execution Reservation Admin

remotebuildexecution.actions.create

remotebuildexecution.actions.delete

remotebuildexecution.actions.get

Remote Build Execution Worker ^测试版

（roles/remotebuildexecution.worker）

Remote Build Execution 工作处理者

remotebuildexecution.actions.update

remotebuildexecution.blobs.*

remotebuildexecution.botsessions.*

remotebuildexecution.logstreams.create

remotebuildexecution.logstreams.update

Retail Admin

（roles/retail.admin）

拥有对 Retail API 资源的完整访问权限。

automlrecommendations.apiKeys.create

automlrecommendations.apiKeys.delete

automlrecommendations.catalogItems.*

automlrecommendations.catalogs.*

automlrecommendations.eventStores.getStats

automlrecommendations.events.create

automlrecommendations.events.list

automlrecommendations.events.purge

automlrecommendations.events.rejoin

automlrecommendations.placements.*

automlrecommendations.recommendations.*

retail.alertConfigs.*

retail.attributesConfigs.*

retail.branches.*

retail.catalogs.*

retail.controls.*

retail.experiments.*

retail.models.*

retail.operations.*

retail.placements.*

retail.products.*

retail.retailProjects.*

retail.servingConfigs.*

retail.userEvents.*

Retail Editor

（roles/retail.editor）

拥有对 Retail API 资源的完整访问权限，但不具备完全清除、重新加入和 setSponsorship 权限。

automlrecommendations.apiKeys.create

automlrecommendations.apiKeys.delete

automlrecommendations.catalogItems.*

automlrecommendations.catalogs.*

automlrecommendations.eventStores.getStats

automlrecommendations.events.create

automlrecommendations.events.list

automlrecommendations.placements.*

automlrecommendations.recommendations.*

retail.alertConfigs.*

retail.attributesConfigs.addCatalogAttribute

retail.attributesConfigs.exportCatalogAttributes

retail.attributesConfigs.get

retail.attributesConfigs.importCatalogAttributes

retail.attributesConfigs.replaceCatalogAttribute

retail.attributesConfigs.update

retail.branches.*

retail.catalogs.*

retail.controls.*

retail.experiments.*

retail.models.*

retail.operations.*

retail.placements.*

retail.products.create

retail.products.delete

retail.products.export

retail.products.get

retail.products.import

retail.products.list

retail.products.update

retail.retailProjects.get

retail.servingConfigs.*

retail.userEvents.create

retail.userEvents.import

Retail Merchant Approver ^{Beta 版}

（roles/retail.merchantApprover）

授予对商家控制台中 MerchantControls 的访问权限和批准权限。

retail.attributesConfigs.get

retail.merchantControls.*

retail.servingConfigs.list

retail.servingConfigs.search

Retail Merchant Creator ^{Beta 版}

（roles/retail.merchantCreator）

授予对商家控制台中 MerchantControls 的所有权。

retail.attributesConfigs.get

retail.merchantControls.creatorCreate

retail.merchantControls.creatorDelete

retail.merchantControls.creatorGet

retail.merchantControls.creatorList

retail.merchantControls.creatorSubmit

retail.merchantControls.creatorUpdate

retail.servingConfigs.search

Retail Viewer

（roles/retail.viewer）

授予读取 Retail 中所有资源的权限。

automlrecommendations.catalogItems.get

automlrecommendations.catalogItems.list

automlrecommendations.catalogs.getStats

automlrecommendations.catalogs.list

automlrecommendations.eventStores.getStats

automlrecommendations.events.list

automlrecommendations.placements.getStats

automlrecommendations.placements.list

automlrecommendations.recommendations.list

retail.alertConfigs.get

retail.attributesConfigs.exportCatalogAttributes

retail.attributesConfigs.get

retail.branches.*

retail.catalogs.completeQuery

retail.catalogs.exportAnalyticsMetrics

retail.catalogs.get

retail.catalogs.list

retail.controls.export

retail.controls.get

retail.controls.list

retail.experiments.get

retail.experiments.list

retail.experiments.loadExperimentLookerDashboard

retail.experiments.queryTrafficMetrics

retail.models.get

retail.models.list

retail.operations.*

retail.placements.*

retail.products.export

retail.products.get

retail.products.list

retail.retailProjects.get

retail.servingConfigs.get

retail.servingConfigs.list

retail.servingConfigs.predict

retail.servingConfigs.search

RISC Configuration Admin ^{Beta 版}

(roles/riscconfigs.admin)

拥有对 RISC 配置资源的读写权限。

clientauthconfig.clients.list

riscconfigurationservice.*

RISC Configuration Viewer ^{Beta 版}

(roles/riscconfigs.viewer)

拥有对 RISC 配置资源的只读权限。

clientauthconfig.clients.list

riscconfigurationservice.riscconfigs.get

Route Optimization Editor

（roles/routeoptimization.editor）

此角色可以通过 BatchOptimizeTours 创建长时间运行的操作。

resourcemanager.projects.get

resourcemanager.projects.list

routeoptimization.*

Route Optimization Viewer

（roles/routeoptimization.viewer）

此角色可以查看任何长时间运行的操作。

resourcemanager.projects.get

resourcemanager.projects.list

routeoptimization.operations.get

Serverless Integrations Developer ^{Beta 版}

（roles/runapps.developer）

拥有创建和更改无服务器集成及其配置的权限。

resourcemanager.projects.get

resourcemanager.projects.list

runapps.applications.*

runapps.deployments.get

runapps.deployments.list

runapps.locations.*

runapps.operations.*

Serverless Integrations Operator ^{Beta 版}

（roles/runapps.operator）

拥有部署无服务器集成的权限。

resourcemanager.projects.get

resourcemanager.projects.list

runapps.applications.get

runapps.applications.getStatus

runapps.applications.list

runapps.deployments.*

runapps.locations.*

runapps.operations.*

Serverless Integrations Viewer ^{Beta 版}

(roles/runapps.viewer)

拥有对无服务器集成资源的只读权限。

resourcemanager.projects.get

resourcemanager.projects.list

runapps.applications.get

runapps.applications.getStatus

runapps.applications.list

runapps.deployments.get

runapps.deployments.list

runapps.locations.*

runapps.operations.get

runapps.operations.list

Cloud RuntimeConfig Admin

（roles/runtimeconfig.admin）

拥有 RuntimeConfig 资源的完整访问权限。

runtimeconfig.*

SaaS Service Management Admin ^{Beta 版}

（roles/saasservicemgmt.admin）

拥有对 SaaS 服务管理资源的完整访问权限。

resourcemanager.projects.get

resourcemanager.projects.list

saasservicemgmt.*

SaaS Service Management Viewer ^{Beta 版}

（roles/saasservicemgmt.viewer）

拥有对 SaaS 服务管理资源的只读权限。

resourcemanager.projects.get

resourcemanager.projects.list

saasservicemgmt.locations.*

saasservicemgmt.operations.get

saasservicemgmt.operations.list

saasservicemgmt.releases.get

saasservicemgmt.releases.list

saasservicemgmt.rolloutKinds.get

saasservicemgmt.rolloutKinds.list

saasservicemgmt.rollouts.get

saasservicemgmt.rollouts.list

saasservicemgmt.saas.get

saasservicemgmt.saas.list

saasservicemgmt.unitKinds.get

saasservicemgmt.unitKinds.list

saasservicemgmt.unitOperations.get

saasservicemgmt.unitOperations.list

saasservicemgmt.units.get

saasservicemgmt.units.list

SLZ BQDW Blueprint Organization Level Remediator ^{Beta 版}

（roles/securedlandingzone.bqdwOrgRemediator）

拥有在组织级修改（修复）SLZ BQDW Blueprint 中的资源的权限。

accesscontextmanager.servicePerimeters.get

accesscontextmanager.servicePerimeters.list

accesscontextmanager.servicePerimeters.update

SLZ BQDW Blueprint Project Level Remediator ^{Beta 版}

（roles/securedlandingzone.bqdwProjectRemediator）

拥有在项目级修改（修复）SLZ BQDW Blueprint 中的资源的权限。

bigquery.datasets.get

bigquery.datasets.getIamPolicy

bigquery.datasets.setIamPolicy

bigquery.datasets.update

cloudkms.cryptoKeys.get

cloudkms.cryptoKeys.getIamPolicy

cloudkms.cryptoKeys.list

cloudkms.cryptoKeys.setIamPolicy

cloudkms.cryptoKeys.update

cloudkms.keyRings.getIamPolicy

cloudkms.keyRings.setIamPolicy

pubsub.topics.get

pubsub.topics.getIamPolicy

pubsub.topics.list

pubsub.topics.setIamPolicy

pubsub.topics.update

resourcemanager.projects.update

serviceusage.services.use

storage.buckets.get

storage.buckets.getIamPolicy

storage.buckets.list

storage.buckets.setIamPolicy

storage.buckets.update

Overwatch Activator ^{Beta 版}

（roles/securedlandingzone.overwatchActivator）

此角色可以启动或暂停 Overwatch

resourcemanager.projects.get

resourcemanager.projects.list

securedlandingzone.overwatches.activate

securedlandingzone.overwatches.suspend

Overwatch Admin ^{Beta 版}

（roles/securedlandingzone.overwatchAdmin）

拥有对 Overwatch 的完全访问权限

resourcemanager.projects.get

resourcemanager.projects.list

securedlandingzone.*

Overwatch Viewer ^{Beta 版}

（roles/securedlandingzone.overwatchViewer）

此角色可以查看 Overwatch 的所有属性

resourcemanager.projects.get

resourcemanager.projects.list

securedlandingzone.operations.get

securedlandingzone.overwatches.get

securedlandingzone.overwatches.list

Security Posture Admin

（roles/securityposture.admin）

拥有对 Security Posture 服务 API 的完整访问权限。

orgpolicy.*

resourcemanager.organizations.get

securitycenter.securityhealthanalyticssettings.*

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.*

securitycentermanagement.securityHealthAnalyticsCustomModules.create

securitycentermanagement.securityHealthAnalyticsCustomModules.delete

securitycentermanagement.securityHealthAnalyticsCustomModules.get

securitycentermanagement.securityHealthAnalyticsCustomModules.list

securitycentermanagement.securityHealthAnalyticsCustomModules.update

securityposture.*

Security Posture Deployer

（roles/securityposture.postureDeployer）

拥有对 Posture Deployment 资源的更改和读取权限。

orgpolicy.*

resourcemanager.organizations.get

securitycenter.securityhealthanalyticssettings.*

securitycentermanagement.securityHealthAnalyticsCustomModules.create

securitycentermanagement.securityHealthAnalyticsCustomModules.delete

securitycentermanagement.securityHealthAnalyticsCustomModules.update

securityposture.operations.get

securityposture.postureDeployments.*

Security Posture Deployment Viewer

（roles/securityposture.postureDeploymentsViewer）

拥有对 Posture Deployment 资源的只读权限。

resourcemanager.organizations.get

securityposture.operations.get

securityposture.postureDeployments.get

securityposture.postureDeployments.list

Security Posture Resource Editor

（roles/securityposture.postureEditor）

拥有对 Posture 资源的更改和读取权限。

securityposture.operations.get

securityposture.postures.*

Security Posture Resource Viewer

（roles/securityposture.postureViewer）

拥有对 Posture 资源的只读权限。

resourcemanager.organizations.get

securityposture.operations.get

securityposture.postures.get

securityposture.postures.list

Security Posture Shift-Left Validator

（roles/securityposture.reportCreator）

拥有创建 IaC 验证报告等报告的权限。

securityposture.operations.get

securityposture.reports.*

Security Posture Viewer

（roles/securityposture.viewer）

拥有对所有 SecurityPosture 服务资源的只读权限。

resourcemanager.organizations.get

securityposture.operations.get

securityposture.postureDeployments.get

securityposture.postureDeployments.list

securityposture.postureTemplates.*

securityposture.postures.get

securityposture.postures.list

Personalized Service Health Viewer

（roles/servicehealth.viewer）

拥有对 Personalized Service Health 资源的只读权限。

resourcemanager.projects.get

resourcemanager.projects.list

servicehealth.*

Security Insights Viewer ^{Beta 版}

（roles/servicesecurityinsights.securityInsightsViewer）

拥有对 Security Insights 资源的只读权限

servicesecurityinsights.*

Speaker ID Admin

(roles/speakerid.admin)

授予对所有 Speaker ID 资源（包括项目设置）的完整访问权限。

speakerid.*

Speaker ID Editor

(roles/speakerid.editor)

授予读写所有 Speaker ID 资源的权限。

speakerid.phrases.*

speakerid.speakers.*

Speaker ID Verifier

(roles/speakerid.verifier)

授予对所有 Speaker ID 资源的读取权限，并允许验证。

speakerid.phrases.get

speakerid.phrases.list

speakerid.speakers.get

speakerid.speakers.list

speakerid.speakers.verify

Speaker ID Viewer

(roles/speakerid.viewer)

授予对所有 Speaker ID 资源的读取权限。

speakerid.phrases.get

speakerid.phrases.list

speakerid.speakers.get

speakerid.speakers.list

Cloud Speech Administrator

（roles/speech.admin）

授予对 Speech-to-text 中的所有资源的完全访问权限

speech.*

Cloud Speech Client

（roles/speech.client）

授予对识别 API 的访问权限。

speech.adaptations.execute

speech.customClasses.get

speech.customClasses.list

speech.locations.*

speech.operations.get

speech.operations.list

speech.operations.wait

speech.phraseSets.get

speech.phraseSets.list

speech.recognizers.get

speech.recognizers.list

speech.recognizers.recognize

Cloud Speech Editor

（roles/speech.editor）

授予修改 Speech-to-text 中的资源的权限

speech.adaptations.execute

speech.customClasses.*

speech.locations.*

speech.operations.*

speech.phraseSets.*

speech.recognizers.*

Storage Insights Admin

(roles/storageinsights.admin)

拥有对存储空间分析资源的完整访问权限。

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.*

Storage Insights Analyst

（roles/storageinsights.analyst）

拥有对存储空间分析的数据访问权限。

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.datasetConfigs.get

storageinsights.datasetConfigs.linkDataset

storageinsights.datasetConfigs.list

storageinsights.datasetConfigs.unlinkDataset

storageinsights.locations.*

storageinsights.operations.get

storageinsights.operations.list

storageinsights.reportConfigs.get

storageinsights.reportConfigs.list

storageinsights.reportDetails.*

Storage Insights Viewer

(roles/storageinsights.viewer)

拥有对存储空间分析资源的只读权限。

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.datasetConfigs.get

storageinsights.datasetConfigs.list

storageinsights.locations.*

storageinsights.operations.get

storageinsights.operations.list

storageinsights.reportConfigs.get

storageinsights.reportConfigs.list

storageinsights.reportDetails.*

Subscribe with Google Developer ^测试版

（roles/subscribewithgoogledeveloper.developer）

可以访问通过 Google 订阅的开发者工具。

resourcemanager.projects.get

resourcemanager.projects.list

subscribewithgoogledeveloper.tools.get

Telco Automation Admin ^{Beta 版}

（roles/telcoautomation.admin）

拥有对 Telco Automation 资源的完整访问权限。

logging.buckets.get

logging.buckets.list

logging.exclusions.get

logging.exclusions.list

logging.links.get

logging.links.list

logging.locations.*

logging.logEntries.list

logging.logMetrics.get

logging.logMetrics.list

logging.logScopes.get

logging.logScopes.list

logging.logServiceIndexes.list

logging.logServices.list

logging.logs.list

logging.operations.get

logging.operations.list

logging.queries.getShared

logging.queries.listShared

logging.queries.usePrivate

logging.sinks.get

logging.sinks.list

logging.usage.get

logging.views.get

logging.views.list

monitoring.timeSeries.list

observability.scopes.get

resourcemanager.projects.get

serviceusage.quotas.*

serviceusage.services.*

source.repos.get

source.repos.list

telcoautomation.*

Telco Automation Blueprint Designer ^{Beta 版}

（roles/telcoautomation.blueprintDesigner）

能够管理蓝图

telcoautomation.blueprints.create

telcoautomation.blueprints.delete

telcoautomation.blueprints.get

telcoautomation.blueprints.list

telcoautomation.blueprints.propose

telcoautomation.blueprints.update

telcoautomation.deployments.computeStatus

telcoautomation.deployments.get

telcoautomation.deployments.list

telcoautomation.hydratedDeployments.get

telcoautomation.hydratedDeployments.list

telcoautomation.orchestrationClusters.get

telcoautomation.orchestrationClusters.list

telcoautomation.publicBlueprints.*

Telco Automation Deployment Admin ^{Beta 版}

（roles/telcoautomation.deploymentAdmin）

能够管理部署

telcoautomation.blueprints.get

telcoautomation.blueprints.list

telcoautomation.deployments.*

telcoautomation.hydratedDeployments.*

telcoautomation.orchestrationClusters.get

telcoautomation.orchestrationClusters.list

Telco Automation Tier 1 Operations Admin ^{Beta 版}

（roles/telcoautomation.opsAdminTier1）

能够获取部署状态

logging.buckets.get

logging.buckets.list

logging.exclusions.get

logging.exclusions.list

logging.links.get

logging.links.list

logging.locations.*

logging.logEntries.list

logging.logMetrics.get

logging.logMetrics.list

logging.logScopes.get

logging.logScopes.list

logging.logServiceIndexes.list

logging.logServices.list

logging.logs.list

logging.operations.get

logging.operations.list

logging.queries.getShared

logging.queries.listShared

logging.queries.usePrivate

logging.sinks.get

logging.sinks.list

logging.usage.get

logging.views.get

logging.views.list

observability.scopes.get

resourcemanager.projects.get

telcoautomation.blueprints.get

telcoautomation.blueprints.list

telcoautomation.deployments.computeStatus

telcoautomation.deployments.get

telcoautomation.deployments.list

telcoautomation.hydratedDeployments.get

telcoautomation.hydratedDeployments.list

telcoautomation.orchestrationClusters.get

telcoautomation.orchestrationClusters.list

Telco Automation Tier 4 Operations Admin ^{Beta 版}

（roles/telcoautomation.opsAdminTier4）

能够管理部署及其状态

logging.buckets.get

logging.buckets.list

logging.exclusions.get

logging.exclusions.list

logging.links.get

logging.links.list

logging.locations.*

logging.logEntries.list

logging.logMetrics.get

logging.logMetrics.list

logging.logScopes.get

logging.logScopes.list

logging.logServiceIndexes.list

logging.logServices.list

logging.logs.list

logging.operations.get

logging.operations.list

logging.queries.getShared

logging.queries.listShared

logging.queries.usePrivate

logging.sinks.get

logging.sinks.list

logging.usage.get

logging.views.get

logging.views.list

observability.scopes.get

resourcemanager.projects.get

telcoautomation.blueprints.get

telcoautomation.blueprints.list

telcoautomation.deployments.*

telcoautomation.hydratedDeployments.*

telcoautomation.orchestrationClusters.get

telcoautomation.orchestrationClusters.list

Telco Automation Service Orchestrator ^{Beta 版}

（roles/telcoautomation.serviceOrchestrator）

能够管理部署

telcoautomation.blueprints.get

telcoautomation.blueprints.list

telcoautomation.deployments.*

telcoautomation.hydratedDeployments.*

telcoautomation.orchestrationClusters.get

telcoautomation.orchestrationClusters.list

Timeseries Insights DataSet Editor ^{Beta 版}

（roles/timeseriesinsights.datasetsEditor）

拥有对数据集的修改权限。

timeseriesinsights.*

Timeseries Insights DataSet Owner ^{Beta 版}

（roles/timeseriesinsights.datasetsOwner）

拥有数据集的完整访问权限。

timeseriesinsights.*

Timeseries Insights DataSet Viewer ^{Beta 版}

（roles/timeseriesinsights.datasetsViewer）

拥有对数据集的只读权限（列出和查询）。

timeseriesinsights.datasets.evaluate

timeseriesinsights.datasets.list

timeseriesinsights.datasets.query

timeseriesinsights.locations.*

Traffic Director Client ^{Beta 版}

（roles/trafficdirector.client）

提取服务配置和报告指标。

trafficdirector.*

Translation Hub Admin ^{Beta 版}

（roles/translationhub.admin）

Translation Hub 的管理员

automl.models.get

automl.models.list

automl.models.predict

cloudtranslate.customModels.get

cloudtranslate.customModels.list

cloudtranslate.customModels.predict

cloudtranslate.glossaries.create

cloudtranslate.glossaries.delete

cloudtranslate.glossaries.get

cloudtranslate.glossaries.list

cloudtranslate.glossaries.predict

resourcemanager.projects.get

resourcemanager.projects.list

translationhub.*

Translation Hub Portal User ^{Beta 版}

（roles/translationhub.portalUser）

Translation Hub 的门户用户

automl.models.get

automl.models.list

automl.models.predict

cloudtranslate.customModels.get

cloudtranslate.customModels.list

cloudtranslate.customModels.predict

cloudtranslate.glossaries.get

cloudtranslate.glossaries.list

cloudtranslate.glossaries.predict

resourcemanager.projects.get

resourcemanager.projects.list

translationhub.portals.get

translationhub.portals.list

Visual Inspection AI Solution Editor

（roles/visualinspection.editor）

拥有对所有 Visual Inspection AI 资源（visualinspection.locations.reportUsageMetrics 除外）的读写权限

visualinspection.annotationSets.*

visualinspection.annotationSpecs.*

visualinspection.annotations.*

visualinspection.datasets.*

visualinspection.images.*

visualinspection.locations.get

visualinspection.locations.list

visualinspection.modelEvaluations.*

visualinspection.models.*

visualinspection.modules.*

visualinspection.operations.*

visualinspection.solutionArtifacts.*

visualinspection.solutions.*

Visual Inspection AI Usage Metrics Reporter

（roles/visualinspection.usageMetricsReporter）

拥有对视觉检测 AI 服务的 ReportUsageMetric 访问权限

visualinspection.locations.reportUsageMetrics

Visual Inspection AI Viewer

（roles/visualinspection.viewer）

对 Visual Inspection AI 资源的读取权限

visualinspection.annotationSets.get

visualinspection.annotationSets.list

visualinspection.annotationSpecs.get

visualinspection.annotationSpecs.list

visualinspection.annotations.get

visualinspection.annotations.list

visualinspection.datasets.export

visualinspection.datasets.get

visualinspection.datasets.list

visualinspection.images.get

visualinspection.images.list

visualinspection.locations.get

visualinspection.locations.list

visualinspection.modelEvaluations.*

visualinspection.models.get

visualinspection.models.list

visualinspection.modules.get

visualinspection.modules.list

visualinspection.operations.*

visualinspection.solutionArtifacts.get

visualinspection.solutionArtifacts.list

visualinspection.solutionArtifacts.predict

visualinspection.solutions.get

visualinspection.solutions.list

如需详细了解预定义角色，请参阅角色和权限。如需有关选择最合适的预定义角色的帮助，请参阅选择预定义角色。

预定义的 Application Integration IAM 角色

其他角色

Advisory Notifications Admin

Advisory Notifications Viewer

Cloud API Hub Admin Beta 版

Cloud API Hub Attributes Admin Beta 版

Cloud API Hub Editor Beta 版

Cloud API Hub Plugins Admin Beta 版

Cloud API Hub Provisioning Admin Beta 版

Cloud API hub Runtime Project Attachment Editor Beta 版

Cloud API Hub Viewer Beta 版

API Management Admin Beta 版

API Management Viewer Beta 版

App Hub Admin

App Management Viewer Beta 版

App Hub Editor

App Hub Viewer

Appliance troubleshooting commands approver Beta 版

On-appliance troubleshooting client Beta 版

Appliance troubleshooter Beta 版

Assured OSS Admin

Assured OSS Project Admin Beta 版

Assured OSS Reader

Assured OSS User

Audit Manager Admin Beta 版

Audit Manager Auditor Beta 版

Custom Compliance Framework Admin Beta 版

Custom Compliance Framework Viewer Beta 版

Autoscaling Metrics Writer Beta 版

Autoscaling Recommendations Reader Beta 版

Autoscaling Site Admin Beta 版

Autoscaling State Writer Beta 版

Batch Administrator

Batch Agent Reporter

Batch Job Editor

Batch Job Viewer

Batch ResourceAllowance Editor

Batch ResourceAllowance Viewer

BigLake Admin

BigLake Viewer

MigrationWorkflow Editor

Task Orchestrator

Migration Translation User

MigrationWorkflow Viewer

Task Worker

Carbon Footprint Viewer

Blockchain Node Engine Admin

Blockchain Node Engine Viewer

Blockchain Validator Manager Admin Beta 版

Blockchain Validator Viewer Beta 版

Capacity Planner Usage Viewer Beta 版

Care Studio Patients Viewer

Chronicle Service Admin

Chronicle Service Viewer

Location reader Beta 版

Code Repository Indexes Admin Beta 版

Code Repository Indexes Viewer Beta 版

Repository Groups User Beta 版

Gemini for Google Cloud Settings Admin Beta 版

Gemini for Google Cloud Settings User Beta 版

Topic Admin Beta 版

Topic Reader Beta 版

Gemini for Google Cloud User Beta 版

Cloud Controls Partner Admin

Cloud Controls Partner Editor

Cloud Controls Partner Inspectability Reader

Cloud Controls Partner Monitoring Reader

Cloud Controls Partner Reader

Cloud Optimization AI Admin

Cloud Optimization AI Editor

Cloud Optimization AI Viewer

Cloud Quotas Admin Beta 版

Cloud Quotas Viewer Beta 版

Commerce Agreement Publishing Admin Beta 版

Commerce Agreement Publishing Viewer Beta 版

Confidential Space Workload User

ConfigDelivery Admin Beta 版

ConfigDelivery Viewer Beta 版

Config Delivery Resource Bundle Publisher Beta 版

Contact Center AI Platform Admin

Cloud API Hub Admin ^{Beta 版}

Cloud API Hub Attributes Admin ^{Beta 版}

Cloud API Hub Editor ^{Beta 版}

Cloud API Hub Plugins Admin ^{Beta 版}

Cloud API Hub Provisioning Admin ^{Beta 版}

Cloud API hub Runtime Project Attachment Editor ^{Beta 版}

Cloud API Hub Viewer ^{Beta 版}

API Management Admin ^{Beta 版}

API Management Viewer ^{Beta 版}

App Management Viewer ^{Beta 版}

Appliance troubleshooting commands approver ^{Beta 版}

On-appliance troubleshooting client ^{Beta 版}

Appliance troubleshooter ^{Beta 版}

Assured OSS Project Admin ^{Beta 版}

Audit Manager Admin ^{Beta 版}

Audit Manager Auditor ^{Beta 版}

Custom Compliance Framework Admin ^{Beta 版}

Custom Compliance Framework Viewer ^{Beta 版}

Autoscaling Metrics Writer ^{Beta 版}

Autoscaling Recommendations Reader ^{Beta 版}

Autoscaling Site Admin ^{Beta 版}

Autoscaling State Writer ^{Beta 版}

Blockchain Validator Manager Admin ^{Beta 版}

Blockchain Validator Viewer ^{Beta 版}

Capacity Planner Usage Viewer ^{Beta 版}

Location reader ^{Beta 版}

Code Repository Indexes Admin ^{Beta 版}

Code Repository Indexes Viewer ^{Beta 版}

Repository Groups User ^{Beta 版}

Gemini for Google Cloud Settings Admin ^{Beta 版}

Gemini for Google Cloud Settings User ^{Beta 版}

Topic Admin ^{Beta 版}

Topic Reader ^{Beta 版}

Gemini for Google Cloud User ^{Beta 版}

Cloud Quotas Admin ^{Beta 版}

Cloud Quotas Viewer ^{Beta 版}

Commerce Agreement Publishing Admin ^{Beta 版}

Commerce Agreement Publishing Viewer ^{Beta 版}

ConfigDelivery Admin ^{Beta 版}

ConfigDelivery Viewer ^{Beta 版}

Config Delivery Resource Bundle Publisher ^{Beta 版}

Contact Center AI Insights 管理中心 ^{Beta 版}

Contact Center AI Insights authorized editor ^{Beta 版}

Contact Center AI Insights 授权查看者 ^{Beta 版}

GKE Security Posture Viewer ^{Beta 版}

Database Center Admin ^{Beta 版}

Database Center Viewer ^{Beta 版}

Database Insights Assistant Viewer ^{Beta 版}

Events Service Viewer ^{Beta 版}

Database Insights Monitoring Viewer ^{Beta 版}

Database Insights Performing Operations ^{Beta 版}

Database Insights Recommendation Viewer ^{Beta 版}

Database Insights Viewer ^{Beta 版}

Studio Query Admin ^{Beta 版}

Studio Query User ^{Beta 版}

Dataproc Resource Manager Admin ^{Beta 版}

Dataproc Resource Manager Viewer ^{Beta 版}

Application Design Center Admin ^{Beta 版}

应用管理员 ^{Beta 版}

Application Editor ^{Beta 版}

Application Viewer ^{Beta 版}

Application Design Center User ^{Beta 版}

Application Design Center Viewer ^{Beta 版}

Developer Connect Admin ^{Beta 版}

Developer Connect Git Proxy Reader ^{Beta 版}

Developer Connect Git Proxy User ^{Beta 版}

Developer Connect OAuth Admin ^{Beta 版}

Developer Connect OAuth User ^{Beta 版}

Developer Connect Read Token Accessor ^{Beta 版}

Developer Connect Token Accessor ^{Beta 版}

Developer Connect User ^{Beta 版}

Developer Connect Viewer ^{Beta 版}

Cloud NotebookLM Notebook Editor ^{Beta 版}

Cloud NotebookLM Admin ^{Beta 版}

Cloud NotebookLM User ^{Beta 版}

Cloud NotebookLM Notebook Owner ^{Beta 版}

Cloud NotebookLM Notebook Viewer ^{Beta 版}

Discovery Engine User ^{Beta 版}

Enterprise Purchasing Admin ^{Beta 版}

Enterprise Purchasing Editor ^{Beta 版}