Certificate Manager 角色和权限

本页面列出了 Certificate Manager 的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

Certificate Manager 角色

Role Permissions

Role	Permissions
Certificate Manager Editor (`roles/certificatemanager.editor`) Edit access to Certificate Manager all resources.	`certificatemanager.certissuanceconfigs.create` `certificatemanager.certissuanceconfigs.createTagBinding` `certificatemanager.certissuanceconfigs.deleteTagBinding` `certificatemanager.certissuanceconfigs.get` `certificatemanager.certissuanceconfigs.list` `certificatemanager.certissuanceconfigs.listEffectiveTags` `certificatemanager.certissuanceconfigs.listTagBindings` `certificatemanager.certissuanceconfigs.update` `certificatemanager.certissuanceconfigs.use` `certificatemanager.certmapentries.create` `certificatemanager.certmapentries.createTagBinding` `certificatemanager.certmapentries.deleteTagBinding` `certificatemanager.certmapentries.get` `certificatemanager.certmapentries.list` `certificatemanager.certmapentries.listEffectiveTags` `certificatemanager.certmapentries.listTagBindings` `certificatemanager.certmapentries.update` `certificatemanager.certmaps.create` `certificatemanager.certmaps.createTagBinding` `certificatemanager.certmaps.deleteTagBinding` `certificatemanager.certmaps.get` `certificatemanager.certmaps.list` `certificatemanager.certmaps.listEffectiveTags` `certificatemanager.certmaps.listTagBindings` `certificatemanager.certmaps.update` `certificatemanager.certmaps.use` `certificatemanager.certs.create` `certificatemanager.certs.createTagBinding` `certificatemanager.certs.deleteTagBinding` `certificatemanager.certs.get` `certificatemanager.certs.list` `certificatemanager.certs.listEffectiveTags` `certificatemanager.certs.listTagBindings` `certificatemanager.certs.update` `certificatemanager.certs.use` `certificatemanager.dnsauthorizations.create` `certificatemanager.dnsauthorizations.createTagBinding` `certificatemanager.dnsauthorizations.deleteTagBinding` `certificatemanager.dnsauthorizations.get` `certificatemanager.dnsauthorizations.list` `certificatemanager.dnsauthorizations.listEffectiveTags` `certificatemanager.dnsauthorizations.listTagBindings` `certificatemanager.dnsauthorizations.update` `certificatemanager.dnsauthorizations.use` `certificatemanager.locations.*` `certificatemanager.locations.get` `certificatemanager.locations.list` `certificatemanager.operations.get` `certificatemanager.operations.list` `certificatemanager.trustconfigs.create` `certificatemanager.trustconfigs.createTagBinding` `certificatemanager.trustconfigs.deleteTagBinding` `certificatemanager.trustconfigs.get` `certificatemanager.trustconfigs.list` `certificatemanager.trustconfigs.listEffectiveTags` `certificatemanager.trustconfigs.listTagBindings` `certificatemanager.trustconfigs.update` `certificatemanager.trustconfigs.use` `resourcemanager.projects.get` `resourcemanager.projects.list`
Certificate Manager Owner (`roles/certificatemanager.owner`) Full access to Certificate Manager all resources.	`certificatemanager.*` `certificatemanager.certissuanceconfigs.create` `certificatemanager.certissuanceconfigs.createTagBinding` `certificatemanager.certissuanceconfigs.delete` `certificatemanager.certissuanceconfigs.deleteTagBinding` `certificatemanager.certissuanceconfigs.get` `certificatemanager.certissuanceconfigs.list` `certificatemanager.certissuanceconfigs.listEffectiveTags` `certificatemanager.certissuanceconfigs.listTagBindings` `certificatemanager.certissuanceconfigs.update` `certificatemanager.certissuanceconfigs.use` `certificatemanager.certmapentries.create` `certificatemanager.certmapentries.createTagBinding` `certificatemanager.certmapentries.delete` `certificatemanager.certmapentries.deleteTagBinding` `certificatemanager.certmapentries.get` `certificatemanager.certmapentries.list` `certificatemanager.certmapentries.listEffectiveTags` `certificatemanager.certmapentries.listTagBindings` `certificatemanager.certmapentries.update` `certificatemanager.certmaps.create` `certificatemanager.certmaps.createTagBinding` `certificatemanager.certmaps.delete` `certificatemanager.certmaps.deleteTagBinding` `certificatemanager.certmaps.get` `certificatemanager.certmaps.list` `certificatemanager.certmaps.listEffectiveTags` `certificatemanager.certmaps.listTagBindings` `certificatemanager.certmaps.update` `certificatemanager.certmaps.use` `certificatemanager.certs.create` `certificatemanager.certs.createTagBinding` `certificatemanager.certs.delete` `certificatemanager.certs.deleteTagBinding` `certificatemanager.certs.get` `certificatemanager.certs.list` `certificatemanager.certs.listEffectiveTags` `certificatemanager.certs.listTagBindings` `certificatemanager.certs.update` `certificatemanager.certs.use` `certificatemanager.dnsauthorizations.create` `certificatemanager.dnsauthorizations.createTagBinding` `certificatemanager.dnsauthorizations.delete` `certificatemanager.dnsauthorizations.deleteTagBinding` `certificatemanager.dnsauthorizations.get` `certificatemanager.dnsauthorizations.list` `certificatemanager.dnsauthorizations.listEffectiveTags` `certificatemanager.dnsauthorizations.listTagBindings` `certificatemanager.dnsauthorizations.update` `certificatemanager.dnsauthorizations.use` `certificatemanager.locations.get` `certificatemanager.locations.list` `certificatemanager.operations.cancel` `certificatemanager.operations.delete` `certificatemanager.operations.get` `certificatemanager.operations.list` `certificatemanager.trustconfigs.create` `certificatemanager.trustconfigs.createTagBinding` `certificatemanager.trustconfigs.delete` `certificatemanager.trustconfigs.deleteTagBinding` `certificatemanager.trustconfigs.get` `certificatemanager.trustconfigs.list` `certificatemanager.trustconfigs.listEffectiveTags` `certificatemanager.trustconfigs.listTagBindings` `certificatemanager.trustconfigs.update` `certificatemanager.trustconfigs.use` `resourcemanager.projects.get` `resourcemanager.projects.list`
Certificate Manager Service Agent (`roles/certificatemanager.serviceAgent`) Grants Certificate Manager access to services and APIs in the user project. Warning: Do not grant service agent roles to any principals except service agents.	`certificatemanager.locations.get`
Certificate Manager Viewer (`roles/certificatemanager.viewer`) Read-only access to Certificate Manager all resources.	`certificatemanager.certissuanceconfigs.get` `certificatemanager.certissuanceconfigs.list` `certificatemanager.certissuanceconfigs.listEffectiveTags` `certificatemanager.certissuanceconfigs.listTagBindings` `certificatemanager.certmapentries.get` `certificatemanager.certmapentries.list` `certificatemanager.certmapentries.listEffectiveTags` `certificatemanager.certmapentries.listTagBindings` `certificatemanager.certmaps.get` `certificatemanager.certmaps.list` `certificatemanager.certmaps.listEffectiveTags` `certificatemanager.certmaps.listTagBindings` `certificatemanager.certs.get` `certificatemanager.certs.list` `certificatemanager.certs.listEffectiveTags` `certificatemanager.certs.listTagBindings` `certificatemanager.dnsauthorizations.get` `certificatemanager.dnsauthorizations.list` `certificatemanager.dnsauthorizations.listEffectiveTags` `certificatemanager.dnsauthorizations.listTagBindings` `certificatemanager.locations.*` `certificatemanager.locations.get` `certificatemanager.locations.list` `certificatemanager.operations.get` `certificatemanager.operations.list` `certificatemanager.trustconfigs.get` `certificatemanager.trustconfigs.list` `certificatemanager.trustconfigs.listEffectiveTags` `certificatemanager.trustconfigs.listTagBindings` `resourcemanager.projects.get` `resourcemanager.projects.list`

Certificate Manager Editor

(roles/certificatemanager.editor)

Edit access to Certificate Manager all resources.

certificatemanager.certissuanceconfigs.create

certificatemanager.certissuanceconfigs.createTagBinding

certificatemanager.certissuanceconfigs.deleteTagBinding

certificatemanager.certissuanceconfigs.get

certificatemanager.certissuanceconfigs.list

certificatemanager.certissuanceconfigs.listEffectiveTags

certificatemanager.certissuanceconfigs.listTagBindings

certificatemanager.certissuanceconfigs.update

certificatemanager.certissuanceconfigs.use

certificatemanager.certmapentries.create

certificatemanager.certmapentries.createTagBinding

certificatemanager.certmapentries.deleteTagBinding

certificatemanager.certmapentries.get

certificatemanager.certmapentries.list

certificatemanager.certmapentries.listEffectiveTags

certificatemanager.certmapentries.listTagBindings

certificatemanager.certmapentries.update

certificatemanager.certmaps.create

certificatemanager.certmaps.createTagBinding

certificatemanager.certmaps.deleteTagBinding

certificatemanager.certmaps.get

certificatemanager.certmaps.list

certificatemanager.certmaps.listEffectiveTags

certificatemanager.certmaps.listTagBindings

certificatemanager.certmaps.update

certificatemanager.certmaps.use

certificatemanager.certs.create

certificatemanager.certs.createTagBinding

certificatemanager.certs.deleteTagBinding

certificatemanager.certs.get

certificatemanager.certs.list

certificatemanager.certs.listEffectiveTags

certificatemanager.certs.listTagBindings

certificatemanager.certs.update

certificatemanager.certs.use

certificatemanager.dnsauthorizations.create

certificatemanager.dnsauthorizations.createTagBinding

certificatemanager.dnsauthorizations.deleteTagBinding

certificatemanager.dnsauthorizations.get

certificatemanager.dnsauthorizations.list

certificatemanager.dnsauthorizations.listEffectiveTags

certificatemanager.dnsauthorizations.listTagBindings

certificatemanager.dnsauthorizations.update

certificatemanager.dnsauthorizations.use

certificatemanager.locations.*

certificatemanager.locations.get
certificatemanager.locations.list

certificatemanager.operations.get

certificatemanager.operations.list

certificatemanager.trustconfigs.create

certificatemanager.trustconfigs.createTagBinding

certificatemanager.trustconfigs.deleteTagBinding

certificatemanager.trustconfigs.get

certificatemanager.trustconfigs.list

certificatemanager.trustconfigs.listEffectiveTags

certificatemanager.trustconfigs.listTagBindings

certificatemanager.trustconfigs.update

certificatemanager.trustconfigs.use

resourcemanager.projects.get

resourcemanager.projects.list

Certificate Manager Owner

(roles/certificatemanager.owner)

Full access to Certificate Manager all resources.

certificatemanager.*

certificatemanager.certissuanceconfigs.create
certificatemanager.certissuanceconfigs.createTagBinding
certificatemanager.certissuanceconfigs.delete
certificatemanager.certissuanceconfigs.deleteTagBinding
certificatemanager.certissuanceconfigs.get
certificatemanager.certissuanceconfigs.list
certificatemanager.certissuanceconfigs.listEffectiveTags
certificatemanager.certissuanceconfigs.listTagBindings
certificatemanager.certissuanceconfigs.update
certificatemanager.certissuanceconfigs.use
certificatemanager.certmapentries.create
certificatemanager.certmapentries.createTagBinding
certificatemanager.certmapentries.delete
certificatemanager.certmapentries.deleteTagBinding
certificatemanager.certmapentries.get
certificatemanager.certmapentries.list
certificatemanager.certmapentries.listEffectiveTags
certificatemanager.certmapentries.listTagBindings
certificatemanager.certmapentries.update
certificatemanager.certmaps.create
certificatemanager.certmaps.createTagBinding
certificatemanager.certmaps.delete
certificatemanager.certmaps.deleteTagBinding
certificatemanager.certmaps.get
certificatemanager.certmaps.list
certificatemanager.certmaps.listEffectiveTags
certificatemanager.certmaps.listTagBindings
certificatemanager.certmaps.update
certificatemanager.certmaps.use
certificatemanager.certs.create
certificatemanager.certs.createTagBinding
certificatemanager.certs.delete
certificatemanager.certs.deleteTagBinding
certificatemanager.certs.get
certificatemanager.certs.list
certificatemanager.certs.listEffectiveTags
certificatemanager.certs.listTagBindings
certificatemanager.certs.update
certificatemanager.certs.use
certificatemanager.dnsauthorizations.create
certificatemanager.dnsauthorizations.createTagBinding
certificatemanager.dnsauthorizations.delete
certificatemanager.dnsauthorizations.deleteTagBinding
certificatemanager.dnsauthorizations.get
certificatemanager.dnsauthorizations.list
certificatemanager.dnsauthorizations.listEffectiveTags
certificatemanager.dnsauthorizations.listTagBindings
certificatemanager.dnsauthorizations.update
certificatemanager.dnsauthorizations.use
certificatemanager.locations.get
certificatemanager.locations.list
certificatemanager.operations.cancel
certificatemanager.operations.delete
certificatemanager.operations.get
certificatemanager.operations.list
certificatemanager.trustconfigs.create
certificatemanager.trustconfigs.createTagBinding
certificatemanager.trustconfigs.delete
certificatemanager.trustconfigs.deleteTagBinding
certificatemanager.trustconfigs.get
certificatemanager.trustconfigs.list
certificatemanager.trustconfigs.listEffectiveTags
certificatemanager.trustconfigs.listTagBindings
certificatemanager.trustconfigs.update
certificatemanager.trustconfigs.use

resourcemanager.projects.get

resourcemanager.projects.list

Certificate Manager Service Agent

(roles/certificatemanager.serviceAgent)

Grants Certificate Manager access to services and APIs in the user project.

certificatemanager.locations.get

Certificate Manager Viewer

(roles/certificatemanager.viewer)

Read-only access to Certificate Manager all resources.

certificatemanager.certissuanceconfigs.get

certificatemanager.certissuanceconfigs.list

certificatemanager.certissuanceconfigs.listEffectiveTags

certificatemanager.certissuanceconfigs.listTagBindings

certificatemanager.certmapentries.get

certificatemanager.certmapentries.list

certificatemanager.certmapentries.listEffectiveTags

certificatemanager.certmapentries.listTagBindings

certificatemanager.certmaps.get

certificatemanager.certmaps.list

certificatemanager.certmaps.listEffectiveTags

certificatemanager.certmaps.listTagBindings

certificatemanager.certs.get

certificatemanager.certs.list

certificatemanager.certs.listEffectiveTags

certificatemanager.certs.listTagBindings

certificatemanager.dnsauthorizations.get

certificatemanager.dnsauthorizations.list

certificatemanager.dnsauthorizations.listEffectiveTags

certificatemanager.dnsauthorizations.listTagBindings

certificatemanager.locations.*

certificatemanager.locations.get
certificatemanager.locations.list

certificatemanager.operations.get

certificatemanager.operations.list

certificatemanager.trustconfigs.get

certificatemanager.trustconfigs.list

certificatemanager.trustconfigs.listEffectiveTags

certificatemanager.trustconfigs.listTagBindings

resourcemanager.projects.get

resourcemanager.projects.list

Certificate Manager 权限

权限	以下角色拥有此权限
`certificatemanager.certissuanceconfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certissuanceconfigs.createTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.certissuanceconfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certissuanceconfigs.deleteTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.certissuanceconfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certissuanceconfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certissuanceconfigs.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certissuanceconfigs.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certissuanceconfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certissuanceconfigs.use`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmapentries.create`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmapentries.createTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.certmapentries.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmapentries.deleteTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.certmapentries.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmapentries.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmapentries.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmapentries.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmapentries.update`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmaps.create`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmaps.createTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.certmaps.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmaps.deleteTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.certmaps.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) Compute Load Balancer Admin (`roles/compute.loadBalancerAdmin`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmaps.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) Compute Load Balancer Admin (`roles/compute.loadBalancerAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmaps.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmaps.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmaps.update`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certmaps.use`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Compute Load Balancer Admin (`roles/compute.loadBalancerAdmin`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certs.createTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.certs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certs.deleteTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.certs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Cloud Security Compliance Service Agent (`roles/cloudsecuritycompliance.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Audit Manager Auditing Service Agent (`roles/auditmanager.serviceAgent`)
`certificatemanager.certs.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certs.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.certs.use`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.dnsauthorizations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.dnsauthorizations.createTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.dnsauthorizations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.dnsauthorizations.deleteTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.dnsauthorizations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.dnsauthorizations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.dnsauthorizations.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.dnsauthorizations.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.dnsauthorizations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.dnsauthorizations.use`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Multi Cluster Ingress Service Agent (`roles/multiclusteringress.serviceAgent`) Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`certificatemanager.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Certificate Manager Service Agent (`roles/certificatemanager.serviceAgent`)
`certificatemanager.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`certificatemanager.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Owner (`roles/certificatemanager.owner`)
`certificatemanager.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Owner (`roles/certificatemanager.owner`)
`certificatemanager.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`)
`certificatemanager.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`certificatemanager.trustconfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`)
`certificatemanager.trustconfigs.createTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.trustconfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Owner (`roles/certificatemanager.owner`)
`certificatemanager.trustconfigs.deleteTagBinding`	Owner (`roles/owner`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`)
`certificatemanager.trustconfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`)
`certificatemanager.trustconfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Cloud Security Compliance Service Agent (`roles/cloudsecuritycompliance.serviceAgent`) Audit Manager Auditing Service Agent (`roles/auditmanager.serviceAgent`)
`certificatemanager.trustconfigs.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`certificatemanager.trustconfigs.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`) Certificate Manager Viewer (`roles/certificatemanager.viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`)
`certificatemanager.trustconfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`)
`certificatemanager.trustconfigs.use`	Owner (`roles/owner`) Editor (`roles/editor`) Certificate Manager Editor (`roles/certificatemanager.editor`) Certificate Manager Owner (`roles/certificatemanager.owner`)

Certificate Manager 角色和权限 使用集合让一切井井有条 根据您的偏好保存内容并对其进行分类。