Web Security Scanner 역할 및 권한

이 페이지에는 Web Security Scanner의 IAM 역할과 권한이 나와 있습니다. 모든 역할과 권한을 검색하려면 역할 및 권한 색인을 참조하세요.

Web Security Scanner 역할

Role Permissions

Role	Permissions
Web Security Scanner Editor (`roles/cloudsecurityscanner.editor`) Full access to all Web Security Scanner resources Lowest-level resources where you can grant this role: Project	`appengine.applications.get` `cloudsecurityscanner.*` `cloudsecurityscanner.crawledurls.list` `cloudsecurityscanner.results.get` `cloudsecurityscanner.results.list` `cloudsecurityscanner.scanruns.get` `cloudsecurityscanner.scanruns.getSummary` `cloudsecurityscanner.scanruns.list` `cloudsecurityscanner.scanruns.stop` `cloudsecurityscanner.scans.create` `cloudsecurityscanner.scans.delete` `cloudsecurityscanner.scans.get` `cloudsecurityscanner.scans.list` `cloudsecurityscanner.scans.run` `cloudsecurityscanner.scans.update` `compute.addresses.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list`
Web Security Scanner Runner (`roles/cloudsecurityscanner.runner`) Read access to Scan and ScanRun, plus the ability to start scans Lowest-level resources where you can grant this role: Project	`cloudsecurityscanner.crawledurls.list` `cloudsecurityscanner.scanruns.get` `cloudsecurityscanner.scanruns.list` `cloudsecurityscanner.scanruns.stop` `cloudsecurityscanner.scans.get` `cloudsecurityscanner.scans.list` `cloudsecurityscanner.scans.run`
Web Security Scanner Viewer (`roles/cloudsecurityscanner.viewer`) Read access to all Web Security Scanner resources Lowest-level resources where you can grant this role: Project	`cloudsecurityscanner.crawledurls.list` `cloudsecurityscanner.results.*` `cloudsecurityscanner.results.get` `cloudsecurityscanner.results.list` `cloudsecurityscanner.scanruns.get` `cloudsecurityscanner.scanruns.getSummary` `cloudsecurityscanner.scanruns.list` `cloudsecurityscanner.scans.get` `cloudsecurityscanner.scans.list` `serviceusage.quotas.get` `serviceusage.services.get` `serviceusage.services.list`
Cloud Web Security Scanner Service Agent (`roles/websecurityscanner.serviceAgent`) Gives the Cloud Web Security Scanner service account access to compute engine details and app engine details. Warning: Do not grant service agent roles to any principals except service agents.	`appengine.applications.get` `cloudasset.assets.listResource` `compute.addresses.list` `compute.backendServices.get` `compute.forwardingRules.get` `compute.globalForwardingRules.get` `compute.sslCertificates.list` `compute.targetHttpProxies.get` `compute.targetHttpsProxies.get` `compute.urlMaps.get`

Web Security Scanner Editor

(roles/cloudsecurityscanner.editor)

Full access to all Web Security Scanner resources

Lowest-level resources where you can grant this role:

Project

appengine.applications.get

cloudsecurityscanner.*

cloudsecurityscanner.crawledurls.list
cloudsecurityscanner.results.get
cloudsecurityscanner.results.list
cloudsecurityscanner.scanruns.get
cloudsecurityscanner.scanruns.getSummary
cloudsecurityscanner.scanruns.list
cloudsecurityscanner.scanruns.stop
cloudsecurityscanner.scans.create
cloudsecurityscanner.scans.delete
cloudsecurityscanner.scans.get
cloudsecurityscanner.scans.list
cloudsecurityscanner.scans.run
cloudsecurityscanner.scans.update

compute.addresses.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Web Security Scanner Runner

(roles/cloudsecurityscanner.runner)

Read access to Scan and ScanRun, plus the ability to start scans

Lowest-level resources where you can grant this role:

Project

cloudsecurityscanner.crawledurls.list

cloudsecurityscanner.scanruns.get

cloudsecurityscanner.scanruns.list

cloudsecurityscanner.scanruns.stop

cloudsecurityscanner.scans.get

cloudsecurityscanner.scans.list

cloudsecurityscanner.scans.run

Web Security Scanner Viewer

(roles/cloudsecurityscanner.viewer)

Read access to all Web Security Scanner resources

Lowest-level resources where you can grant this role:

Project

cloudsecurityscanner.crawledurls.list

cloudsecurityscanner.results.*

cloudsecurityscanner.results.get
cloudsecurityscanner.results.list

cloudsecurityscanner.scanruns.get

cloudsecurityscanner.scanruns.getSummary

cloudsecurityscanner.scanruns.list

cloudsecurityscanner.scans.get

cloudsecurityscanner.scans.list

serviceusage.quotas.get

serviceusage.services.get

serviceusage.services.list

Cloud Web Security Scanner Service Agent

(roles/websecurityscanner.serviceAgent)

Gives the Cloud Web Security Scanner service account access to compute engine details and app engine details.

appengine.applications.get

cloudasset.assets.listResource

compute.addresses.list

compute.backendServices.get

compute.forwardingRules.get

compute.globalForwardingRules.get

compute.sslCertificates.list

compute.targetHttpProxies.get

compute.targetHttpsProxies.get

compute.urlMaps.get

Web Security Scanner 권한

권한	역할에 포함됨
`cloudsecurityscanner.crawledurls.list`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) Web Security Scanner 실행자(`roles/cloudsecurityscanner.runner`) Web Security Scanner 뷰어(`roles/cloudsecurityscanner.viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`) 보안 센터 관리자 뷰어(`roles/securitycenter.adminViewer`)
`cloudsecurityscanner.results.get`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) Web Security Scanner 뷰어(`roles/cloudsecurityscanner.viewer`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`) 보안 센터 관리자 뷰어(`roles/securitycenter.adminViewer`)
`cloudsecurityscanner.results.list`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) Web Security Scanner 뷰어(`roles/cloudsecurityscanner.viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`) 보안 센터 관리자 뷰어(`roles/securitycenter.adminViewer`)
`cloudsecurityscanner.scanruns.get`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) Web Security Scanner 실행자(`roles/cloudsecurityscanner.runner`) Web Security Scanner 뷰어(`roles/cloudsecurityscanner.viewer`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`) 보안 센터 관리자 뷰어(`roles/securitycenter.adminViewer`)
`cloudsecurityscanner.scanruns.getSummary`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) Web Security Scanner 뷰어(`roles/cloudsecurityscanner.viewer`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`) 보안 센터 관리자 뷰어(`roles/securitycenter.adminViewer`)
`cloudsecurityscanner.scanruns.list`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) Web Security Scanner 실행자(`roles/cloudsecurityscanner.runner`) Web Security Scanner 뷰어(`roles/cloudsecurityscanner.viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`) 보안 센터 관리자 뷰어(`roles/securitycenter.adminViewer`)
`cloudsecurityscanner.scanruns.stop`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) Web Security Scanner 실행자(`roles/cloudsecurityscanner.runner`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`)
`cloudsecurityscanner.scans.create`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`)
`cloudsecurityscanner.scans.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`)
`cloudsecurityscanner.scans.get`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) Web Security Scanner 실행자(`roles/cloudsecurityscanner.runner`) Web Security Scanner 뷰어(`roles/cloudsecurityscanner.viewer`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`) 보안 센터 관리자 뷰어(`roles/securitycenter.adminViewer`) 서비스 에이전트 역할 경고: 서비스 에이전트를 제외하고 주 구성원에 서비스 에이전트 역할을 부여하지 마세요. Cloud 보안 규정 준수 서비스 에이전트(`roles/cloudsecuritycompliance.serviceAgent`) 감사 관리자 감사 서비스 에이전트(`roles/auditmanager.serviceAgent`)
`cloudsecurityscanner.scans.list`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) Web Security Scanner 실행자(`roles/cloudsecurityscanner.runner`) Web Security Scanner 뷰어(`roles/cloudsecurityscanner.viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`) 보안 센터 관리자 뷰어(`roles/securitycenter.adminViewer`) 서비스 에이전트 역할 경고: 서비스 에이전트를 제외하고 주 구성원에 서비스 에이전트 역할을 부여하지 마세요. Cloud 보안 규정 준수 서비스 에이전트(`roles/cloudsecuritycompliance.serviceAgent`) 감사 관리자 감사 서비스 에이전트(`roles/auditmanager.serviceAgent`)
`cloudsecurityscanner.scans.run`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) Web Security Scanner 실행자(`roles/cloudsecurityscanner.runner`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`)
`cloudsecurityscanner.scans.update`	소유자(`roles/owner`) 편집자(`roles/editor`) Web Security Scanner 편집자(`roles/cloudsecurityscanner.editor`) 보안 센터 관리자(`roles/securitycenter.admin`) 보안 센터 관리자 편집자(`roles/securitycenter.adminEditor`)

Web Security Scanner 역할 및 권한