Filestore 角色和权限

本页面列出了 Filestore 的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

Filestore 角色

Role Permissions

Role	Permissions
Cloud Filestore Editor ^Beta (`roles/file.editor`) Read-write access to Filestore instances and related resources.	`file.*` `file.backups.create` `file.backups.createTagBinding` `file.backups.delete` `file.backups.deleteTagBinding` `file.backups.get` `file.backups.list` `file.backups.listEffectiveTags` `file.backups.listTagBindings` `file.backups.update` `file.instances.create` `file.instances.createTagBinding` `file.instances.delete` `file.instances.deleteTagBinding` `file.instances.get` `file.instances.list` `file.instances.listEffectiveTags` `file.instances.listTagBindings` `file.instances.restore` `file.instances.revert` `file.instances.update` `file.locations.get` `file.locations.list` `file.operations.cancel` `file.operations.delete` `file.operations.get` `file.operations.list` `file.snapshots.createTagBinding` `file.snapshots.deleteTagBinding` `file.snapshots.listEffectiveTags` `file.snapshots.listTagBindings`
Cloud Filestore Service Agent (`roles/file.serviceAgent`) Gives Cloud Filestore service account access to managed resources. Warning: Do not grant service agent roles to any principals except service agents.	`compute.globalOperations.get` `compute.networks.addPeering` `compute.networks.get` `compute.networks.removePeering` `compute.networks.update` `compute.networks.updatePeering` `compute.routes.list` `monitoring.metricDescriptors.create` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.*` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `monitoring.timeSeries.create` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Filestore Viewer ^Beta (`roles/file.viewer`) Read-only access to Filestore instances and related resources.	`file.backups.get` `file.backups.list` `file.backups.listEffectiveTags` `file.backups.listTagBindings` `file.instances.get` `file.instances.list` `file.instances.listEffectiveTags` `file.instances.listTagBindings` `file.locations.*` `file.locations.get` `file.locations.list` `file.operations.get` `file.operations.list` `file.snapshots.listEffectiveTags` `file.snapshots.listTagBindings`

Cloud Filestore Editor ^Beta

(roles/file.editor)

Read-write access to Filestore instances and related resources.

file.*

file.backups.create
file.backups.createTagBinding
file.backups.delete
file.backups.deleteTagBinding
file.backups.get
file.backups.list
file.backups.listEffectiveTags
file.backups.listTagBindings
file.backups.update
file.instances.create
file.instances.createTagBinding
file.instances.delete
file.instances.deleteTagBinding
file.instances.get
file.instances.list
file.instances.listEffectiveTags
file.instances.listTagBindings
file.instances.restore
file.instances.revert
file.instances.update
file.locations.get
file.locations.list
file.operations.cancel
file.operations.delete
file.operations.get
file.operations.list
file.snapshots.createTagBinding
file.snapshots.deleteTagBinding
file.snapshots.listEffectiveTags
file.snapshots.listTagBindings

Cloud Filestore Service Agent

(roles/file.serviceAgent)

Gives Cloud Filestore service account access to managed resources.

compute.globalOperations.get

compute.networks.addPeering

compute.networks.get

compute.networks.removePeering

compute.networks.update

compute.networks.updatePeering

compute.routes.list

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.timeSeries.create

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Filestore Viewer ^Beta

(roles/file.viewer)

Read-only access to Filestore instances and related resources.

file.backups.get

file.backups.list

file.backups.listEffectiveTags

file.backups.listTagBindings

file.instances.get

file.instances.list

file.instances.listEffectiveTags

file.instances.listTagBindings

file.locations.*

file.locations.get
file.locations.list

file.operations.get

file.operations.list

file.snapshots.listEffectiveTags

file.snapshots.listTagBindings

Filestore 权限

权限	以下角色拥有此权限
`file.backups.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Filestore Editor (`roles/file.editor`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.backups.createTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Tag User (`roles/resourcemanager.tagUser`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.backups.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Filestore Editor (`roles/file.editor`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.backups.deleteTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Tag User (`roles/resourcemanager.tagUser`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.backups.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.backups.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.backups.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.backups.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.backups.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Filestore Editor (`roles/file.editor`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.instances.create`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Filestore Editor (`roles/file.editor`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`file.instances.createTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Tag User (`roles/resourcemanager.tagUser`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.instances.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Filestore Editor (`roles/file.editor`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`file.instances.deleteTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Tag User (`roles/resourcemanager.tagUser`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.instances.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`file.instances.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.instances.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.instances.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.instances.restore`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Filestore Editor (`roles/file.editor`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.instances.revert`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Filestore Editor (`roles/file.editor`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.instances.update`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Filestore Editor (`roles/file.editor`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`file.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Filestore Editor (`roles/file.editor`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Cloud Filestore Editor (`roles/file.editor`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`) Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`file.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.snapshots.createTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Tag User (`roles/resourcemanager.tagUser`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.snapshots.deleteTagBinding`	Owner (`roles/owner`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Tag User (`roles/resourcemanager.tagUser`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.snapshots.listEffectiveTags`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)
`file.snapshots.listTagBindings`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) DLP Organization Data Profiles Driver (`roles/dlp.orgdriver`) DLP Project Data Profiles Driver (`roles/dlp.projectdriver`) Cloud Filestore Editor (`roles/file.editor`) Cloud Filestore Viewer (`roles/file.viewer`) Tag User (`roles/resourcemanager.tagUser`) Tag Viewer (`roles/resourcemanager.tagViewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Kubernetes Engine Service Agent (`roles/container.serviceAgent`)

Filestore 角色和权限