Microsoft Active Directory용 관리형 서비스 역할 및 권한

이 페이지에는 Microsoft Active Directory용 관리형 서비스의 IAM 역할과 권한이 나와 있습니다. 모든 역할과 권한을 검색하려면 역할 및 권한 색인을 참조하세요.

Microsoft Active Directory용 관리형 서비스 역할

Role Permissions

Role	Permissions
Google Cloud Managed Identities Admin (`roles/managedidentities.admin`) Full access to Google Cloud Managed Identities Domains and related resources. Intended to be granted on a project-level.	`managedidentities.*` `managedidentities.backups.create` `managedidentities.backups.delete` `managedidentities.backups.get` `managedidentities.backups.getIamPolicy` `managedidentities.backups.list` `managedidentities.backups.setIamPolicy` `managedidentities.backups.update` `managedidentities.domains.attachTrust` `managedidentities.domains.checkMigrationPermission` `managedidentities.domains.create` `managedidentities.domains.createTagBinding` `managedidentities.domains.delete` `managedidentities.domains.deleteTagBinding` `managedidentities.domains.detachTrust` `managedidentities.domains.disableMigration` `managedidentities.domains.domainJoinMachine` `managedidentities.domains.enableMigration` `managedidentities.domains.extendSchema` `managedidentities.domains.get` `managedidentities.domains.getIamPolicy` `managedidentities.domains.list` `managedidentities.domains.listEffectiveTags` `managedidentities.domains.listTagBindings` `managedidentities.domains.reconfigureTrust` `managedidentities.domains.resetpassword` `managedidentities.domains.restore` `managedidentities.domains.setIamPolicy` `managedidentities.domains.update` `managedidentities.domains.updateLDAPSSettings` `managedidentities.domains.validateTrust` `managedidentities.locations.get` `managedidentities.locations.list` `managedidentities.operations.cancel` `managedidentities.operations.delete` `managedidentities.operations.get` `managedidentities.operations.list` `managedidentities.peerings.create` `managedidentities.peerings.delete` `managedidentities.peerings.get` `managedidentities.peerings.getIamPolicy` `managedidentities.peerings.list` `managedidentities.peerings.setIamPolicy` `managedidentities.peerings.update` `managedidentities.sqlintegrations.get` `managedidentities.sqlintegrations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Google Cloud Managed Identities Backup Admin (`roles/managedidentities.backupAdmin`) Full access to Google Cloud Managed Identities Backup and related resources. Intended to be granted on a project-level	`managedidentities.backups.` `managedidentities.backups.create` `managedidentities.backups.delete` `managedidentities.backups.get` `managedidentities.backups.getIamPolicy` `managedidentities.backups.list` `managedidentities.backups.setIamPolicy` `managedidentities.backups.update` `managedidentities.domains.get` `managedidentities.locations.` `managedidentities.locations.get` `managedidentities.locations.list` `managedidentities.operations.*` `managedidentities.operations.cancel` `managedidentities.operations.delete` `managedidentities.operations.get` `managedidentities.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Google Cloud Managed Identities Backup Viewer (`roles/managedidentities.backupViewer`) Read-only access to Google Cloud Managed Identities Backup and related resources.	`managedidentities.backups.get` `managedidentities.backups.getIamPolicy` `managedidentities.backups.list` `managedidentities.domains.get` `managedidentities.locations.*` `managedidentities.locations.get` `managedidentities.locations.list` `managedidentities.operations.get` `managedidentities.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Google Cloud Managed Identities Domain Admin (`roles/managedidentities.domainAdmin`) Read-Update-Delete to Google Cloud Managed Identities Domains and related resources. Intended to be granted on a resource (domain) level.	`managedidentities.backups.` `managedidentities.backups.create` `managedidentities.backups.delete` `managedidentities.backups.get` `managedidentities.backups.getIamPolicy` `managedidentities.backups.list` `managedidentities.backups.setIamPolicy` `managedidentities.backups.update` `managedidentities.domains.attachTrust` `managedidentities.domains.checkMigrationPermission` `managedidentities.domains.createTagBinding` `managedidentities.domains.delete` `managedidentities.domains.deleteTagBinding` `managedidentities.domains.detachTrust` `managedidentities.domains.disableMigration` `managedidentities.domains.domainJoinMachine` `managedidentities.domains.enableMigration` `managedidentities.domains.extendSchema` `managedidentities.domains.get` `managedidentities.domains.getIamPolicy` `managedidentities.domains.listEffectiveTags` `managedidentities.domains.listTagBindings` `managedidentities.domains.reconfigureTrust` `managedidentities.domains.resetpassword` `managedidentities.domains.restore` `managedidentities.domains.update` `managedidentities.domains.updateLDAPSSettings` `managedidentities.domains.validateTrust` `managedidentities.locations.` `managedidentities.locations.get` `managedidentities.locations.list` `managedidentities.operations.get` `managedidentities.operations.list` `managedidentities.sqlintegrations.*` `managedidentities.sqlintegrations.get` `managedidentities.sqlintegrations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Google Cloud Managed Identities Domain Join ^Beta (`roles/managedidentities.domainJoin`) Access to domain join VMs with Cloud AD	`managedidentities.domains.domainJoinMachine` `managedidentities.domains.get`
Google Cloud Managed Identities Peering Admin (`roles/managedidentities.peeringAdmin`) Full access to Google Cloud Managed Identities Domains and related resources. Intended to be granted on a project-level	`managedidentities.locations.` `managedidentities.locations.get` `managedidentities.locations.list` `managedidentities.operations.` `managedidentities.operations.cancel` `managedidentities.operations.delete` `managedidentities.operations.get` `managedidentities.operations.list` `managedidentities.peerings.*` `managedidentities.peerings.create` `managedidentities.peerings.delete` `managedidentities.peerings.get` `managedidentities.peerings.getIamPolicy` `managedidentities.peerings.list` `managedidentities.peerings.setIamPolicy` `managedidentities.peerings.update` `resourcemanager.projects.get` `resourcemanager.projects.list`
Google Cloud Managed Identities Peering Viewer (`roles/managedidentities.peeringViewer`) Read-only access to Google Cloud Managed Identities Peering and related resources.	`managedidentities.locations.*` `managedidentities.locations.get` `managedidentities.locations.list` `managedidentities.operations.get` `managedidentities.operations.list` `managedidentities.peerings.get` `managedidentities.peerings.getIamPolicy` `managedidentities.peerings.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Cloud Managed Identities Service Agent (`roles/managedidentities.serviceAgent`) Gives Managed Identities service account access to managed resources. Warning: Do not grant service agent roles to any principals except service agents.	`compute.globalOperations.get` `compute.networks.addPeering` `compute.networks.get` `compute.networks.removePeering` `compute.networks.update` `compute.routes.list` `dns.changes.` `dns.changes.create` `dns.changes.get` `dns.changes.list` `dns.dnsKeys.` `dns.dnsKeys.get` `dns.dnsKeys.list` `dns.managedZoneOperations.` `dns.managedZoneOperations.get` `dns.managedZoneOperations.list` `dns.managedZones.create` `dns.managedZones.delete` `dns.managedZones.get` `dns.managedZones.list` `dns.managedZones.update` `dns.networks.bindPrivateDNSPolicy` `dns.networks.bindPrivateDNSZone` `dns.policies.` `dns.policies.create` `dns.policies.delete` `dns.policies.get` `dns.policies.list` `dns.policies.update` `dns.projects.get` `dns.resourceRecordSets.` `dns.resourceRecordSets.create` `dns.resourceRecordSets.delete` `dns.resourceRecordSets.get` `dns.resourceRecordSets.list` `dns.resourceRecordSets.update` `dns.responsePolicies.` `dns.responsePolicies.create` `dns.responsePolicies.delete` `dns.responsePolicies.get` `dns.responsePolicies.list` `dns.responsePolicies.update` `dns.responsePolicyRules.` `dns.responsePolicyRules.create` `dns.responsePolicyRules.delete` `dns.responsePolicyRules.get` `dns.responsePolicyRules.list` `dns.responsePolicyRules.update` `monitoring.metricDescriptors.create` `monitoring.metricDescriptors.get` `monitoring.metricDescriptors.list` `monitoring.monitoredResourceDescriptors.` `monitoring.monitoredResourceDescriptors.get` `monitoring.monitoredResourceDescriptors.list` `monitoring.timeSeries.create` `resourcemanager.projects.get` `resourcemanager.projects.list`
Google Cloud Managed Identities Viewer (`roles/managedidentities.viewer`) Read-only access to Google Cloud Managed Identities Domains and related resources.	`managedidentities.backups.get` `managedidentities.backups.getIamPolicy` `managedidentities.backups.list` `managedidentities.domains.get` `managedidentities.domains.getIamPolicy` `managedidentities.domains.list` `managedidentities.domains.listEffectiveTags` `managedidentities.domains.listTagBindings` `managedidentities.locations.` `managedidentities.locations.get` `managedidentities.locations.list` `managedidentities.operations.get` `managedidentities.operations.list` `managedidentities.peerings.get` `managedidentities.peerings.getIamPolicy` `managedidentities.peerings.list` `managedidentities.sqlintegrations.` `managedidentities.sqlintegrations.get` `managedidentities.sqlintegrations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Google Cloud Managed Identities Admin

(roles/managedidentities.admin)

Full access to Google Cloud Managed Identities Domains and related resources. Intended to be granted on a project-level.

managedidentities.*

managedidentities.backups.create
managedidentities.backups.delete
managedidentities.backups.get
managedidentities.backups.getIamPolicy
managedidentities.backups.list
managedidentities.backups.setIamPolicy
managedidentities.backups.update
managedidentities.domains.attachTrust
managedidentities.domains.checkMigrationPermission
managedidentities.domains.create
managedidentities.domains.createTagBinding
managedidentities.domains.delete
managedidentities.domains.deleteTagBinding
managedidentities.domains.detachTrust
managedidentities.domains.disableMigration
managedidentities.domains.domainJoinMachine
managedidentities.domains.enableMigration
managedidentities.domains.extendSchema
managedidentities.domains.get
managedidentities.domains.getIamPolicy
managedidentities.domains.list
managedidentities.domains.listEffectiveTags
managedidentities.domains.listTagBindings
managedidentities.domains.reconfigureTrust
managedidentities.domains.resetpassword
managedidentities.domains.restore
managedidentities.domains.setIamPolicy
managedidentities.domains.update
managedidentities.domains.updateLDAPSSettings
managedidentities.domains.validateTrust
managedidentities.locations.get
managedidentities.locations.list
managedidentities.operations.cancel
managedidentities.operations.delete
managedidentities.operations.get
managedidentities.operations.list
managedidentities.peerings.create
managedidentities.peerings.delete
managedidentities.peerings.get
managedidentities.peerings.getIamPolicy
managedidentities.peerings.list
managedidentities.peerings.setIamPolicy
managedidentities.peerings.update
managedidentities.sqlintegrations.get
managedidentities.sqlintegrations.list

resourcemanager.projects.get

resourcemanager.projects.list

Google Cloud Managed Identities Backup Admin

(roles/managedidentities.backupAdmin)

Full access to Google Cloud Managed Identities Backup and related resources. Intended to be granted on a project-level

managedidentities.backups.*

managedidentities.backups.create
managedidentities.backups.delete
managedidentities.backups.get
managedidentities.backups.getIamPolicy
managedidentities.backups.list
managedidentities.backups.setIamPolicy
managedidentities.backups.update

managedidentities.domains.get

managedidentities.locations.*

managedidentities.locations.get
managedidentities.locations.list

managedidentities.operations.*

managedidentities.operations.cancel
managedidentities.operations.delete
managedidentities.operations.get
managedidentities.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Google Cloud Managed Identities Backup Viewer

(roles/managedidentities.backupViewer)

Read-only access to Google Cloud Managed Identities Backup and related resources.

managedidentities.backups.get

managedidentities.backups.getIamPolicy

managedidentities.backups.list

managedidentities.domains.get

managedidentities.locations.*

managedidentities.locations.get
managedidentities.locations.list

managedidentities.operations.get

managedidentities.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Google Cloud Managed Identities Domain Admin

(roles/managedidentities.domainAdmin)

Read-Update-Delete to Google Cloud Managed Identities Domains and related resources. Intended to be granted on a resource (domain) level.

managedidentities.backups.*

managedidentities.backups.create
managedidentities.backups.delete
managedidentities.backups.get
managedidentities.backups.getIamPolicy
managedidentities.backups.list
managedidentities.backups.setIamPolicy
managedidentities.backups.update

managedidentities.domains.attachTrust

managedidentities.domains.checkMigrationPermission

managedidentities.domains.createTagBinding

managedidentities.domains.delete

managedidentities.domains.deleteTagBinding

managedidentities.domains.detachTrust

managedidentities.domains.disableMigration

managedidentities.domains.domainJoinMachine

managedidentities.domains.enableMigration

managedidentities.domains.extendSchema

managedidentities.domains.get

managedidentities.domains.getIamPolicy

managedidentities.domains.listEffectiveTags

managedidentities.domains.listTagBindings

managedidentities.domains.reconfigureTrust

managedidentities.domains.resetpassword

managedidentities.domains.restore

managedidentities.domains.update

managedidentities.domains.updateLDAPSSettings

managedidentities.domains.validateTrust

managedidentities.locations.*

managedidentities.locations.get
managedidentities.locations.list

managedidentities.operations.get

managedidentities.operations.list

managedidentities.sqlintegrations.*

managedidentities.sqlintegrations.get
managedidentities.sqlintegrations.list

resourcemanager.projects.get

resourcemanager.projects.list

Google Cloud Managed Identities Domain Join ^Beta

(roles/managedidentities.domainJoin)

Access to domain join VMs with Cloud AD

managedidentities.domains.domainJoinMachine

managedidentities.domains.get

Google Cloud Managed Identities Peering Admin

(roles/managedidentities.peeringAdmin)

Full access to Google Cloud Managed Identities Domains and related resources. Intended to be granted on a project-level

managedidentities.locations.*

managedidentities.locations.get
managedidentities.locations.list

managedidentities.operations.*

managedidentities.operations.cancel
managedidentities.operations.delete
managedidentities.operations.get
managedidentities.operations.list

managedidentities.peerings.*

managedidentities.peerings.create
managedidentities.peerings.delete
managedidentities.peerings.get
managedidentities.peerings.getIamPolicy
managedidentities.peerings.list
managedidentities.peerings.setIamPolicy
managedidentities.peerings.update

resourcemanager.projects.get

resourcemanager.projects.list

Google Cloud Managed Identities Peering Viewer

(roles/managedidentities.peeringViewer)

Read-only access to Google Cloud Managed Identities Peering and related resources.

managedidentities.locations.*

managedidentities.locations.get
managedidentities.locations.list

managedidentities.operations.get

managedidentities.operations.list

managedidentities.peerings.get

managedidentities.peerings.getIamPolicy

managedidentities.peerings.list

resourcemanager.projects.get

resourcemanager.projects.list

Cloud Managed Identities Service Agent

(roles/managedidentities.serviceAgent)

Gives Managed Identities service account access to managed resources.

compute.globalOperations.get

compute.networks.addPeering

compute.networks.get

compute.networks.removePeering

compute.networks.update

compute.routes.list

dns.changes.*

dns.changes.create
dns.changes.get
dns.changes.list

dns.dnsKeys.*

dns.dnsKeys.get
dns.dnsKeys.list

dns.managedZoneOperations.*

dns.managedZoneOperations.get
dns.managedZoneOperations.list

dns.managedZones.create

dns.managedZones.delete

dns.managedZones.get

dns.managedZones.list

dns.managedZones.update

dns.networks.bindPrivateDNSPolicy

dns.networks.bindPrivateDNSZone

dns.policies.*

dns.policies.create
dns.policies.delete
dns.policies.get
dns.policies.list
dns.policies.update

dns.projects.get

dns.resourceRecordSets.*

dns.resourceRecordSets.create
dns.resourceRecordSets.delete
dns.resourceRecordSets.get
dns.resourceRecordSets.list
dns.resourceRecordSets.update

dns.responsePolicies.*

dns.responsePolicies.create
dns.responsePolicies.delete
dns.responsePolicies.get
dns.responsePolicies.list
dns.responsePolicies.update

dns.responsePolicyRules.*

dns.responsePolicyRules.create
dns.responsePolicyRules.delete
dns.responsePolicyRules.get
dns.responsePolicyRules.list
dns.responsePolicyRules.update

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list

monitoring.timeSeries.create

resourcemanager.projects.get

resourcemanager.projects.list

Google Cloud Managed Identities Viewer

(roles/managedidentities.viewer)

Read-only access to Google Cloud Managed Identities Domains and related resources.

managedidentities.backups.get

managedidentities.backups.getIamPolicy

managedidentities.backups.list

managedidentities.domains.get

managedidentities.domains.getIamPolicy

managedidentities.domains.list

managedidentities.domains.listEffectiveTags

managedidentities.domains.listTagBindings

managedidentities.locations.*

managedidentities.locations.get
managedidentities.locations.list

managedidentities.operations.get

managedidentities.operations.list

managedidentities.peerings.get

managedidentities.peerings.getIamPolicy

managedidentities.peerings.list

managedidentities.sqlintegrations.*

managedidentities.sqlintegrations.get
managedidentities.sqlintegrations.list

resourcemanager.projects.get

resourcemanager.projects.list

Microsoft Active Directory용 관리형 서비스 권한

권한	역할에 포함됨
`managedidentities.backups.create`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.backups.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.backups.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 백업 뷰어(`roles/managedidentities.backupViewer`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.backups.getIamPolicy`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 백업 뷰어(`roles/managedidentities.backupViewer`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.backups.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 백업 뷰어(`roles/managedidentities.backupViewer`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.backups.setIamPolicy`	소유자(`roles/owner`) 보안 관리자(`roles/iam.securityAdmin`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.backups.update`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.attachTrust`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.checkMigrationPermission`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.create`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`)
`managedidentities.domains.createTagBinding`	소유자(`roles/owner`) DLP 조직 데이터 프로필 드라이버(`roles/dlp.orgdriver`) DLP 프로젝트 데이터 프로필 드라이버(`roles/dlp.projectdriver`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) 태그 사용자(`roles/resourcemanager.tagUser`)
`managedidentities.domains.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.deleteTagBinding`	소유자(`roles/owner`) DLP 조직 데이터 프로필 드라이버(`roles/dlp.orgdriver`) DLP 프로젝트 데이터 프로필 드라이버(`roles/dlp.projectdriver`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) 태그 사용자(`roles/resourcemanager.tagUser`)
`managedidentities.domains.detachTrust`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.disableMigration`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.domainJoinMachine`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 도메인 조인(`roles/managedidentities.domainJoin`)
`managedidentities.domains.enableMigration`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.extendSchema`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 백업 뷰어(`roles/managedidentities.backupViewer`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 도메인 조인(`roles/managedidentities.domainJoin`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.domains.getIamPolicy`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.domains.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.domains.listEffectiveTags`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) DLP 조직 데이터 프로필 드라이버(`roles/dlp.orgdriver`) DLP 프로젝트 데이터 프로필 드라이버(`roles/dlp.projectdriver`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`) 태그 사용자(`roles/resourcemanager.tagUser`) 태그 뷰어(`roles/resourcemanager.tagViewer`)
`managedidentities.domains.listTagBindings`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) DLP 조직 데이터 프로필 드라이버(`roles/dlp.orgdriver`) DLP 프로젝트 데이터 프로필 드라이버(`roles/dlp.projectdriver`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`) 태그 사용자(`roles/resourcemanager.tagUser`) 태그 뷰어(`roles/resourcemanager.tagViewer`)
`managedidentities.domains.reconfigureTrust`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.resetpassword`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.restore`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.setIamPolicy`	소유자(`roles/owner`) 보안 관리자(`roles/iam.securityAdmin`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`)
`managedidentities.domains.update`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.updateLDAPSSettings`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.domains.validateTrust`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`)
`managedidentities.locations.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 백업 뷰어(`roles/managedidentities.backupViewer`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`) Google Cloud 관리형 ID 피어링 뷰어(`roles/managedidentities.peeringViewer`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.locations.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 백업 뷰어(`roles/managedidentities.backupViewer`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`) Google Cloud 관리형 ID 피어링 뷰어(`roles/managedidentities.peeringViewer`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.operations.cancel`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`)
`managedidentities.operations.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`)
`managedidentities.operations.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 백업 뷰어(`roles/managedidentities.backupViewer`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`) Google Cloud 관리형 ID 피어링 뷰어(`roles/managedidentities.peeringViewer`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.operations.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 백업 관리자(`roles/managedidentities.backupAdmin`) Google Cloud 관리형 ID 백업 뷰어(`roles/managedidentities.backupViewer`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`) Google Cloud 관리형 ID 피어링 뷰어(`roles/managedidentities.peeringViewer`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.peerings.create`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`)
`managedidentities.peerings.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`)
`managedidentities.peerings.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`) Google Cloud 관리형 ID 피어링 뷰어(`roles/managedidentities.peeringViewer`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.peerings.getIamPolicy`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`) Google Cloud 관리형 ID 피어링 뷰어(`roles/managedidentities.peeringViewer`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.peerings.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`) Google Cloud 관리형 ID 피어링 뷰어(`roles/managedidentities.peeringViewer`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.peerings.setIamPolicy`	소유자(`roles/owner`) 보안 관리자(`roles/iam.securityAdmin`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`)
`managedidentities.peerings.update`	소유자(`roles/owner`) 편집자(`roles/editor`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 피어링 관리자(`roles/managedidentities.peeringAdmin`)
`managedidentities.sqlintegrations.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)
`managedidentities.sqlintegrations.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Google Cloud 관리형 ID 관리자(`roles/managedidentities.admin`) Google Cloud 관리형 ID 도메인 관리자(`roles/managedidentities.domainAdmin`) Google Cloud 관리형 ID 뷰어(`roles/managedidentities.viewer`)

Microsoft Active Directory용 관리형 서비스 역할 및 권한 컬렉션을 사용해 정리하기 내 환경설정을 기준으로 콘텐츠를 저장하고 분류하세요.