Network Management API 역할 및 권한

이 페이지에는 Network Management API의 IAM 역할과 권한이 나와 있습니다. 모든 역할과 권한을 검색하려면 역할 및 권한 색인을 참조하세요.

Network Management API 역할

Role Permissions

Role	Permissions
Network Management Admin (`roles/networkmanagement.admin`) Full access to Network Management resources. Lowest-level resources where you can grant this role: Project	`networkmanagement.*` `networkmanagement.connectivitytests.create` `networkmanagement.connectivitytests.delete` `networkmanagement.connectivitytests.get` `networkmanagement.connectivitytests.getIamPolicy` `networkmanagement.connectivitytests.list` `networkmanagement.connectivitytests.rerun` `networkmanagement.connectivitytests.setIamPolicy` `networkmanagement.connectivitytests.update` `networkmanagement.locations.get` `networkmanagement.locations.list` `networkmanagement.operations.cancel` `networkmanagement.operations.delete` `networkmanagement.operations.get` `networkmanagement.operations.list` `networkmanagement.vpcflowlogsconfigs.create` `networkmanagement.vpcflowlogsconfigs.delete` `networkmanagement.vpcflowlogsconfigs.get` `networkmanagement.vpcflowlogsconfigs.list` `networkmanagement.vpcflowlogsconfigs.update` `resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list`
GCP Network Management Service Agent (`roles/networkmanagement.serviceAgent`) Grants the GCP Network Management API the authority to complete analysis based on network configurations from Compute Engine and Container Engine. Warning: Do not grant service agent roles to any principals except service agents.	`cloudsql.instances.get` `cloudsql.instances.list` `compute.addresses.get` `compute.addresses.list` `compute.backendServices.get` `compute.backendServices.list` `compute.externalVpnGateways.get` `compute.externalVpnGateways.list` `compute.firewalls.get` `compute.firewalls.list` `compute.forwardingRules.get` `compute.forwardingRules.list` `compute.globalAddresses.get` `compute.globalAddresses.list` `compute.globalForwardingRules.get` `compute.globalForwardingRules.list` `compute.globalNetworkEndpointGroups.get` `compute.globalNetworkEndpointGroups.list` `compute.healthChecks.get` `compute.healthChecks.list` `compute.httpHealthChecks.get` `compute.httpHealthChecks.list` `compute.httpsHealthChecks.get` `compute.httpsHealthChecks.list` `compute.instanceGroups.get` `compute.instanceGroups.list` `compute.instances.get` `compute.instances.list` `compute.networkEndpointGroups.get` `compute.networkEndpointGroups.list` `compute.networks.get` `compute.networks.getEffectiveFirewalls` `compute.networks.list` `compute.networks.listPeeringRoutes` `compute.packetMirrorings.get` `compute.packetMirrorings.list` `compute.regionBackendServices.get` `compute.regionBackendServices.list` `compute.regionHealthChecks.get` `compute.regionHealthChecks.list` `compute.regionNetworkEndpointGroups.get` `compute.regionNetworkEndpointGroups.list` `compute.regionTargetHttpProxies.get` `compute.regionTargetHttpProxies.list` `compute.regionTargetHttpsProxies.get` `compute.regionTargetHttpsProxies.list` `compute.regionTargetTcpProxies.get` `compute.regionTargetTcpProxies.list` `compute.regionUrlMaps.get` `compute.regionUrlMaps.list` `compute.routers.get` `compute.routers.list` `compute.routes.get` `compute.routes.list` `compute.subnetworks.get` `compute.subnetworks.list` `compute.targetGrpcProxies.get` `compute.targetGrpcProxies.list` `compute.targetHttpProxies.get` `compute.targetHttpProxies.list` `compute.targetHttpsProxies.get` `compute.targetHttpsProxies.list` `compute.targetInstances.get` `compute.targetInstances.list` `compute.targetPools.get` `compute.targetPools.list` `compute.targetSslProxies.get` `compute.targetSslProxies.list` `compute.targetTcpProxies.get` `compute.targetTcpProxies.list` `compute.targetVpnGateways.get` `compute.targetVpnGateways.list` `compute.urlMaps.get` `compute.urlMaps.list` `compute.vpnGateways.get` `compute.vpnGateways.list` `compute.vpnTunnels.get` `compute.vpnTunnels.list` `container.clusters.get` `container.clusters.list` `container.nodes.get` `container.nodes.list`
Network Management Viewer (`roles/networkmanagement.viewer`) Read-only access to Network Management resources. Lowest-level resources where you can grant this role: Project	`networkmanagement.connectivitytests.get` `networkmanagement.connectivitytests.getIamPolicy` `networkmanagement.connectivitytests.list` `networkmanagement.locations.*` `networkmanagement.locations.get` `networkmanagement.locations.list` `networkmanagement.operations.get` `networkmanagement.operations.list` `networkmanagement.vpcflowlogsconfigs.get` `networkmanagement.vpcflowlogsconfigs.list` `resourcemanager.organizations.get` `resourcemanager.projects.get` `resourcemanager.projects.list`

Network Management Admin

(roles/networkmanagement.admin)

Full access to Network Management resources.

Lowest-level resources where you can grant this role:

Project

networkmanagement.*

networkmanagement.connectivitytests.create
networkmanagement.connectivitytests.delete
networkmanagement.connectivitytests.get
networkmanagement.connectivitytests.getIamPolicy
networkmanagement.connectivitytests.list
networkmanagement.connectivitytests.rerun
networkmanagement.connectivitytests.setIamPolicy
networkmanagement.connectivitytests.update
networkmanagement.locations.get
networkmanagement.locations.list
networkmanagement.operations.cancel
networkmanagement.operations.delete
networkmanagement.operations.get
networkmanagement.operations.list
networkmanagement.vpcflowlogsconfigs.create
networkmanagement.vpcflowlogsconfigs.delete
networkmanagement.vpcflowlogsconfigs.get
networkmanagement.vpcflowlogsconfigs.list
networkmanagement.vpcflowlogsconfigs.update

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

GCP Network Management Service Agent

(roles/networkmanagement.serviceAgent)

Grants the GCP Network Management API the authority to complete analysis based on network configurations from Compute Engine and Container Engine.

cloudsql.instances.get

cloudsql.instances.list

compute.addresses.get

compute.addresses.list

compute.backendServices.get

compute.backendServices.list

compute.externalVpnGateways.get

compute.externalVpnGateways.list

compute.firewalls.get

compute.firewalls.list

compute.forwardingRules.get

compute.forwardingRules.list

compute.globalAddresses.get

compute.globalAddresses.list

compute.globalForwardingRules.get

compute.globalForwardingRules.list

compute.globalNetworkEndpointGroups.get

compute.globalNetworkEndpointGroups.list

compute.healthChecks.get

compute.healthChecks.list

compute.httpHealthChecks.get

compute.httpHealthChecks.list

compute.httpsHealthChecks.get

compute.httpsHealthChecks.list

compute.instanceGroups.get

compute.instanceGroups.list

compute.instances.get

compute.instances.list

compute.networkEndpointGroups.get

compute.networkEndpointGroups.list

compute.networks.get

compute.networks.getEffectiveFirewalls

compute.networks.list

compute.networks.listPeeringRoutes

compute.packetMirrorings.get

compute.packetMirrorings.list

compute.regionBackendServices.get

compute.regionBackendServices.list

compute.regionHealthChecks.get

compute.regionHealthChecks.list

compute.regionNetworkEndpointGroups.get

compute.regionNetworkEndpointGroups.list

compute.regionTargetHttpProxies.get

compute.regionTargetHttpProxies.list

compute.regionTargetHttpsProxies.get

compute.regionTargetHttpsProxies.list

compute.regionTargetTcpProxies.get

compute.regionTargetTcpProxies.list

compute.regionUrlMaps.get

compute.regionUrlMaps.list

compute.routers.get

compute.routers.list

compute.routes.get

compute.routes.list

compute.subnetworks.get

compute.subnetworks.list

compute.targetGrpcProxies.get

compute.targetGrpcProxies.list

compute.targetHttpProxies.get

compute.targetHttpProxies.list

compute.targetHttpsProxies.get

compute.targetHttpsProxies.list

compute.targetInstances.get

compute.targetInstances.list

compute.targetPools.get

compute.targetPools.list

compute.targetSslProxies.get

compute.targetSslProxies.list

compute.targetTcpProxies.get

compute.targetTcpProxies.list

compute.targetVpnGateways.get

compute.targetVpnGateways.list

compute.urlMaps.get

compute.urlMaps.list

compute.vpnGateways.get

compute.vpnGateways.list

compute.vpnTunnels.get

compute.vpnTunnels.list

container.clusters.get

container.clusters.list

container.nodes.get

container.nodes.list

Network Management Viewer

(roles/networkmanagement.viewer)

Read-only access to Network Management resources.

Lowest-level resources where you can grant this role:

Project

networkmanagement.connectivitytests.get

networkmanagement.connectivitytests.getIamPolicy

networkmanagement.connectivitytests.list

networkmanagement.locations.*

networkmanagement.locations.get
networkmanagement.locations.list

networkmanagement.operations.get

networkmanagement.operations.list

networkmanagement.vpcflowlogsconfigs.get

networkmanagement.vpcflowlogsconfigs.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

Network Management API 권한

권한	역할에 포함됨
`networkmanagement.connectivitytests.create`	소유자(`roles/owner`) 편집자(`roles/editor`) 네트워크 관리 관리자(`roles/networkmanagement.admin`)
`networkmanagement.connectivitytests.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) 네트워크 관리 관리자(`roles/networkmanagement.admin`)
`networkmanagement.connectivitytests.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Compute 네트워크 관리자(`roles/compute.networkAdmin`) Compute 네트워크 사용자(`roles/compute.networkUser`) Compute 네트워크 뷰어(`roles/compute.networkViewer`) 네트워크 관리 관리자(`roles/networkmanagement.admin`) 네트워크 관리 뷰어(`roles/networkmanagement.viewer`) 서비스 에이전트 역할 경고: 서비스 에이전트를 제외하고 주 구성원에 서비스 에이전트 역할을 부여하지 마세요. Cloud Composer API 서비스 에이전트(`roles/composer.serviceAgent`) Kubernetes Engine 서비스 에이전트(`roles/container.serviceAgent`) Cloud Dataflow 서비스 에이전트(`roles/dataflow.serviceAgent`) Cloud Data Fusion API 서비스 에이전트(`roles/datafusion.serviceAgent`) Cloud TPU V2 API 서비스 에이전트(`roles/cloudtpu.serviceAgent`)
`networkmanagement.connectivitytests.getIamPolicy`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) 네트워크 관리 관리자(`roles/networkmanagement.admin`) 네트워크 관리 뷰어(`roles/networkmanagement.viewer`)
`networkmanagement.connectivitytests.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Compute 네트워크 관리자(`roles/compute.networkAdmin`) Compute 네트워크 사용자(`roles/compute.networkUser`) Compute 네트워크 뷰어(`roles/compute.networkViewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) 네트워크 관리 관리자(`roles/networkmanagement.admin`) 네트워크 관리 뷰어(`roles/networkmanagement.viewer`) 서비스 에이전트 역할 경고: 서비스 에이전트를 제외하고 주 구성원에 서비스 에이전트 역할을 부여하지 마세요. Cloud Composer API 서비스 에이전트(`roles/composer.serviceAgent`) Kubernetes Engine 서비스 에이전트(`roles/container.serviceAgent`) Cloud Dataflow 서비스 에이전트(`roles/dataflow.serviceAgent`) Cloud Data Fusion API 서비스 에이전트(`roles/datafusion.serviceAgent`) 데이터베이스 마이그레이션 서비스 에이전트(`roles/datamigration.serviceAgent`) Cloud TPU V2 API 서비스 에이전트(`roles/cloudtpu.serviceAgent`)
`networkmanagement.connectivitytests.rerun`	소유자(`roles/owner`) 편집자(`roles/editor`) 네트워크 관리 관리자(`roles/networkmanagement.admin`)
`networkmanagement.connectivitytests.setIamPolicy`	소유자(`roles/owner`) 보안 관리자(`roles/iam.securityAdmin`) 네트워크 관리 관리자(`roles/networkmanagement.admin`)
`networkmanagement.connectivitytests.update`	소유자(`roles/owner`) 편집자(`roles/editor`) 네트워크 관리 관리자(`roles/networkmanagement.admin`)
`networkmanagement.locations.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 네트워크 관리 관리자(`roles/networkmanagement.admin`) 네트워크 관리 뷰어(`roles/networkmanagement.viewer`)
`networkmanagement.locations.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) 네트워크 관리 관리자(`roles/networkmanagement.admin`) 네트워크 관리 뷰어(`roles/networkmanagement.viewer`)
`networkmanagement.operations.cancel`	소유자(`roles/owner`) 편집자(`roles/editor`) 네트워크 관리 관리자(`roles/networkmanagement.admin`)
`networkmanagement.operations.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) 네트워크 관리 관리자(`roles/networkmanagement.admin`)
`networkmanagement.operations.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 네트워크 관리 관리자(`roles/networkmanagement.admin`) 네트워크 관리 뷰어(`roles/networkmanagement.viewer`)
`networkmanagement.operations.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) 네트워크 관리 관리자(`roles/networkmanagement.admin`) 네트워크 관리 뷰어(`roles/networkmanagement.viewer`)
`networkmanagement.vpcflowlogsconfigs.create`	소유자(`roles/owner`) 편집자(`roles/editor`) 네트워크 관리 관리자(`roles/networkmanagement.admin`)
`networkmanagement.vpcflowlogsconfigs.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) 네트워크 관리 관리자(`roles/networkmanagement.admin`)
`networkmanagement.vpcflowlogsconfigs.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 네트워크 관리 관리자(`roles/networkmanagement.admin`) 네트워크 관리 뷰어(`roles/networkmanagement.viewer`)
`networkmanagement.vpcflowlogsconfigs.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) 네트워크 관리 관리자(`roles/networkmanagement.admin`) 네트워크 관리 뷰어(`roles/networkmanagement.viewer`)
`networkmanagement.vpcflowlogsconfigs.update`	소유자(`roles/owner`) 편집자(`roles/editor`) 네트워크 관리 관리자(`roles/networkmanagement.admin`)

Network Management API 역할 및 권한