Google Cloud Observability 角色和权限

本页面列出了 Google Cloud Observability 的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

Google Cloud Observability 角色

Role Permissions

(roles/observability.admin)

Full access to Observability resources.

observability.*

  • observability.analyticsViews.create
  • observability.analyticsViews.delete
  • observability.analyticsViews.get
  • observability.analyticsViews.list
  • observability.analyticsViews.update
  • observability.buckets.create
  • observability.buckets.delete
  • observability.buckets.get
  • observability.buckets.list
  • observability.buckets.undelete
  • observability.buckets.update
  • observability.datasets.create
  • observability.datasets.delete
  • observability.datasets.get
  • observability.datasets.list
  • observability.datasets.undelete
  • observability.datasets.update
  • observability.links.create
  • observability.links.delete
  • observability.links.get
  • observability.links.list
  • observability.links.update
  • observability.operations.cancel
  • observability.operations.delete
  • observability.operations.get
  • observability.operations.list
  • observability.scopes.get
  • observability.scopes.update
  • observability.traceScopes.create
  • observability.traceScopes.delete
  • observability.traceScopes.get
  • observability.traceScopes.list
  • observability.traceScopes.update
  • observability.views.access
  • observability.views.create
  • observability.views.delete
  • observability.views.get
  • observability.views.list
  • observability.views.update

(roles/observability.analyticsUser)

Grants permissions to use Cloud Observability Analytics.

logging.queries.getShared

logging.queries.listShared

logging.queries.usePrivate

observability.analyticsViews.*

  • observability.analyticsViews.create
  • observability.analyticsViews.delete
  • observability.analyticsViews.get
  • observability.analyticsViews.list
  • observability.analyticsViews.update

observability.buckets.get

observability.buckets.list

observability.datasets.get

observability.datasets.list

observability.links.get

observability.links.list

observability.operations.get

observability.operations.list

observability.scopes.get

observability.traceScopes.get

observability.traceScopes.list

observability.views.get

observability.views.list

(roles/observability.editor)

Edit access to Observability resources.

observability.analyticsViews.*

  • observability.analyticsViews.create
  • observability.analyticsViews.delete
  • observability.analyticsViews.get
  • observability.analyticsViews.list
  • observability.analyticsViews.update

observability.buckets.create

observability.buckets.get

observability.buckets.list

observability.buckets.update

observability.datasets.create

observability.datasets.get

observability.datasets.list

observability.datasets.update

observability.links.*

  • observability.links.create
  • observability.links.delete
  • observability.links.get
  • observability.links.list
  • observability.links.update

observability.operations.*

  • observability.operations.cancel
  • observability.operations.delete
  • observability.operations.get
  • observability.operations.list

observability.scopes.*

  • observability.scopes.get
  • observability.scopes.update

observability.traceScopes.*

  • observability.traceScopes.create
  • observability.traceScopes.delete
  • observability.traceScopes.get
  • observability.traceScopes.list
  • observability.traceScopes.update

observability.views.create

observability.views.delete

observability.views.get

observability.views.list

observability.views.update

(roles/observability.scopesEditor)

Grants permission to view and edit Observability, Logging, Trace, and Monitoring scopes

logging.logScopes.*

  • logging.logScopes.create
  • logging.logScopes.delete
  • logging.logScopes.get
  • logging.logScopes.list
  • logging.logScopes.update

monitoring.metricsScopes.link

observability.scopes.*

  • observability.scopes.get
  • observability.scopes.update

observability.traceScopes.*

  • observability.traceScopes.create
  • observability.traceScopes.delete
  • observability.traceScopes.get
  • observability.traceScopes.list
  • observability.traceScopes.update

(roles/observability.serviceAgent)

Grants Observability service account the ability to list, create and link datasets in the consumer project.

bigquery.datasets.create

bigquery.datasets.get

bigquery.datasets.link

(roles/observability.viewAccessor)

Read only access to data defined by an Observability View.

observability.views.access

(roles/observability.viewer)

Read only access to Observability resources.

observability.analyticsViews.get

observability.analyticsViews.list

observability.buckets.get

observability.buckets.list

observability.datasets.get

observability.datasets.list

observability.links.get

observability.links.list

observability.operations.get

observability.operations.list

observability.scopes.get

observability.traceScopes.get

observability.traceScopes.list

observability.views.get

observability.views.list

Google Cloud Observability 权限

权限 以下角色拥有此权限

Owner (roles/owner)

Editor (roles/editor)

Observability Admin (roles/observability.admin)

Observability Analytics User (roles/observability.analyticsUser)

Observability Editor (roles/observability.editor)

Owner (roles/owner)

Editor (roles/editor)

Observability Admin (roles/observability.admin)

Observability Analytics User (roles/observability.analyticsUser)

Observability Editor (roles/observability.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Observability Admin (roles/observability.admin)

Observability Analytics User (roles/observability.analyticsUser)

Observability Editor (roles/observability.editor)

Observability Viewer (roles/observability.viewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Observability Admin (roles/observability.admin)

Observability Analytics User (roles/observability.analyticsUser)

Observability Editor (roles/observability.editor)

Observability Viewer (roles/observability.viewer)

Owner (roles/owner)

Editor (roles/editor)

Observability Admin (roles/observability.admin)

Observability Analytics User (roles/observability.analyticsUser)

Observability Editor (roles/observability.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Cloud Hub Operator (roles/cloudhub.operator)

Cloud Trace Admin (roles/cloudtrace.admin)

Cloud Trace User (roles/cloudtrace.user)

Dataproc Hub Agent (roles/dataproc.hubAgent)

Logging Admin (roles/logging.admin)

Logs Configuration Writer (roles/logging.configWriter)

Private Logs Viewer (roles/logging.privateLogViewer)

Logs Viewer (roles/logging.viewer)

Observability Admin (roles/observability.admin)

Observability Analytics User (roles/observability.analyticsUser)

Observability Editor (roles/observability.editor)

Observability Viewer (roles/observability.viewer)

Telco Automation Admin (roles/telcoautomation.admin)

Telco Automation Tier 1 Operations Admin (roles/telcoautomation.opsAdminTier1)

Telco Automation Tier 4 Operations Admin (roles/telcoautomation.opsAdminTier4)

服务代理角色

Owner (roles/owner)

Editor (roles/editor)

Observability Admin (roles/observability.admin)

Observability Editor (roles/observability.editor)