On-Demand Scanning API 角色和权限

本页面列出了 On-Demand Scanning API 的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

On-Demand Scanning API 角色

Role Permissions

(roles/ondemandscanning.admin)

All permissions for On-Demand Scanning

ondemandscanning.*

  • ondemandscanning.operations.cancel
  • ondemandscanning.operations.delete
  • ondemandscanning.operations.get
  • ondemandscanning.operations.list
  • ondemandscanning.operations.wait
  • ondemandscanning.scans.analyzePackages
  • ondemandscanning.scans.listVulnerabilities
  • ondemandscanning.scans.scan

(roles/ondemandscanning.serviceAgent)

Gives the On-Demand Scanning API the access it needs to function.

artifactregistry.dockerimages.*

  • artifactregistry.dockerimages.get
  • artifactregistry.dockerimages.list

artifactregistry.files.download

artifactregistry.files.get

artifactregistry.files.list

artifactregistry.locations.*

  • artifactregistry.locations.get
  • artifactregistry.locations.list

artifactregistry.mavenartifacts.*

  • artifactregistry.mavenartifacts.get
  • artifactregistry.mavenartifacts.list

artifactregistry.npmpackages.*

  • artifactregistry.npmpackages.get
  • artifactregistry.npmpackages.list

artifactregistry.packages.get

artifactregistry.packages.list

artifactregistry.projectsettings.get

artifactregistry.pythonpackages.*

  • artifactregistry.pythonpackages.get
  • artifactregistry.pythonpackages.list

artifactregistry.repositories.downloadArtifacts

artifactregistry.repositories.get

artifactregistry.repositories.list

artifactregistry.repositories.listEffectiveTags

artifactregistry.repositories.listTagBindings

artifactregistry.repositories.readViaVirtualRepository

artifactregistry.tags.get

artifactregistry.tags.list

artifactregistry.versions.get

artifactregistry.versions.list

resourcemanager.projects.get

resourcemanager.projects.list

storage.objects.get

storage.objects.list

On-Demand Scanning API 权限

权限 以下角色拥有此权限

Owner (roles/owner)

Editor (roles/editor)

On-Demand Scanning Admin (roles/ondemandscanning.admin)

Owner (roles/owner)

Editor (roles/editor)

On-Demand Scanning Admin (roles/ondemandscanning.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

On-Demand Scanning Admin (roles/ondemandscanning.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

On-Demand Scanning Admin (roles/ondemandscanning.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

On-Demand Scanning Admin (roles/ondemandscanning.admin)

Owner (roles/owner)

Editor (roles/editor)

On-Demand Scanning Admin (roles/ondemandscanning.admin)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

On-Demand Scanning Admin (roles/ondemandscanning.admin)

Owner (roles/owner)

Editor (roles/editor)

On-Demand Scanning Admin (roles/ondemandscanning.admin)