Pub/Sub Lite 角色和权限

本页面列出了 Pub/Sub Lite 的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

Pub/Sub Lite 角色

Role Permissions

Role	Permissions
Pub/Sub Lite Admin (`roles/pubsublite.admin`) Full access to topics, subscriptions and reservations.	`pubsublite.*` `pubsublite.locations.openKafkaStream` `pubsublite.operations.get` `pubsublite.operations.list` `pubsublite.reservations.attachTopic` `pubsublite.reservations.create` `pubsublite.reservations.delete` `pubsublite.reservations.get` `pubsublite.reservations.list` `pubsublite.reservations.listTopics` `pubsublite.reservations.update` `pubsublite.subscriptions.create` `pubsublite.subscriptions.delete` `pubsublite.subscriptions.get` `pubsublite.subscriptions.getCursor` `pubsublite.subscriptions.list` `pubsublite.subscriptions.seek` `pubsublite.subscriptions.setCursor` `pubsublite.subscriptions.subscribe` `pubsublite.subscriptions.update` `pubsublite.topics.computeHeadCursor` `pubsublite.topics.computeMessageStats` `pubsublite.topics.computeTimeCursor` `pubsublite.topics.create` `pubsublite.topics.delete` `pubsublite.topics.get` `pubsublite.topics.getPartitions` `pubsublite.topics.list` `pubsublite.topics.listSubscriptions` `pubsublite.topics.publish` `pubsublite.topics.subscribe` `pubsublite.topics.update`
Pub/Sub Lite Editor (`roles/pubsublite.editor`) Modify topics, subscriptions and reservations, publish and consume messages.	`pubsublite.*` `pubsublite.locations.openKafkaStream` `pubsublite.operations.get` `pubsublite.operations.list` `pubsublite.reservations.attachTopic` `pubsublite.reservations.create` `pubsublite.reservations.delete` `pubsublite.reservations.get` `pubsublite.reservations.list` `pubsublite.reservations.listTopics` `pubsublite.reservations.update` `pubsublite.subscriptions.create` `pubsublite.subscriptions.delete` `pubsublite.subscriptions.get` `pubsublite.subscriptions.getCursor` `pubsublite.subscriptions.list` `pubsublite.subscriptions.seek` `pubsublite.subscriptions.setCursor` `pubsublite.subscriptions.subscribe` `pubsublite.subscriptions.update` `pubsublite.topics.computeHeadCursor` `pubsublite.topics.computeMessageStats` `pubsublite.topics.computeTimeCursor` `pubsublite.topics.create` `pubsublite.topics.delete` `pubsublite.topics.get` `pubsublite.topics.getPartitions` `pubsublite.topics.list` `pubsublite.topics.listSubscriptions` `pubsublite.topics.publish` `pubsublite.topics.subscribe` `pubsublite.topics.update`
Pub/Sub Lite Publisher (`roles/pubsublite.publisher`) Publish messages to a topic.	`pubsublite.locations.openKafkaStream` `pubsublite.topics.getPartitions` `pubsublite.topics.publish`
Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`) Grants Pub/Sub Lite Service Agent access to project resources. Warning: Do not grant service agent roles to any principals except service agents.	`pubsub.topics.publish` `pubsublite.subscriptions.get` `pubsublite.subscriptions.getCursor` `pubsublite.subscriptions.setCursor` `pubsublite.subscriptions.subscribe` `pubsublite.topics.computeHeadCursor` `pubsublite.topics.getPartitions` `pubsublite.topics.publish` `pubsublite.topics.subscribe`
Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Subscribe to and read messages from a topic.	`pubsublite.locations.openKafkaStream` `pubsublite.operations.get` `pubsublite.subscriptions.getCursor` `pubsublite.subscriptions.seek` `pubsublite.subscriptions.setCursor` `pubsublite.subscriptions.subscribe` `pubsublite.topics.computeHeadCursor` `pubsublite.topics.computeMessageStats` `pubsublite.topics.computeTimeCursor` `pubsublite.topics.getPartitions` `pubsublite.topics.subscribe`
Pub/Sub Lite Viewer (`roles/pubsublite.viewer`) View topics, subscriptions and reservations.	`pubsublite.operations.*` `pubsublite.operations.get` `pubsublite.operations.list` `pubsublite.reservations.get` `pubsublite.reservations.list` `pubsublite.reservations.listTopics` `pubsublite.subscriptions.get` `pubsublite.subscriptions.getCursor` `pubsublite.subscriptions.list` `pubsublite.topics.get` `pubsublite.topics.getPartitions` `pubsublite.topics.list` `pubsublite.topics.listSubscriptions`

Pub/Sub Lite Admin

(roles/pubsublite.admin)

Full access to topics, subscriptions and reservations.

pubsublite.*

pubsublite.locations.openKafkaStream
pubsublite.operations.get
pubsublite.operations.list
pubsublite.reservations.attachTopic
pubsublite.reservations.create
pubsublite.reservations.delete
pubsublite.reservations.get
pubsublite.reservations.list
pubsublite.reservations.listTopics
pubsublite.reservations.update
pubsublite.subscriptions.create
pubsublite.subscriptions.delete
pubsublite.subscriptions.get
pubsublite.subscriptions.getCursor
pubsublite.subscriptions.list
pubsublite.subscriptions.seek
pubsublite.subscriptions.setCursor
pubsublite.subscriptions.subscribe
pubsublite.subscriptions.update
pubsublite.topics.computeHeadCursor
pubsublite.topics.computeMessageStats
pubsublite.topics.computeTimeCursor
pubsublite.topics.create
pubsublite.topics.delete
pubsublite.topics.get
pubsublite.topics.getPartitions
pubsublite.topics.list
pubsublite.topics.listSubscriptions
pubsublite.topics.publish
pubsublite.topics.subscribe
pubsublite.topics.update

Pub/Sub Lite Editor

(roles/pubsublite.editor)

Modify topics, subscriptions and reservations, publish and consume messages.

pubsublite.*

pubsublite.locations.openKafkaStream
pubsublite.operations.get
pubsublite.operations.list
pubsublite.reservations.attachTopic
pubsublite.reservations.create
pubsublite.reservations.delete
pubsublite.reservations.get
pubsublite.reservations.list
pubsublite.reservations.listTopics
pubsublite.reservations.update
pubsublite.subscriptions.create
pubsublite.subscriptions.delete
pubsublite.subscriptions.get
pubsublite.subscriptions.getCursor
pubsublite.subscriptions.list
pubsublite.subscriptions.seek
pubsublite.subscriptions.setCursor
pubsublite.subscriptions.subscribe
pubsublite.subscriptions.update
pubsublite.topics.computeHeadCursor
pubsublite.topics.computeMessageStats
pubsublite.topics.computeTimeCursor
pubsublite.topics.create
pubsublite.topics.delete
pubsublite.topics.get
pubsublite.topics.getPartitions
pubsublite.topics.list
pubsublite.topics.listSubscriptions
pubsublite.topics.publish
pubsublite.topics.subscribe
pubsublite.topics.update

Pub/Sub Lite Publisher

(roles/pubsublite.publisher)

Publish messages to a topic.

pubsublite.locations.openKafkaStream

pubsublite.topics.getPartitions

pubsublite.topics.publish

Pub/Sub Lite Service Agent

(roles/pubsublite.serviceAgent)

Grants Pub/Sub Lite Service Agent access to project resources.

pubsub.topics.publish

pubsublite.subscriptions.get

pubsublite.subscriptions.getCursor

pubsublite.subscriptions.setCursor

pubsublite.subscriptions.subscribe

pubsublite.topics.computeHeadCursor

pubsublite.topics.getPartitions

pubsublite.topics.publish

pubsublite.topics.subscribe

Pub/Sub Lite Subscriber

(roles/pubsublite.subscriber)

Subscribe to and read messages from a topic.

pubsublite.locations.openKafkaStream

pubsublite.operations.get

pubsublite.subscriptions.getCursor

pubsublite.subscriptions.seek

pubsublite.subscriptions.setCursor

pubsublite.subscriptions.subscribe

pubsublite.topics.computeHeadCursor

pubsublite.topics.computeMessageStats

pubsublite.topics.computeTimeCursor

pubsublite.topics.getPartitions

pubsublite.topics.subscribe

Pub/Sub Lite Viewer

(roles/pubsublite.viewer)

View topics, subscriptions and reservations.

pubsublite.operations.*

pubsublite.operations.get
pubsublite.operations.list

pubsublite.reservations.get

pubsublite.reservations.list

pubsublite.reservations.listTopics

pubsublite.subscriptions.get

pubsublite.subscriptions.getCursor

pubsublite.subscriptions.list

pubsublite.topics.get

pubsublite.topics.getPartitions

pubsublite.topics.list

pubsublite.topics.listSubscriptions

Pub/Sub Lite 权限

权限	以下角色拥有此权限
`pubsublite.locations.openKafkaStream`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Publisher (`roles/pubsublite.publisher`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`)
`pubsublite.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.reservations.attachTopic`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.reservations.create`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.reservations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.reservations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.reservations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.reservations.listTopics`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.reservations.update`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.subscriptions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.subscriptions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.subscriptions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.subscriptions.getCursor`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.subscriptions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.subscriptions.seek`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`)
`pubsublite.subscriptions.setCursor`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.subscriptions.subscribe`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.subscriptions.update`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.topics.computeHeadCursor`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.topics.computeMessageStats`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`)
`pubsublite.topics.computeTimeCursor`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`)
`pubsublite.topics.create`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.topics.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)
`pubsublite.topics.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.topics.getPartitions`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Publisher (`roles/pubsublite.publisher`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.topics.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.topics.listSubscriptions`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Viewer (`roles/pubsublite.viewer`)
`pubsublite.topics.publish`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Publisher (`roles/pubsublite.publisher`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`) Content Warehouse Service Agent (`roles/contentwarehouse.serviceAgent`)
`pubsublite.topics.subscribe`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`) Pub/Sub Lite Subscriber (`roles/pubsublite.subscriber`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Pub/Sub Lite Service Agent (`roles/pubsublite.serviceAgent`)
`pubsublite.topics.update`	Owner (`roles/owner`) Editor (`roles/editor`) Pub/Sub Lite Admin (`roles/pubsublite.admin`) Pub/Sub Lite Editor (`roles/pubsublite.editor`)

Pub/Sub Lite 角色和权限