网络保险中心角色和权限

本页面列出了网络保险中心的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

网络保险中心角色

Role Permissions

(roles/riskmanager.admin)

Grants all Risk Manager permissions

resourcemanager.projects.get

resourcemanager.projects.list

riskmanager.*

  • riskmanager.controlScoreBreakdowns.get
  • riskmanager.controlScoreBreakdowns.list
  • riskmanager.operations.delete
  • riskmanager.operations.get
  • riskmanager.operations.list
  • riskmanager.policies.get
  • riskmanager.policies.list
  • riskmanager.reports.create
  • riskmanager.reports.delete
  • riskmanager.reports.get
  • riskmanager.reports.list
  • riskmanager.reports.review
  • riskmanager.reports.share
  • riskmanager.serviceAccount.create
  • riskmanager.settings.get
  • riskmanager.settings.update

(roles/riskmanager.editor)

Access to edit Risk Manager resources

resourcemanager.projects.get

resourcemanager.projects.list

riskmanager.controlScoreBreakdowns.*

  • riskmanager.controlScoreBreakdowns.get
  • riskmanager.controlScoreBreakdowns.list

riskmanager.operations.*

  • riskmanager.operations.delete
  • riskmanager.operations.get
  • riskmanager.operations.list

riskmanager.policies.*

  • riskmanager.policies.get
  • riskmanager.policies.list

riskmanager.reports.create

riskmanager.reports.delete

riskmanager.reports.get

riskmanager.reports.list

riskmanager.serviceAccount.create

riskmanager.settings.*

  • riskmanager.settings.get
  • riskmanager.settings.update

(roles/riskmanager.reviewer)

Access to review Risk Manager reports

resourcemanager.projects.get

resourcemanager.projects.list

riskmanager.controlScoreBreakdowns.*

  • riskmanager.controlScoreBreakdowns.get
  • riskmanager.controlScoreBreakdowns.list

riskmanager.operations.get

riskmanager.operations.list

riskmanager.reports.get

riskmanager.reports.list

riskmanager.reports.review

(roles/riskmanager.serviceAgent)

Service agent that grants Risk Manager service access to fetch findings for generating Reports

cloudasset.assets.*

  • cloudasset.assets.analyzeIamPolicy
  • cloudasset.assets.analyzeMove
  • cloudasset.assets.analyzeOrgPolicy
  • cloudasset.assets.exportAccessLevel
  • cloudasset.assets.exportAccessPolicy
  • cloudasset.assets.exportAiplatformBatchPredictionJobs
  • cloudasset.assets.exportAiplatformCustomJobs
  • cloudasset.assets.exportAiplatformDataLabelingJobs
  • cloudasset.assets.exportAiplatformDatasets
  • cloudasset.assets.exportAiplatformEndpoints
  • cloudasset.assets.exportAiplatformHyperparameterTuningJobs
  • cloudasset.assets.exportAiplatformMetadataStores
  • cloudasset.assets.exportAiplatformModelDeploymentMonitoringJobs
  • cloudasset.assets.exportAiplatformModels
  • cloudasset.assets.exportAiplatformPipelineJobs
  • cloudasset.assets.exportAiplatformSpecialistPools
  • cloudasset.assets.exportAiplatformTrainingPipelines
  • cloudasset.assets.exportAllAccessPolicy
  • cloudasset.assets.exportAnthosConnectedCluster
  • cloudasset.assets.exportAnthosedgeCluster
  • cloudasset.assets.exportApigatewayApi
  • cloudasset.assets.exportApigatewayApiConfig
  • cloudasset.assets.exportApigatewayGateway
  • cloudasset.assets.exportApikeysKeys
  • cloudasset.assets.exportAppengineApplications
  • cloudasset.assets.exportAppengineServices
  • cloudasset.assets.exportAppengineVersions
  • cloudasset.assets.exportArtifactregistryDockerImages
  • cloudasset.assets.exportArtifactregistryRepositories
  • cloudasset.assets.exportAssuredWorkloadsWorkloads
  • cloudasset.assets.exportBeyondCorpApiGateways
  • cloudasset.assets.exportBeyondCorpAppConnections
  • cloudasset.assets.exportBeyondCorpAppConnectors
  • cloudasset.assets.exportBeyondCorpAppGateways
  • cloudasset.assets.exportBeyondCorpClientConnectorServices
  • cloudasset.assets.exportBeyondCorpClientGateways
  • cloudasset.assets.exportBigqueryDatasets
  • cloudasset.assets.exportBigqueryModels
  • cloudasset.assets.exportBigqueryTables
  • cloudasset.assets.exportBigtableAppProfile
  • cloudasset.assets.exportBigtableBackup
  • cloudasset.assets.exportBigtableCluster
  • cloudasset.assets.exportBigtableInstance
  • cloudasset.assets.exportBigtableTable
  • cloudasset.assets.exportCloudAssetFeeds
  • cloudasset.assets.exportCloudDeployDeliveryPipelines
  • cloudasset.assets.exportCloudDeployReleases
  • cloudasset.assets.exportCloudDeployRollouts
  • cloudasset.assets.exportCloudDeployTargets
  • cloudasset.assets.exportCloudDocumentAIEvaluation
  • cloudasset.assets.exportCloudDocumentAIHumanReviewConfig
  • cloudasset.assets.exportCloudDocumentAILabelerPool
  • cloudasset.assets.exportCloudDocumentAIProcessor
  • cloudasset.assets.exportCloudDocumentAIProcessorVersion
  • cloudasset.assets.exportCloudbillingBillingAccounts
  • cloudasset.assets.exportCloudbillingProjectBillingInfos
  • cloudasset.assets.exportCloudfunctionsFunctions
  • cloudasset.assets.exportCloudfunctionsGen2Functions
  • cloudasset.assets.exportCloudkmsCryptoKeyVersions
  • cloudasset.assets.exportCloudkmsCryptoKeys
  • cloudasset.assets.exportCloudkmsEkmConnections
  • cloudasset.assets.exportCloudkmsImportJobs
  • cloudasset.assets.exportCloudkmsKeyRings
  • cloudasset.assets.exportCloudmemcacheInstances
  • cloudasset.assets.exportCloudresourcemanagerFolders
  • cloudasset.assets.exportCloudresourcemanagerOrganizations
  • cloudasset.assets.exportCloudresourcemanagerProjects
  • cloudasset.assets.exportCloudresourcemanagerTagBindings
  • cloudasset.assets.exportCloudresourcemanagerTagKeys
  • cloudasset.assets.exportCloudresourcemanagerTagValues
  • cloudasset.assets.exportComposerEnvironments
  • cloudasset.assets.exportComputeAddress
  • cloudasset.assets.exportComputeAutoscalers
  • cloudasset.assets.exportComputeBackendBuckets
  • cloudasset.assets.exportComputeBackendServices
  • cloudasset.assets.exportComputeCommitments
  • cloudasset.assets.exportComputeDisks
  • cloudasset.assets.exportComputeExternalVpnGateways
  • cloudasset.assets.exportComputeFirewallPolicies
  • cloudasset.assets.exportComputeFirewalls
  • cloudasset.assets.exportComputeForwardingRules
  • cloudasset.assets.exportComputeGlobalAddress
  • cloudasset.assets.exportComputeGlobalForwardingRules
  • cloudasset.assets.exportComputeHealthChecks
  • cloudasset.assets.exportComputeHttpHealthChecks
  • cloudasset.assets.exportComputeHttpsHealthChecks
  • cloudasset.assets.exportComputeImages
  • cloudasset.assets.exportComputeInstanceGroupManagers
  • cloudasset.assets.exportComputeInstanceGroups
  • cloudasset.assets.exportComputeInstanceTemplates
  • cloudasset.assets.exportComputeInstances
  • cloudasset.assets.exportComputeInterconnect
  • cloudasset.assets.exportComputeInterconnectAttachment
  • cloudasset.assets.exportComputeLicenses
  • cloudasset.assets.exportComputeNetworkEndpointGroups
  • cloudasset.assets.exportComputeNetworks
  • cloudasset.assets.exportComputeNodeGroups
  • cloudasset.assets.exportComputeNodeTemplates
  • cloudasset.assets.exportComputePacketMirrorings
  • cloudasset.assets.exportComputeProjects
  • cloudasset.assets.exportComputeRegionAutoscaler
  • cloudasset.assets.exportComputeRegionBackendServices
  • cloudasset.assets.exportComputeRegionDisk
  • cloudasset.assets.exportComputeRegionInstanceGroup
  • cloudasset.assets.exportComputeRegionInstanceGroupManager
  • cloudasset.assets.exportComputeReservations
  • cloudasset.assets.exportComputeResourcePolicies
  • cloudasset.assets.exportComputeRouters
  • cloudasset.assets.exportComputeRoutes
  • cloudasset.assets.exportComputeSecurityPolicy
  • cloudasset.assets.exportComputeServiceAttachments
  • cloudasset.assets.exportComputeSnapshots
  • cloudasset.assets.exportComputeSslCertificates
  • cloudasset.assets.exportComputeSslPolicies
  • cloudasset.assets.exportComputeSubnetworks
  • cloudasset.assets.exportComputeTargetHttpProxies
  • cloudasset.assets.exportComputeTargetHttpsProxies
  • cloudasset.assets.exportComputeTargetInstances
  • cloudasset.assets.exportComputeTargetPools
  • cloudasset.assets.exportComputeTargetSslProxies
  • cloudasset.assets.exportComputeTargetTcpProxies
  • cloudasset.assets.exportComputeTargetVpnGateways
  • cloudasset.assets.exportComputeUrlMaps
  • cloudasset.assets.exportComputeVpnGateways
  • cloudasset.assets.exportComputeVpnTunnels
  • cloudasset.assets.exportConnectorsConnections
  • cloudasset.assets.exportConnectorsConnectorVersions
  • cloudasset.assets.exportConnectorsConnectors
  • cloudasset.assets.exportConnectorsProviders
  • cloudasset.assets.exportConnectorsRuntimeConfigs
  • cloudasset.assets.exportContainerAppsDeployment
  • cloudasset.assets.exportContainerAppsReplicaSets
  • cloudasset.assets.exportContainerBatchJobs
  • cloudasset.assets.exportContainerClusterrole
  • cloudasset.assets.exportContainerClusterrolebinding
  • cloudasset.assets.exportContainerClusters
  • cloudasset.assets.exportContainerExtensionsIngresses
  • cloudasset.assets.exportContainerJobs
  • cloudasset.assets.exportContainerNamespace
  • cloudasset.assets.exportContainerNetworkingIngresses
  • cloudasset.assets.exportContainerNetworkingNetworkPolicies
  • cloudasset.assets.exportContainerNode
  • cloudasset.assets.exportContainerNodepool
  • cloudasset.assets.exportContainerPod
  • cloudasset.assets.exportContainerReplicaSets
  • cloudasset.assets.exportContainerRole
  • cloudasset.assets.exportContainerRolebinding
  • cloudasset.assets.exportContainerServices
  • cloudasset.assets.exportContainerregistryImage
  • cloudasset.assets.exportDataMigrationConnectionProfiles
  • cloudasset.assets.exportDataMigrationMigrationJobs
  • cloudasset.assets.exportDataflowJobs
  • cloudasset.assets.exportDatafusionInstance
  • cloudasset.assets.exportDataplexAssets
  • cloudasset.assets.exportDataplexLakes
  • cloudasset.assets.exportDataplexTasks
  • cloudasset.assets.exportDataplexZones
  • cloudasset.assets.exportDataprocAutoscalingPolicies
  • cloudasset.assets.exportDataprocBatches
  • cloudasset.assets.exportDataprocClusters
  • cloudasset.assets.exportDataprocJobs
  • cloudasset.assets.exportDataprocSessions
  • cloudasset.assets.exportDataprocWorkflowTemplates
  • cloudasset.assets.exportDatastreamConnectionProfile
  • cloudasset.assets.exportDatastreamPrivateConnection
  • cloudasset.assets.exportDatastreamStream
  • cloudasset.assets.exportDialogflowAgents
  • cloudasset.assets.exportDialogflowConversationProfiles
  • cloudasset.assets.exportDialogflowKnowledgeBases
  • cloudasset.assets.exportDialogflowLocationSettings
  • cloudasset.assets.exportDlpDeidentifyTemplates
  • cloudasset.assets.exportDlpDlpJobs
  • cloudasset.assets.exportDlpInspectTemplates
  • cloudasset.assets.exportDlpJobTriggers
  • cloudasset.assets.exportDlpStoredInfoTypes
  • cloudasset.assets.exportDnsManagedZones
  • cloudasset.assets.exportDnsPolicies
  • cloudasset.assets.exportDomainsRegistrations
  • cloudasset.assets.exportEventarcTriggers
  • cloudasset.assets.exportFileBackups
  • cloudasset.assets.exportFileInstances
  • cloudasset.assets.exportFirebaseAppInfos
  • cloudasset.assets.exportFirebaseProjects
  • cloudasset.assets.exportFirestoreDatabases
  • cloudasset.assets.exportGKEHubFeatures
  • cloudasset.assets.exportGKEHubMemberships
  • cloudasset.assets.exportGameservicesGameServerClusters
  • cloudasset.assets.exportGameservicesGameServerConfigs
  • cloudasset.assets.exportGameservicesGameServerDeployments
  • cloudasset.assets.exportGameservicesRealms
  • cloudasset.assets.exportGkeBackupBackupPlans
  • cloudasset.assets.exportGkeBackupBackups
  • cloudasset.assets.exportGkeBackupRestorePlans
  • cloudasset.assets.exportGkeBackupRestores
  • cloudasset.assets.exportGkeBackupVolumeBackups
  • cloudasset.assets.exportGkeBackupVolumeRestores
  • cloudasset.assets.exportHealthcareConsentStores
  • cloudasset.assets.exportHealthcareDatasets
  • cloudasset.assets.exportHealthcareDicomStores
  • cloudasset.assets.exportHealthcareFhirStores
  • cloudasset.assets.exportHealthcareHl7V2Stores
  • cloudasset.assets.exportIamPolicy
  • cloudasset.assets.exportIamRoles
  • cloudasset.assets.exportIamServiceAccountKeys
  • cloudasset.assets.exportIamServiceAccounts
  • cloudasset.assets.exportIapTunnel
  • cloudasset.assets.exportIapTunnelInstances
  • cloudasset.assets.exportIapTunnelZones
  • cloudasset.assets.exportIapWeb
  • cloudasset.assets.exportIapWebServiceVersion
  • cloudasset.assets.exportIapWebServices
  • cloudasset.assets.exportIapWebType
  • cloudasset.assets.exportIdsEndpoints
  • cloudasset.assets.exportIntegrationsAuthConfigs
  • cloudasset.assets.exportIntegrationsCertificates
  • cloudasset.assets.exportIntegrationsExecutions
  • cloudasset.assets.exportIntegrationsIntegrationVersions
  • cloudasset.assets.exportIntegrationsIntegrations
  • cloudasset.assets.exportIntegrationsSfdcChannels
  • cloudasset.assets.exportIntegrationsSfdcInstances
  • cloudasset.assets.exportIntegrationsSuspensions
  • cloudasset.assets.exportLoggingLogMetrics
  • cloudasset.assets.exportLoggingLogSinks
  • cloudasset.assets.exportManagedidentitiesDomain
  • cloudasset.assets.exportMetastoreBackups
  • cloudasset.assets.exportMetastoreMetadataImports
  • cloudasset.assets.exportMetastoreServices
  • cloudasset.assets.exportMonitoringAlertPolicies
  • cloudasset.assets.exportNetworkConnectivityHubs
  • cloudasset.assets.exportNetworkConnectivitySpokes
  • cloudasset.assets.exportNetworkManagementConnectivityTests
  • cloudasset.assets.exportNetworkServicesEndpointPolicies
  • cloudasset.assets.exportNetworkServicesGateways
  • cloudasset.assets.exportNetworkServicesGrpcRoutes
  • cloudasset.assets.exportNetworkServicesHttpRoutes
  • cloudasset.assets.exportNetworkServicesMeshes
  • cloudasset.assets.exportNetworkServicesServiceBindings
  • cloudasset.assets.exportNetworkServicesTcpRoutes
  • cloudasset.assets.exportNetworkServicesTlsRoutes
  • cloudasset.assets.exportOSConfigOSPolicyAssignmentReports
  • cloudasset.assets.exportOSConfigOSPolicyAssignments
  • cloudasset.assets.exportOSConfigVulnerabilityReports
  • cloudasset.assets.exportOSInventories
  • cloudasset.assets.exportOrgPolicy
  • cloudasset.assets.exportPatchDeployments
  • cloudasset.assets.exportPubsubSnapshots
  • cloudasset.assets.exportPubsubSubscriptions
  • cloudasset.assets.exportPubsubTopics
  • cloudasset.assets.exportRedisInstances
  • cloudasset.assets.exportResource
  • cloudasset.assets.exportSecretManagerSecretVersions
  • cloudasset.assets.exportSecretManagerSecrets
  • cloudasset.assets.exportServiceDirectoryNamespaces
  • cloudasset.assets.exportServicePerimeter
  • cloudasset.assets.exportServiceconsumermanagementConsumerProperty
  • cloudasset.assets.exportServiceconsumermanagementConsumerQuotaLimits
  • cloudasset.assets.exportServiceconsumermanagementConsumers
  • cloudasset.assets.exportServiceconsumermanagementProducerOverrides
  • cloudasset.assets.exportServiceconsumermanagementTenancyUnits
  • cloudasset.assets.exportServiceconsumermanagementVisibility
  • cloudasset.assets.exportServicemanagementServices
  • cloudasset.assets.exportServiceusageAdminOverrides
  • cloudasset.assets.exportServiceusageConsumerOverrides
  • cloudasset.assets.exportServiceusageServices
  • cloudasset.assets.exportSpannerBackups
  • cloudasset.assets.exportSpannerDatabases
  • cloudasset.assets.exportSpannerInstances
  • cloudasset.assets.exportSpeakerIdPhrases
  • cloudasset.assets.exportSpeakerIdSettings
  • cloudasset.assets.exportSpeakerIdSpeakers
  • cloudasset.assets.exportSpeechCustomClasses
  • cloudasset.assets.exportSpeechPhraseSets
  • cloudasset.assets.exportSqladminBackupRuns
  • cloudasset.assets.exportSqladminInstances
  • cloudasset.assets.exportStorageBuckets
  • cloudasset.assets.exportTpuNodes
  • cloudasset.assets.exportVpcaccessConnector
  • cloudasset.assets.listAccessLevel
  • cloudasset.assets.listAccessPolicy
  • cloudasset.assets.listAiplatformBatchPredictionJobs
  • cloudasset.assets.listAiplatformCustomJobs
  • cloudasset.assets.listAiplatformDataLabelingJobs
  • cloudasset.assets.listAiplatformDatasets
  • cloudasset.assets.listAiplatformEndpoints
  • cloudasset.assets.listAiplatformHyperparameterTuningJobs
  • cloudasset.assets.listAiplatformMetadataStores
  • cloudasset.assets.listAiplatformModelDeploymentMonitoringJobs
  • cloudasset.assets.listAiplatformModels
  • cloudasset.assets.listAiplatformPipelineJobs
  • cloudasset.assets.listAiplatformSpecialistPools
  • cloudasset.assets.listAiplatformTrainingPipelines
  • cloudasset.assets.listAllAccessPolicy
  • cloudasset.assets.listAnthosConnectedCluster
  • cloudasset.assets.listAnthosedgeCluster
  • cloudasset.assets.listApigatewayApi
  • cloudasset.assets.listApigatewayApiConfig
  • cloudasset.assets.listApigatewayGateway
  • cloudasset.assets.listApikeysKeys
  • cloudasset.assets.listAppengineApplications
  • cloudasset.assets.listAppengineServices
  • cloudasset.assets.listAppengineVersions
  • cloudasset.assets.listArtifactregistryDockerImages
  • cloudasset.assets.listArtifactregistryRepositories
  • cloudasset.assets.listAssuredWorkloadsWorkloads
  • cloudasset.assets.listBeyondCorpApiGateways
  • cloudasset.assets.listBeyondCorpAppConnections
  • cloudasset.assets.listBeyondCorpAppConnectors
  • cloudasset.assets.listBeyondCorpAppGateways
  • cloudasset.assets.listBeyondCorpClientConnectorServices
  • cloudasset.assets.listBeyondCorpClientGateways
  • cloudasset.assets.listBigqueryDatasets
  • cloudasset.assets.listBigqueryModels
  • cloudasset.assets.listBigqueryTables
  • cloudasset.assets.listBigtableAppProfile
  • cloudasset.assets.listBigtableBackup
  • cloudasset.assets.listBigtableCluster
  • cloudasset.assets.listBigtableInstance
  • cloudasset.assets.listBigtableTable
  • cloudasset.assets.listCloudAssetFeeds
  • cloudasset.assets.listCloudDeployDeliveryPipelines
  • cloudasset.assets.listCloudDeployReleases
  • cloudasset.assets.listCloudDeployRollouts
  • cloudasset.assets.listCloudDeployTargets
  • cloudasset.assets.listCloudDocumentAIEvaluation
  • cloudasset.assets.listCloudDocumentAIHumanReviewConfig
  • cloudasset.assets.listCloudDocumentAILabelerPool
  • cloudasset.assets.listCloudDocumentAIProcessor
  • cloudasset.assets.listCloudDocumentAIProcessorVersion
  • cloudasset.assets.listCloudbillingBillingAccounts
  • cloudasset.assets.listCloudbillingProjectBillingInfos
  • cloudasset.assets.listCloudfunctionsFunctions
  • cloudasset.assets.listCloudfunctionsGen2Functions
  • cloudasset.assets.listCloudkmsCryptoKeyVersions
  • cloudasset.assets.listCloudkmsCryptoKeys
  • cloudasset.assets.listCloudkmsEkmConnections
  • cloudasset.assets.listCloudkmsImportJobs
  • cloudasset.assets.listCloudkmsKeyRings
  • cloudasset.assets.listCloudmemcacheInstances
  • cloudasset.assets.listCloudresourcemanagerFolders
  • cloudasset.assets.listCloudresourcemanagerOrganizations
  • cloudasset.assets.listCloudresourcemanagerProjects
  • cloudasset.assets.listCloudresourcemanagerTagBindings
  • cloudasset.assets.listCloudresourcemanagerTagKeys
  • cloudasset.assets.listCloudresourcemanagerTagValues
  • cloudasset.assets.listComposerEnvironments
  • cloudasset.assets.listComputeAddress
  • cloudasset.assets.listComputeAutoscalers
  • cloudasset.assets.listComputeBackendBuckets
  • cloudasset.assets.listComputeBackendServices
  • cloudasset.assets.listComputeCommitments
  • cloudasset.assets.listComputeDisks
  • cloudasset.assets.listComputeExternalVpnGateways
  • cloudasset.assets.listComputeFirewallPolicies
  • cloudasset.assets.listComputeFirewalls
  • cloudasset.assets.listComputeForwardingRules
  • cloudasset.assets.listComputeGlobalAddress
  • cloudasset.assets.listComputeGlobalForwardingRules
  • cloudasset.assets.listComputeHealthChecks
  • cloudasset.assets.listComputeHttpHealthChecks
  • cloudasset.assets.listComputeHttpsHealthChecks
  • cloudasset.assets.listComputeImages
  • cloudasset.assets.listComputeInstanceGroupManagers
  • cloudasset.assets.listComputeInstanceGroups
  • cloudasset.assets.listComputeInstanceTemplates
  • cloudasset.assets.listComputeInstances
  • cloudasset.assets.listComputeInterconnect
  • cloudasset.assets.listComputeInterconnectAttachment
  • cloudasset.assets.listComputeLicenses
  • cloudasset.assets.listComputeNetworkEndpointGroups
  • cloudasset.assets.listComputeNetworks
  • cloudasset.assets.listComputeNodeGroups
  • cloudasset.assets.listComputeNodeTemplates
  • cloudasset.assets.listComputePacketMirrorings
  • cloudasset.assets.listComputeProjects
  • cloudasset.assets.listComputeRegionAutoscaler
  • cloudasset.assets.listComputeRegionBackendServices
  • cloudasset.assets.listComputeRegionDisk
  • cloudasset.assets.listComputeRegionInstanceGroup
  • cloudasset.assets.listComputeRegionInstanceGroupManager
  • cloudasset.assets.listComputeReservations
  • cloudasset.assets.listComputeResourcePolicies
  • cloudasset.assets.listComputeRouters
  • cloudasset.assets.listComputeRoutes
  • cloudasset.assets.listComputeSecurityPolicy
  • cloudasset.assets.listComputeServiceAttachments
  • cloudasset.assets.listComputeSnapshots
  • cloudasset.assets.listComputeSslCertificates
  • cloudasset.assets.listComputeSslPolicies
  • cloudasset.assets.listComputeSubnetworks
  • cloudasset.assets.listComputeTargetHttpProxies
  • cloudasset.assets.listComputeTargetHttpsProxies
  • cloudasset.assets.listComputeTargetInstances
  • cloudasset.assets.listComputeTargetPools
  • cloudasset.assets.listComputeTargetSslProxies
  • cloudasset.assets.listComputeTargetTcpProxies
  • cloudasset.assets.listComputeTargetVpnGateways
  • cloudasset.assets.listComputeUrlMaps
  • cloudasset.assets.listComputeVpnGateways
  • cloudasset.assets.listComputeVpnTunnels
  • cloudasset.assets.listConnectorsConnections
  • cloudasset.assets.listConnectorsConnectorVersions
  • cloudasset.assets.listConnectorsConnectors
  • cloudasset.assets.listConnectorsProviders
  • cloudasset.assets.listConnectorsRuntimeConfigs
  • cloudasset.assets.listContainerAppsDeployment
  • cloudasset.assets.listContainerAppsReplicaSets
  • cloudasset.assets.listContainerBatchJobs
  • cloudasset.assets.listContainerClusterrole
  • cloudasset.assets.listContainerClusterrolebinding
  • cloudasset.assets.listContainerClusters
  • cloudasset.assets.listContainerExtensionsIngresses
  • cloudasset.assets.listContainerJobs
  • cloudasset.assets.listContainerNamespace
  • cloudasset.assets.listContainerNetworkingIngresses
  • cloudasset.assets.listContainerNetworkingNetworkPolicies
  • cloudasset.assets.listContainerNode
  • cloudasset.assets.listContainerNodepool
  • cloudasset.assets.listContainerPod
  • cloudasset.assets.listContainerReplicaSets
  • cloudasset.assets.listContainerRole
  • cloudasset.assets.listContainerRolebinding
  • cloudasset.assets.listContainerServices
  • cloudasset.assets.listContainerregistryImage
  • cloudasset.assets.listDataMigrationConnectionProfiles
  • cloudasset.assets.listDataMigrationMigrationJobs
  • cloudasset.assets.listDataflowJobs
  • cloudasset.assets.listDatafusionInstance
  • cloudasset.assets.listDataplexAssets
  • cloudasset.assets.listDataplexLakes
  • cloudasset.assets.listDataplexTasks
  • cloudasset.assets.listDataplexZones
  • cloudasset.assets.listDataprocAutoscalingPolicies
  • cloudasset.assets.listDataprocBatches
  • cloudasset.assets.listDataprocClusters
  • cloudasset.assets.listDataprocJobs
  • cloudasset.assets.listDataprocSessions
  • cloudasset.assets.listDataprocWorkflowTemplates
  • cloudasset.assets.listDatastreamConnectionProfile
  • cloudasset.assets.listDatastreamPrivateConnection
  • cloudasset.assets.listDatastreamStream
  • cloudasset.assets.listDialogflowAgents
  • cloudasset.assets.listDialogflowConversationProfiles
  • cloudasset.assets.listDialogflowKnowledgeBases
  • cloudasset.assets.listDialogflowLocationSettings
  • cloudasset.assets.listDlpDeidentifyTemplates
  • cloudasset.assets.listDlpDlpJobs
  • cloudasset.assets.listDlpInspectTemplates
  • cloudasset.assets.listDlpJobTriggers
  • cloudasset.assets.listDlpStoredInfoTypes
  • cloudasset.assets.listDnsManagedZones
  • cloudasset.assets.listDnsPolicies
  • cloudasset.assets.listDomainsRegistrations
  • cloudasset.assets.listEventarcTriggers
  • cloudasset.assets.listFileBackups
  • cloudasset.assets.listFileInstances
  • cloudasset.assets.listFirebaseAppInfos
  • cloudasset.assets.listFirebaseProjects
  • cloudasset.assets.listFirestoreDatabases
  • cloudasset.assets.listGKEHubFeatures
  • cloudasset.assets.listGKEHubMemberships
  • cloudasset.assets.listGameservicesGameServerClusters
  • cloudasset.assets.listGameservicesGameServerConfigs
  • cloudasset.assets.listGameservicesGameServerDeployments
  • cloudasset.assets.listGameservicesRealms
  • cloudasset.assets.listGkeBackupBackupPlans
  • cloudasset.assets.listGkeBackupBackups
  • cloudasset.assets.listGkeBackupRestorePlans
  • cloudasset.assets.listGkeBackupRestores
  • cloudasset.assets.listGkeBackupVolumeBackups
  • cloudasset.assets.listGkeBackupVolumeRestores
  • cloudasset.assets.listHealthcareConsentStores
  • cloudasset.assets.listHealthcareDatasets
  • cloudasset.assets.listHealthcareDicomStores
  • cloudasset.assets.listHealthcareFhirStores
  • cloudasset.assets.listHealthcareHl7V2Stores
  • cloudasset.assets.listIamPolicy
  • cloudasset.assets.listIamRoles
  • cloudasset.assets.listIamServiceAccountKeys
  • cloudasset.assets.listIamServiceAccounts
  • cloudasset.assets.listIapTunnel
  • cloudasset.assets.listIapTunnelInstances
  • cloudasset.assets.listIapTunnelZones
  • cloudasset.assets.listIapWeb
  • cloudasset.assets.listIapWebServiceVersion
  • cloudasset.assets.listIapWebServices
  • cloudasset.assets.listIapWebType
  • cloudasset.assets.listIdsEndpoints
  • cloudasset.assets.listIntegrationsAuthConfigs
  • cloudasset.assets.listIntegrationsCertificates
  • cloudasset.assets.listIntegrationsExecutions
  • cloudasset.assets.listIntegrationsIntegrationVersions
  • cloudasset.assets.listIntegrationsIntegrations
  • cloudasset.assets.listIntegrationsSfdcChannels
  • cloudasset.assets.listIntegrationsSfdcInstances
  • cloudasset.assets.listIntegrationsSuspensions
  • cloudasset.assets.listLoggingLogMetrics
  • cloudasset.assets.listLoggingLogSinks
  • cloudasset.assets.listManagedidentitiesDomain
  • cloudasset.assets.listMetastoreBackups
  • cloudasset.assets.listMetastoreMetadataImports
  • cloudasset.assets.listMetastoreServices
  • cloudasset.assets.listMonitoringAlertPolicies
  • cloudasset.assets.listNetworkConnectivityHubs
  • cloudasset.assets.listNetworkConnectivitySpokes
  • cloudasset.assets.listNetworkManagementConnectivityTests
  • cloudasset.assets.listNetworkServicesEndpointPolicies
  • cloudasset.assets.listNetworkServicesGateways
  • cloudasset.assets.listNetworkServicesGrpcRoutes
  • cloudasset.assets.listNetworkServicesHttpRoutes
  • cloudasset.assets.listNetworkServicesMeshes
  • cloudasset.assets.listNetworkServicesServiceBindings
  • cloudasset.assets.listNetworkServicesTcpRoutes
  • cloudasset.assets.listNetworkServicesTlsRoutes
  • cloudasset.assets.listOSConfigOSPolicyAssignmentReports
  • cloudasset.assets.listOSConfigOSPolicyAssignments
  • cloudasset.assets.listOSConfigVulnerabilityReports
  • cloudasset.assets.listOSInventories
  • cloudasset.assets.listOrgPolicy
  • cloudasset.assets.listPatchDeployments
  • cloudasset.assets.listPubsubSnapshots
  • cloudasset.assets.listPubsubSubscriptions
  • cloudasset.assets.listPubsubTopics
  • cloudasset.assets.listRedisInstances
  • cloudasset.assets.listResource
  • cloudasset.assets.listRunDomainMapping
  • cloudasset.assets.listRunRevision
  • cloudasset.assets.listRunService
  • cloudasset.assets.listSecretManagerSecretVersions
  • cloudasset.assets.listSecretManagerSecrets
  • cloudasset.assets.listServiceDirectoryNamespaces
  • cloudasset.assets.listServicePerimeter
  • cloudasset.assets.listServiceconsumermanagementConsumerProperty
  • cloudasset.assets.listServiceconsumermanagementConsumerQuotaLimits
  • cloudasset.assets.listServiceconsumermanagementConsumers
  • cloudasset.assets.listServiceconsumermanagementProducerOverrides
  • cloudasset.assets.listServiceconsumermanagementTenancyUnits
  • cloudasset.assets.listServiceconsumermanagementVisibility
  • cloudasset.assets.listServicemanagementServices
  • cloudasset.assets.listServiceusageAdminOverrides
  • cloudasset.assets.listServiceusageConsumerOverrides
  • cloudasset.assets.listServiceusageServices
  • cloudasset.assets.listSpannerBackups
  • cloudasset.assets.listSpannerDatabases
  • cloudasset.assets.listSpannerInstances
  • cloudasset.assets.listSpeakerIdPhrases
  • cloudasset.assets.listSpeakerIdSettings
  • cloudasset.assets.listSpeakerIdSpeakers
  • cloudasset.assets.listSpeechCustomClasses
  • cloudasset.assets.listSpeechPhraseSets
  • cloudasset.assets.listSqladminBackupRuns
  • cloudasset.assets.listSqladminInstances
  • cloudasset.assets.listStorageBuckets
  • cloudasset.assets.listTpuNodes
  • cloudasset.assets.listVpcaccessConnector
  • cloudasset.assets.queryAccessPolicy
  • cloudasset.assets.queryIamPolicy
  • cloudasset.assets.queryOSInventories
  • cloudasset.assets.queryResource
  • cloudasset.assets.searchAllIamPolicies
  • cloudasset.assets.searchAllResources
  • cloudasset.assets.searchEnrichmentResourceOwners

cloudasset.othercloudconnections.get

cloudasset.othercloudconnections.list

cloudasset.othercloudconnections.verify

recommender.cloudAssetInsights.get

recommender.cloudAssetInsights.list

recommender.locations.*

  • recommender.locations.get
  • recommender.locations.list

resourcemanager.folders.get

resourcemanager.folders.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter.assets.group

securitycenter.assets.list

securitycenter.assets.listAssetPropertyNames

securitycenter.bigQueryExports.get

securitycenter.bigQueryExports.list

securitycenter.complianceReports.aggregate

securitycenter.compliancesnapshots.list

securitycenter.containerthreatdetectionsettings.calculate

securitycenter.containerthreatdetectionsettings.get

securitycenter.effectivesecurityhealthanalyticscustommodules.*

  • securitycenter.effectivesecurityhealthanalyticscustommodules.get
  • securitycenter.effectivesecurityhealthanalyticscustommodules.list

securitycenter.eventthreatdetectionsettings.calculate

securitycenter.eventthreatdetectionsettings.get

securitycenter.findingexplanations.get

securitycenter.findings.group

securitycenter.findings.list

securitycenter.findings.listFindingPropertyNames

securitycenter.integratedvulnerabilityscannersettings.calculate

securitycenter.integratedvulnerabilityscannersettings.get

securitycenter.issues.get

securitycenter.issues.group

securitycenter.issues.list

securitycenter.issues.listFilterValues

securitycenter.muteconfigs.get

securitycenter.muteconfigs.list

securitycenter.notificationconfig.get

securitycenter.notificationconfig.list

securitycenter.organizationsettings.get

securitycenter.rapidvulnerabilitydetectionsettings.calculate

securitycenter.rapidvulnerabilitydetectionsettings.get

securitycenter.securitycentersettings.get

securitycenter.securityhealthanalyticscustommodules.get

securitycenter.securityhealthanalyticscustommodules.list

securitycenter.securityhealthanalyticssettings.calculate

securitycenter.securityhealthanalyticssettings.get

securitycenter.sources.get

securitycenter.sources.list

securitycenter.subscription.get

securitycenter.userinterfacemetadata.get

securitycenter.virtualmachinethreatdetectionsettings.calculate

securitycenter.virtualmachinethreatdetectionsettings.get

securitycenter.vulnerabilitysnapshots.list

securitycenter.websecurityscannersettings.calculate

securitycenter.websecurityscannersettings.get

securitycentermanagement.billingMetadata.get

securitycentermanagement.effectiveEventThreatDetectionCustomModules.*

  • securitycentermanagement.effectiveEventThreatDetectionCustomModules.get
  • securitycentermanagement.effectiveEventThreatDetectionCustomModules.list

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.*

  • securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
  • securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.get

securitycentermanagement.eventThreatDetectionCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.validate

securitycentermanagement.locations.*

  • securitycentermanagement.locations.get
  • securitycentermanagement.locations.list

securitycentermanagement.securityCenterServices.get

securitycentermanagement.securityCenterServices.list

securitycentermanagement.securityCommandCenter.checkActivationOperation

securitycentermanagement.securityCommandCenter.checkOnboardingStatus

securitycentermanagement.securityCommandCenter.get

securitycentermanagement.securityHealthAnalyticsCustomModules.get

securitycentermanagement.securityHealthAnalyticsCustomModules.list

securitycentermanagement.securityHealthAnalyticsCustomModules.simulate

securitycentermanagement.securityHealthAnalyticsCustomModules.test

(roles/riskmanager.viewer)

Access to view Risk Manager resources

resourcemanager.projects.get

resourcemanager.projects.list

riskmanager.controlScoreBreakdowns.*

  • riskmanager.controlScoreBreakdowns.get
  • riskmanager.controlScoreBreakdowns.list

riskmanager.operations.get

riskmanager.operations.list

riskmanager.policies.*

  • riskmanager.policies.get
  • riskmanager.policies.list

riskmanager.reports.get

riskmanager.reports.list

riskmanager.settings.get

网络保险中心权限

权限 以下角色拥有此权限

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Risk Manager Report Reviewer (roles/riskmanager.reviewer)

Risk Manager Viewer (roles/riskmanager.viewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Risk Manager Report Reviewer (roles/riskmanager.reviewer)

Risk Manager Viewer (roles/riskmanager.viewer)

Owner (roles/owner)

Editor (roles/editor)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Risk Manager Report Reviewer (roles/riskmanager.reviewer)

Risk Manager Viewer (roles/riskmanager.viewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Risk Manager Report Reviewer (roles/riskmanager.reviewer)

Risk Manager Viewer (roles/riskmanager.viewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Risk Manager Viewer (roles/riskmanager.viewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Risk Manager Viewer (roles/riskmanager.viewer)

Owner (roles/owner)

Editor (roles/editor)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Owner (roles/owner)

Editor (roles/editor)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Risk Manager Report Reviewer (roles/riskmanager.reviewer)

Risk Manager Viewer (roles/riskmanager.viewer)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Risk Manager Report Reviewer (roles/riskmanager.reviewer)

Risk Manager Viewer (roles/riskmanager.viewer)

Owner (roles/owner)

Editor (roles/editor)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Report Reviewer (roles/riskmanager.reviewer)

Owner (roles/owner)

Editor (roles/editor)

Risk Manager Admin (roles/riskmanager.admin)

Owner (roles/owner)

Editor (roles/editor)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)

Risk Manager Viewer (roles/riskmanager.viewer)

Owner (roles/owner)

Editor (roles/editor)

Risk Manager Admin (roles/riskmanager.admin)

Risk Manager Editor (roles/riskmanager.editor)