서비스 네트워킹 역할 및 권한

이 페이지에는 서비스 네트워킹의 IAM 역할과 권한이 나와 있습니다. 모든 역할과 권한을 검색하려면 역할 및 권한 색인을 참조하세요.

서비스 네트워킹 역할

Role Permissions

(roles/servicenetworking.networksAdmin)

Full control of service networking with projects.

servicenetworking.*

  • servicenetworking.operations.cancel
  • servicenetworking.operations.delete
  • servicenetworking.operations.get
  • servicenetworking.operations.list
  • servicenetworking.services.addDnsRecordSet
  • servicenetworking.services.addDnsZone
  • servicenetworking.services.addPeering
  • servicenetworking.services.addSubnetwork
  • servicenetworking.services.createPeeredDnsDomain
  • servicenetworking.services.deleteConnection
  • servicenetworking.services.deletePeeredDnsDomain
  • servicenetworking.services.disableVpcServiceControls
  • servicenetworking.services.enableVpcServiceControls
  • servicenetworking.services.get
  • servicenetworking.services.getConsumerConfig
  • servicenetworking.services.listPeeredDnsDomains
  • servicenetworking.services.removeDnsRecordSet
  • servicenetworking.services.removeDnsZone
  • servicenetworking.services.updateConsumerConfig
  • servicenetworking.services.updateDnsRecordSet
  • servicenetworking.services.use

(roles/servicenetworking.serviceAgent)

Gives permission to manage network configuration, such as establishing network peering, necessary for service producers

compute.globalAddresses.get

compute.globalAddresses.list

compute.globalOperations.get

compute.networks.addPeering

compute.networks.create

compute.networks.delete

compute.networks.get

compute.networks.list

compute.networks.listPeeringRoutes

compute.networks.removePeering

compute.networks.update

compute.networks.updatePeering

compute.networks.updatePolicy

compute.projects.get

compute.regionOperations.get

compute.routers.get

compute.routers.list

compute.routes.list

compute.subnetworks.create

compute.subnetworks.delete

compute.subnetworks.get

compute.subnetworks.list

dns.changes.*

  • dns.changes.create
  • dns.changes.get
  • dns.changes.list

dns.dnsKeys.*

  • dns.dnsKeys.get
  • dns.dnsKeys.list

dns.gkeClusters.*

  • dns.gkeClusters.bindDNSResponsePolicy
  • dns.gkeClusters.bindPrivateDNSZone

dns.managedZoneOperations.*

  • dns.managedZoneOperations.get
  • dns.managedZoneOperations.list

dns.managedZones.create

dns.managedZones.delete

dns.managedZones.get

dns.managedZones.getIamPolicy

dns.managedZones.list

dns.managedZones.update

dns.networks.*

  • dns.networks.bindDNSResponsePolicy
  • dns.networks.bindPrivateDNSPolicy
  • dns.networks.bindPrivateDNSZone
  • dns.networks.targetWithPeeringZone
  • dns.networks.useHealthSignals

dns.policies.*

  • dns.policies.create
  • dns.policies.delete
  • dns.policies.get
  • dns.policies.list
  • dns.policies.update

dns.projects.get

dns.resourceRecordSets.*

  • dns.resourceRecordSets.create
  • dns.resourceRecordSets.delete
  • dns.resourceRecordSets.get
  • dns.resourceRecordSets.list
  • dns.resourceRecordSets.update

dns.responsePolicies.*

  • dns.responsePolicies.create
  • dns.responsePolicies.delete
  • dns.responsePolicies.get
  • dns.responsePolicies.list
  • dns.responsePolicies.update

dns.responsePolicyRules.*

  • dns.responsePolicyRules.create
  • dns.responsePolicyRules.delete
  • dns.responsePolicyRules.get
  • dns.responsePolicyRules.list
  • dns.responsePolicyRules.update

networkconnectivity.internalRanges.list

resourcemanager.projects.get

resourcemanager.projects.list

서비스 네트워킹 권한

권한 역할에 포함됨

소유자(roles/owner)

편집자(roles/editor)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

편집자(roles/editor)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

편집자(roles/editor)

뷰어 (roles/viewer)

Compute 네트워크 관리자(roles/compute.networkAdmin)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

서비스 에이전트 역할

소유자(roles/owner)

편집자(roles/editor)

뷰어 (roles/viewer)

보안 관리자(roles/iam.securityAdmin)

보안 검토자(roles/iam.securityReviewer)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

편집자(roles/editor)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

편집자(roles/editor)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

Compute 네트워크 관리자(roles/compute.networkAdmin)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

서비스 에이전트 역할

소유자(roles/owner)

편집자(roles/editor)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

편집자(roles/editor)

Compute 네트워크 관리자(roles/compute.networkAdmin)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

서비스 에이전트 역할

소유자(roles/owner)

편집자(roles/editor)

Compute 네트워크 관리자(roles/compute.networkAdmin)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

서비스 에이전트 역할

소유자(roles/owner)

편집자(roles/editor)

Compute 네트워크 관리자(roles/compute.networkAdmin)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

서비스 에이전트 역할

소유자(roles/owner)

편집자(roles/editor)

Compute 네트워크 관리자(roles/compute.networkAdmin)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

서비스 에이전트 역할

소유자(roles/owner)

편집자(roles/editor)

Compute 네트워크 관리자(roles/compute.networkAdmin)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

서비스 에이전트 역할

소유자(roles/owner)

편집자(roles/editor)

뷰어 (roles/viewer)

Compute 네트워크 관리자(roles/compute.networkAdmin)

Compute 네트워크 사용자(roles/compute.networkUser)

Compute 네트워크 뷰어(roles/compute.networkViewer)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

서비스 에이전트 역할

소유자(roles/owner)

편집자(roles/editor)

뷰어 (roles/viewer)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

편집자(roles/editor)

Compute 네트워크 관리자(roles/compute.networkAdmin)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

서비스 에이전트 역할

소유자(roles/owner)

편집자(roles/editor)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

편집자(roles/editor)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

편집자(roles/editor)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

편집자(roles/editor)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)

소유자(roles/owner)

편집자(roles/editor)

서비스 네트워킹 관리자(roles/servicenetworking.networksAdmin)