Cloud Source Repositories 角色和权限

本页面列出了 Cloud Source Repositories 的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

Cloud Source Repositories 角色

Role Permissions

Role	Permissions
Source Repository Administrator (`roles/source.admin`) Provides permissions to create, update, delete, list, clone, fetch, and browse repositories. Also provides permissions to read and change IAM policies. Lowest-level resources where you can grant this role: Repository	`source.*` `source.repos.create` `source.repos.delete` `source.repos.get` `source.repos.getIamPolicy` `source.repos.getProjectConfig` `source.repos.list` `source.repos.setIamPolicy` `source.repos.update` `source.repos.updateProjectConfig` `source.repos.updateRepoConfig`
Source Repository Reader (`roles/source.reader`) Provides permissions to list, clone, fetch, and browse repositories. Lowest-level resources where you can grant this role: Repository	`source.repos.get` `source.repos.list`
Source Repository Writer (`roles/source.writer`) Provides permissions to list, clone, fetch, browse, and update repositories. Lowest-level resources where you can grant this role: Repository	`source.repos.get` `source.repos.list` `source.repos.update`
Cloud Source Repositories Service Agent (`roles/sourcerepo.serviceAgent`) Allow Cloud Source Repositories to integrate with other Cloud services. Warning: Do not grant service agent roles to any principals except service agents.	`iam.serviceAccounts.getAccessToken` `pubsub.topics.publish`

Source Repository Administrator

(roles/source.admin)

Provides permissions to create, update, delete, list, clone, fetch, and browse repositories. Also provides permissions to read and change IAM policies.

Lowest-level resources where you can grant this role:

Repository

source.*

source.repos.create
source.repos.delete
source.repos.get
source.repos.getIamPolicy
source.repos.getProjectConfig
source.repos.list
source.repos.setIamPolicy
source.repos.update
source.repos.updateProjectConfig
source.repos.updateRepoConfig

Source Repository Reader

(roles/source.reader)

Provides permissions to list, clone, fetch, and browse repositories.

Lowest-level resources where you can grant this role:

Repository

source.repos.get

source.repos.list

Source Repository Writer

(roles/source.writer)

Provides permissions to list, clone, fetch, browse, and update repositories.

Lowest-level resources where you can grant this role:

Repository

source.repos.get

source.repos.list

source.repos.update

Cloud Source Repositories Service Agent

(roles/sourcerepo.serviceAgent)

Allow Cloud Source Repositories to integrate with other Cloud services.

iam.serviceAccounts.getAccessToken

pubsub.topics.publish

Cloud Source Repositories 权限

权限	以下角色拥有此权限
`source.repos.create`	Owner (`roles/owner`) Source Repository Administrator (`roles/source.admin`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Cloud Deployment Manager Service Agent (`roles/clouddeploymentmanager.serviceAgent`)
`source.repos.delete`	Owner (`roles/owner`) Source Repository Administrator (`roles/source.admin`)
`source.repos.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Build 服务账号 (`roles/cloudbuild.builds.builder`) Composer Worker (`roles/composer.worker`) Cloud Run Builder (`roles/run.builder`) Source Repository Administrator (`roles/source.admin`) Source Repository Reader (`roles/source.reader`) Source Repository Writer (`roles/source.writer`) Telco Automation Admin (`roles/telcoautomation.admin`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Cloud Functions Service Agent (`roles/cloudfunctions.serviceAgent`) Endpoints Portal Service Agent (`roles/endpointsportal.serviceAgent`) Cloud Build Service Agent (`roles/cloudbuild.serviceAgent`)
`source.repos.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Source Repository Administrator (`roles/source.admin`)
`source.repos.getProjectConfig`	Owner (`roles/owner`) Source Repository Administrator (`roles/source.admin`)
`source.repos.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Cloud Build 服务账号 (`roles/cloudbuild.builds.builder`) Composer Worker (`roles/composer.worker`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Source Repository Administrator (`roles/source.admin`) Source Repository Reader (`roles/source.reader`) Source Repository Writer (`roles/source.writer`) Telco Automation Admin (`roles/telcoautomation.admin`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 Cloud Functions Service Agent (`roles/cloudfunctions.serviceAgent`) Cloud Build Service Agent (`roles/cloudbuild.serviceAgent`)
`source.repos.setIamPolicy`	Owner (`roles/owner`) Security Admin (`roles/iam.securityAdmin`) Source Repository Administrator (`roles/source.admin`)
`source.repos.update`	Owner (`roles/owner`) Editor (`roles/editor`) Source Repository Administrator (`roles/source.admin`) Source Repository Writer (`roles/source.writer`)
`source.repos.updateProjectConfig`	Owner (`roles/owner`) Source Repository Administrator (`roles/source.admin`)
`source.repos.updateRepoConfig`	Owner (`roles/owner`) Source Repository Administrator (`roles/source.admin`)

Cloud Source Repositories 角色和权限