Storage Insights 역할 및 권한

이 페이지에는 Storage Insights의 IAM 역할과 권한이 나와 있습니다. 모든 역할과 권한을 검색하려면 역할 및 권한 색인을 참조하세요.

Storage Insights 역할

Role Permissions

Role	Permissions
Storage Insights Admin (`roles/storageinsights.admin`) Full access to Storage Insights resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `storageinsights.*` `storageinsights.datasetConfigs.create` `storageinsights.datasetConfigs.delete` `storageinsights.datasetConfigs.get` `storageinsights.datasetConfigs.linkDataset` `storageinsights.datasetConfigs.list` `storageinsights.datasetConfigs.unlinkDataset` `storageinsights.datasetConfigs.update` `storageinsights.locations.get` `storageinsights.locations.list` `storageinsights.operations.cancel` `storageinsights.operations.delete` `storageinsights.operations.get` `storageinsights.operations.list` `storageinsights.reportConfigs.create` `storageinsights.reportConfigs.delete` `storageinsights.reportConfigs.get` `storageinsights.reportConfigs.list` `storageinsights.reportConfigs.update` `storageinsights.reportDetails.get` `storageinsights.reportDetails.list`
Storage Insights Analyst (`roles/storageinsights.analyst`) Data access to Storage Insights.	`resourcemanager.projects.get` `resourcemanager.projects.list` `storageinsights.datasetConfigs.get` `storageinsights.datasetConfigs.linkDataset` `storageinsights.datasetConfigs.list` `storageinsights.datasetConfigs.unlinkDataset` `storageinsights.locations.` `storageinsights.locations.get` `storageinsights.locations.list` `storageinsights.operations.get` `storageinsights.operations.list` `storageinsights.reportConfigs.get` `storageinsights.reportConfigs.list` `storageinsights.reportDetails.` `storageinsights.reportDetails.get` `storageinsights.reportDetails.list`
StorageInsights Service Agent (`roles/storageinsights.serviceAgent`) Permissions for Insights to write reports into customer project Warning: Do not grant service agent roles to any principals except service agents.	`bigquery.datasets.create` `serviceusage.services.use` `storageinsights.reportDetails.list`
Storage Insights Viewer (`roles/storageinsights.viewer`) Read-only access to Storage Insights resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `storageinsights.datasetConfigs.get` `storageinsights.datasetConfigs.list` `storageinsights.locations.` `storageinsights.locations.get` `storageinsights.locations.list` `storageinsights.operations.get` `storageinsights.operations.list` `storageinsights.reportConfigs.get` `storageinsights.reportConfigs.list` `storageinsights.reportDetails.` `storageinsights.reportDetails.get` `storageinsights.reportDetails.list`

Storage Insights Admin

(roles/storageinsights.admin)

Full access to Storage Insights resources.

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.*

storageinsights.datasetConfigs.create
storageinsights.datasetConfigs.delete
storageinsights.datasetConfigs.get
storageinsights.datasetConfigs.linkDataset
storageinsights.datasetConfigs.list
storageinsights.datasetConfigs.unlinkDataset
storageinsights.datasetConfigs.update
storageinsights.locations.get
storageinsights.locations.list
storageinsights.operations.cancel
storageinsights.operations.delete
storageinsights.operations.get
storageinsights.operations.list
storageinsights.reportConfigs.create
storageinsights.reportConfigs.delete
storageinsights.reportConfigs.get
storageinsights.reportConfigs.list
storageinsights.reportConfigs.update
storageinsights.reportDetails.get
storageinsights.reportDetails.list

Storage Insights Analyst

(roles/storageinsights.analyst)

Data access to Storage Insights.

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.datasetConfigs.get

storageinsights.datasetConfigs.linkDataset

storageinsights.datasetConfigs.list

storageinsights.datasetConfigs.unlinkDataset

storageinsights.locations.*

storageinsights.locations.get
storageinsights.locations.list

storageinsights.operations.get

storageinsights.operations.list

storageinsights.reportConfigs.get

storageinsights.reportConfigs.list

storageinsights.reportDetails.*

storageinsights.reportDetails.get
storageinsights.reportDetails.list

StorageInsights Service Agent

(roles/storageinsights.serviceAgent)

Permissions for Insights to write reports into customer project

bigquery.datasets.create

serviceusage.services.use

storageinsights.reportDetails.list

Storage Insights Viewer

(roles/storageinsights.viewer)

Read-only access to Storage Insights resources.

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.datasetConfigs.get

storageinsights.datasetConfigs.list

storageinsights.locations.*

storageinsights.locations.get
storageinsights.locations.list

storageinsights.operations.get

storageinsights.operations.list

storageinsights.reportConfigs.get

storageinsights.reportConfigs.list

storageinsights.reportDetails.*

storageinsights.reportDetails.get
storageinsights.reportDetails.list

Storage Insights 권한

권한	역할에 포함됨
`storageinsights.datasetConfigs.create`	소유자(`roles/owner`) 편집자(`roles/editor`) Storage Insights 관리자(`roles/storageinsights.admin`)
`storageinsights.datasetConfigs.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) Storage Insights 관리자(`roles/storageinsights.admin`)
`storageinsights.datasetConfigs.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`) Storage Insights 뷰어(`roles/storageinsights.viewer`)
`storageinsights.datasetConfigs.linkDataset`	소유자(`roles/owner`) 편집자(`roles/editor`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`)
`storageinsights.datasetConfigs.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`) Storage Insights 뷰어(`roles/storageinsights.viewer`)
`storageinsights.datasetConfigs.unlinkDataset`	소유자(`roles/owner`) 편집자(`roles/editor`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`)
`storageinsights.datasetConfigs.update`	소유자(`roles/owner`) 편집자(`roles/editor`) Storage Insights 관리자(`roles/storageinsights.admin`)
`storageinsights.locations.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`) Storage Insights 뷰어(`roles/storageinsights.viewer`)
`storageinsights.locations.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`) Storage Insights 뷰어(`roles/storageinsights.viewer`)
`storageinsights.operations.cancel`	소유자(`roles/owner`) 편집자(`roles/editor`) Storage Insights 관리자(`roles/storageinsights.admin`)
`storageinsights.operations.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) Storage Insights 관리자(`roles/storageinsights.admin`)
`storageinsights.operations.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`) Storage Insights 뷰어(`roles/storageinsights.viewer`)
`storageinsights.operations.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`) Storage Insights 뷰어(`roles/storageinsights.viewer`)
`storageinsights.reportConfigs.create`	소유자(`roles/owner`) 편집자(`roles/editor`) Storage Insights 관리자(`roles/storageinsights.admin`)
`storageinsights.reportConfigs.delete`	소유자(`roles/owner`) 편집자(`roles/editor`) Storage Insights 관리자(`roles/storageinsights.admin`)
`storageinsights.reportConfigs.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`) Storage Insights 뷰어(`roles/storageinsights.viewer`)
`storageinsights.reportConfigs.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`) Storage Insights 뷰어(`roles/storageinsights.viewer`)
`storageinsights.reportConfigs.update`	소유자(`roles/owner`) 편집자(`roles/editor`) Storage Insights 관리자(`roles/storageinsights.admin`)
`storageinsights.reportDetails.get`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`) Storage Insights 뷰어(`roles/storageinsights.viewer`)
`storageinsights.reportDetails.list`	소유자(`roles/owner`) 편집자(`roles/editor`) 뷰어 (`roles/viewer`) 보안 관리자(`roles/iam.securityAdmin`) 보안 검토자(`roles/iam.securityReviewer`) Storage Insights 관리자(`roles/storageinsights.admin`) Storage Insights 분석가(`roles/storageinsights.analyst`) Storage Insights 뷰어(`roles/storageinsights.viewer`) 서비스 에이전트 역할 경고: 서비스 에이전트를 제외하고 주 구성원에 서비스 에이전트 역할을 부여하지 마세요. StorageInsights 서비스 에이전트(`roles/storageinsights.serviceAgent`)

Storage Insights 역할 및 권한