存储空间分析角色和权限

本页面列出了存储空间分析的 IAM 角色和权限。如需搜索所有角色和权限，请参阅角色和权限索引。

存储空间分析角色

Role Permissions

Role	Permissions
Storage Insights Admin (`roles/storageinsights.admin`) Full access to Storage Insights resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `storageinsights.*` `storageinsights.datasetConfigs.create` `storageinsights.datasetConfigs.delete` `storageinsights.datasetConfigs.get` `storageinsights.datasetConfigs.linkDataset` `storageinsights.datasetConfigs.list` `storageinsights.datasetConfigs.unlinkDataset` `storageinsights.datasetConfigs.update` `storageinsights.locations.get` `storageinsights.locations.list` `storageinsights.operations.cancel` `storageinsights.operations.delete` `storageinsights.operations.get` `storageinsights.operations.list` `storageinsights.reportConfigs.create` `storageinsights.reportConfigs.delete` `storageinsights.reportConfigs.get` `storageinsights.reportConfigs.list` `storageinsights.reportConfigs.update` `storageinsights.reportDetails.get` `storageinsights.reportDetails.list`
Storage Insights Analyst (`roles/storageinsights.analyst`) Data access to Storage Insights.	`resourcemanager.projects.get` `resourcemanager.projects.list` `storageinsights.datasetConfigs.get` `storageinsights.datasetConfigs.linkDataset` `storageinsights.datasetConfigs.list` `storageinsights.datasetConfigs.unlinkDataset` `storageinsights.locations.` `storageinsights.locations.get` `storageinsights.locations.list` `storageinsights.operations.get` `storageinsights.operations.list` `storageinsights.reportConfigs.get` `storageinsights.reportConfigs.list` `storageinsights.reportDetails.` `storageinsights.reportDetails.get` `storageinsights.reportDetails.list`
StorageInsights Service Agent (`roles/storageinsights.serviceAgent`) Permissions for Insights to write reports into customer project Warning: Do not grant service agent roles to any principals except service agents.	`bigquery.datasets.create` `serviceusage.services.use` `storageinsights.reportDetails.list`
Storage Insights Viewer (`roles/storageinsights.viewer`) Read-only access to Storage Insights resources.	`resourcemanager.projects.get` `resourcemanager.projects.list` `storageinsights.datasetConfigs.get` `storageinsights.datasetConfigs.list` `storageinsights.locations.` `storageinsights.locations.get` `storageinsights.locations.list` `storageinsights.operations.get` `storageinsights.operations.list` `storageinsights.reportConfigs.get` `storageinsights.reportConfigs.list` `storageinsights.reportDetails.` `storageinsights.reportDetails.get` `storageinsights.reportDetails.list`

Storage Insights Admin

(roles/storageinsights.admin)

Full access to Storage Insights resources.

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.*

storageinsights.datasetConfigs.create
storageinsights.datasetConfigs.delete
storageinsights.datasetConfigs.get
storageinsights.datasetConfigs.linkDataset
storageinsights.datasetConfigs.list
storageinsights.datasetConfigs.unlinkDataset
storageinsights.datasetConfigs.update
storageinsights.locations.get
storageinsights.locations.list
storageinsights.operations.cancel
storageinsights.operations.delete
storageinsights.operations.get
storageinsights.operations.list
storageinsights.reportConfigs.create
storageinsights.reportConfigs.delete
storageinsights.reportConfigs.get
storageinsights.reportConfigs.list
storageinsights.reportConfigs.update
storageinsights.reportDetails.get
storageinsights.reportDetails.list

Storage Insights Analyst

(roles/storageinsights.analyst)

Data access to Storage Insights.

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.datasetConfigs.get

storageinsights.datasetConfigs.linkDataset

storageinsights.datasetConfigs.list

storageinsights.datasetConfigs.unlinkDataset

storageinsights.locations.*

storageinsights.locations.get
storageinsights.locations.list

storageinsights.operations.get

storageinsights.operations.list

storageinsights.reportConfigs.get

storageinsights.reportConfigs.list

storageinsights.reportDetails.*

storageinsights.reportDetails.get
storageinsights.reportDetails.list

StorageInsights Service Agent

(roles/storageinsights.serviceAgent)

Permissions for Insights to write reports into customer project

bigquery.datasets.create

serviceusage.services.use

storageinsights.reportDetails.list

Storage Insights Viewer

(roles/storageinsights.viewer)

Read-only access to Storage Insights resources.

resourcemanager.projects.get

resourcemanager.projects.list

storageinsights.datasetConfigs.get

storageinsights.datasetConfigs.list

storageinsights.locations.*

storageinsights.locations.get
storageinsights.locations.list

storageinsights.operations.get

storageinsights.operations.list

storageinsights.reportConfigs.get

storageinsights.reportConfigs.list

storageinsights.reportDetails.*

storageinsights.reportDetails.get
storageinsights.reportDetails.list

存储空间分析权限

权限	以下角色拥有此权限
`storageinsights.datasetConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.datasetConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.datasetConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.datasetConfigs.linkDataset`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`)
`storageinsights.datasetConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.datasetConfigs.unlinkDataset`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`)
`storageinsights.datasetConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.reportConfigs.create`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.reportConfigs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.reportConfigs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.reportConfigs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.reportConfigs.update`	Owner (`roles/owner`) Editor (`roles/editor`) Storage Insights Admin (`roles/storageinsights.admin`)
`storageinsights.reportDetails.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`)
`storageinsights.reportDetails.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Storage Insights Admin (`roles/storageinsights.admin`) Storage Insights Analyst (`roles/storageinsights.analyst`) Storage Insights Viewer (`roles/storageinsights.viewer`) 服务代理角色警告：请勿向服务代理以外的任何主账号授予服务代理角色。 StorageInsights Service Agent (`roles/storageinsights.serviceAgent`)

存储空间分析角色和权限