Mit Sammlungen den Überblick behalten
Sie können Inhalte basierend auf Ihren Einstellungen speichern und kategorisieren.
Mit Identity and Access Management (IAM) können Sie Zugriff auf bestimmte Ressourcen gewähren.
Um Zugriff auf eine Ressource zu gewähren, weisen Sie einem Nutzer eine bestimmte Rolle zu, die dem Nutzer bestimmte Berechtigungen gewährt.
Erforderliche Rollen
Für jede Workload Manager API-Methode sind die erforderlichen IAM-Berechtigungen erforderlich. Berechtigungen werden erteilt, wenn einem Nutzer, einer Gruppe oder einem Dienstkonto Rollen zugewiesen werden. Informationen zum Gewähren des Zugriffs auf Ressourcen finden Sie unter Zugriff verwalten.
In der folgenden Tabelle sind die Workload Manager-IAM-Rollen und die Berechtigungen aufgeführt, die durch diese Rollen gewährt werden.
Role
Permissions
Workload Manager Admin
Beta
(roles/workloadmanager.admin)
Full access to Workload Manager all resources.
compute.acceleratorTypes.list
compute.diskTypes.list
compute.machineTypes.list
compute.networks.list
compute.projects.get
compute.regions.list
compute.subnetworks.list
compute.zones.list
dns.managedZones.list
iam.serviceAccounts.list
monitoring.timeSeries.list
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.list
serviceusage.quotas.get
serviceusage.services.get
storage.buckets.list
storage.objects.list
workloadmanager.*
workloadmanager.actuations.create
workloadmanager.actuations.delete
workloadmanager.actuations.get
workloadmanager.actuations.list
workloadmanager.deployments.create
workloadmanager.deployments.delete
workloadmanager.deployments.get
workloadmanager.deployments.list
workloadmanager.discoveredprofiles.get
workloadmanager.discoveredprofiles.getHealth
workloadmanager.discoveredprofiles.list
workloadmanager.evaluations.create
workloadmanager.evaluations.delete
workloadmanager.evaluations.get
workloadmanager.evaluations.list
workloadmanager.evaluations.run
workloadmanager.evaluations.update
workloadmanager.executions.delete
workloadmanager.executions.get
workloadmanager.executions.list
workloadmanager.insights.export
workloadmanager.insights.listSapSystems
workloadmanager.insights.write
workloadmanager.locations.get
workloadmanager.locations.list
workloadmanager.operations.cancel
workloadmanager.operations.delete
workloadmanager.operations.get
workloadmanager.operations.list
workloadmanager.results.list
workloadmanager.rules.list
Workload Manager Deployment Admin
Beta
(roles/workloadmanager.deploymentAdmin)
Full access to Workload Manager deployment resources.
compute.acceleratorTypes.list
compute.diskTypes.list
compute.machineTypes.list
compute.networks.list
compute.projects.get
compute.regions.list
compute.subnetworks.list
compute.zones.list
dns.managedZones.list
iam.serviceAccounts.list
monitoring.timeSeries.list
resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.list
serviceusage.quotas.get
serviceusage.services.get
storage.buckets.list
storage.objects.list
workloadmanager.actuations.*
workloadmanager.actuations.create
workloadmanager.actuations.delete
workloadmanager.actuations.get
workloadmanager.actuations.list
workloadmanager.deployments.*
workloadmanager.deployments.create
workloadmanager.deployments.delete
workloadmanager.deployments.get
workloadmanager.deployments.list
workloadmanager.locations.*
workloadmanager.locations.get
workloadmanager.locations.list
workloadmanager.operations.*
workloadmanager.operations.cancel
workloadmanager.operations.delete
workloadmanager.operations.get
workloadmanager.operations.list
Workload Manager Deployment Viewer
Beta
(roles/workloadmanager.deploymentViewer)
Read-only access to Workload Manager deployment resources.
resourcemanager.projects.get
resourcemanager.projects.list
workloadmanager.actuations.get
workloadmanager.actuations.list
workloadmanager.deployments.get
workloadmanager.deployments.list
Workload Manager Evaluation Admin
Beta
(roles/workloadmanager.evaluationAdmin)
Full access to Workload Manager evaluation resources.
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
workloadmanager.evaluations.*
workloadmanager.evaluations.create
workloadmanager.evaluations.delete
workloadmanager.evaluations.get
workloadmanager.evaluations.list
workloadmanager.evaluations.run
workloadmanager.evaluations.update
workloadmanager.executions.*
workloadmanager.executions.delete
workloadmanager.executions.get
workloadmanager.executions.list
workloadmanager.locations.*
workloadmanager.locations.get
workloadmanager.locations.list
workloadmanager.operations.*
workloadmanager.operations.cancel
workloadmanager.operations.delete
workloadmanager.operations.get
workloadmanager.operations.list
workloadmanager.results.list
workloadmanager.rules.list
Workload Manager Evaluation Viewer
Beta
(roles/workloadmanager.evaluationViewer)
Read-only access to Workload Manager evaluation resources.
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
workloadmanager.evaluations.get
workloadmanager.evaluations.list
workloadmanager.executions.get
workloadmanager.executions.list
workloadmanager.results.list
workloadmanager.rules.list
Workload Manager Insights Writer
Beta
(roles/workloadmanager.insightWriter)
The role used to write data to WLM data warehouse.
workloadmanager.insights.write
Workload Manager Service Agent
(roles/workloadmanager.serviceAgent)
Gives Workload Manager Service Agent access to CAI export functions and Cloud Monitoring.
cloudasset.assets.exportAccessPolicy
cloudasset.assets.exportIamPolicy
cloudasset.assets.exportOSInventories
cloudasset.assets.exportOrgPolicy
cloudasset.assets.exportResource
cloudasset.assets.listAccessPolicy
cloudasset.assets.listIamPolicy
cloudasset.assets.listOSInventories
cloudasset.assets.listOrgPolicy
cloudasset.assets.listResource
cloudasset.assets.searchAllResources
config.deployments.create
config.deployments.delete
config.deployments.get
config.deployments.list
config.deployments.update
config.locations.*
config.locations.get
config.locations.list
config.operations.*
config.operations.cancel
config.operations.delete
config.operations.get
config.operations.list
config.resources.list
config.revisions.get
config.revisions.list
monitoring.metricDescriptors.get
monitoring.metricDescriptors.list
monitoring.monitoredResourceDescriptors.*
monitoring.monitoredResourceDescriptors.get
monitoring.monitoredResourceDescriptors.list
monitoring.timeSeries.list
serviceusage.services.use
workloadmanager.insights.export
workloadmanager.insights.listSapSystems
Workload Manager Viewer
Beta
(roles/workloadmanager.viewer)
Read-only access to Workload Manager all resources.
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
workloadmanager.actuations.get
workloadmanager.actuations.list
workloadmanager.deployments.get
workloadmanager.deployments.list
workloadmanager.discoveredprofiles.*
workloadmanager.discoveredprofiles.get
workloadmanager.discoveredprofiles.getHealth
workloadmanager.discoveredprofiles.list
workloadmanager.evaluations.get
workloadmanager.evaluations.list
workloadmanager.executions.get
workloadmanager.executions.list
workloadmanager.results.list
workloadmanager.rules.list
Workload Manager Worker
Beta
(roles/workloadmanager.worker)
The role used by Workload Manager application runners to read and update workloads.
orgpolicy.policy.get
resourcemanager.projects.get
resourcemanager.projects.list
workloadmanager.actuations.*
workloadmanager.actuations.create
workloadmanager.actuations.delete
workloadmanager.actuations.get
workloadmanager.actuations.list
workloadmanager.deployments.*
workloadmanager.deployments.create
workloadmanager.deployments.delete
workloadmanager.deployments.get
workloadmanager.deployments.list
workloadmanager.discoveredprofiles.*
workloadmanager.discoveredprofiles.get
workloadmanager.discoveredprofiles.getHealth
workloadmanager.discoveredprofiles.list
workloadmanager.evaluations.*
workloadmanager.evaluations.create
workloadmanager.evaluations.delete
workloadmanager.evaluations.get
workloadmanager.evaluations.list
workloadmanager.evaluations.run
workloadmanager.evaluations.update
workloadmanager.executions.*
workloadmanager.executions.delete
workloadmanager.executions.get
workloadmanager.executions.list
workloadmanager.insights.write
workloadmanager.results.list
workloadmanager.rules.list
Workload Manager Workload Viewer
Beta
(roles/workloadmanager.workloadViewer)
The role used to view the workload related data.
resourcemanager.projects.get
resourcemanager.projects.list
workloadmanager.discoveredprofiles.*
workloadmanager.discoveredprofiles.get
workloadmanager.discoveredprofiles.getHealth
workloadmanager.discoveredprofiles.list
Dienst-Agent des Arbeitslastmanagers
(roles/workloadmanager.serviceAgent)
Gewährt dem Dienst-Agent des Arbeitslastmanagers Zugriff auf CAI-Exportfunktionen und Cloud Monitoring.
[[["Leicht verständlich","easyToUnderstand","thumb-up"],["Mein Problem wurde gelöst","solvedMyProblem","thumb-up"],["Sonstiges","otherUp","thumb-up"]],[["Schwer verständlich","hardToUnderstand","thumb-down"],["Informationen oder Beispielcode falsch","incorrectInformationOrSampleCode","thumb-down"],["Benötigte Informationen/Beispiele nicht gefunden","missingTheInformationSamplesINeed","thumb-down"],["Problem mit der Übersetzung","translationIssue","thumb-down"],["Sonstiges","otherDown","thumb-down"]],["Zuletzt aktualisiert: 2025-08-29 (UTC)."],[],[],null,[]]
