GCP IAM Updates Detected

jdyke · Dec 20, 2023 · 40b02a5 · 40b02a5
1 parent 696b2f2
commit 40b02a5
Show file tree

Hide file tree

Showing 21 changed files with 15 additions and 22 deletions.
diff --git a/roles/apigateway.viewer b/roles/apigateway.viewer
@@ -21,7 +21,6 @@
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "servicemanagement.services.get",
-    "serviceusage.services.get",
     "serviceusage.services.list"
   ],
   "name": "roles/apigateway.viewer",

diff --git a/roles/assuredworkloads.serviceAgent b/roles/assuredworkloads.serviceAgent
@@ -5,7 +5,6 @@
     "cloudkms.cryptoKeys.create",
     "cloudkms.keyRings.create",
     "serviceusage.services.enable",
-    "serviceusage.services.get",
     "serviceusage.services.use"
   ],
   "name": "roles/assuredworkloads.serviceAgent",

diff --git a/roles/automl.admin b/roles/automl.admin
@@ -60,7 +60,6 @@
     "automl.tableSpecs.update",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
-    "serviceusage.services.get",
     "serviceusage.services.list"
   ],
   "name": "roles/automl.admin",

diff --git a/roles/automl.viewer b/roles/automl.viewer
@@ -26,7 +26,6 @@
     "automl.tableSpecs.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
-    "serviceusage.services.get",
     "serviceusage.services.list"
   ],
   "name": "roles/automl.viewer",

diff --git a/roles/consumerprocurement.entitlementViewer b/roles/consumerprocurement.entitlementViewer
@@ -15,6 +15,6 @@
     "serviceusage.services.list"
   ],
   "name": "roles/consumerprocurement.entitlementViewer",
-  "stage": "GA",
+  "stage": "BETA",
   "title": "Consumer Procurement Entitlement Viewer"
 }
diff --git a/roles/consumerprocurement.orderViewer b/roles/consumerprocurement.orderViewer
@@ -21,6 +21,6 @@
     "consumerprocurement.orders.list"
   ],
   "name": "roles/consumerprocurement.orderViewer",
-  "stage": "GA",
+  "stage": "BETA",
   "title": "Consumer Procurement Order Viewer"
 }
diff --git a/roles/consumerprocurement.procurementViewer b/roles/consumerprocurement.procurementViewer
@@ -30,6 +30,6 @@
     "serviceusage.services.list"
   ],
   "name": "roles/consumerprocurement.procurementViewer",
-  "stage": "GA",
+  "stage": "BETA",
   "title": "Consumer Procurement Viewer"
 }
diff --git a/roles/enterprisepurchasing.admin b/roles/enterprisepurchasing.admin
@@ -16,6 +16,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/enterprisepurchasing.admin",
-  "stage": "BETA",
+  "stage": "ALPHA",
   "title": "Enterprise Purchasing Admin"
 }
diff --git a/roles/enterprisepurchasing.viewer b/roles/enterprisepurchasing.viewer
@@ -13,6 +13,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/enterprisepurchasing.viewer",
-  "stage": "BETA",
+  "stage": "ALPHA",
   "title": "Enterprise Purchasing Viewer"
 }
diff --git a/roles/mandiant.expertiseOnDemandViewer b/roles/mandiant.expertiseOnDemandViewer
@@ -8,6 +8,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/mandiant.expertiseOnDemandViewer",
-  "stage": "BETA",
+  "stage": "ALPHA",
   "title": "Mandiant Expertise On Demand Viewer"
 }
diff --git a/roles/mandiant.threatIntelEditor b/roles/mandiant.threatIntelEditor
@@ -12,6 +12,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/mandiant.threatIntelEditor",
-  "stage": "BETA",
+  "stage": "ALPHA",
   "title": "Mandiant Threat Intel Editor"
 }
diff --git a/roles/marketplacesolutions.admin b/roles/marketplacesolutions.admin
@@ -27,6 +27,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/marketplacesolutions.admin",
-  "stage": "BETA",
+  "stage": "ALPHA",
   "title": "Marketplace Solutions Admin"
 }
diff --git a/roles/marketplacesolutions.viewer b/roles/marketplacesolutions.viewer
@@ -20,6 +20,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/marketplacesolutions.viewer",
-  "stage": "BETA",
+  "stage": "ALPHA",
   "title": "Marketplace Solutions Viewer"
 }
diff --git a/roles/monitoring.editor b/roles/monitoring.editor
@@ -64,7 +64,6 @@
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "serviceusage.services.enable",
-    "serviceusage.services.get",
     "stackdriver.projects.edit",
     "stackdriver.projects.get",
     "stackdriver.resourceMetadata.list",

diff --git a/roles/securitycenter.automationServiceAgent b/roles/securitycenter.automationServiceAgent
@@ -13,8 +13,7 @@
     "resourcemanager.projects.get",
     "resourcemanager.projects.getIamPolicy",
     "resourcemanager.projects.list",
-    "serviceusage.services.enable",
-    "serviceusage.services.get"
+    "serviceusage.services.enable"
   ],
   "name": "roles/securitycenter.automationServiceAgent",
   "stage": "GA",

diff --git a/roles/securitycenter.complianceSnapshotsViewer b/roles/securitycenter.complianceSnapshotsViewer
@@ -5,6 +5,6 @@
     "securitycenter.compliancesnapshots.list"
   ],
   "name": "roles/securitycenter.complianceSnapshotsViewer",
-  "stage": "BETA",
+  "stage": "ALPHA",
   "title": "Security Center Compliance Snapshots Viewer"
 }
diff --git a/roles/securityposture.postureDeploymentsViewer b/roles/securityposture.postureDeploymentsViewer
@@ -8,6 +8,6 @@
     "securityposture.postureDeployments.list"
   ],
   "name": "roles/securityposture.postureDeploymentsViewer",
-  "stage": "GA",
+  "stage": "EAP",
   "title": "Security Posture Deployments Viewer"
 }
diff --git a/roles/securityposture.postureEditor b/roles/securityposture.postureEditor
@@ -10,6 +10,6 @@
     "securityposture.postures.update"
   ],
   "name": "roles/securityposture.postureEditor",
-  "stage": "GA",
+  "stage": "EAP",
   "title": "Security Posture Resource Editor"
 }
diff --git a/roles/securityposture.postureViewer b/roles/securityposture.postureViewer
@@ -8,6 +8,6 @@
     "securityposture.postures.list"
   ],
   "name": "roles/securityposture.postureViewer",
-  "stage": "GA",
+  "stage": "EAP",
   "title": "Security Posture Resource Viewer"
 }
diff --git a/roles/stackdriver.accounts.editor b/roles/stackdriver.accounts.editor
@@ -5,7 +5,6 @@
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "serviceusage.services.enable",
-    "serviceusage.services.get",
     "stackdriver.projects.edit",
     "stackdriver.projects.get"
   ],

diff --git a/roles/workflows.editor b/roles/workflows.editor
@@ -1,5 +1,5 @@
 {
-  "description": "Read and write access to workflows and related resources, including development and debugging of workflows.",
+  "description": "Read and write access to workflows and related resources.",
   "etag": "AA==",
   "includedPermissions": [
     "resourcemanager.projects.get",