GCP IAM Updates Detected

jdyke · Jul 13, 2024 · 43053fa · 43053fa
1 parent 8b64171
commit 43053fa
Show file tree

Hide file tree

Showing 17 changed files with 149 additions and 0 deletions.
diff --git a/roles/batch.admin b/roles/batch.admin
@@ -0,0 +1,21 @@
+{
+  "description": "Administrator of Batch resources",
+  "etag": "AA==",
+  "includedPermissions": [
+    "batch.jobs.create",
+    "batch.jobs.delete",
+    "batch.jobs.get",
+    "batch.jobs.list",
+    "batch.locations.get",
+    "batch.locations.list",
+    "batch.operations.get",
+    "batch.operations.list",
+    "batch.tasks.get",
+    "batch.tasks.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/batch.admin",
+  "stage": "ALPHA",
+  "title": "Batch Administrator"
+}
diff --git a/roles/batch.resourceAllowancesEditor b/roles/batch.resourceAllowancesEditor
@@ -0,0 +1,20 @@
+{
+  "description": "Editor of Batch ResourceAllowances",
+  "etag": "AA==",
+  "includedPermissions": [
+    "batch.locations.get",
+    "batch.locations.list",
+    "batch.operations.get",
+    "batch.operations.list",
+    "batch.resourceAllowances.create",
+    "batch.resourceAllowances.delete",
+    "batch.resourceAllowances.get",
+    "batch.resourceAllowances.list",
+    "batch.resourceAllowances.update",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/batch.resourceAllowancesEditor",
+  "stage": "ALPHA",
+  "title": "Batch ResourceAllowance Editor"
+}
diff --git a/roles/batch.resourceAllowancesViewer b/roles/batch.resourceAllowancesViewer
@@ -0,0 +1,17 @@
+{
+  "description": "Viewer of Batch ResourceAllowances",
+  "etag": "AA==",
+  "includedPermissions": [
+    "batch.locations.get",
+    "batch.locations.list",
+    "batch.operations.get",
+    "batch.operations.list",
+    "batch.resourceAllowances.get",
+    "batch.resourceAllowances.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/batch.resourceAllowancesViewer",
+  "stage": "ALPHA",
+  "title": "Batch ResourceAllowance Viewer"
+}
diff --git a/roles/clouddeploy.admin b/roles/clouddeploy.admin
@@ -29,6 +29,12 @@
     "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.setIamPolicy",
     "clouddeploy.deliveryPipelines.update",
+    "clouddeploy.deployPolicies.create",
+    "clouddeploy.deployPolicies.delete",
+    "clouddeploy.deployPolicies.get",
+    "clouddeploy.deployPolicies.list",
+    "clouddeploy.deployPolicies.override",
+    "clouddeploy.deployPolicies.update",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",
     "clouddeploy.jobRuns.terminate",

diff --git a/roles/clouddeploy.developer b/roles/clouddeploy.developer
@@ -17,6 +17,8 @@
     "clouddeploy.deliveryPipelines.listEffectiveTags",
     "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.update",
+    "clouddeploy.deployPolicies.get",
+    "clouddeploy.deployPolicies.list",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",
     "clouddeploy.locations.get",

diff --git a/roles/clouddeploy.operator b/roles/clouddeploy.operator
@@ -24,6 +24,8 @@
     "clouddeploy.deliveryPipelines.listEffectiveTags",
     "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.update",
+    "clouddeploy.deployPolicies.get",
+    "clouddeploy.deployPolicies.list",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",
     "clouddeploy.jobRuns.terminate",

diff --git a/roles/clouddeploy.policyAdmin b/roles/clouddeploy.policyAdmin
@@ -0,0 +1,23 @@
+{
+  "description": "Permission to manage Deploy Policies.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "clouddeploy.deployPolicies.create",
+    "clouddeploy.deployPolicies.delete",
+    "clouddeploy.deployPolicies.get",
+    "clouddeploy.deployPolicies.list",
+    "clouddeploy.deployPolicies.override",
+    "clouddeploy.deployPolicies.update",
+    "clouddeploy.locations.get",
+    "clouddeploy.locations.list",
+    "clouddeploy.operations.cancel",
+    "clouddeploy.operations.delete",
+    "clouddeploy.operations.get",
+    "clouddeploy.operations.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/clouddeploy.policyAdmin",
+  "stage": "ALPHA",
+  "title": "Cloud Deploy Policy Admin"
+}
diff --git a/roles/clouddeploy.policyOverrider b/roles/clouddeploy.policyOverrider
@@ -0,0 +1,20 @@
+{
+  "description": "Permission to override Deploy Policies.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "clouddeploy.deployPolicies.get",
+    "clouddeploy.deployPolicies.list",
+    "clouddeploy.deployPolicies.override",
+    "clouddeploy.locations.get",
+    "clouddeploy.locations.list",
+    "clouddeploy.operations.cancel",
+    "clouddeploy.operations.delete",
+    "clouddeploy.operations.get",
+    "clouddeploy.operations.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/clouddeploy.policyOverrider",
+  "stage": "ALPHA",
+  "title": "Cloud Deploy Policy Overrider"
+}
diff --git a/roles/clouddeploy.viewer b/roles/clouddeploy.viewer
@@ -15,6 +15,8 @@
     "clouddeploy.deliveryPipelines.list",
     "clouddeploy.deliveryPipelines.listEffectiveTags",
     "clouddeploy.deliveryPipelines.listTagBindings",
+    "clouddeploy.deployPolicies.get",
+    "clouddeploy.deployPolicies.list",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",
     "clouddeploy.locations.get",

diff --git a/roles/discoveryengine.admin b/roles/discoveryengine.admin
@@ -55,6 +55,7 @@
     "discoveryengine.evaluations.create",
     "discoveryengine.evaluations.get",
     "discoveryengine.evaluations.list",
+    "discoveryengine.groundingConfigs.check",
     "discoveryengine.locations.estimateDataSize",
     "discoveryengine.models.create",
     "discoveryengine.models.delete",

diff --git a/roles/discoveryengine.editor b/roles/discoveryengine.editor
@@ -38,6 +38,7 @@
     "discoveryengine.engines.tune",
     "discoveryengine.evaluations.get",
     "discoveryengine.evaluations.list",
+    "discoveryengine.groundingConfigs.check",
     "discoveryengine.models.create",
     "discoveryengine.models.delete",
     "discoveryengine.models.get",

diff --git a/roles/discoveryengine.viewer b/roles/discoveryengine.viewer
@@ -28,6 +28,7 @@
     "discoveryengine.engines.list",
     "discoveryengine.evaluations.get",
     "discoveryengine.evaluations.list",
+    "discoveryengine.groundingConfigs.check",
     "discoveryengine.models.get",
     "discoveryengine.models.list",
     "discoveryengine.operations.get",

diff --git a/roles/editor b/roles/editor
@@ -1236,6 +1236,11 @@
     "batch.locations.list",
     "batch.operations.get",
     "batch.operations.list",
+    "batch.resourceAllowances.create",
+    "batch.resourceAllowances.delete",
+    "batch.resourceAllowances.get",
+    "batch.resourceAllowances.list",
+    "batch.resourceAllowances.update",
     "batch.states.report",
     "batch.tasks.get",
     "batch.tasks.list",
@@ -1967,6 +1972,12 @@
     "clouddeploy.deliveryPipelines.listEffectiveTags",
     "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.update",
+    "clouddeploy.deployPolicies.create",
+    "clouddeploy.deployPolicies.delete",
+    "clouddeploy.deployPolicies.get",
+    "clouddeploy.deployPolicies.list",
+    "clouddeploy.deployPolicies.override",
+    "clouddeploy.deployPolicies.update",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",
     "clouddeploy.jobRuns.terminate",
@@ -4736,6 +4747,7 @@
     "discoveryengine.evaluations.create",
     "discoveryengine.evaluations.get",
     "discoveryengine.evaluations.list",
+    "discoveryengine.groundingConfigs.check",
     "discoveryengine.locations.estimateDataSize",
     "discoveryengine.models.create",
     "discoveryengine.models.delete",

diff --git a/roles/iam.securityAdmin b/roles/iam.securityAdmin
@@ -296,6 +296,7 @@
     "batch.jobs.list",
     "batch.locations.list",
     "batch.operations.list",
+    "batch.resourceAllowances.list",
     "batch.tasks.list",
     "beyondcorp.appConnections.getIamPolicy",
     "beyondcorp.appConnections.list",
@@ -474,6 +475,7 @@
     "clouddeploy.deliveryPipelines.getIamPolicy",
     "clouddeploy.deliveryPipelines.list",
     "clouddeploy.deliveryPipelines.setIamPolicy",
+    "clouddeploy.deployPolicies.list",
     "clouddeploy.jobRuns.list",
     "clouddeploy.locations.list",
     "clouddeploy.operations.list",

diff --git a/roles/iam.securityReviewer b/roles/iam.securityReviewer
@@ -272,6 +272,7 @@
     "batch.jobs.list",
     "batch.locations.list",
     "batch.operations.list",
+    "batch.resourceAllowances.list",
     "batch.tasks.list",
     "beyondcorp.appConnections.getIamPolicy",
     "beyondcorp.appConnections.list",
@@ -424,6 +425,7 @@
     "clouddeploy.customTargetTypes.list",
     "clouddeploy.deliveryPipelines.getIamPolicy",
     "clouddeploy.deliveryPipelines.list",
+    "clouddeploy.deployPolicies.list",
     "clouddeploy.jobRuns.list",
     "clouddeploy.locations.list",
     "clouddeploy.operations.list",

diff --git a/roles/owner b/roles/owner
@@ -1288,6 +1288,11 @@
     "batch.locations.list",
     "batch.operations.get",
     "batch.operations.list",
+    "batch.resourceAllowances.create",
+    "batch.resourceAllowances.delete",
+    "batch.resourceAllowances.get",
+    "batch.resourceAllowances.list",
+    "batch.resourceAllowances.update",
     "batch.states.report",
     "batch.tasks.get",
     "batch.tasks.list",
@@ -2598,6 +2603,12 @@
     "clouddeploy.deliveryPipelines.listTagBindings",
     "clouddeploy.deliveryPipelines.setIamPolicy",
     "clouddeploy.deliveryPipelines.update",
+    "clouddeploy.deployPolicies.create",
+    "clouddeploy.deployPolicies.delete",
+    "clouddeploy.deployPolicies.get",
+    "clouddeploy.deployPolicies.list",
+    "clouddeploy.deployPolicies.override",
+    "clouddeploy.deployPolicies.update",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",
     "clouddeploy.jobRuns.terminate",
@@ -5628,6 +5639,7 @@
     "discoveryengine.evaluations.create",
     "discoveryengine.evaluations.get",
     "discoveryengine.evaluations.list",
+    "discoveryengine.groundingConfigs.check",
     "discoveryengine.locations.estimateDataSize",
     "discoveryengine.models.create",
     "discoveryengine.models.delete",

diff --git a/roles/viewer b/roles/viewer
@@ -590,6 +590,8 @@
     "batch.locations.list",
     "batch.operations.get",
     "batch.operations.list",
+    "batch.resourceAllowances.get",
+    "batch.resourceAllowances.list",
     "batch.tasks.get",
     "batch.tasks.list",
     "beyondcorp.appConnections.get",
@@ -1057,6 +1059,8 @@
     "clouddeploy.deliveryPipelines.list",
     "clouddeploy.deliveryPipelines.listEffectiveTags",
     "clouddeploy.deliveryPipelines.listTagBindings",
+    "clouddeploy.deployPolicies.get",
+    "clouddeploy.deployPolicies.list",
     "clouddeploy.jobRuns.get",
     "clouddeploy.jobRuns.list",
     "clouddeploy.locations.get",
@@ -2320,6 +2324,7 @@
     "discoveryengine.engines.list",
     "discoveryengine.evaluations.get",
     "discoveryengine.evaluations.list",
+    "discoveryengine.groundingConfigs.check",
     "discoveryengine.locations.estimateDataSize",
     "discoveryengine.models.get",
     "discoveryengine.models.list",