GCP IAM Updates Detected

jdyke · Feb 28, 2024 · 4388a37 · 4388a37
1 parent 7867766
commit 4388a37
Show file tree

Hide file tree

Showing 15 changed files with 44 additions and 53 deletions.
diff --git a/roles/cloudfunctions.admin b/roles/cloudfunctions.admin
@@ -79,12 +79,6 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
-    "recommender.runServicePerformanceInsights.get",
-    "recommender.runServicePerformanceInsights.list",
-    "recommender.runServicePerformanceInsights.update",
-    "recommender.runServicePerformanceRecommendations.get",
-    "recommender.runServicePerformanceRecommendations.list",
-    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
@@ -96,6 +90,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",

diff --git a/roles/cloudfunctions.developer b/roles/cloudfunctions.developer
@@ -72,6 +72,12 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceInsights.update",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
+    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
@@ -83,6 +89,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",

diff --git a/roles/cloudfunctions.serviceAgent b/roles/cloudfunctions.serviceAgent
@@ -125,6 +125,12 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceInsights.update",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
+    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
@@ -137,6 +143,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",

diff --git a/roles/dataplex.admin b/roles/dataplex.admin
@@ -5,14 +5,6 @@
     "cloudasset.assets.analyzeIamPolicy",
     "cloudasset.assets.searchAllIamPolicies",
     "cloudasset.assets.searchAllResources",
-    "dataplex.aspectTypes.create",
-    "dataplex.aspectTypes.delete",
-    "dataplex.aspectTypes.get",
-    "dataplex.aspectTypes.getIamPolicy",
-    "dataplex.aspectTypes.list",
-    "dataplex.aspectTypes.setIamPolicy",
-    "dataplex.aspectTypes.update",
-    "dataplex.aspectTypes.use",
     "dataplex.assetActions.list",
     "dataplex.assets.create",
     "dataplex.assets.delete",
@@ -66,31 +58,6 @@
     "dataplex.entities.get",
     "dataplex.entities.list",
     "dataplex.entities.update",
-    "dataplex.entries.create",
-    "dataplex.entries.delete",
-    "dataplex.entries.get",
-    "dataplex.entries.list",
-    "dataplex.entries.update",
-    "dataplex.entryGroups.create",
-    "dataplex.entryGroups.delete",
-    "dataplex.entryGroups.get",
-    "dataplex.entryGroups.getIamPolicy",
-    "dataplex.entryGroups.list",
-    "dataplex.entryGroups.setIamPolicy",
-    "dataplex.entryGroups.update",
-    "dataplex.entryGroups.useContactsAspect",
-    "dataplex.entryGroups.useGenericAspect",
-    "dataplex.entryGroups.useGenericEntry",
-    "dataplex.entryGroups.useOverviewAspect",
-    "dataplex.entryGroups.useSchemaAspect",
-    "dataplex.entryTypes.create",
-    "dataplex.entryTypes.delete",
-    "dataplex.entryTypes.get",
-    "dataplex.entryTypes.getIamPolicy",
-    "dataplex.entryTypes.list",
-    "dataplex.entryTypes.setIamPolicy",
-    "dataplex.entryTypes.update",
-    "dataplex.entryTypes.use",
     "dataplex.environments.create",
     "dataplex.environments.delete",
     "dataplex.environments.execute",

diff --git a/roles/dataplex.entryGroupOwner b/roles/dataplex.entryGroupOwner
@@ -29,6 +29,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/dataplex.entryGroupOwner",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Dataplex Entry Group Owner"
 }
diff --git a/roles/dataplex.viewer b/roles/dataplex.viewer
@@ -3,9 +3,6 @@
   "etag": "AA==",
   "includedPermissions": [
     "cloudasset.assets.analyzeIamPolicy",
-    "dataplex.aspectTypes.get",
-    "dataplex.aspectTypes.getIamPolicy",
-    "dataplex.aspectTypes.list",
     "dataplex.assetActions.list",
     "dataplex.assets.get",
     "dataplex.assets.getIamPolicy",
@@ -25,12 +22,6 @@
     "dataplex.datascans.get",
     "dataplex.datascans.getIamPolicy",
     "dataplex.datascans.list",
-    "dataplex.entryGroups.get",
-    "dataplex.entryGroups.getIamPolicy",
-    "dataplex.entryGroups.list",
-    "dataplex.entryTypes.get",
-    "dataplex.entryTypes.getIamPolicy",
-    "dataplex.entryTypes.list",
     "dataplex.environments.get",
     "dataplex.environments.getIamPolicy",
     "dataplex.environments.list",

diff --git a/roles/editor b/roles/editor
@@ -7021,6 +7021,7 @@
     "rma.operations.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",

diff --git a/roles/firebase.admin b/roles/firebase.admin
@@ -377,6 +377,12 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceInsights.update",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
+    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
@@ -389,6 +395,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",

diff --git a/roles/firebase.developAdmin b/roles/firebase.developAdmin
@@ -281,6 +281,12 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceInsights.update",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
+    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",
@@ -293,6 +299,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",

diff --git a/roles/firebase.developViewer b/roles/firebase.developViewer
@@ -119,6 +119,10 @@
     "recommender.runServiceIdentityInsights.list",
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityRecommendations.get",

diff --git a/roles/owner b/roles/owner
@@ -8102,6 +8102,7 @@
     "rma.operations.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",

diff --git a/roles/run.admin b/roles/run.admin
@@ -26,6 +26,7 @@
     "resourcemanager.projects.list",
     "run.configurations.get",
     "run.configurations.list",
+    "run.executions.cancel",
     "run.executions.delete",
     "run.executions.get",
     "run.executions.list",

diff --git a/roles/run.developer b/roles/run.developer
@@ -16,6 +16,12 @@
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
     "recommender.runServiceIdentityRecommendations.update",
+    "recommender.runServicePerformanceInsights.get",
+    "recommender.runServicePerformanceInsights.list",
+    "recommender.runServicePerformanceInsights.update",
+    "recommender.runServicePerformanceRecommendations.get",
+    "recommender.runServicePerformanceRecommendations.list",
+    "recommender.runServicePerformanceRecommendations.update",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityInsights.update",

diff --git a/roles/run.invoker b/roles/run.invoker
@@ -2,6 +2,7 @@
   "description": "Can invoke a Cloud Run service.",
   "etag": "AA==",
   "includedPermissions": [
+    "run.executions.cancel",
     "run.jobs.run",
     "run.routes.invoke"
   ],

diff --git a/roles/run.viewer b/roles/run.viewer
@@ -12,10 +12,6 @@
     "recommender.runServiceIdentityInsights.list",
     "recommender.runServiceIdentityRecommendations.get",
     "recommender.runServiceIdentityRecommendations.list",
-    "recommender.runServicePerformanceInsights.get",
-    "recommender.runServicePerformanceInsights.list",
-    "recommender.runServicePerformanceRecommendations.get",
-    "recommender.runServicePerformanceRecommendations.list",
     "recommender.runServiceSecurityInsights.get",
     "recommender.runServiceSecurityInsights.list",
     "recommender.runServiceSecurityRecommendations.get",