GCP IAM Updates Detected

roles/apihub.admin

@@ -2,6 +2,25 @@
   "description": "Full access to Cloud API Hub Registry and Runtime resources.",
   "etag": "AA==",
   "includedPermissions": [
+    "apihub.apis.create",
+    "apihub.apis.delete",
+    "apihub.apis.get",
+    "apihub.apis.list",
+    "apihub.apis.update",
+    "apihub.operations.cancel",
+    "apihub.operations.delete",
+    "apihub.operations.get",
+    "apihub.operations.list",
+    "apihub.specs.create",
+    "apihub.specs.delete",
+    "apihub.specs.get",
+    "apihub.specs.list",
+    "apihub.specs.update",
+    "apihub.versions.create",
+    "apihub.versions.delete",
+    "apihub.versions.get",
+    "apihub.versions.list",
+    "apihub.versions.update",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

roles/apihub.viewer

@@ -2,6 +2,12 @@
   "description": "Read-only access to Cloud API Hub Registry resources.",
   "etag": "AA==",
   "includedPermissions": [
+    "apihub.apis.get",
+    "apihub.apis.list",
+    "apihub.specs.get",
+    "apihub.specs.list",
+    "apihub.versions.get",
+    "apihub.versions.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

roles/gdchardwaremanagement.admin

@@ -33,6 +33,11 @@
     "gdchardwaremanagement.sites.update",
     "gdchardwaremanagement.skus.get",
     "gdchardwaremanagement.skus.list",
+    "gdchardwaremanagement.zones.create",
+    "gdchardwaremanagement.zones.delete",
+    "gdchardwaremanagement.zones.get",
+    "gdchardwaremanagement.zones.list",
+    "gdchardwaremanagement.zones.update",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

roles/gdchardwaremanagement.operator

@@ -29,6 +29,11 @@
     "gdchardwaremanagement.sites.update",
     "gdchardwaremanagement.skus.get",
     "gdchardwaremanagement.skus.list",
+    "gdchardwaremanagement.zones.create",
+    "gdchardwaremanagement.zones.delete",
+    "gdchardwaremanagement.zones.get",
+    "gdchardwaremanagement.zones.list",
+    "gdchardwaremanagement.zones.update",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

roles/gdchardwaremanagement.reader

@@ -20,6 +20,8 @@
     "gdchardwaremanagement.sites.list",
     "gdchardwaremanagement.skus.get",
     "gdchardwaremanagement.skus.list",
+    "gdchardwaremanagement.zones.get",
+    "gdchardwaremanagement.zones.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],

roles/privilegedaccessmanager.admin

@@ -11,6 +11,7 @@
     "privilegedaccessmanager.grants.get",
     "privilegedaccessmanager.grants.list",
     "privilegedaccessmanager.grants.revoke",
+    "privilegedaccessmanager.locations.checkOnboardingStatus",
     "privilegedaccessmanager.locations.get",
     "privilegedaccessmanager.locations.list",
     "privilegedaccessmanager.operations.delete",

roles/privilegedaccessmanager.serviceAgent

@@ -0,0 +1,18 @@
+{
+  "description": "Gives privileged access manager service account access to modify IAM policies on GCP resources",
+  "etag": "AA==",
+  "includedPermissions": [
+    "resourcemanager.folders.get",
+    "resourcemanager.folders.getIamPolicy",
+    "resourcemanager.folders.setIamPolicy",
+    "resourcemanager.organizations.get",
+    "resourcemanager.organizations.getIamPolicy",
+    "resourcemanager.organizations.setIamPolicy",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.getIamPolicy",
+    "resourcemanager.projects.setIamPolicy"
+  ],
+  "name": "roles/privilegedaccessmanager.serviceAgent",
+  "stage": "ALPHA",
+  "title": "Privileged Access Manager Service Agent"
+}