GCP IAM Updates Detected

jdyke · Jul 10, 2024 · 8b64171 · 8b64171
1 parent 56cbaa3
commit 8b64171
Show file tree

Hide file tree

Showing 9 changed files with 14 additions and 0 deletions.
diff --git a/roles/apim.admin b/roles/apim.admin
@@ -2,12 +2,14 @@
   "description": "Full access to API Management resources.",
   "etag": "AA==",
   "includedPermissions": [
+    "apim.apiObservations.batchEditTags",
     "apim.apiObservations.get",
     "apim.apiObservations.list",
     "apim.apiOperations.get",
     "apim.apiOperations.list",
     "apim.locations.get",
     "apim.locations.list",
+    "apim.locations.listApiObservationTags",
     "apim.observationJobs.create",
     "apim.observationJobs.delete",
     "apim.observationJobs.disable",

diff --git a/roles/apim.viewer b/roles/apim.viewer
@@ -8,6 +8,7 @@
     "apim.apiOperations.list",
     "apim.locations.get",
     "apim.locations.list",
+    "apim.locations.listApiObservationTags",
     "apim.observationJobs.get",
     "apim.observationJobs.list",
     "apim.observationSources.get",

diff --git a/roles/datafusion.serviceAgent b/roles/datafusion.serviceAgent
@@ -497,6 +497,7 @@
     "spanner.databases.beginOrRollbackReadWriteTransaction",
     "spanner.databases.beginPartitionedDmlTransaction",
     "spanner.databases.beginReadOnlyTransaction",
+    "spanner.databases.changequorum",
     "spanner.databases.getDdl",
     "spanner.databases.list",
     "spanner.databases.partitionQuery",

diff --git a/roles/editor b/roles/editor
@@ -852,12 +852,14 @@
     "apikeys.keys.lookup",
     "apikeys.keys.undelete",
     "apikeys.keys.update",
+    "apim.apiObservations.batchEditTags",
     "apim.apiObservations.get",
     "apim.apiObservations.list",
     "apim.apiOperations.get",
     "apim.apiOperations.list",
     "apim.locations.get",
     "apim.locations.list",
+    "apim.locations.listApiObservationTags",
     "apim.observationJobs.create",
     "apim.observationJobs.delete",
     "apim.observationJobs.disable",
@@ -7919,6 +7921,7 @@
     "spanner.databases.beginOrRollbackReadWriteTransaction",
     "spanner.databases.beginPartitionedDmlTransaction",
     "spanner.databases.beginReadOnlyTransaction",
+    "spanner.databases.changequorum",
     "spanner.databases.create",
     "spanner.databases.createBackup",
     "spanner.databases.drop",

diff --git a/roles/owner b/roles/owner
@@ -884,12 +884,14 @@
     "apikeys.keys.lookup",
     "apikeys.keys.undelete",
     "apikeys.keys.update",
+    "apim.apiObservations.batchEditTags",
     "apim.apiObservations.get",
     "apim.apiObservations.list",
     "apim.apiOperations.get",
     "apim.apiOperations.list",
     "apim.locations.get",
     "apim.locations.list",
+    "apim.locations.listApiObservationTags",
     "apim.observationJobs.create",
     "apim.observationJobs.delete",
     "apim.observationJobs.disable",
@@ -9093,6 +9095,7 @@
     "spanner.databases.beginOrRollbackReadWriteTransaction",
     "spanner.databases.beginPartitionedDmlTransaction",
     "spanner.databases.beginReadOnlyTransaction",
+    "spanner.databases.changequorum",
     "spanner.databases.create",
     "spanner.databases.createBackup",
     "spanner.databases.drop",

diff --git a/roles/spanner.admin b/roles/spanner.admin
@@ -26,6 +26,7 @@
     "spanner.databases.beginOrRollbackReadWriteTransaction",
     "spanner.databases.beginPartitionedDmlTransaction",
     "spanner.databases.beginReadOnlyTransaction",
+    "spanner.databases.changequorum",
     "spanner.databases.create",
     "spanner.databases.createBackup",
     "spanner.databases.drop",

diff --git a/roles/spanner.databaseAdmin b/roles/spanner.databaseAdmin
@@ -14,6 +14,7 @@
     "spanner.databases.beginOrRollbackReadWriteTransaction",
     "spanner.databases.beginPartitionedDmlTransaction",
     "spanner.databases.beginReadOnlyTransaction",
+    "spanner.databases.changequorum",
     "spanner.databases.create",
     "spanner.databases.drop",
     "spanner.databases.get",

diff --git a/roles/spanner.databaseUser b/roles/spanner.databaseUser
@@ -9,6 +9,7 @@
     "spanner.databases.beginOrRollbackReadWriteTransaction",
     "spanner.databases.beginPartitionedDmlTransaction",
     "spanner.databases.beginReadOnlyTransaction",
+    "spanner.databases.changequorum",
     "spanner.databases.getDdl",
     "spanner.databases.partitionQuery",
     "spanner.databases.partitionRead",

diff --git a/roles/viewer b/roles/viewer
@@ -399,6 +399,7 @@
     "apim.apiOperations.list",
     "apim.locations.get",
     "apim.locations.list",
+    "apim.locations.listApiObservationTags",
     "apim.observationJobs.get",
     "apim.observationJobs.list",
     "apim.observationSources.get",