GCP IAM Updates Detected

roles/aiplatform.customCodeServiceAgent

@@ -189,6 +189,7 @@
     "aiplatform.indexes.get",
     "aiplatform.indexes.list",
     "aiplatform.indexes.update",
+    "aiplatform.locations.evaluateInstances",
     "aiplatform.locations.get",
     "aiplatform.locations.list",
     "aiplatform.metadataSchemas.create",
@@ -263,6 +264,18 @@
     "aiplatform.pipelineJobs.delete",
     "aiplatform.pipelineJobs.get",
     "aiplatform.pipelineJobs.list",
+    "aiplatform.provisionedThroughputs.list",
+    "aiplatform.ragCorpora.create",
+    "aiplatform.ragCorpora.delete",
+    "aiplatform.ragCorpora.get",
+    "aiplatform.ragCorpora.list",
+    "aiplatform.ragCorpora.query",
+    "aiplatform.ragCorpora.update",
+    "aiplatform.ragFiles.delete",
+    "aiplatform.ragFiles.get",
+    "aiplatform.ragFiles.import",
+    "aiplatform.ragFiles.list",
+    "aiplatform.ragFiles.upload",
     "aiplatform.reasoningEngines.create",
     "aiplatform.reasoningEngines.delete",
     "aiplatform.reasoningEngines.get",

roles/aiplatform.expressAdmin

@@ -12,7 +12,8 @@
     "aiplatform.datasets.get",
     "aiplatform.datasets.list",
     "aiplatform.datasets.update",
-    "aiplatform.endpoints.predict"
+    "aiplatform.endpoints.predict",
+    "aiplatform.locations.evaluateInstances"
   ],
   "name": "roles/aiplatform.expressAdmin",
   "stage": "BETA",

roles/aiplatform.extensionServiceAgent

@@ -4,6 +4,7 @@
   "includedPermissions": [
     "aiplatform.endpoints.predict",
     "aiplatform.locations.get",
+    "aiplatform.ragCorpora.query",
     "discoveryengine.servingConfigs.search",
     "iam.serviceAccounts.getAccessToken",
     "iam.serviceAccounts.getOpenIdToken",

roles/bigquery.studioAdmin

@@ -126,6 +126,7 @@
     "bigquery.tables.setIamPolicy",
     "bigquery.tables.update",
     "bigquery.tables.updateData",
+    "bigquery.tables.updateIndex",
     "bigquery.tables.updateTag",
     "bigquery.transfers.get",
     "bigquery.transfers.update",

roles/connectors.serviceAgent

@@ -2,6 +2,7 @@
   "description": "Grants Connectors Platform service account to manage customer resources",
   "etag": "AA==",
   "includedPermissions": [
+    "connectors.actions.execute",
     "connectors.actions.list",
     "connectors.connections.get",
     "connectors.connections.getConnectionSchemaMetadata",

roles/dataflow.serviceAgent

@@ -123,6 +123,7 @@
     "bigquery.tables.setIamPolicy",
     "bigquery.tables.update",
     "bigquery.tables.updateData",
+    "bigquery.tables.updateIndex",
     "bigquery.tables.updateTag",
     "bigquery.transfers.get",
     "bigquery.transfers.update",

roles/datafusion.viewer

@@ -11,6 +11,9 @@
     "datafusion.instances.listTagBindings",
     "datafusion.locations.get",
     "datafusion.locations.list",
+    "datafusion.namespaces.get",
+    "datafusion.namespaces.getIamPolicy",
+    "datafusion.namespaces.list",
     "datafusion.operations.get",
     "datafusion.operations.list",
     "datafusion.pipelineConnections.get",

roles/dataplex.aspectTypeOwner

@@ -11,6 +11,7 @@
     "dataplex.aspectTypes.setIamPolicy",
     "dataplex.aspectTypes.update",
     "dataplex.aspectTypes.use",
+    "dataplex.operations.get",
     "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"

roles/dataplex.entryTypeOwner

@@ -11,6 +11,7 @@
     "dataplex.entryTypes.setIamPolicy",
     "dataplex.entryTypes.update",
     "dataplex.entryTypes.use",
+    "dataplex.operations.get",
     "dataplex.projects.search",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"

roles/editor

@@ -241,6 +241,7 @@
     "aiplatform.indexes.get",
     "aiplatform.indexes.list",
     "aiplatform.indexes.update",
+    "aiplatform.locations.evaluateInstances",
     "aiplatform.locations.get",
     "aiplatform.locations.list",
     "aiplatform.metadataSchemas.create",
@@ -320,6 +321,19 @@
     "aiplatform.pipelineJobs.delete",
     "aiplatform.pipelineJobs.get",
     "aiplatform.pipelineJobs.list",
+    "aiplatform.provisionedThroughputs.create",
+    "aiplatform.provisionedThroughputs.list",
+    "aiplatform.ragCorpora.create",
+    "aiplatform.ragCorpora.delete",
+    "aiplatform.ragCorpora.get",
+    "aiplatform.ragCorpora.list",
+    "aiplatform.ragCorpora.query",
+    "aiplatform.ragCorpora.update",
+    "aiplatform.ragFiles.delete",
+    "aiplatform.ragFiles.get",
+    "aiplatform.ragFiles.import",
+    "aiplatform.ragFiles.list",
+    "aiplatform.ragFiles.upload",
     "aiplatform.reasoningEngines.create",
     "aiplatform.reasoningEngines.delete",
     "aiplatform.reasoningEngines.get",
@@ -1442,6 +1456,7 @@
     "bigquery.tables.listTagBindings",
     "bigquery.tables.replicateData",
     "bigquery.tables.restoreSnapshot",
+    "bigquery.tables.updateIndex",
     "bigquery.transfers.get",
     "bigquery.transfers.update",
     "bigquerymigration.subtasks.get",
@@ -4170,10 +4185,16 @@
     "datafusion.instances.upgrade",
     "datafusion.locations.get",
     "datafusion.locations.list",
+    "datafusion.namespaces.create",
+    "datafusion.namespaces.delete",
+    "datafusion.namespaces.get",
+    "datafusion.namespaces.getIamPolicy",
+    "datafusion.namespaces.list",
     "datafusion.namespaces.provisionCredential",
     "datafusion.namespaces.readRepository",
     "datafusion.namespaces.setServiceAccount",
     "datafusion.namespaces.unsetServiceAccount",
+    "datafusion.namespaces.update",
     "datafusion.namespaces.updateRepositoryMetadata",
     "datafusion.namespaces.writeRepository",
     "datafusion.operations.cancel",
@@ -4269,6 +4290,7 @@
     "datamigration.migrationjobs.create",
     "datamigration.migrationjobs.delete",
     "datamigration.migrationjobs.demoteDestination",
+    "datamigration.migrationjobs.fetchSourceObjects",
     "datamigration.migrationjobs.generateSshScript",
     "datamigration.migrationjobs.generateTcpProxyScript",
     "datamigration.migrationjobs.get",
@@ -6755,6 +6777,11 @@
     "netapp.operations.delete",
     "netapp.operations.get",
     "netapp.operations.list",
+    "netapp.quotaRules.create",
+    "netapp.quotaRules.delete",
+    "netapp.quotaRules.get",
+    "netapp.quotaRules.list",
+    "netapp.quotaRules.update",
     "netapp.replications.create",
     "netapp.replications.delete",
     "netapp.replications.establishPeering",
@@ -7944,6 +7971,7 @@
     "retail.branches.list",
     "retail.catalogs.completeQuery",
     "retail.catalogs.exportAnalyticsMetrics",
+    "retail.catalogs.get",
     "retail.catalogs.import",
     "retail.catalogs.list",
     "retail.catalogs.update",
@@ -8261,6 +8289,7 @@
     "securitycentermanagement.securityCommandCenter.activate",
     "securitycentermanagement.securityCommandCenter.checkActivationOperation",
     "securitycentermanagement.securityCommandCenter.checkEligibility",
+    "securitycentermanagement.securityCommandCenter.checkOnboardingStatus",
     "securitycentermanagement.securityCommandCenter.generateServiceAccounts",
     "securitycentermanagement.securityCommandCenter.get",
     "securitycentermanagement.securityCommandCenter.update",
@@ -8344,6 +8373,7 @@
     "servicedirectory.services.list",
     "servicedirectory.services.resolve",
     "servicedirectory.services.update",
+    "servicehealth.artifacts.get",
     "servicehealth.events.get",
     "servicehealth.events.list",
     "servicehealth.locations.get",

roles/iam.securityReviewer

@@ -66,6 +66,9 @@
     "aiplatform.operations.list",
     "aiplatform.persistentResources.list",
     "aiplatform.pipelineJobs.list",
+    "aiplatform.provisionedThroughputs.list",
+    "aiplatform.ragCorpora.list",
+    "aiplatform.ragFiles.list",
     "aiplatform.reasoningEngines.list",
     "aiplatform.schedules.list",
     "aiplatform.sessions.list",
@@ -832,6 +835,8 @@
     "datafusion.instances.getIamPolicy",
     "datafusion.instances.list",
     "datafusion.locations.list",
+    "datafusion.namespaces.getIamPolicy",
+    "datafusion.namespaces.list",
     "datafusion.operations.list",
     "datafusion.pipelineConnections.list",
     "datafusion.pipelines.list",
@@ -1420,6 +1425,7 @@
     "netapp.kmsConfigs.list",
     "netapp.locations.list",
     "netapp.operations.list",
+    "netapp.quotaRules.list",
     "netapp.replications.list",
     "netapp.snapshots.list",
     "netapp.storagePools.list",

roles/securitycentermanagement.settingsEditor

@@ -27,6 +27,7 @@
     "securitycentermanagement.securityCommandCenter.activate",
     "securitycentermanagement.securityCommandCenter.checkActivationOperation",
     "securitycentermanagement.securityCommandCenter.checkEligibility",
+    "securitycentermanagement.securityCommandCenter.checkOnboardingStatus",
     "securitycentermanagement.securityCommandCenter.generateServiceAccounts",
     "securitycentermanagement.securityCommandCenter.get",
     "securitycentermanagement.securityCommandCenter.update",

roles/servicehealth.viewer

@@ -4,6 +4,7 @@
   "includedPermissions": [
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
+    "servicehealth.artifacts.get",
     "servicehealth.events.get",
     "servicehealth.events.list",
     "servicehealth.locations.get",

roles/viewer

@@ -107,6 +107,7 @@
     "aiplatform.indexEndpoints.queryVectors",
     "aiplatform.indexes.get",
     "aiplatform.indexes.list",
+    "aiplatform.locations.evaluateInstances",
     "aiplatform.locations.get",
     "aiplatform.locations.list",
     "aiplatform.metadataSchemas.get",
@@ -146,6 +147,12 @@
     "aiplatform.persistentResources.list",
     "aiplatform.pipelineJobs.get",
     "aiplatform.pipelineJobs.list",
+    "aiplatform.provisionedThroughputs.list",
+    "aiplatform.ragCorpora.get",
+    "aiplatform.ragCorpora.list",
+    "aiplatform.ragCorpora.query",
+    "aiplatform.ragFiles.get",
+    "aiplatform.ragFiles.list",
     "aiplatform.reasoningEngines.get",
     "aiplatform.reasoningEngines.list",
     "aiplatform.reasoningEngines.query",
@@ -2078,6 +2085,9 @@
     "datafusion.instances.listTagBindings",
     "datafusion.locations.get",
     "datafusion.locations.list",
+    "datafusion.namespaces.get",
+    "datafusion.namespaces.getIamPolicy",
+    "datafusion.namespaces.list",
     "datafusion.operations.get",
     "datafusion.operations.list",
     "datafusion.pipelineConnections.get",
@@ -2121,6 +2131,7 @@
     "datamigration.locations.get",
     "datamigration.locations.list",
     "datamigration.mappingrules.getIamPolicy",
+    "datamigration.migrationjobs.fetchSourceObjects",
     "datamigration.migrationjobs.get",
     "datamigration.migrationjobs.getIamPolicy",
     "datamigration.migrationjobs.list",
@@ -3338,6 +3349,8 @@
     "netapp.locations.list",
     "netapp.operations.get",
     "netapp.operations.list",
+    "netapp.quotaRules.get",
+    "netapp.quotaRules.list",
     "netapp.replications.get",
     "netapp.replications.list",
     "netapp.snapshots.get",
@@ -3980,6 +3993,7 @@
     "retail.branches.list",
     "retail.catalogs.completeQuery",
     "retail.catalogs.exportAnalyticsMetrics",
+    "retail.catalogs.get",
     "retail.catalogs.list",
     "retail.controls.export",
     "retail.controls.get",
@@ -4158,6 +4172,7 @@
     "securitycentermanagement.securityCenterServices.list",
     "securitycentermanagement.securityCommandCenter.checkActivationOperation",
     "securitycentermanagement.securityCommandCenter.checkEligibility",
+    "securitycentermanagement.securityCommandCenter.checkOnboardingStatus",
     "securitycentermanagement.securityCommandCenter.get",
     "securitycentermanagement.securityHealthAnalyticsCustomModules.get",
     "securitycentermanagement.securityHealthAnalyticsCustomModules.list",
@@ -4203,6 +4218,7 @@
     "servicedirectory.services.getIamPolicy",
     "servicedirectory.services.list",
     "servicedirectory.services.resolve",
+    "servicehealth.artifacts.get",
     "servicehealth.events.get",
     "servicehealth.events.list",
     "servicehealth.locations.get",