GCP IAM Updates Detected

jdyke · Nov 3, 2024 · a93af39 · a93af39
1 parent fd5555b
commit a93af39
Show file tree

Hide file tree

Showing 42 changed files with 274 additions and 13 deletions.
diff --git a/roles/aiplatform.expressAdmin b/roles/aiplatform.expressAdmin
@@ -15,6 +15,6 @@
     "aiplatform.endpoints.predict"
   ],
   "name": "roles/aiplatform.expressAdmin",
-  "stage": "ALPHA",
+  "stage": "BETA",
   "title": "Vertex AI Platform Express Admin"
 }
diff --git a/roles/aiplatform.expressUser b/roles/aiplatform.expressUser
@@ -5,6 +5,6 @@
     "aiplatform.endpoints.predict"
   ],
   "name": "roles/aiplatform.expressUser",
-  "stage": "ALPHA",
+  "stage": "BETA",
   "title": "Vertex AI Platform Express User"
 }
diff --git a/roles/artifactregistry.containerRegistryMigrationAdmin b/roles/artifactregistry.containerRegistryMigrationAdmin
@@ -21,6 +21,6 @@
     "storage.objects.list"
   ],
   "name": "roles/artifactregistry.containerRegistryMigrationAdmin",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Container Registry -> Artifact Registry Migration Admin"
 }
diff --git a/roles/auditmanager.serviceAgent b/roles/auditmanager.serviceAgent
@@ -3,6 +3,8 @@
   "etag": "AA==",
   "includedPermissions": [
     "bigquery.datasets.get",
+    "certificatemanager.certs.list",
+    "certificatemanager.trustconfigs.list",
     "cloudasset.assets.analyzeIamPolicy",
     "cloudasset.assets.analyzeMove",
     "cloudasset.assets.analyzeOrgPolicy",
@@ -563,15 +565,19 @@
     "cloudasset.assets.queryResource",
     "cloudasset.assets.searchAllIamPolicies",
     "cloudasset.assets.searchAllResources",
+    "cloudkms.cryptoKeys.list",
+    "cloudsql.instances.get",
     "cloudsql.instances.list",
     "compute.autoscalers.list",
     "compute.backendServices.list",
     "compute.disks.list",
+    "compute.firewallPolicies.list",
     "compute.firewalls.list",
     "compute.forwardingRules.list",
     "compute.globalForwardingRules.list",
     "compute.instanceGroupManagers.list",
     "compute.instanceGroups.list",
+    "compute.instances.get",
     "compute.instances.list",
     "compute.regionSslPolicies.list",
     "compute.regionTargetHttpProxies.list",
@@ -586,10 +592,14 @@
     "compute.urlMaps.list",
     "compute.vpnGateways.list",
     "compute.zones.list",
+    "container.clusters.get",
     "container.clusters.list",
+    "dns.managedZones.list",
+    "iam.serviceAccounts.getIamPolicy",
     "logging.buckets.list",
     "monitoring.timeSeries.list",
     "orgpolicy.policy.get",
+    "privateca.certificates.list",
     "recommender.cloudAssetInsights.get",
     "recommender.cloudAssetInsights.list",
     "recommender.locations.get",

diff --git a/roles/batch.serviceAgent b/roles/batch.serviceAgent
@@ -234,6 +234,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.list",
     "compute.networkAttachments.listEffectiveTags",

diff --git a/roles/cloudtpu.serviceAgent b/roles/cloudtpu.serviceAgent
@@ -355,6 +355,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.create",
     "compute.networkAttachments.createTagBinding",
     "compute.networkAttachments.delete",
@@ -987,6 +991,12 @@
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
+    "networkservices.wasmPlugins.create",
+    "networkservices.wasmPlugins.delete",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
+    "networkservices.wasmPlugins.update",
+    "networkservices.wasmPlugins.use",
     "pubsub.schemas.attach",
     "pubsub.schemas.commit",
     "pubsub.schemas.create",

diff --git a/roles/compute.admin b/roles/compute.admin
@@ -384,6 +384,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.create",
     "compute.networkAttachments.createTagBinding",
     "compute.networkAttachments.delete",

diff --git a/roles/compute.instanceAdmin b/roles/compute.instanceAdmin
@@ -155,6 +155,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkEndpointGroups.attachNetworkEndpoints",
     "compute.networkEndpointGroups.create",
     "compute.networkEndpointGroups.createTagBinding",

diff --git a/roles/compute.instanceAdmin.v1 b/roles/compute.instanceAdmin.v1
@@ -242,6 +242,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.list",
     "compute.networkAttachments.listEffectiveTags",

diff --git a/roles/compute.networkAdmin b/roles/compute.networkAdmin
@@ -799,6 +799,12 @@
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
+    "networkservices.wasmPlugins.create",
+    "networkservices.wasmPlugins.delete",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
+    "networkservices.wasmPlugins.update",
+    "networkservices.wasmPlugins.use",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "servicedirectory.namespaces.create",

diff --git a/roles/compute.networkUser b/roles/compute.networkUser
@@ -174,6 +174,9 @@
     "networkservices.tcpRoutes.list",
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
+    "networkservices.wasmPlugins.use",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "servicenetworking.services.get",

diff --git a/roles/compute.networkViewer b/roles/compute.networkViewer
@@ -291,6 +291,8 @@
     "networkservices.tcpRoutes.list",
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "servicenetworking.services.get",

diff --git a/roles/container.serviceAgent b/roles/container.serviceAgent
@@ -400,6 +400,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.create",
     "compute.networkAttachments.createTagBinding",
     "compute.networkAttachments.delete",
@@ -1561,6 +1565,24 @@
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
+    "networkservices.wasmPlugins.create",
+    "networkservices.wasmPlugins.delete",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
+    "networkservices.wasmPlugins.update",
+    "networkservices.wasmPlugins.use",
+    "parallelstore.instances.create",
+    "parallelstore.instances.delete",
+    "parallelstore.instances.get",
+    "parallelstore.instances.importData",
+    "parallelstore.instances.list",
+    "parallelstore.instances.update",
+    "parallelstore.locations.get",
+    "parallelstore.locations.list",
+    "parallelstore.operations.cancel",
+    "parallelstore.operations.delete",
+    "parallelstore.operations.get",
+    "parallelstore.operations.list",
     "pubsub.topics.create",
     "pubsub.topics.get",
     "pubsub.topics.publish",

diff --git a/roles/dataflow.serviceAgent b/roles/dataflow.serviceAgent
@@ -467,6 +467,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.create",
     "compute.networkAttachments.createTagBinding",
     "compute.networkAttachments.delete",
@@ -1252,6 +1256,12 @@
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
+    "networkservices.wasmPlugins.create",
+    "networkservices.wasmPlugins.delete",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
+    "networkservices.wasmPlugins.update",
+    "networkservices.wasmPlugins.use",
     "observability.scopes.get",
     "opsconfigmonitoring.resourceMetadata.list",
     "orgpolicy.policy.get",

diff --git a/roles/datafusion.serviceAgent b/roles/datafusion.serviceAgent
@@ -512,6 +512,8 @@
     "networkservices.tcpRoutes.list",
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
     "orgpolicy.policy.get",
     "recommender.iamPolicyInsights.get",
     "recommender.iamPolicyInsights.list",

diff --git a/roles/dataplex.discoveryBigLakePublishingServiceAgent b/roles/dataplex.discoveryBigLakePublishingServiceAgent
@@ -6,6 +6,6 @@
     "bigquery.connections.use"
   ],
   "name": "roles/dataplex.discoveryBigLakePublishingServiceAgent",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Dataplex Discovery BigLake Publishing Service Agent"
 }
diff --git a/roles/dataplex.discoveryPublishingServiceAgent b/roles/dataplex.discoveryPublishingServiceAgent
@@ -6,6 +6,6 @@
     "bigquery.datasets.get"
   ],
   "name": "roles/dataplex.discoveryPublishingServiceAgent",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Dataplex Discovery Publishing Service Agent"
 }
diff --git a/roles/dataplex.discoveryServiceAgent b/roles/dataplex.discoveryServiceAgent
@@ -7,6 +7,6 @@
     "storage.objects.list"
   ],
   "name": "roles/dataplex.discoveryServiceAgent",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "Dataplex Discovery Service Agent"
 }
diff --git a/roles/dataprep.serviceAgent b/roles/dataprep.serviceAgent
@@ -192,6 +192,8 @@
     "compute.machineImages.list",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.getIamPolicy",
     "compute.networkAttachments.list",

diff --git a/roles/dataproc.serviceAgent b/roles/dataproc.serviceAgent
@@ -158,6 +158,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkEndpointGroups.attachNetworkEndpoints",
     "compute.networkEndpointGroups.create",
     "compute.networkEndpointGroups.createTagBinding",

diff --git a/roles/designcenter.serviceAgent b/roles/designcenter.serviceAgent
@@ -19,6 +19,6 @@
     "storage.objects.update"
   ],
   "name": "roles/designcenter.serviceAgent",
-  "stage": "ALPHA",
+  "stage": "GA",
   "title": "DesignCenter Service Agent"
 }
diff --git a/roles/editor b/roles/editor
@@ -2859,6 +2859,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.create",
     "compute.networkAttachments.delete",
     "compute.networkAttachments.get",
@@ -6992,6 +6996,12 @@
     "networkservices.tlsRoutes.get",
     "networkservices.tlsRoutes.list",
     "networkservices.tlsRoutes.update",
+    "networkservices.wasmPlugins.create",
+    "networkservices.wasmPlugins.delete",
+    "networkservices.wasmPlugins.get",
+    "networkservices.wasmPlugins.list",
+    "networkservices.wasmPlugins.update",
+    "networkservices.wasmPlugins.use",
     "notebooks.environments.create",
     "notebooks.environments.delete",
     "notebooks.environments.get",
@@ -7110,6 +7120,12 @@
     "osconfig.instanceOSPoliciesCompliances.list",
     "osconfig.inventories.get",
     "osconfig.inventories.list",
+    "osconfig.locations.get",
+    "osconfig.locations.list",
+    "osconfig.operations.cancel",
+    "osconfig.operations.delete",
+    "osconfig.operations.get",
+    "osconfig.operations.list",
     "osconfig.osPolicyAssignmentReports.get",
     "osconfig.osPolicyAssignmentReports.list",
     "osconfig.osPolicyAssignmentReports.searchSummaries",
@@ -7130,6 +7146,11 @@
     "osconfig.patchJobs.exec",
     "osconfig.patchJobs.get",
     "osconfig.patchJobs.list",
+    "osconfig.policyOrchestrators.create",
+    "osconfig.policyOrchestrators.delete",
+    "osconfig.policyOrchestrators.get",
+    "osconfig.policyOrchestrators.list",
+    "osconfig.policyOrchestrators.update",
     "osconfig.projectFeatureSettings.get",
     "osconfig.projectFeatureSettings.update",
     "osconfig.upgradeReports.get",
@@ -7138,6 +7159,19 @@
     "osconfig.upgradeReports.searchSummaries",
     "osconfig.vulnerabilityReports.get",
     "osconfig.vulnerabilityReports.list",
+    "parallelstore.instances.create",
+    "parallelstore.instances.delete",
+    "parallelstore.instances.exportData",
+    "parallelstore.instances.get",
+    "parallelstore.instances.importData",
+    "parallelstore.instances.list",
+    "parallelstore.instances.update",
+    "parallelstore.locations.get",
+    "parallelstore.locations.list",
+    "parallelstore.operations.cancel",
+    "parallelstore.operations.delete",
+    "parallelstore.operations.get",
+    "parallelstore.operations.list",
     "paymentsresellersubscription.products.list",
     "paymentsresellersubscription.promotions.list",
     "paymentsresellersubscription.subscriptions.cancel",
@@ -7980,6 +8014,7 @@
     "securesourcemanager.operations.delete",
     "securesourcemanager.operations.get",
     "securesourcemanager.operations.list",
+    "securesourcemanager.repositories.approvePullRequests",
     "securesourcemanager.repositories.create",
     "securesourcemanager.repositories.delete",
     "securesourcemanager.repositories.fetch",

diff --git a/roles/genomics.serviceAgent b/roles/genomics.serviceAgent
@@ -242,6 +242,10 @@
     "compute.machineImages.useReadOnly",
     "compute.machineTypes.get",
     "compute.machineTypes.list",
+    "compute.multiMig.create",
+    "compute.multiMig.delete",
+    "compute.multiMig.get",
+    "compute.multiMig.list",
     "compute.networkAttachments.get",
     "compute.networkAttachments.list",
     "compute.networkAttachments.listEffectiveTags",