diff --git a/package-lock.json b/package-lock.json index 714d610..f6d9aba 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "gcp-iam-completions", - "version": "1.1.32", + "version": "1.1.33", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "gcp-iam-completions", - "version": "1.1.32", + "version": "1.1.33", "license": "MIT", "dependencies": { "googleapis": "^123.0.0" diff --git a/package.json b/package.json index 62303ff..f274a55 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,7 @@ "email": "patrick.dougherty.0208@gmail.com" }, "license": "MIT", - "version": "1.1.32", + "version": "1.1.33", "bugs": "https://github.com/patrickdoc/vscode-gcp-iam-completions/issues", "repository": { "type": "git", diff --git a/src/google/data/roles.json b/src/google/data/roles.json index bb8b1dc..9a4bb17 100644 --- a/src/google/data/roles.json +++ b/src/google/data/roles.json @@ -1378,6 +1378,40 @@ "stage": "GA", "etag": "AA==" }, + { + "name": "roles/aiplatform.modelMonitoringServiceAgent", + "title": "Vertex AI Model Monitoring Service Agent", + "description": "Gives Vertex AI Model Monitoring the permissions it needs to function.", + "includedPermissions": [ + "aiplatform.batchPredictionJobs.create", + "aiplatform.batchPredictionJobs.get", + "aiplatform.batchPredictionJobs.list", + "bigquery.datasets.create", + "bigquery.datasets.get", + "bigquery.jobs.create", + "bigquery.jobs.get", + "bigquery.tables.create", + "bigquery.tables.export", + "bigquery.tables.get", + "bigquery.tables.getData", + "bigquery.tables.update", + "bigquery.tables.updateData", + "monitoring.notificationChannels.get", + "serviceusage.services.use", + "storage.buckets.create", + "storage.buckets.delete", + "storage.buckets.get", + "storage.buckets.list", + "storage.buckets.update", + "storage.objects.create", + "storage.objects.delete", + "storage.objects.get", + "storage.objects.list", + "storage.objects.update" + ], + "stage": "GA", + "etag": "AA==" + }, { "name": "roles/aiplatform.notebookExecutorUser", "title": "Notebook Executor User", @@ -2465,6 +2499,24 @@ "alloydb.users.login", "alloydb.users.update", "cloudaicompanion.entitlements.get", + "recommender.alloydbClusterPerformanceInsights.get", + "recommender.alloydbClusterPerformanceInsights.list", + "recommender.alloydbClusterPerformanceInsights.update", + "recommender.alloydbClusterPerformanceRecommendations.get", + "recommender.alloydbClusterPerformanceRecommendations.list", + "recommender.alloydbClusterPerformanceRecommendations.update", + "recommender.alloydbClusterReliabilityInsights.get", + "recommender.alloydbClusterReliabilityInsights.list", + "recommender.alloydbClusterReliabilityInsights.update", + "recommender.alloydbClusterReliabilityRecommendations.get", + "recommender.alloydbClusterReliabilityRecommendations.list", + "recommender.alloydbClusterReliabilityRecommendations.update", + "recommender.alloydbInstanceSecurityInsights.get", + "recommender.alloydbInstanceSecurityInsights.list", + "recommender.alloydbInstanceSecurityInsights.update", + "recommender.alloydbInstanceSecurityRecommendations.get", + "recommender.alloydbInstanceSecurityRecommendations.list", + "recommender.alloydbInstanceSecurityRecommendations.update", "resourcemanager.projects.get", "resourcemanager.projects.list" ], @@ -2535,6 +2587,14 @@ "alloydb.users.get", "alloydb.users.list", "cloudaicompanion.entitlements.get", + "recommender.alloydbClusterPerformanceInsights.get", + "recommender.alloydbClusterPerformanceInsights.list", + "recommender.alloydbClusterPerformanceRecommendations.get", + "recommender.alloydbClusterPerformanceRecommendations.list", + "recommender.alloydbClusterReliabilityInsights.get", + "recommender.alloydbClusterReliabilityInsights.list", + "recommender.alloydbClusterReliabilityRecommendations.get", + "recommender.alloydbClusterReliabilityRecommendations.list", "resourcemanager.projects.get", "resourcemanager.projects.list" ], @@ -4506,6 +4566,18 @@ "stage": "BETA", "etag": "AA==" }, + { + "name": "roles/apihub.runtimeProjectServiceAgent", + "title": "API-Hub Runtime Project Service Agent", + "description": "Gives API-Hub Service Account access to runtime project resources.", + "includedPermissions": [ + "apigee.deployments.list", + "apigee.envgroupattachments.list", + "apigee.envgroups.list", + "apigee.proxyrevisions.get" + ], + "etag": "AA==" + }, { "name": "roles/apihub.viewer", "title": "API hub all resource viewer", @@ -4547,6 +4619,42 @@ "stage": "BETA", "etag": "AA==" }, + { + "name": "roles/apim.apiDiscoveryServiceAgent", + "title": "APIM API Discovery Service Agent", + "description": "Gives APIM the ability to manage resources in consumer project", + "includedPermissions": [ + "compute.backendServices.create", + "compute.backendServices.delete", + "compute.backendServices.get", + "compute.backendServices.list", + "compute.backendServices.update", + "compute.backendServices.use", + "compute.globalOperations.get", + "compute.networks.use", + "compute.regionBackendServices.create", + "compute.regionBackendServices.delete", + "compute.regionBackendServices.get", + "compute.regionBackendServices.list", + "compute.regionBackendServices.update", + "compute.regionBackendServices.use", + "compute.regionNetworkEndpointGroups.attachNetworkEndpoints", + "compute.regionNetworkEndpointGroups.create", + "compute.regionNetworkEndpointGroups.delete", + "compute.regionNetworkEndpointGroups.detachNetworkEndpoints", + "compute.regionNetworkEndpointGroups.get", + "compute.regionNetworkEndpointGroups.list", + "compute.regionNetworkEndpointGroups.use", + "compute.regionOperations.get", + "compute.subnetworks.use", + "networkservices.operations.cancel", + "networkservices.operations.delete", + "networkservices.operations.get", + "networkservices.operations.list" + ], + "stage": "GA", + "etag": "AA==" + }, { "name": "roles/appdevelopmentexperience.serviceAgent", "title": "App Development Experience Service Agent", @@ -5449,13 +5557,28 @@ "assuredoss.operations.delete", "assuredoss.operations.get", "assuredoss.operations.list", + "iam.serviceAccountKeys.create", "iam.serviceAccounts.create", "iam.serviceAccounts.get", + "pubsub.schemas.get", + "pubsub.schemas.list", + "pubsub.schemas.listRevisions", + "pubsub.schemas.validate", + "pubsub.snapshots.get", + "pubsub.snapshots.list", + "pubsub.subscriptions.create", + "pubsub.subscriptions.get", + "pubsub.subscriptions.list", + "pubsub.subscriptions.update", + "pubsub.topics.get", + "pubsub.topics.list", "resourcemanager.organizations.get", "resourcemanager.projects.get", "resourcemanager.projects.list", + "serviceusage.quotas.get", "serviceusage.services.enable", - "serviceusage.services.get" + "serviceusage.services.get", + "serviceusage.services.list" ], "stage": "GA", "etag": "AA==" @@ -5504,11 +5627,23 @@ "assuredoss.operations.list", "iam.serviceAccounts.create", "iam.serviceAccounts.get", + "pubsub.schemas.get", + "pubsub.schemas.list", + "pubsub.schemas.listRevisions", + "pubsub.schemas.validate", + "pubsub.snapshots.get", + "pubsub.snapshots.list", + "pubsub.subscriptions.get", + "pubsub.subscriptions.list", + "pubsub.topics.get", + "pubsub.topics.list", "resourcemanager.organizations.get", "resourcemanager.projects.get", "resourcemanager.projects.list", + "serviceusage.quotas.get", "serviceusage.services.enable", - "serviceusage.services.get" + "serviceusage.services.get", + "serviceusage.services.list" ], "stage": "BETA", "etag": "AA==" @@ -5551,9 +5686,22 @@ "assuredoss.metadata.list", "assuredoss.operations.get", "assuredoss.operations.list", + "pubsub.schemas.get", + "pubsub.schemas.list", + "pubsub.schemas.listRevisions", + "pubsub.schemas.validate", + "pubsub.snapshots.get", + "pubsub.snapshots.list", + "pubsub.subscriptions.get", + "pubsub.subscriptions.list", + "pubsub.topics.get", + "pubsub.topics.list", "resourcemanager.organizations.get", "resourcemanager.projects.get", - "resourcemanager.projects.list" + "resourcemanager.projects.list", + "serviceusage.quotas.get", + "serviceusage.services.get", + "serviceusage.services.list" ], "stage": "GA", "etag": "AA==" @@ -5700,10 +5848,12 @@ { "name": "roles/assuredworkloads.serviceAgent", "title": "Assured Workloads Service Agent", - "description": "Gives the Assured Workloads service account access to create KMS keyrings and keys, and to monitor Assured Workloads.", + "description": "Gives the Assured Workloads service account access to create KMS keyrings and keys, monitor Assured Workloads and read Organization Policies.", "includedPermissions": [ "cloudkms.cryptoKeys.create", "cloudkms.keyRings.create", + "orgpolicy.policies.list", + "orgpolicy.policy.get", "serviceusage.services.enable", "serviceusage.services.get", "serviceusage.services.use" @@ -5723,6 +5873,7 @@ "auditmanager.locations.list", "auditmanager.operations.get", "auditmanager.operations.list", + "cloudasset.assets.searchAllResources", "resourcemanager.folders.get", "resourcemanager.folders.list", "resourcemanager.organizations.get", @@ -5743,6 +5894,7 @@ "auditmanager.locations.list", "auditmanager.operations.get", "auditmanager.operations.list", + "cloudasset.assets.searchAllResources", "resourcemanager.folders.get", "resourcemanager.folders.list", "resourcemanager.organizations.get", @@ -17885,6 +18037,64 @@ "stage": "BETA", "etag": "AA==" }, + { + "name": "roles/compliancescanning.serviceAgent", + "title": "Compliance Scanning Service Agent", + "description": "Gives Compliance Scanning the access it needs to analyze containers and VMs for compliance and create occurrences using the Container Analysis API", + "includedPermissions": [ + "artifactregistry.dockerimages.get", + "artifactregistry.dockerimages.list", + "artifactregistry.files.download", + "artifactregistry.files.get", + "artifactregistry.files.list", + "artifactregistry.locations.get", + "artifactregistry.locations.list", + "artifactregistry.mavenartifacts.get", + "artifactregistry.mavenartifacts.list", + "artifactregistry.npmpackages.get", + "artifactregistry.npmpackages.list", + "artifactregistry.packages.get", + "artifactregistry.packages.list", + "artifactregistry.projectsettings.get", + "artifactregistry.pythonpackages.get", + "artifactregistry.pythonpackages.list", + "artifactregistry.repositories.downloadArtifacts", + "artifactregistry.repositories.get", + "artifactregistry.repositories.list", + "artifactregistry.repositories.listEffectiveTags", + "artifactregistry.repositories.listTagBindings", + "artifactregistry.repositories.readViaVirtualRepository", + "artifactregistry.tags.get", + "artifactregistry.tags.list", + "artifactregistry.versions.get", + "artifactregistry.versions.list", + "compute.images.get", + "compute.images.list", + "compute.images.useReadOnly", + "compute.instances.get", + "compute.instances.getGuestAttributes", + "compute.instances.list", + "compute.zones.get", + "compute.zones.list", + "containeranalysis.notes.attachOccurrence", + "containeranalysis.notes.create", + "containeranalysis.notes.delete", + "containeranalysis.notes.get", + "containeranalysis.notes.list", + "containeranalysis.notes.update", + "containeranalysis.occurrences.create", + "containeranalysis.occurrences.delete", + "containeranalysis.occurrences.get", + "containeranalysis.occurrences.list", + "containeranalysis.occurrences.update", + "resourcemanager.projects.get", + "resourcemanager.projects.list", + "storage.objects.get", + "storage.objects.list" + ], + "stage": "GA", + "etag": "AA==" + }, { "name": "roles/composer.ServiceAgentV2Ext", "title": "Cloud Composer v2 API Service Agent Extension", @@ -18873,6 +19083,7 @@ "container.clusterRoles.get", "container.clusterRoles.list", "container.clusterRoles.update", + "container.clusters.connect", "container.clusters.create", "container.clusters.createTagBinding", "container.clusters.delete", @@ -19326,6 +19537,7 @@ "logging.views.create", "logging.views.delete", "logging.views.get", + "logging.views.getIamPolicy", "logging.views.list", "logging.views.update", "monitoring.alertPolicies.get", @@ -19923,6 +20135,7 @@ "container.clusterRoles.get", "container.clusterRoles.list", "container.clusterRoles.update", + "container.clusters.connect", "container.clusters.create", "container.clusters.createTagBinding", "container.clusters.delete", @@ -24816,6 +25029,7 @@ "config.previews.upload", "config.revisions.getState", "logging.logEntries.create", + "monitoring.timeSeries.list", "storage.buckets.create", "storage.buckets.delete", "storage.buckets.get", @@ -25465,6 +25679,11 @@ "contactcenterinsights.faqModels.get", "contactcenterinsights.faqModels.list", "contactcenterinsights.faqModels.update", + "contactcenterinsights.feedbackLabels.create", + "contactcenterinsights.feedbackLabels.delete", + "contactcenterinsights.feedbackLabels.get", + "contactcenterinsights.feedbackLabels.list", + "contactcenterinsights.feedbackLabels.update", "contactcenterinsights.issueModels.create", "contactcenterinsights.issueModels.delete", "contactcenterinsights.issueModels.deploy", @@ -25576,6 +25795,8 @@ "contactcenterinsights.faqEntries.list", "contactcenterinsights.faqModels.get", "contactcenterinsights.faqModels.list", + "contactcenterinsights.feedbackLabels.get", + "contactcenterinsights.feedbackLabels.list", "contactcenterinsights.issueModels.get", "contactcenterinsights.issueModels.list", "contactcenterinsights.issues.get", @@ -25638,6 +25859,7 @@ "container.clusterRoles.get", "container.clusterRoles.list", "container.clusterRoles.update", + "container.clusters.connect", "container.clusters.create", "container.clusters.createTagBinding", "container.clusters.delete", @@ -26071,6 +26293,7 @@ "monitoring.timeSeries.create", "monitoring.timeSeries.list" ], + "stage": "BETA", "etag": "AA==" }, { @@ -26110,6 +26333,7 @@ "container.clusterRoleBindings.list", "container.clusterRoles.get", "container.clusterRoles.list", + "container.clusters.connect", "container.clusters.get", "container.clusters.list", "container.componentStatuses.get", @@ -27343,6 +27567,7 @@ "container.clusterRoles.get", "container.clusterRoles.list", "container.clusterRoles.update", + "container.clusters.connect", "container.clusters.create", "container.clusters.createTagBinding", "container.clusters.delete", @@ -28095,6 +28320,7 @@ "container.clusterRoleBindings.list", "container.clusterRoles.get", "container.clusterRoles.list", + "container.clusters.connect", "container.clusters.get", "container.clusters.list", "container.componentStatuses.get", @@ -28541,6 +28767,7 @@ "container.clusterRoles.get", "container.clusterRoles.list", "container.clusterRoles.update", + "container.clusters.connect", "container.clusters.get", "container.clusters.list", "container.componentStatuses.get", @@ -28888,6 +29115,24 @@ "stage": "GA", "etag": "AA==" }, + { + "name": "roles/databasecenter.viewer", + "title": "Database center viewer", + "description": "Viewer role for Database Center resource data", + "includedPermissions": [ + "cloudaicompanion.entitlements.get", + "databasecenter.fleetHealthStats.list", + "databasecenter.fleetStats.list", + "databasecenter.locations.list", + "databasecenter.products.list", + "databasecenter.resourceGroups.list", + "databasecenter.userLabels.list", + "resourcemanager.projects.get", + "resourcemanager.projects.list" + ], + "stage": "BETA", + "etag": "AA==" + }, { "name": "roles/databaseinsights.eventsViewer", "title": "Events Service viewer", @@ -30426,6 +30671,7 @@ "logging.views.create", "logging.views.delete", "logging.views.get", + "logging.views.getIamPolicy", "logging.views.list", "logging.views.update", "monitoring.alertPolicies.get", @@ -31657,6 +31903,7 @@ "dataproc.autoscalingPolicies.list", "dataproc.autoscalingPolicies.update", "dataproc.autoscalingPolicies.use", + "dataproc.batches.analyze", "dataproc.batches.cancel", "dataproc.batches.create", "dataproc.batches.delete", @@ -32275,6 +32522,7 @@ "alloydb.operations.list", "cloudsql.databases.delete", "cloudsql.databases.get", + "cloudsql.databases.list", "cloudsql.instances.connect", "cloudsql.instances.create", "cloudsql.instances.delete", @@ -32674,7 +32922,7 @@ "resourcemanager.projects.get", "resourcemanager.projects.list" ], - "stage": "BETA", + "stage": "GA", "etag": "AA==" }, { @@ -32715,7 +32963,7 @@ "resourcemanager.projects.get", "resourcemanager.projects.list" ], - "stage": "BETA", + "stage": "GA", "etag": "AA==" }, { @@ -32737,7 +32985,7 @@ "resourcemanager.projects.get", "resourcemanager.projects.list" ], - "stage": "BETA", + "stage": "GA", "etag": "AA==" }, { @@ -33977,6 +34225,7 @@ "dataproc.autoscalingPolicies.setIamPolicy", "dataproc.autoscalingPolicies.update", "dataproc.autoscalingPolicies.use", + "dataproc.batches.analyze", "dataproc.batches.cancel", "dataproc.batches.create", "dataproc.batches.delete", @@ -34054,6 +34303,7 @@ "dataproc.autoscalingPolicies.list", "dataproc.autoscalingPolicies.update", "dataproc.autoscalingPolicies.use", + "dataproc.batches.analyze", "dataproc.batches.cancel", "dataproc.batches.create", "dataproc.batches.delete", @@ -36517,6 +36767,8 @@ "includedPermissions": [ "aiplatform.endpoints.get", "aiplatform.endpoints.predict", + "aiplatform.extensions.execute", + "aiplatform.extensions.get", "aiplatform.models.get", "bigquery.jobs.create", "bigquery.tables.get", @@ -36866,6 +37118,7 @@ "title": "Discovery Engine Service Agent", "description": "Discovery Engine service uploads documents and user events from Cloud Storage and BigQuery, reports results to the customer Cloud Storage bucket, writes logs to customer projects using Cloud Logging, and writes and reads metrics for customer using Cloud Monitoring.", "includedPermissions": [ + "alloydb.databases.list", "alloydb.instances.get", "alloydb.operations.get", "bigquery.datasets.create", @@ -36912,6 +37165,12 @@ "storage.buckets.get", "storage.buckets.getIamPolicy", "storage.buckets.setIamPolicy", + "storage.managedFolders.create", + "storage.managedFolders.delete", + "storage.managedFolders.get", + "storage.managedFolders.getIamPolicy", + "storage.managedFolders.list", + "storage.managedFolders.setIamPolicy", "storage.objects.create", "storage.objects.delete", "storage.objects.get", @@ -39652,7 +39911,8 @@ "gkehub.memberships.get", "gkehub.memberships.update", "gkehub.operations.cancel", - "gkehub.operations.get" + "gkehub.operations.get", + "serviceusage.services.list" ], "stage": "GA", "etag": "AA==" @@ -42960,6 +43220,11 @@ "contactcenterinsights.faqModels.get", "contactcenterinsights.faqModels.list", "contactcenterinsights.faqModels.update", + "contactcenterinsights.feedbackLabels.create", + "contactcenterinsights.feedbackLabels.delete", + "contactcenterinsights.feedbackLabels.get", + "contactcenterinsights.feedbackLabels.list", + "contactcenterinsights.feedbackLabels.update", "contactcenterinsights.issueModels.create", "contactcenterinsights.issueModels.delete", "contactcenterinsights.issueModels.deploy", @@ -43021,6 +43286,7 @@ "container.clusterRoleBindings.list", "container.clusterRoles.get", "container.clusterRoles.list", + "container.clusters.connect", "container.clusters.create", "container.clusters.delete", "container.clusters.get", @@ -43432,6 +43698,12 @@ "contentwarehouse.synonymSets.get", "contentwarehouse.synonymSets.list", "contentwarehouse.synonymSets.update", + "databasecenter.fleetHealthStats.list", + "databasecenter.fleetStats.list", + "databasecenter.locations.list", + "databasecenter.products.list", + "databasecenter.resourceGroups.list", + "databasecenter.userLabels.list", "databaseinsights.activeQueries.fetch", "databaseinsights.activeQuery.terminate", "databaseinsights.activitySummary.fetch", @@ -43853,6 +44125,7 @@ "dataproc.autoscalingPolicies.list", "dataproc.autoscalingPolicies.update", "dataproc.autoscalingPolicies.use", + "dataproc.batches.analyze", "dataproc.batches.cancel", "dataproc.batches.create", "dataproc.batches.delete", @@ -45009,7 +45282,6 @@ "gkehub.fleet.updateFreeTrial", "gkehub.gateway.delete", "gkehub.gateway.get", - "gkehub.gateway.getIamPolicy", "gkehub.gateway.patch", "gkehub.gateway.post", "gkehub.gateway.put", @@ -45537,6 +45809,7 @@ "logging.views.create", "logging.views.delete", "logging.views.get", + "logging.views.getIamPolicy", "logging.views.list", "logging.views.listLogs", "logging.views.listResourceKeys", @@ -46466,6 +46739,24 @@ "recaptchaenterprise.metrics.get", "recaptchaenterprise.relatedaccountgroupmemberships.list", "recaptchaenterprise.relatedaccountgroups.list", + "recommender.alloydbClusterPerformanceInsights.get", + "recommender.alloydbClusterPerformanceInsights.list", + "recommender.alloydbClusterPerformanceInsights.update", + "recommender.alloydbClusterPerformanceRecommendations.get", + "recommender.alloydbClusterPerformanceRecommendations.list", + "recommender.alloydbClusterPerformanceRecommendations.update", + "recommender.alloydbClusterReliabilityInsights.get", + "recommender.alloydbClusterReliabilityInsights.list", + "recommender.alloydbClusterReliabilityInsights.update", + "recommender.alloydbClusterReliabilityRecommendations.get", + "recommender.alloydbClusterReliabilityRecommendations.list", + "recommender.alloydbClusterReliabilityRecommendations.update", + "recommender.alloydbInstanceSecurityInsights.get", + "recommender.alloydbInstanceSecurityInsights.list", + "recommender.alloydbInstanceSecurityInsights.update", + "recommender.alloydbInstanceSecurityRecommendations.get", + "recommender.alloydbInstanceSecurityRecommendations.list", + "recommender.alloydbInstanceSecurityRecommendations.update", "recommender.bigqueryCapacityCommitmentsInsights.get", "recommender.bigqueryCapacityCommitmentsInsights.list", "recommender.bigqueryCapacityCommitmentsInsights.update", @@ -47204,6 +47495,10 @@ "securitycentermanagement.eventThreatDetectionCustomModules.validate", "securitycentermanagement.locations.get", "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.activate", + "securitycentermanagement.securityCommandCenter.generateServiceAccounts", + "securitycentermanagement.securityCommandCenter.get", + "securitycentermanagement.securityCommandCenter.update", "securitycentermanagement.securityHealthAnalyticsCustomModules.create", "securitycentermanagement.securityHealthAnalyticsCustomModules.delete", "securitycentermanagement.securityHealthAnalyticsCustomModules.get", @@ -47637,6 +47932,11 @@ "videostitcher.slates.update", "videostitcher.vodAdTagDetails.get", "videostitcher.vodAdTagDetails.list", + "videostitcher.vodConfigs.create", + "videostitcher.vodConfigs.delete", + "videostitcher.vodConfigs.get", + "videostitcher.vodConfigs.list", + "videostitcher.vodConfigs.update", "videostitcher.vodSessions.create", "videostitcher.vodSessions.get", "videostitcher.vodStitchDetails.get", @@ -48457,6 +48757,7 @@ "compute.networkAttachments.get", "compute.networkAttachments.update", "compute.regionOperations.get", + "container.clusters.connect", "container.clusters.get", "container.deployments.create", "container.deployments.delete", @@ -50029,6 +50330,7 @@ "servicemanagement.services.bind", "serviceusage.services.enable", "serviceusage.services.get", + "serviceusage.services.list", "serviceusage.services.use", "storage.buckets.create", "storage.buckets.get", @@ -51015,6 +51317,7 @@ "includedPermissions": [ "aiplatform.endpoints.predict" ], + "stage": "GA", "etag": "AA==" }, { @@ -51593,6 +51896,7 @@ "container.clusterRoles.get", "container.clusterRoles.list", "container.clusterRoles.update", + "container.clusters.connect", "container.clusters.create", "container.clusters.delete", "container.clusters.get", @@ -52772,6 +53076,7 @@ "container.clusterRoleBindings.list", "container.clusterRoles.get", "container.clusterRoles.list", + "container.clusters.connect", "container.clusters.get", "container.clusters.list", "container.clusters.update", @@ -53324,11 +53629,9 @@ "includedPermissions": [ "gkehub.gateway.delete", "gkehub.gateway.get", - "gkehub.gateway.getIamPolicy", "gkehub.gateway.patch", "gkehub.gateway.post", "gkehub.gateway.put", - "gkehub.gateway.setIamPolicy", "gkehub.memberships.get", "serviceusage.services.get" ], @@ -53373,8 +53676,10 @@ "gkehub.rbacrolebindings.get", "gkehub.rbacrolebindings.list", "gkehub.scopes.get", + "gkehub.scopes.getIamPolicy", "gkehub.scopes.listBoundMemberships" ], + "stage": "GA", "etag": "AA==" }, { @@ -53394,6 +53699,7 @@ "container.clusterRoles.get", "container.clusterRoles.list", "container.clusterRoles.update", + "container.clusters.connect", "container.clusters.get", "container.clusters.update", "container.customResourceDefinitions.create", @@ -54726,6 +55032,7 @@ "resourcemanager.projects.get", "resourcemanager.projects.list" ], + "stage": "BETA", "etag": "AA==" }, { @@ -54740,6 +55047,7 @@ "resourcemanager.projects.get", "resourcemanager.projects.list" ], + "stage": "BETA", "etag": "AA==" }, { @@ -55557,6 +55865,7 @@ "contactcenterinsights.conversations.list", "contactcenterinsights.faqEntries.list", "contactcenterinsights.faqModels.list", + "contactcenterinsights.feedbackLabels.list", "contactcenterinsights.issueModels.list", "contactcenterinsights.issues.list", "contactcenterinsights.operations.list", @@ -55646,6 +55955,12 @@ "contentwarehouse.documents.setIamPolicy", "contentwarehouse.ruleSets.list", "contentwarehouse.synonymSets.list", + "databasecenter.fleetHealthStats.list", + "databasecenter.fleetStats.list", + "databasecenter.locations.list", + "databasecenter.products.list", + "databasecenter.resourceGroups.list", + "databasecenter.userLabels.list", "databaseinsights.locations.list", "datacatalog.categories.getIamPolicy", "datacatalog.categories.setIamPolicy", @@ -56044,8 +56359,6 @@ "gkehub.features.getIamPolicy", "gkehub.features.list", "gkehub.features.setIamPolicy", - "gkehub.gateway.getIamPolicy", - "gkehub.gateway.setIamPolicy", "gkehub.locations.list", "gkehub.membershipbindings.list", "gkehub.memberships.getIamPolicy", @@ -56212,7 +56525,9 @@ "logging.privateLogEntries.list", "logging.queries.list", "logging.sinks.list", + "logging.views.getIamPolicy", "logging.views.list", + "logging.views.setIamPolicy", "looker.backups.list", "looker.instances.list", "looker.locations.list", @@ -56490,6 +56805,12 @@ "recaptchaenterprise.keys.list", "recaptchaenterprise.relatedaccountgroupmemberships.list", "recaptchaenterprise.relatedaccountgroups.list", + "recommender.alloydbClusterPerformanceInsights.list", + "recommender.alloydbClusterPerformanceRecommendations.list", + "recommender.alloydbClusterReliabilityInsights.list", + "recommender.alloydbClusterReliabilityRecommendations.list", + "recommender.alloydbInstanceSecurityInsights.list", + "recommender.alloydbInstanceSecurityRecommendations.list", "recommender.bigqueryCapacityCommitmentsInsights.list", "recommender.bigqueryCapacityCommitmentsRecommendations.list", "recommender.bigqueryMaterializedViewInsights.list", @@ -56824,6 +57145,7 @@ "videostitcher.liveConfigs.list", "videostitcher.slates.list", "videostitcher.vodAdTagDetails.list", + "videostitcher.vodConfigs.list", "videostitcher.vodStitchDetails.list", "visionai.analyses.getIamPolicy", "visionai.analyses.list", @@ -57588,6 +57910,7 @@ "contactcenterinsights.conversations.list", "contactcenterinsights.faqEntries.list", "contactcenterinsights.faqModels.list", + "contactcenterinsights.feedbackLabels.list", "contactcenterinsights.issueModels.list", "contactcenterinsights.issues.list", "contactcenterinsights.operations.list", @@ -57674,6 +57997,12 @@ "contentwarehouse.documents.list", "contentwarehouse.ruleSets.list", "contentwarehouse.synonymSets.list", + "databasecenter.fleetHealthStats.list", + "databasecenter.fleetStats.list", + "databasecenter.locations.list", + "databasecenter.products.list", + "databasecenter.resourceGroups.list", + "databasecenter.userLabels.list", "databaseinsights.locations.list", "datacatalog.categories.getIamPolicy", "datacatalog.entries.getIamPolicy", @@ -58012,7 +58341,6 @@ "gkebackup.volumeRestores.list", "gkehub.features.getIamPolicy", "gkehub.features.list", - "gkehub.gateway.getIamPolicy", "gkehub.locations.list", "gkehub.membershipbindings.list", "gkehub.memberships.getIamPolicy", @@ -58151,6 +58479,7 @@ "logging.privateLogEntries.list", "logging.queries.list", "logging.sinks.list", + "logging.views.getIamPolicy", "logging.views.list", "looker.backups.list", "looker.instances.list", @@ -58377,6 +58706,12 @@ "recaptchaenterprise.keys.list", "recaptchaenterprise.relatedaccountgroupmemberships.list", "recaptchaenterprise.relatedaccountgroups.list", + "recommender.alloydbClusterPerformanceInsights.list", + "recommender.alloydbClusterPerformanceRecommendations.list", + "recommender.alloydbClusterReliabilityInsights.list", + "recommender.alloydbClusterReliabilityRecommendations.list", + "recommender.alloydbInstanceSecurityInsights.list", + "recommender.alloydbInstanceSecurityRecommendations.list", "recommender.bigqueryCapacityCommitmentsInsights.list", "recommender.bigqueryCapacityCommitmentsRecommendations.list", "recommender.bigqueryMaterializedViewInsights.list", @@ -58683,6 +59018,7 @@ "videostitcher.liveConfigs.list", "videostitcher.slates.list", "videostitcher.vodAdTagDetails.list", + "videostitcher.vodConfigs.list", "videostitcher.vodStitchDetails.list", "visionai.analyses.getIamPolicy", "visionai.analyses.list", @@ -60249,6 +60585,7 @@ "container.clusterRoles.get", "container.clusterRoles.list", "container.clusterRoles.update", + "container.clusters.connect", "container.clusters.create", "container.clusters.createTagBinding", "container.clusters.delete", @@ -60635,11 +60972,9 @@ "gkehub.fleet.updateFreeTrial", "gkehub.gateway.delete", "gkehub.gateway.get", - "gkehub.gateway.getIamPolicy", "gkehub.gateway.patch", "gkehub.gateway.post", "gkehub.gateway.put", - "gkehub.gateway.setIamPolicy", "gkehub.locations.get", "gkehub.locations.list", "gkehub.membershipbindings.create", @@ -60753,6 +61088,7 @@ "container.clusterRoles.get", "container.clusterRoles.list", "container.clusterRoles.update", + "container.clusters.connect", "container.clusters.create", "container.clusters.createTagBinding", "container.clusters.delete", @@ -61817,10 +62153,12 @@ "logging.views.create", "logging.views.delete", "logging.views.get", + "logging.views.getIamPolicy", "logging.views.list", "logging.views.listLogs", "logging.views.listResourceKeys", "logging.views.listResourceValues", + "logging.views.setIamPolicy", "logging.views.update", "resourcemanager.projects.get", "resourcemanager.projects.list" @@ -61886,6 +62224,7 @@ "logging.views.create", "logging.views.delete", "logging.views.get", + "logging.views.getIamPolicy", "logging.views.list", "logging.views.update", "resourcemanager.projects.get", @@ -63392,11 +63731,9 @@ "gkehub.fleet.getFreeTrial", "gkehub.gateway.delete", "gkehub.gateway.get", - "gkehub.gateway.getIamPolicy", "gkehub.gateway.patch", "gkehub.gateway.post", "gkehub.gateway.put", - "gkehub.gateway.setIamPolicy", "gkehub.locations.get", "gkehub.locations.list", "gkehub.membershipbindings.get", @@ -68993,6 +69330,7 @@ "resourcemanager.projects.get", "resourcemanager.projects.list" ], + "stage": "GA", "etag": "AA==" }, { @@ -69004,6 +69342,7 @@ "resourcemanager.projects.get", "resourcemanager.projects.list" ], + "stage": "GA", "etag": "AA==" }, { @@ -73036,6 +73375,11 @@ "contactcenterinsights.faqModels.get", "contactcenterinsights.faqModels.list", "contactcenterinsights.faqModels.update", + "contactcenterinsights.feedbackLabels.create", + "contactcenterinsights.feedbackLabels.delete", + "contactcenterinsights.feedbackLabels.get", + "contactcenterinsights.feedbackLabels.list", + "contactcenterinsights.feedbackLabels.update", "contactcenterinsights.issueModels.create", "contactcenterinsights.issueModels.delete", "contactcenterinsights.issueModels.deploy", @@ -73106,6 +73450,7 @@ "container.clusterRoles.get", "container.clusterRoles.list", "container.clusterRoles.update", + "container.clusters.connect", "container.clusters.create", "container.clusters.createTagBinding", "container.clusters.delete", @@ -73534,6 +73879,12 @@ "contentwarehouse.synonymSets.get", "contentwarehouse.synonymSets.list", "contentwarehouse.synonymSets.update", + "databasecenter.fleetHealthStats.list", + "databasecenter.fleetStats.list", + "databasecenter.locations.list", + "databasecenter.products.list", + "databasecenter.resourceGroups.list", + "databasecenter.userLabels.list", "databaseinsights.activeQueries.fetch", "databaseinsights.activeQuery.terminate", "databaseinsights.activitySummary.fetch", @@ -73987,6 +74338,7 @@ "dataproc.autoscalingPolicies.setIamPolicy", "dataproc.autoscalingPolicies.update", "dataproc.autoscalingPolicies.use", + "dataproc.batches.analyze", "dataproc.batches.cancel", "dataproc.batches.create", "dataproc.batches.delete", @@ -75223,11 +75575,9 @@ "gkehub.fleet.updateFreeTrial", "gkehub.gateway.delete", "gkehub.gateway.get", - "gkehub.gateway.getIamPolicy", "gkehub.gateway.patch", "gkehub.gateway.post", "gkehub.gateway.put", - "gkehub.gateway.setIamPolicy", "gkehub.locations.get", "gkehub.locations.list", "gkehub.membershipbindings.create", @@ -75847,10 +76197,12 @@ "logging.views.create", "logging.views.delete", "logging.views.get", + "logging.views.getIamPolicy", "logging.views.list", "logging.views.listLogs", "logging.views.listResourceKeys", "logging.views.listResourceValues", + "logging.views.setIamPolicy", "logging.views.update", "looker.backups.create", "looker.backups.delete", @@ -76849,6 +77201,24 @@ "recaptchaenterprise.metrics.get", "recaptchaenterprise.relatedaccountgroupmemberships.list", "recaptchaenterprise.relatedaccountgroups.list", + "recommender.alloydbClusterPerformanceInsights.get", + "recommender.alloydbClusterPerformanceInsights.list", + "recommender.alloydbClusterPerformanceInsights.update", + "recommender.alloydbClusterPerformanceRecommendations.get", + "recommender.alloydbClusterPerformanceRecommendations.list", + "recommender.alloydbClusterPerformanceRecommendations.update", + "recommender.alloydbClusterReliabilityInsights.get", + "recommender.alloydbClusterReliabilityInsights.list", + "recommender.alloydbClusterReliabilityInsights.update", + "recommender.alloydbClusterReliabilityRecommendations.get", + "recommender.alloydbClusterReliabilityRecommendations.list", + "recommender.alloydbClusterReliabilityRecommendations.update", + "recommender.alloydbInstanceSecurityInsights.get", + "recommender.alloydbInstanceSecurityInsights.list", + "recommender.alloydbInstanceSecurityInsights.update", + "recommender.alloydbInstanceSecurityRecommendations.get", + "recommender.alloydbInstanceSecurityRecommendations.list", + "recommender.alloydbInstanceSecurityRecommendations.update", "recommender.bigqueryCapacityCommitmentsInsights.get", "recommender.bigqueryCapacityCommitmentsInsights.list", "recommender.bigqueryCapacityCommitmentsInsights.update", @@ -77617,6 +77987,10 @@ "securitycentermanagement.eventThreatDetectionCustomModules.validate", "securitycentermanagement.locations.get", "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.activate", + "securitycentermanagement.securityCommandCenter.generateServiceAccounts", + "securitycentermanagement.securityCommandCenter.get", + "securitycentermanagement.securityCommandCenter.update", "securitycentermanagement.securityHealthAnalyticsCustomModules.create", "securitycentermanagement.securityHealthAnalyticsCustomModules.delete", "securitycentermanagement.securityHealthAnalyticsCustomModules.get", @@ -78081,6 +78455,11 @@ "videostitcher.slates.update", "videostitcher.vodAdTagDetails.get", "videostitcher.vodAdTagDetails.list", + "videostitcher.vodConfigs.create", + "videostitcher.vodConfigs.delete", + "videostitcher.vodConfigs.get", + "videostitcher.vodConfigs.list", + "videostitcher.vodConfigs.update", "videostitcher.vodSessions.create", "videostitcher.vodSessions.get", "videostitcher.vodStitchDetails.get", @@ -79482,6 +79861,58 @@ "stage": "BETA", "etag": "AA==" }, + { + "name": "roles/recommender.alloydbAdmin", + "title": "AlloyDB Recommender Admin", + "description": "Admin of AlloyDB insights and recommendations.", + "includedPermissions": [ + "recommender.alloydbClusterPerformanceInsights.get", + "recommender.alloydbClusterPerformanceInsights.list", + "recommender.alloydbClusterPerformanceInsights.update", + "recommender.alloydbClusterPerformanceRecommendations.get", + "recommender.alloydbClusterPerformanceRecommendations.list", + "recommender.alloydbClusterPerformanceRecommendations.update", + "recommender.alloydbClusterReliabilityInsights.get", + "recommender.alloydbClusterReliabilityInsights.list", + "recommender.alloydbClusterReliabilityInsights.update", + "recommender.alloydbClusterReliabilityRecommendations.get", + "recommender.alloydbClusterReliabilityRecommendations.list", + "recommender.alloydbClusterReliabilityRecommendations.update", + "recommender.alloydbInstanceSecurityInsights.get", + "recommender.alloydbInstanceSecurityInsights.list", + "recommender.alloydbInstanceSecurityInsights.update", + "recommender.alloydbInstanceSecurityRecommendations.get", + "recommender.alloydbInstanceSecurityRecommendations.list", + "recommender.alloydbInstanceSecurityRecommendations.update", + "resourcemanager.projects.get", + "resourcemanager.projects.list" + ], + "stage": "BETA", + "etag": "AA==" + }, + { + "name": "roles/recommender.alloydbViewer", + "title": "AlloyDB Recommender Viewer", + "description": "Viewer of AlloyDB insights and recommendations.", + "includedPermissions": [ + "recommender.alloydbClusterPerformanceInsights.get", + "recommender.alloydbClusterPerformanceInsights.list", + "recommender.alloydbClusterPerformanceRecommendations.get", + "recommender.alloydbClusterPerformanceRecommendations.list", + "recommender.alloydbClusterReliabilityInsights.get", + "recommender.alloydbClusterReliabilityInsights.list", + "recommender.alloydbClusterReliabilityRecommendations.get", + "recommender.alloydbClusterReliabilityRecommendations.list", + "recommender.alloydbInstanceSecurityInsights.get", + "recommender.alloydbInstanceSecurityInsights.list", + "recommender.alloydbInstanceSecurityRecommendations.get", + "recommender.alloydbInstanceSecurityRecommendations.list", + "resourcemanager.projects.get", + "resourcemanager.projects.list" + ], + "stage": "BETA", + "etag": "AA==" + }, { "name": "roles/recommender.bigQueryCapacityCommitmentsAdmin", "title": "BigQuery Slot Recommender Admin", @@ -81061,6 +81492,18 @@ "title": "Recommender Viewer", "description": "Enables Get and List operations.", "includedPermissions": [ + "recommender.alloydbClusterPerformanceInsights.get", + "recommender.alloydbClusterPerformanceInsights.list", + "recommender.alloydbClusterPerformanceRecommendations.get", + "recommender.alloydbClusterPerformanceRecommendations.list", + "recommender.alloydbClusterReliabilityInsights.get", + "recommender.alloydbClusterReliabilityInsights.list", + "recommender.alloydbClusterReliabilityRecommendations.get", + "recommender.alloydbClusterReliabilityRecommendations.list", + "recommender.alloydbInstanceSecurityInsights.get", + "recommender.alloydbInstanceSecurityInsights.list", + "recommender.alloydbInstanceSecurityRecommendations.get", + "recommender.alloydbInstanceSecurityRecommendations.list", "recommender.bigqueryCapacityCommitmentsInsights.get", "recommender.bigqueryCapacityCommitmentsInsights.list", "recommender.bigqueryCapacityCommitmentsRecommendations.get", @@ -83295,6 +83738,7 @@ "securitycentermanagement.eventThreatDetectionCustomModules.validate", "securitycentermanagement.locations.get", "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.get", "securitycentermanagement.securityHealthAnalyticsCustomModules.get", "securitycentermanagement.securityHealthAnalyticsCustomModules.list", "securitycentermanagement.securityHealthAnalyticsCustomModules.simulate", @@ -84327,8 +84771,21 @@ "cloudsecurityscanner.scans.run", "cloudsecurityscanner.scans.update", "compute.addresses.list", + "iam.serviceAccountKeys.create", "iam.serviceAccounts.create", "iam.serviceAccounts.get", + "pubsub.schemas.get", + "pubsub.schemas.list", + "pubsub.schemas.listRevisions", + "pubsub.schemas.validate", + "pubsub.snapshots.get", + "pubsub.snapshots.list", + "pubsub.subscriptions.create", + "pubsub.subscriptions.get", + "pubsub.subscriptions.list", + "pubsub.subscriptions.update", + "pubsub.topics.get", + "pubsub.topics.list", "resourcemanager.folders.get", "resourcemanager.folders.list", "resourcemanager.organizations.get", @@ -84429,6 +84886,9 @@ "securitycentermanagement.eventThreatDetectionCustomModules.validate", "securitycentermanagement.locations.get", "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.generateServiceAccounts", + "securitycentermanagement.securityCommandCenter.get", + "securitycentermanagement.securityCommandCenter.update", "securitycentermanagement.securityHealthAnalyticsCustomModules.create", "securitycentermanagement.securityHealthAnalyticsCustomModules.delete", "securitycentermanagement.securityHealthAnalyticsCustomModules.get", @@ -84506,6 +84966,16 @@ "cloudsecurityscanner.scans.run", "cloudsecurityscanner.scans.update", "compute.addresses.list", + "pubsub.schemas.get", + "pubsub.schemas.list", + "pubsub.schemas.listRevisions", + "pubsub.schemas.validate", + "pubsub.snapshots.get", + "pubsub.snapshots.list", + "pubsub.subscriptions.get", + "pubsub.subscriptions.list", + "pubsub.topics.get", + "pubsub.topics.list", "resourcemanager.folders.get", "resourcemanager.folders.list", "resourcemanager.organizations.get", @@ -84589,6 +85059,9 @@ "securitycentermanagement.eventThreatDetectionCustomModules.validate", "securitycentermanagement.locations.get", "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.generateServiceAccounts", + "securitycentermanagement.securityCommandCenter.get", + "securitycentermanagement.securityCommandCenter.update", "securitycentermanagement.securityHealthAnalyticsCustomModules.get", "securitycentermanagement.securityHealthAnalyticsCustomModules.list", "securitycentermanagement.securityHealthAnalyticsCustomModules.simulate", @@ -84655,6 +85128,16 @@ "cloudsecurityscanner.scanruns.list", "cloudsecurityscanner.scans.get", "cloudsecurityscanner.scans.list", + "pubsub.schemas.get", + "pubsub.schemas.list", + "pubsub.schemas.listRevisions", + "pubsub.schemas.validate", + "pubsub.snapshots.get", + "pubsub.snapshots.list", + "pubsub.subscriptions.get", + "pubsub.subscriptions.list", + "pubsub.topics.get", + "pubsub.topics.list", "resourcemanager.folders.get", "resourcemanager.folders.list", "resourcemanager.organizations.get", @@ -84716,6 +85199,7 @@ "securitycentermanagement.eventThreatDetectionCustomModules.validate", "securitycentermanagement.locations.get", "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.get", "securitycentermanagement.securityHealthAnalyticsCustomModules.get", "securitycentermanagement.securityHealthAnalyticsCustomModules.list", "securitycentermanagement.securityHealthAnalyticsCustomModules.simulate", @@ -87043,6 +87527,9 @@ "securitycentermanagement.eventThreatDetectionCustomModules.validate", "securitycentermanagement.locations.get", "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.generateServiceAccounts", + "securitycentermanagement.securityCommandCenter.get", + "securitycentermanagement.securityCommandCenter.update", "securitycentermanagement.securityHealthAnalyticsCustomModules.create", "securitycentermanagement.securityHealthAnalyticsCustomModules.delete", "securitycentermanagement.securityHealthAnalyticsCustomModules.get", @@ -87125,6 +87612,9 @@ "securitycentermanagement.eventThreatDetectionCustomModules.validate", "securitycentermanagement.locations.get", "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.generateServiceAccounts", + "securitycentermanagement.securityCommandCenter.get", + "securitycentermanagement.securityCommandCenter.update", "securitycentermanagement.securityHealthAnalyticsCustomModules.create", "securitycentermanagement.securityHealthAnalyticsCustomModules.delete", "securitycentermanagement.securityHealthAnalyticsCustomModules.get", @@ -87183,6 +87673,7 @@ "securitycentermanagement.eventThreatDetectionCustomModules.validate", "securitycentermanagement.locations.get", "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.get", "securitycentermanagement.securityHealthAnalyticsCustomModules.get", "securitycentermanagement.securityHealthAnalyticsCustomModules.list", "securitycentermanagement.securityHealthAnalyticsCustomModules.simulate", @@ -87254,6 +87745,44 @@ "stage": "GA", "etag": "AA==" }, + { + "name": "roles/securitycentermanagement.admin", + "title": "Security Center Management Admin", + "description": "Full access to manage Cloud Security Command Center services and custom modules configuration.", + "includedPermissions": [ + "resourcemanager.organizations.get", + "resourcemanager.projects.get", + "resourcemanager.projects.list", + "securitycenter.organizationsettings.get", + "securitycenter.organizationsettings.update", + "securitycenter.securitycentersettings.get", + "securitycenter.securitycentersettings.update", + "securitycentermanagement.effectiveEventThreatDetectionCustomModules.get", + "securitycentermanagement.effectiveEventThreatDetectionCustomModules.list", + "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get", + "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list", + "securitycentermanagement.eventThreatDetectionCustomModules.create", + "securitycentermanagement.eventThreatDetectionCustomModules.delete", + "securitycentermanagement.eventThreatDetectionCustomModules.get", + "securitycentermanagement.eventThreatDetectionCustomModules.list", + "securitycentermanagement.eventThreatDetectionCustomModules.update", + "securitycentermanagement.eventThreatDetectionCustomModules.validate", + "securitycentermanagement.locations.get", + "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.generateServiceAccounts", + "securitycentermanagement.securityCommandCenter.get", + "securitycentermanagement.securityCommandCenter.update", + "securitycentermanagement.securityHealthAnalyticsCustomModules.create", + "securitycentermanagement.securityHealthAnalyticsCustomModules.delete", + "securitycentermanagement.securityHealthAnalyticsCustomModules.get", + "securitycentermanagement.securityHealthAnalyticsCustomModules.list", + "securitycentermanagement.securityHealthAnalyticsCustomModules.simulate", + "securitycentermanagement.securityHealthAnalyticsCustomModules.test", + "securitycentermanagement.securityHealthAnalyticsCustomModules.update" + ], + "stage": "GA", + "etag": "AA==" + }, { "name": "roles/securitycentermanagement.customModulesEditor", "title": "Security Center Management Custom Modules Editor", @@ -87351,6 +87880,72 @@ "stage": "GA", "etag": "AA==" }, + { + "name": "roles/securitycentermanagement.settingsEditor", + "title": "Security Center Management Settings Editor", + "description": "Full access to manage Cloud Security Command Center settings", + "includedPermissions": [ + "resourcemanager.organizations.get", + "resourcemanager.projects.get", + "resourcemanager.projects.list", + "securitycenter.organizationsettings.get", + "securitycenter.organizationsettings.update", + "securitycenter.securitycentersettings.get", + "securitycenter.securitycentersettings.update", + "securitycentermanagement.effectiveEventThreatDetectionCustomModules.get", + "securitycentermanagement.effectiveEventThreatDetectionCustomModules.list", + "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get", + "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list", + "securitycentermanagement.eventThreatDetectionCustomModules.create", + "securitycentermanagement.eventThreatDetectionCustomModules.delete", + "securitycentermanagement.eventThreatDetectionCustomModules.get", + "securitycentermanagement.eventThreatDetectionCustomModules.list", + "securitycentermanagement.eventThreatDetectionCustomModules.update", + "securitycentermanagement.eventThreatDetectionCustomModules.validate", + "securitycentermanagement.locations.get", + "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.generateServiceAccounts", + "securitycentermanagement.securityCommandCenter.get", + "securitycentermanagement.securityCommandCenter.update", + "securitycentermanagement.securityHealthAnalyticsCustomModules.create", + "securitycentermanagement.securityHealthAnalyticsCustomModules.delete", + "securitycentermanagement.securityHealthAnalyticsCustomModules.get", + "securitycentermanagement.securityHealthAnalyticsCustomModules.list", + "securitycentermanagement.securityHealthAnalyticsCustomModules.simulate", + "securitycentermanagement.securityHealthAnalyticsCustomModules.test", + "securitycentermanagement.securityHealthAnalyticsCustomModules.update" + ], + "stage": "GA", + "etag": "AA==" + }, + { + "name": "roles/securitycentermanagement.settingsViewer", + "title": "Security Center Management Settings Viewer", + "description": "Readonly access to Cloud Security Command Center settings", + "includedPermissions": [ + "resourcemanager.organizations.get", + "resourcemanager.projects.get", + "resourcemanager.projects.list", + "securitycenter.organizationsettings.get", + "securitycenter.securitycentersettings.get", + "securitycentermanagement.effectiveEventThreatDetectionCustomModules.get", + "securitycentermanagement.effectiveEventThreatDetectionCustomModules.list", + "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get", + "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list", + "securitycentermanagement.eventThreatDetectionCustomModules.get", + "securitycentermanagement.eventThreatDetectionCustomModules.list", + "securitycentermanagement.eventThreatDetectionCustomModules.validate", + "securitycentermanagement.locations.get", + "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.get", + "securitycentermanagement.securityHealthAnalyticsCustomModules.get", + "securitycentermanagement.securityHealthAnalyticsCustomModules.list", + "securitycentermanagement.securityHealthAnalyticsCustomModules.simulate", + "securitycentermanagement.securityHealthAnalyticsCustomModules.test" + ], + "stage": "GA", + "etag": "AA==" + }, { "name": "roles/securitycentermanagement.shaCustomModulesEditor", "title": "Security Center Management SHA Custom Modules Editor", @@ -87394,6 +87989,34 @@ "stage": "GA", "etag": "AA==" }, + { + "name": "roles/securitycentermanagement.viewer", + "title": "Security Center Management Viewer", + "description": "Readonly access to Cloud Security Command Center services and custom modules configuration.", + "includedPermissions": [ + "resourcemanager.organizations.get", + "resourcemanager.projects.get", + "resourcemanager.projects.list", + "securitycenter.organizationsettings.get", + "securitycenter.securitycentersettings.get", + "securitycentermanagement.effectiveEventThreatDetectionCustomModules.get", + "securitycentermanagement.effectiveEventThreatDetectionCustomModules.list", + "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get", + "securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list", + "securitycentermanagement.eventThreatDetectionCustomModules.get", + "securitycentermanagement.eventThreatDetectionCustomModules.list", + "securitycentermanagement.eventThreatDetectionCustomModules.validate", + "securitycentermanagement.locations.get", + "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.get", + "securitycentermanagement.securityHealthAnalyticsCustomModules.get", + "securitycentermanagement.securityHealthAnalyticsCustomModules.list", + "securitycentermanagement.securityHealthAnalyticsCustomModules.simulate", + "securitycentermanagement.securityHealthAnalyticsCustomModules.test" + ], + "stage": "GA", + "etag": "AA==" + }, { "name": "roles/securityposture.admin", "title": "Security Posture Admin", @@ -88110,6 +88733,7 @@ "dns.responsePolicyRules.get", "dns.responsePolicyRules.list", "dns.responsePolicyRules.update", + "networkconnectivity.internalRanges.list", "resourcemanager.projects.get", "resourcemanager.projects.list" ], @@ -90050,6 +90674,11 @@ "videostitcher.slates.update", "videostitcher.vodAdTagDetails.get", "videostitcher.vodAdTagDetails.list", + "videostitcher.vodConfigs.create", + "videostitcher.vodConfigs.delete", + "videostitcher.vodConfigs.get", + "videostitcher.vodConfigs.list", + "videostitcher.vodConfigs.update", "videostitcher.vodSessions.create", "videostitcher.vodSessions.get", "videostitcher.vodStitchDetails.get", @@ -90091,6 +90720,8 @@ "videostitcher.slates.list", "videostitcher.vodAdTagDetails.get", "videostitcher.vodAdTagDetails.list", + "videostitcher.vodConfigs.get", + "videostitcher.vodConfigs.list", "videostitcher.vodSessions.get", "videostitcher.vodStitchDetails.get", "videostitcher.vodStitchDetails.list" @@ -91695,6 +92326,8 @@ "contactcenterinsights.faqEntries.list", "contactcenterinsights.faqModels.get", "contactcenterinsights.faqModels.list", + "contactcenterinsights.feedbackLabels.get", + "contactcenterinsights.feedbackLabels.list", "contactcenterinsights.issueModels.get", "contactcenterinsights.issueModels.list", "contactcenterinsights.issues.get", @@ -91722,6 +92355,7 @@ "container.clusterRoleBindings.list", "container.clusterRoles.get", "container.clusterRoles.list", + "container.clusters.connect", "container.clusters.get", "container.clusters.list", "container.clusters.listEffectiveTags", @@ -91894,6 +92528,12 @@ "contentwarehouse.ruleSets.list", "contentwarehouse.synonymSets.get", "contentwarehouse.synonymSets.list", + "databasecenter.fleetHealthStats.list", + "databasecenter.fleetStats.list", + "databasecenter.locations.list", + "databasecenter.products.list", + "databasecenter.resourceGroups.list", + "databasecenter.userLabels.list", "databaseinsights.activeQueries.fetch", "databaseinsights.activitySummary.fetch", "databaseinsights.aggregatedEvents.query", @@ -92653,7 +93293,6 @@ "gkehub.fleet.get", "gkehub.fleet.getFreeTrial", "gkehub.gateway.get", - "gkehub.gateway.getIamPolicy", "gkehub.locations.get", "gkehub.locations.list", "gkehub.membershipbindings.get", @@ -92918,6 +93557,7 @@ "logging.sinks.list", "logging.usage.get", "logging.views.get", + "logging.views.getIamPolicy", "logging.views.list", "logging.views.listLogs", "logging.views.listResourceKeys", @@ -93364,6 +94004,18 @@ "recaptchaenterprise.metrics.get", "recaptchaenterprise.relatedaccountgroupmemberships.list", "recaptchaenterprise.relatedaccountgroups.list", + "recommender.alloydbClusterPerformanceInsights.get", + "recommender.alloydbClusterPerformanceInsights.list", + "recommender.alloydbClusterPerformanceRecommendations.get", + "recommender.alloydbClusterPerformanceRecommendations.list", + "recommender.alloydbClusterReliabilityInsights.get", + "recommender.alloydbClusterReliabilityInsights.list", + "recommender.alloydbClusterReliabilityRecommendations.get", + "recommender.alloydbClusterReliabilityRecommendations.list", + "recommender.alloydbInstanceSecurityInsights.get", + "recommender.alloydbInstanceSecurityInsights.list", + "recommender.alloydbInstanceSecurityRecommendations.get", + "recommender.alloydbInstanceSecurityRecommendations.list", "recommender.bigqueryCapacityCommitmentsInsights.get", "recommender.bigqueryCapacityCommitmentsInsights.list", "recommender.bigqueryCapacityCommitmentsRecommendations.get", @@ -93802,6 +94454,7 @@ "securitycentermanagement.eventThreatDetectionCustomModules.validate", "securitycentermanagement.locations.get", "securitycentermanagement.locations.list", + "securitycentermanagement.securityCommandCenter.get", "securitycentermanagement.securityHealthAnalyticsCustomModules.get", "securitycentermanagement.securityHealthAnalyticsCustomModules.list", "securitycentermanagement.securityHealthAnalyticsCustomModules.simulate", @@ -94025,6 +94678,8 @@ "videostitcher.slates.list", "videostitcher.vodAdTagDetails.get", "videostitcher.vodAdTagDetails.list", + "videostitcher.vodConfigs.get", + "videostitcher.vodConfigs.list", "videostitcher.vodSessions.get", "videostitcher.vodStitchDetails.get", "videostitcher.vodStitchDetails.list",