Escopo
project
Permissões
—
Role ID
roles/adminSpecialized
Narrow-scope role for a specific action or use case
Descrição
All of the permissions in the Writer role, plus permissions for actions like the following: Completing sensitive tasks, like managing tag bindings for Compute Engine resources; Managing roles and permissions for a project and all resources within the project; Setting up billing for a project.
O Google não publica a lista de permissões das basic roles na documentação. Use `gcloud iam roles describe <roleId>` ou o console para obtê-la.
gcloud iam roles describe roles/adminRole Definition (JSON)
{
"name": "roles/admin",
"title": "Admin",
"description": "All of the permissions in the Writer role, plus permissions for actions like the following: Completing sensitive tasks, like managing tag bindings for Compute Engine resources; Managing roles and permissions for a project and all resources within the project; Setting up billing for a project.",
"stage": "GA",
"includedPermissions": []
}Roles relacionadasManagement
Access Approval Admin
Admin role for Access Approval
Access Approval Approver
Ability to view or act on access approval requests and view configuration.
Access Approval Config Editor
Ability to update the Access Approval configuration
Access Approval Editor
Editor role for Access Approval
Access Approval Invalidator
Ability to invalidate existing approved approval requests