Voltar

Cloud Functions Admin

GCP IAM — detalhes da role

Tier
Admin
Categoria
Serverless
Escopo
project
Privilégios
5
Role IDroles/cloudfunctions.admin

Esta é uma role privilegiada — concede capacidades de controle elevado. Aplique o princípio do menor privilégio e monitore atribuições via Cloud Audit Logs.

Admin

Administrative control over a service, may include IAM

Descrição

Full access to Cloud Functions. Create, update, delete functions and manage IAM.

Privilégios / Capacidades(5)

Deploy and delete Cloud Functions
Invoke functions
Set IAM policies on functions
View function logs and metrics
Manage function secrets and environment variables

Role Definition (JSON)

{
  "name": "roles/cloudfunctions.admin",
  "title": "Cloud Functions Admin",
  "description": "Full access to Cloud Functions. Create, update, delete functions and manage IAM.",
  "stage": "GA",
  "includedPermissions": [
    "Deploy and delete Cloud Functions",
    "Invoke functions",
    "Set IAM policies on functions",
    "View function logs and metrics",
    "Manage function secrets and environment variables"
  ]

Roles relacionadasServerless

Cloud Functions Developer
Deploy and manage Cloud Functions. Cannot set IAM policies on functions.
Cloud Functions Invoker
Invoke HTTP-triggered Cloud Functions. Cannot deploy or manage function configurations.
Cloud Functions Viewer
Read-only access to Cloud Functions configurations and metadata.
Cloud Run Admin
Full access to Cloud Run services and jobs, including IAM management.
Cloud Run Developer
Deploy and manage Cloud Run services and jobs. Cannot modify IAM policies.
Docs GCP