IAM Scope — Referência Multi-Cloud de IAM

Tier

Operator

Categoria

Compute

Escopo

project

Privilégios

Role IDroles/compute.instanceAdmin.v1

Operator

Operational access to manage and run workloads

Descrição

Full control of Compute Engine instances, instance groups, and related configurations.

Privilégios / Capacidades(5)

Create and delete VM instances

Start and stop instances

Modify instance configurations

Manage instance groups and templates

Attach service accounts to instances

Role Definition (JSON)

{
  "name": "roles/compute.instanceAdmin.v1",
  "title": "Compute Instance Admin (v1)",
  "description": "Full control of Compute Engine instances, instance groups, and related configurations.",
  "stage": "GA",
  "includedPermissions": [
    "Create and delete VM instances",
    "Start and stop instances",
    "Modify instance configurations",
    "Manage instance groups and templates",
    "Attach service accounts to instances"
  ]

Roles relacionadasCompute

Compute Admin

Full control of all Compute Engine resources including VMs, disks, networks, and images.

Compute Viewer

Read-only access to all Compute Engine resources. Cannot read data stored on disks.