IAM Scope — Referência Multi-Cloud de IAM

Tier

Admin

Categoria

Database

Escopo

project

Privilégios

Role IDroles/spanner.admin

Esta é uma role privilegiada — concede capacidades de controle elevado. Aplique o princípio do menor privilégio e monitore atribuições via Cloud Audit Logs.

Admin

Administrative control over a service, may include IAM

Descrição

Full control of all Cloud Spanner resources including instances, databases, and IAM.

Privilégios / Capacidades(5)

Create and delete Spanner instances

Manage databases and schemas

Read and write all data

Set IAM policies

Manage backups and restore

Role Definition (JSON)

{
  "name": "roles/spanner.admin",
  "title": "Cloud Spanner Admin",
  "description": "Full control of all Cloud Spanner resources including instances, databases, and IAM.",
  "stage": "GA",
  "includedPermissions": [
    "Create and delete Spanner instances",
    "Manage databases and schemas",
    "Read and write all data",
    "Set IAM policies",
    "Manage backups and restore"
  ]

Roles relacionadasDatabase

Cloud SQL Admin

Full control of all Cloud SQL resources including creating and deleting instances.

Cloud SQL Editor

Full access to manage Cloud SQL instances excluding delete and IAM policy changes.

Cloud SQL Viewer

Read-only access to view Cloud SQL instance configurations and metadata.

Cloud SQL Client

Connect to Cloud SQL instances via Cloud SQL Auth Proxy for application connections.

Cloud SQL Instance User

Docs GCP