Rollen und Berechtigungen für die Anwendungstopologie

Auf dieser Seite werden die IAM-Rollen und -Berechtigungen für die Anwendungstopologie sowie die empfohlenen Rollen für den Zugriff auf die zugrunde liegenden Ressourcendaten aufgeführt, die von der Anwendungstopologie zum Generieren von Topologien verwendet werden.

Rollen für die Anwendungstopologie

Role	Permissions
App Topology Admin (roles/apptopology.admin) Full access to App Topology resources.	apptopology.* apptopology.applicationTopologies.generate apptopology.devOpsDomainTopologies.generate apptopology.discoveredResourcesTopologies.generate apptopology.domains.get apptopology.domains.list apptopology.locations.get apptopology.locations.list apptopology.operations.get apptopology.operations.list apptopology.schemas.get apptopology.securityDomainTopologies.generate apptopology.sreDomainTopologies.generate apptopology.topologyViews.get apptopology.topologyViews.list cloudnotifications.activities.list monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.groups.get monitoring.groups.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.services.get monitoring.services.list monitoring.slos.get monitoring.slos.list monitoring.snoozes.get monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list opsconfigmonitoring.resourceMetadata.list resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get stackdriver.resourceMetadata.list
App Topology Viewer (roles/apptopology.viewer) Readonly access to App Topology resources.	apptopology.* apptopology.applicationTopologies.generate apptopology.devOpsDomainTopologies.generate apptopology.discoveredResourcesTopologies.generate apptopology.domains.get apptopology.domains.list apptopology.locations.get apptopology.locations.list apptopology.operations.get apptopology.operations.list apptopology.schemas.get apptopology.securityDomainTopologies.generate apptopology.sreDomainTopologies.generate apptopology.topologyViews.get apptopology.topologyViews.list cloudnotifications.activities.list monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.groups.get monitoring.groups.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.services.get monitoring.services.list monitoring.slos.get monitoring.slos.list monitoring.snoozes.get monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list opsconfigmonitoring.resourceMetadata.list resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get stackdriver.resourceMetadata.list

Berechtigungen für die Anwendungstopologie

Jede Anwendungstopologie-Domain hat einen eigenen Satz von Berechtigungen zum Lesen der Ressourcendaten, die Sie abfragen können.

Die folgenden Berechtigungen sind erforderlich, um die Anwendungstopologie zu verwenden:

• apptopology.discoveredResourcesTopologies.generat
• Berechtigungen für die Domain, die Sie abfragen möchten. Die Domain SRE enthält eine Obermenge von Berechtigungen in allen drei Domains:
  • SRE: apptopology.googleapis.com/sreDomainTopologies.generate
  • DevOps: apptopology.googleapis.com/devOpsDomainTopologies.generate
  • Sicherheit: apptopology.googleapis.com/securityDomainTopologies.generate

In der folgenden Tabelle sind alle Berechtigungen für die Anwendungstopologie aufgeführt:

Berechtigung	In Rollen enthalten
apptopology.applicationTopologies.generate	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.devOpsDomainTopologies.generate	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.discoveredResourcesTopologies.generate	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.domains.get	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.domains.list	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Sicherheitsadministrator (roles/iam.securityAdmin) Sicherheitsprüfer (roles/iam.securityReviewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.locations.get	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.locations.list	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Sicherheitsadministrator (roles/iam.securityAdmin) Sicherheitsprüfer (roles/iam.securityReviewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.operations.get	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.operations.list	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Sicherheitsadministrator (roles/iam.securityAdmin) Sicherheitsprüfer (roles/iam.securityReviewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.schemas.get	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.securityDomainTopologies.generate	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.sreDomainTopologies.generate	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.topologyViews.get	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)
apptopology.topologyViews.list	Administrator (roles/admin) Inhaber (roles/owner) Autor (roles/writer) Bearbeiter (roles/editor) Leser (roles/reader) Betrachter (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Sicherheitsadministrator (roles/iam.securityAdmin) Sicherheitsprüfer (roles/iam.securityReviewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Sicherheitsprüfer (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support-Nutzer (roles/iam.supportUser)