Peran dan izin App Topology

Halaman ini mencantumkan peran dan izin IAM untuk App Topology serta peran yang disarankan untuk mengakses data resource pokok yang digunakan App Topology untuk membuat topologi.

Peran App Topology

Role	Permissions
App Topology Admin (roles/apptopology.admin) Full access to App Topology resources.	apptopology.* apptopology.applicationTopologies.generate apptopology.devOpsDomainTopologies.generate apptopology.discoveredResourcesTopologies.generate apptopology.domains.get apptopology.domains.list apptopology.locations.get apptopology.locations.list apptopology.operations.get apptopology.operations.list apptopology.schemas.get apptopology.securityDomainTopologies.generate apptopology.sreDomainTopologies.generate apptopology.topologyViews.get apptopology.topologyViews.list cloudnotifications.activities.list monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.groups.get monitoring.groups.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.services.get monitoring.services.list monitoring.slos.get monitoring.slos.list monitoring.snoozes.get monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list opsconfigmonitoring.resourceMetadata.list resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get stackdriver.resourceMetadata.list
App Topology Viewer (roles/apptopology.viewer) Readonly access to App Topology resources.	apptopology.* apptopology.applicationTopologies.generate apptopology.devOpsDomainTopologies.generate apptopology.discoveredResourcesTopologies.generate apptopology.domains.get apptopology.domains.list apptopology.locations.get apptopology.locations.list apptopology.operations.get apptopology.operations.list apptopology.schemas.get apptopology.securityDomainTopologies.generate apptopology.sreDomainTopologies.generate apptopology.topologyViews.get apptopology.topologyViews.list cloudnotifications.activities.list monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.groups.get monitoring.groups.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.services.get monitoring.services.list monitoring.slos.get monitoring.slos.list monitoring.snoozes.get monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list opsconfigmonitoring.resourceMetadata.list resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get stackdriver.resourceMetadata.list

Izin App Topology

Setiap domain Topologi Aplikasi memiliki serangkaian izin khusus untuk membaca data resource yang dapat Anda kueri.

Izin berikut diperlukan untuk menggunakan App Topology:

• apptopology.discoveredResourcesTopologies.generat
• Izin untuk domain yang ingin Anda kueri. Domain SRE berisi superset izin di ketiga domain:
  • SRE: apptopology.googleapis.com/sreDomainTopologies.generate
  • DevOps: apptopology.googleapis.com/devOpsDomainTopologies.generate
  • Keamanan: apptopology.googleapis.com/securityDomainTopologies.generate

Tabel berikut mencantumkan semua izin App Topology:

Izin	Disertakan dalam peran
apptopology.applicationTopologies.generate	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.devOpsDomainTopologies.generate	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.discoveredResourcesTopologies.generate	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.domains.get	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.domains.list	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.locations.get	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.locations.list	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.operations.get	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.operations.list	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.schemas.get	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.securityDomainTopologies.generate	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.sreDomainTopologies.generate	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.topologyViews.get	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)
apptopology.topologyViews.list	Admin (roles/admin) Pemilik (roles/owner) Penulis (roles/writer) Editor (roles/editor) Pembaca (roles/reader) Viewer (roles/viewer) App Topology Admin (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Security Admin (roles/iam.securityAdmin) Security Reviewer (roles/iam.securityReviewer) Cloud Hub Operator (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Support User (roles/iam.supportUser)