Ruoli e autorizzazioni di App Topology

Questa pagina elenca i ruoli e le autorizzazioni IAM per App Topology e i ruoli suggeriti per accedere ai dati delle risorse sottostanti che App Topology utilizza per generare le topologie.

Ruoli di App Topology

Role	Permissions
App Topology Admin (roles/apptopology.admin) Full access to App Topology resources.	apptopology.* apptopology.applicationTopologies.generate apptopology.devOpsDomainTopologies.generate apptopology.discoveredResourcesTopologies.generate apptopology.domains.get apptopology.domains.list apptopology.locations.get apptopology.locations.list apptopology.operations.get apptopology.operations.list apptopology.schemas.get apptopology.securityDomainTopologies.generate apptopology.sreDomainTopologies.generate apptopology.topologyViews.get apptopology.topologyViews.list cloudnotifications.activities.list monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.groups.get monitoring.groups.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.services.get monitoring.services.list monitoring.slos.get monitoring.slos.list monitoring.snoozes.get monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list opsconfigmonitoring.resourceMetadata.list resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get stackdriver.resourceMetadata.list
App Topology Viewer (roles/apptopology.viewer) Readonly access to App Topology resources.	apptopology.* apptopology.applicationTopologies.generate apptopology.devOpsDomainTopologies.generate apptopology.discoveredResourcesTopologies.generate apptopology.domains.get apptopology.domains.list apptopology.locations.get apptopology.locations.list apptopology.operations.get apptopology.operations.list apptopology.schemas.get apptopology.securityDomainTopologies.generate apptopology.sreDomainTopologies.generate apptopology.topologyViews.get apptopology.topologyViews.list cloudnotifications.activities.list monitoring.alertPolicies.get monitoring.alertPolicies.list monitoring.alertPolicies.listEffectiveTags monitoring.alertPolicies.listTagBindings monitoring.alerts.* monitoring.alerts.get monitoring.alerts.list monitoring.dashboards.get monitoring.dashboards.list monitoring.dashboards.listEffectiveTags monitoring.dashboards.listTagBindings monitoring.groups.get monitoring.groups.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.notificationChannelDescriptors.* monitoring.notificationChannelDescriptors.get monitoring.notificationChannelDescriptors.list monitoring.notificationChannels.get monitoring.notificationChannels.list monitoring.services.get monitoring.services.list monitoring.slos.get monitoring.slos.list monitoring.snoozes.get monitoring.snoozes.list monitoring.timeSeries.list monitoring.uptimeCheckConfigs.get monitoring.uptimeCheckConfigs.list opsconfigmonitoring.resourceMetadata.list resourcemanager.projects.get resourcemanager.projects.list stackdriver.projects.get stackdriver.resourceMetadata.list

Autorizzazioni App Topology

Ogni dominio di App Topology ha un insieme dedicato di autorizzazioni per la lettura dei dati delle risorse che puoi interrogare.

Per utilizzare App Topology sono necessarie le seguenti autorizzazioni:

• apptopology.discoveredResourcesTopologies.generat
• Autorizzazioni per il dominio che vuoi interrogare. Il dominio SRE contiene un insieme di autorizzazioni in tutti e tre i domini:
  • SRE: apptopology.googleapis.com/sreDomainTopologies.generate
  • DevOps: apptopology.googleapis.com/devOpsDomainTopologies.generate
  • Sicurezza: apptopology.googleapis.com/securityDomainTopologies.generate

La tabella seguente elenca tutte le autorizzazioni di App Topology:

Autorizzazione	Inclusi nei ruoli
apptopology.applicationTopologies.generate	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.devOpsDomainTopologies.generate	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.discoveredResourcesTopologies.generate	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.domains.get	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.domains.list	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Security Admin (roles/iam.securityAdmin) Revisore della sicurezza (roles/iam.securityReviewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.locations.get	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.locations.list	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Security Admin (roles/iam.securityAdmin) Revisore della sicurezza (roles/iam.securityReviewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.operations.get	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.operations.list	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Security Admin (roles/iam.securityAdmin) Revisore della sicurezza (roles/iam.securityReviewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.schemas.get	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.securityDomainTopologies.generate	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.sreDomainTopologies.generate	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.topologyViews.get	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)
apptopology.topologyViews.list	Amministratore (roles/admin) Proprietario (roles/owner) Autore (roles/writer) Editor (roles/editor) Lettore (roles/reader) Visualizzatore (roles/viewer) Amministratore App Topology (roles/apptopology.admin) App Topology Viewer (roles/apptopology.viewer) Security Admin (roles/iam.securityAdmin) Revisore della sicurezza (roles/iam.securityReviewer) Operatore Cloud Hub (roles/cloudhub.operator) Dev Ops (roles/iam.devOps) Security Auditor (roles/iam.securityAuditor) Site Reliability Engineer (roles/iam.siteReliabilityEngineer) Utente dell'assistenza (roles/iam.supportUser)