בקרת גישה באמצעות IAM

ניהול הזהויות והרשאות הגישה (IAM) מאפשר לכם לשלוט בגישה למשאבים של Application Design Center, על ידי הקצאת תפקידים והרשאות מוגדרים מראש למשתמשים, לקבוצות ולחשבונות שירות. התפקידים האלה קובעים מי יכול לנהל מרחבים, ליצור תבניות ולפרוס אפליקציות.

תפקידים מוגדרים מראש ב-Application Design Center

כדי לתת גישה למשאבים ספציפיים ב- Google Cloud ולמנוע גישה לא מורשית למשאבים אחרים, מקצים את התפקידים המוגדרים מראש של App Design Center בתיקייה לניהול אפליקציות או בפרויקט הניהול.

כדי לנהל מרחבים משותפים וליצור תבניות, משתמשים בתפקידי ה-IAM הבאים:

• אדמין ב-Application Design Center‏ (roles/designcenter.admin)
• משתמש ב-Application Design Center‏ (roles/designcenter.user)
• צפייה ב-Application Design Center‏ (roles/designcenter.viewer)

כדי ליצור הגדרות של אפליקציות ולנהל את מחזורי החיים של הפריסות, אתם יכולים להשתמש בתפקידי ה-IAM הבאים:

• אדמין של אפליקציה (roles/designcenter.applicationAdmin)
• עריכת אפליקציות (roles/designcenter.applicationEditor)
• צפייה באפליקציה (roles/designcenter.applicationViewer)

התפקיד "אדמין ב-Application Design Center" כולל את כל ההרשאות של התפקידים האחרים ב-Application Design Center.

תיאורי התפקידים ב-Application Design Center

בטבלה הבאה מתוארים התפקידים ב-App Design Center ותחומי האחריות האופייניים להם.

תפקיד	תיאור	מטרה
אדמין ב-Application Design Center	ליצור ולנהל את כל פריטי המידע שנוצרו בעקבות פיתוח (Artifact) ב-App Design Center, ולהעביר את השליטה באפליקציה למשתמשים אחרים.	כדי לנהל את מחזור החיים המלא של אפליקציה. לאדמינים של פלטפורמות, שיש להם הרשאות אדמין וגישה מלאה לארכיטקטורה מקצה לקצה.
משתמש ב-Application Design Center	ליצור ולעדכן תבניות של אפליקציות.	כדי להרחיב את היכולת ליצור, לעדכן או למחוק תבניות של אפליקציות, וכך להפחית את עומס העבודה של מנהלי הפלטפורמה. למהנדסי פלטפורמה, שיוצרים ומנהלים תבניות של אפליקציות.
צפייה ב-Application Design Center	לראות מרחבים, קטלוגים, תבניות, אפליקציות ואת המאפיינים שלהם.	כדי לראות את המרחבים, הקטלוגים, התבניות, האפליקציות ויחסי התלות שלהן ב-App Design Center. לרוב העובדים בארגון. כדאי להקצות את התפקיד הזה למשתמשים שצריכים רק לצפות במרחבים, בקטלוגים, בתבניות ובאפליקציות.
אדמין של אפליקציה	ליצור, לנהל ולפרוס אפליקציות, ולהקצות את השליטה באפליקציות למפתחי אפליקציות אחרים.	כדי לנהל טיוטות ופריסות של אפליקציות, ולצרף פרויקטים של שירות שנדרשים לאחסון משאבים ספציפיים. לאדמינים ולמפתחים שאחראים על יצירת אפליקציות.
עריכת אפליקציות	ליצור, לנהל ולפרוס אפליקציות.	כדי לנהל טיוטות ופריסות ולהפחית את עומס העבודה של מנהלי האפליקציות. למפעילי אפליקציות שמבינים בפריסות.
צפייה באפליקציה	לצפות באפליקציות.	כדי לראות תבניות, אפליקציות ואת יחסי התלות שלהן. לרוב העובדים בארגון. מקצים את התפקיד הזה למשתמשים שצריכים רק לצפות בתבניות ובאפליקציות.

הרשאות ב-Application Design Center

בטבלה הבאה מפורטים תפקידי IAM ב-App Design Center וההרשאות שלהם.

אדמין ב-Application Design Center משתמש ב-Application Design Center צפייה ב-Application Design Center אדמין של אפליקציות עורך האפליקציה צפייה בבקשה ניקוי הכול

אדמין ב-Application Design Center (roles/designcenter.admin) גישה מלאה למשאבים של Application Design Center.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.boundaries.attach apphub.boundaries.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.catalogTemplateRevisions.create designcenter.catalogTemplateRevisions.delete designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.create designcenter.catalogTemplates.delete designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogTemplates.update designcenter.catalogs.create designcenter.catalogs.delete designcenter.catalogs.get designcenter.catalogs.list designcenter.catalogs.update designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.get designcenter.locations.list designcenter.operations.cancel designcenter.operations.delete designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.create designcenter.shares.delete designcenter.shares.get designcenter.shares.list designcenter.spaces.create designcenter.spaces.delete designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list designcenter.spaces.setIamPolicy designcenter.spaces.update developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.createTagBinding developerconnect.connections.delete developerconnect.connections.deleteTagBinding developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.listEffectiveTags developerconnect.connections.listTagBindings developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.addPullRequestComment developerconnect.gitRepositoryLinks.addPullRequestReviewComment developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.diffCommit developerconnect.gitRepositoryLinks.fetchCommit developerconnect.gitRepositoryLinks.fetchCommitList developerconnect.gitRepositoryLinks.fetchFileBlame developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.fetchPullRequest developerconnect.gitRepositoryLinks.fetchPullRequestList developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.gitRepositoryLinks.modifyPullRequest developerconnect.gitRepositoryLinks.openPullRequest developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.managedFolders.update storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.update storage.objects.updateContext
משתמש ב-Application Design Center (roles/designcenter.user) גישה לקריאה בלבד למשאבים של Application Design Center.	apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list container.clusters.list designcenter.applicationTemplateRevisions.* designcenter.applicationTemplateRevisions.delete designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.* designcenter.applicationTemplates.create designcenter.applicationTemplates.delete designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applicationTemplates.update designcenter.applications.get designcenter.applications.list designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogs.get designcenter.catalogs.list designcenter.components.* designcenter.components.create designcenter.components.delete designcenter.components.get designcenter.components.list designcenter.components.update designcenter.connections.* designcenter.connections.create designcenter.connections.delete designcenter.connections.get designcenter.connections.list designcenter.connections.update designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list monitoring.timeSeries.create orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list storage.folders.* storage.folders.create storage.folders.delete storage.folders.get storage.folders.list storage.folders.rename storage.managedFolders.create storage.managedFolders.delete storage.managedFolders.get storage.managedFolders.list storage.managedFolders.update storage.multipartUploads.* storage.multipartUploads.abort storage.multipartUploads.create storage.multipartUploads.list storage.multipartUploads.listParts storage.objects.create storage.objects.createContext storage.objects.delete storage.objects.deleteContext storage.objects.get storage.objects.list storage.objects.move storage.objects.restore storage.objects.update storage.objects.updateContext
צפייה ב-Application Design Center (roles/designcenter.viewer) גישה לקריאה בלבד למשאבים של Application Design Center.	auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.get designcenter.applications.list designcenter.catalogTemplateRevisions.get designcenter.catalogTemplateRevisions.list designcenter.catalogTemplates.get designcenter.catalogTemplates.list designcenter.catalogs.get designcenter.catalogs.list designcenter.components.get designcenter.components.list designcenter.connections.get designcenter.connections.list designcenter.locations.* designcenter.locations.get designcenter.locations.list designcenter.operations.get designcenter.operations.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.getIamPolicy designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list storage.folders.get storage.folders.list storage.managedFolders.get storage.managedFolders.list storage.objects.get storage.objects.list
אדמין של אפליקציות (roles/designcenter.applicationAdmin) הרשאת אדמין לאפליקציה.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list developerconnect.connections.constructGitHubAppManifest developerconnect.connections.create developerconnect.connections.createTagBinding developerconnect.connections.delete developerconnect.connections.deleteTagBinding developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.generateGitHubStateToken developerconnect.connections.get developerconnect.connections.list developerconnect.connections.listEffectiveTags developerconnect.connections.listTagBindings developerconnect.connections.processGitHubAppCreationCallback developerconnect.connections.processGitHubOAuthCallback developerconnect.connections.update developerconnect.gitRepositoryLinks.addPullRequestComment developerconnect.gitRepositoryLinks.addPullRequestReviewComment developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.diffCommit developerconnect.gitRepositoryLinks.fetchCommit developerconnect.gitRepositoryLinks.fetchCommitList developerconnect.gitRepositoryLinks.fetchFileBlame developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.fetchPullRequest developerconnect.gitRepositoryLinks.fetchPullRequestList developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.gitProxyRead developerconnect.gitRepositoryLinks.gitProxyWrite developerconnect.gitRepositoryLinks.list developerconnect.gitRepositoryLinks.modifyPullRequest developerconnect.gitRepositoryLinks.openPullRequest developerconnect.locations.* developerconnect.locations.get developerconnect.locations.list developerconnect.operations.* developerconnect.operations.cancel developerconnect.operations.delete developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
עורך האפליקציה (roles/designcenter.applicationEditor) גישת קריאה וכתיבה לאפליקציה.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.locations.* apphub.locations.get apphub.locations.list apphub.serviceProjectAttachments.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudbuild.builds.get cloudbuild.builds.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.export config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.* designcenter.applications.create designcenter.applications.delete designcenter.applications.get designcenter.applications.list designcenter.applications.update designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list
צפייה בבקשה (roles/designcenter.applicationViewer) גישה לקריאה בלבד לאפליקציה.	apphub.applications.get apphub.applications.list apphub.locations.* apphub.locations.get apphub.locations.list auditmanager.auditReports.get auditmanager.auditReports.list auditmanager.auditSchedules.get auditmanager.auditSchedules.list auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controlReports.get auditmanager.controlReports.list auditmanager.controls.list auditmanager.findings.list auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.operations.get auditmanager.operations.list auditmanager.resourceEnrollmentStatuses.* auditmanager.resourceEnrollmentStatuses.get auditmanager.resourceEnrollmentStatuses.list cloudsecuritycompliance.auditReports.get cloudsecuritycompliance.auditReports.list cloudsecuritycompliance.billingSettings.get cloudsecuritycompliance.cloudControlDeployments.get cloudsecuritycompliance.cloudControlDeployments.list cloudsecuritycompliance.cloudControlPredictions.get cloudsecuritycompliance.cloudControlPredictions.list cloudsecuritycompliance.cloudControls.get cloudsecuritycompliance.cloudControls.list cloudsecuritycompliance.cmEnrollments.get cloudsecuritycompliance.controlComplianceSummaries.list cloudsecuritycompliance.controlReports.get cloudsecuritycompliance.controls.* cloudsecuritycompliance.controls.get cloudsecuritycompliance.controls.list cloudsecuritycompliance.findingSummaries.list cloudsecuritycompliance.findings.list cloudsecuritycompliance.frameworkAudits.get cloudsecuritycompliance.frameworkAudits.list cloudsecuritycompliance.frameworkComplianceReports.* cloudsecuritycompliance.frameworkComplianceReports.aggregate cloudsecuritycompliance.frameworkComplianceReports.get cloudsecuritycompliance.frameworkComplianceSummaries.list cloudsecuritycompliance.frameworkDeployments.get cloudsecuritycompliance.frameworkDeployments.list cloudsecuritycompliance.frameworks.get cloudsecuritycompliance.frameworks.list cloudsecuritycompliance.locations.get cloudsecuritycompliance.locations.list cloudsecuritycompliance.operations.get cloudsecuritycompliance.operations.list cloudsecuritycompliance.resourceEnrollmentStatuses.* cloudsecuritycompliance.resourceEnrollmentStatuses.get cloudsecuritycompliance.resourceEnrollmentStatuses.list config.automigrationconfig.get config.deploymentgrouprevisions.* config.deploymentgrouprevisions.get config.deploymentgrouprevisions.list config.deploymentgroups.get config.deploymentgroups.list config.deploymentgroups.listEffectiveTags config.deploymentgroups.listTagBindings config.deployments.get config.deployments.getIamPolicy config.deployments.list config.deployments.listEffectiveTags config.deployments.listTagBindings config.locations.* config.locations.get config.locations.list config.operations.get config.operations.list config.previews.get config.previews.list config.previews.listEffectiveTags config.previews.listTagBindings config.resources.* config.resources.get config.resources.list config.revisions.get config.revisions.list config.terraformversions.* config.terraformversions.get config.terraformversions.list container.clusters.list designcenter.applicationTemplateRevisions.get designcenter.applicationTemplateRevisions.list designcenter.applicationTemplates.get designcenter.applicationTemplates.list designcenter.applications.get designcenter.applications.list designcenter.sharedTemplateRevisions.* designcenter.sharedTemplateRevisions.get designcenter.sharedTemplateRevisions.list designcenter.sharedTemplates.* designcenter.sharedTemplates.get designcenter.sharedTemplates.list designcenter.shares.get designcenter.shares.list designcenter.spaces.get designcenter.spaces.list resourcemanager.projects.get resourcemanager.projects.list

המאמרים הבאים

• כדי לנהל את הגישה למשאבי הפריסה, מקצים תפקידים לחשבון השירות.
• לנהל ולהקצות מרחבים משותפים כדי לארגן את המרחבים המשותפים של הצוות ואת אמצעי בקרת הגישה.