Autorisations des rôles prédéfinis

Cette référence décrit en détail les rôles et autorisations prédéfinis disponibles dans Google Distributed Cloud (GDC) air-gapped. Ces informations sont destinées aux audiences du groupe d'administrateurs de plate-forme (comme les administrateurs informatiques) et du groupe d'opérateurs d'applications (comme les équipes DevOps) lorsqu'elles gèrent l'accès aux ressources dans leurs déploiements. Pour en savoir plus, consultez Audiences pour la documentation GDC.

À propos des tableaux des rôles prédéfinis

Un sujet peut être associé à plusieurs rôles sur le serveur d'API global. Les autorisations sont purement additives. Il n'existe pas de règles de refus.

Les tableaux de rôles sont organisés par niveau d'attribution des rôles :

Chaque tableau affiche les détails suivants sur les rôles :

  • Nom et description du rôle : liste le nom du rôle prédéfini affiché dans l'interface utilisateur, le nom de la ressource personnalisée Kubernetes correspondante et une description du rôle.

    Il est possible que le même nom à afficher dans l'UI soit utilisé pour différents rôles. Ces rôles sont distincts, chacun étant identifié de manière unique par le nom de sa ressource personnalisée Kubernetes et son ensemble d'autorisations. Cela se produit lorsque les rôles offrent des fonctionnalités associées ou différents niveaux d'accès à un service.

  • Autorisations : liste les opérations d'API spécifiques accordées par le rôle. Les libellés de portée indiquent où ces opérations peuvent être effectuées. Cela dépend du serveur d'API qui gère les ressources cibles :

    • Global : ressources gérées par le serveur d'API global.
    • Zonales : ressources gérées dans une zone spécifique par le serveur d'API de gestion zonale.
    • Cluster Kubernetes : ressources gérées dans un cluster Kubernetes par son serveur d'API Kubernetes.

    Pour en savoir plus sur la gestion des ressources dans ces niveaux, consultez Ressources globales et zonales et Clusters Kubernetes dans GDC.

Tous les rôles listés sont de type IAMRole, qui est une ressource personnalisée Kubernetes définissant un ensemble d'autorisations. Pour accorder ces autorisations à un utilisateur ou à un groupe, créez une ressource IAMRoleBinding qui associe l'utilisateur à IAMRole. Pour savoir comment configurer une liaison de rôle, consultez Accorder et révoquer l'accès.

Les ressources IAMRole et IAMRoleBinding sont gérées dans le serveur d'API global. Cela signifie qu'il s'agit de ressources globales et que leurs liaisons sont appliquées à toutes les zones de votre organisation GDC. Bien que les rôles soient définis globalement, les autorisations qu'ils accordent s'exercent dans un contexte spécifique, tel qu'un projet. Par exemple, un "rôle au niveau du projet" accorde des autorisations sur les ressources d'un projet. Ces ressources peuvent être gérées au niveau global, zonal ou du cluster Kubernetes.

Rôles et autorisations au niveau de l'organisation

Les rôles suivants sont attribués à l'ensemble d'une organisation.

Nom et description du rôle Autorisations
Lecteur de buckets de plate-forme de journaux d'audit
(audit-logs-platform-bucket-viewer)

Affiche les buckets de plate-forme des journaux d'audit.

Zonal
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
secrets.get
secrets.list
secrets.watch
Créateur de buckets de restauration de la plate-forme de journaux d'audit
(audit-logs-platform-restore-bucket-creator)

Crée et gère les buckets de restauration de la plate-forme des journaux d'audit.

Zonal
buckets.object.gdc.goog.create
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
secrets.get
secrets.list
secrets.watch
Administrateur du dépôt de sauvegarde
(backup-repo-admin)

Permet de créer, d'afficher, de mettre à jour et de supprimer des dépôts de sauvegarde.

Zonal
backuprepositories.backup.gdc.goog.create
backuprepositories.backup.gdc.goog.delete
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.patch
backuprepositories.backup.gdc.goog.update
backuprepositories.backup.gdc.goog.watch
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
Administrateur du dépôt de sauvegarde
(backup-repo-viewer)

Accorde l'accès à l'affichage et à la liste des dépôts de sauvegarde.

Zonal
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
Administrateur de l'organisation du compte de facturation
(organization-billing-account-admin)

Gère les comptes de facturation de l'organisation.

Monde
billingaccounts.billing.global.gdc.goog.bind
billingaccounts.billing.global.gdc.goog.create
billingaccounts.billing.global.gdc.goog.get
billingaccounts.billing.global.gdc.goog.list
billingaccounts.billing.global.gdc.goog.patch
billingaccounts.billing.global.gdc.goog.update
billingaccounts.billing.global.gdc.goog.watch

Zonal
billingaccountreplicas.billing.global.gdc.goog.create
billingaccountreplicas.billing.global.gdc.goog.get
billingaccountreplicas.billing.global.gdc.goog.list
billingaccountreplicas.billing.global.gdc.goog.patch
billingaccountreplicas.billing.global.gdc.goog.update
billingaccountreplicas.billing.global.gdc.goog.watch
Utilisateur de compte de facturation dans l'organisation
(organization-billing-account-user)

Affiche et associe le compte de facturation pour l'organisation.

Monde
billingaccounts.billing.global.gdc.goog.bind
billingaccounts.billing.global.gdc.goog.get
billingaccounts.billing.global.gdc.goog.list
billingaccounts.billing.global.gdc.goog.watch
Gestionnaire de l'organisation de facturation
(organization-billing-manager)

Gère BillingAccountBinding dans l'espace de noms de la plate-forme ou dans l'espace de noms d'un projet.

Monde
billingaccountbindings.billing.global.gdc.goog.create
billingaccountbindings.billing.global.gdc.goog.get
billingaccountbindings.billing.global.gdc.goog.list
billingaccountbindings.billing.global.gdc.goog.patch
billingaccountbindings.billing.global.gdc.goog.update
billingaccountbindings.billing.global.gdc.goog.watch

Zonal
billingaccountbindingreplicas.billing.global.gdc.goog.create
billingaccountbindingreplicas.billing.global.gdc.goog.get
billingaccountbindingreplicas.billing.global.gdc.goog.list
billingaccountbindingreplicas.billing.global.gdc.goog.patch
billingaccountbindingreplicas.billing.global.gdc.goog.update
billingaccountbindingreplicas.billing.global.gdc.goog.watch
Lecteur de facturation
(billing-viewer)

Affiche les factures et les descriptions des SKU dans l'organisation.

Zonal
skudescriptions.billing.gdc.goog.get
skudescriptions.billing.gdc.goog.list
skudescriptions.billing.gdc.goog.watch
Administrateur de buckets
(bucket-admin)

Gère les CR de bucket et les objets dans les buckets de backend correspondants via l'API S3.

Monde
bucketlocations.object.global.gdc.goog.get
bucketlocations.object.global.gdc.goog.list
buckets.object.global.gdc.goog.create
buckets.object.global.gdc.goog.delete
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.patch
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.update
buckets.object.global.gdc.goog.watch
buckets.object.global.gdc.goog.write-object

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
bucketinfos.object.gdc.goog.patch
bucketinfos.object.gdc.goog.update
bucketinfos.object.gdc.goog.watch
buckets.object.gdc.goog.create
buckets.object.gdc.goog.delete
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.patch
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.update
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
Administrateur des objets du bucket
(bucket-object-admin)

Lit les CR de bucket, lit les métadonnées des buckets de backend correspondants et gère les objets de ces buckets via l'API S3.

Monde
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.watch
buckets.object.global.gdc.goog.write-object

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
bucketinfos.object.gdc.goog.patch
bucketinfos.object.gdc.goog.update
bucketinfos.object.gdc.goog.watch
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
Lecteur des objets du bucket
(bucket-object-viewer)

Lit les CR de bucket, les métadonnées des buckets de backend correspondants et les objets de ces buckets via l'API S3.

Monde
bucketlocations.object.global.gdc.goog.get
bucketlocations.object.global.gdc.goog.list
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.watch

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
Administrateur de sauvegarde de cluster
(clusterbackup-admin)

Gère les plans de sauvegarde, les sauvegardes, les plans de restauration et les restaurations de clusters.

Zonal
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.create
clusterbackupplans.backup.gdc.goog.delete
clusterbackupplans.backup.gdc.goog.get
clusterbackupplans.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.patch
clusterbackupplans.backup.gdc.goog.update
clusterbackupplans.backup.gdc.goog.watch
clusterbackups.backup.gdc.goog.create
clusterbackups.backup.gdc.goog.delete
clusterbackups.backup.gdc.goog.get
clusterbackups.backup.gdc.goog.list
clusterbackups.backup.gdc.goog.patch
clusterbackups.backup.gdc.goog.update
clusterbackups.backup.gdc.goog.watch
clusterrestoreplans.backup.gdc.goog.create
clusterrestoreplans.backup.gdc.goog.delete
clusterrestoreplans.backup.gdc.goog.get
clusterrestoreplans.backup.gdc.goog.list
clusterrestoreplans.backup.gdc.goog.patch
clusterrestoreplans.backup.gdc.goog.update
clusterrestoreplans.backup.gdc.goog.watch
clusterrestores.backup.gdc.goog.create
clusterrestores.backup.gdc.goog.delete
clusterrestores.backup.gdc.goog.get
clusterrestores.backup.gdc.goog.list
clusterrestores.backup.gdc.goog.patch
clusterrestores.backup.gdc.goog.update
clusterrestores.backup.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
Éditeur ConfigMap
(observabilitypipeline-configmap-editor)

Modifie les ConfigMaps dans l'espace de noms de la plate-forme.

Zonal
configmaps.create
configmaps.get
configmaps.list
configmaps.patch
configmaps.update
configmaps.watch
Lecteur ConfigMap
(observabilitypipeline-configmap-viewer)

Affiche les ConfigMaps dans l'espace de noms de la plate-forme.

Zonal
configmaps.get
configmaps.list
configmaps.watch
Administrateur de l'organisation des rôles personnalisés
(custom-role-org-admin)

Gère les rôles personnalisés dans l'organisation.

Monde
clusterroles.rbac.authorization.k8s.io.get
customroles.iam.global.gdc.goog.create
customroles.iam.global.gdc.goog.delete
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.patch
customroles.iam.global.gdc.goog.update
customroles.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.list
roles.rbac.authorization.k8s.io.get

Zonal
clusterroles.rbac.authorization.k8s.io.get
customroles.iam.gdc.goog.create
customroles.iam.gdc.goog.delete
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.patch
customroles.iam.gdc.goog.update
customroles.iam.gdc.goog.watch
organizationroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
roles.rbac.authorization.k8s.io.get
Lecteur de rôle personnalisé de l'organisation
(custom-role-org-viewer)

Affiche les rôles personnalisés dans l'organisation.

Monde
clusterroles.rbac.authorization.k8s.io.get
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.list
roles.rbac.authorization.k8s.io.get

Zonal
clusterroles.rbac.authorization.k8s.io.get
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.watch
organizationroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
roles.rbac.authorization.k8s.io.get
Administrateur des sauvegardes et de la reprise après sinistre
(dr-backup-admin)

Permet de gérer les ressources liées à la sauvegarde.

Zonal
backupplans.backup.gdc.goog.create
backupplans.backup.gdc.goog.delete
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.patch
backuprepositories.backup.gdc.goog.create
backuprepositories.backup.gdc.goog.delete
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.patch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.create
manualbackuprequests.backup.gdc.goog.delete
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.patch
Lecteur de sauvegarde DR
(dr-backup-viewer)

Permet de gérer les ressources liées à la sauvegarde.

Zonal
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
Administrateur du système de reprise après sinistre
(dr-system-admin)

M Permet de gérer les ressources liées au stockage d'objets dans le cluster infra-cp.

Zonal
buckets.object.gdc.goog.create
buckets.object.gdc.goog.delete
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.patch
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.update
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.patch
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.patch
roles.rbac.authorization.k8s.io.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
serviceaccounts.create
serviceaccounts.delete
serviceaccounts.get
serviceaccounts.list
serviceaccounts.patch
serviceaccounts.update
serviceaccounts.watch
Lecteur du système de reprise après sinistre
(dr-system-viewer)

M Permet de gérer les ressources liées au stockage d'objets dans le cluster infra-cp.

Zonal
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch
secrets.get
secrets.list
secrets.watch
serviceaccounts.get
serviceaccounts.list
serviceaccounts.watch
Administrateur de l'organisation de la base de données
(organization-db-admin)

Gère les ressources de base de données de l'organisation.

Zonal
backupplans.alloydbomni.dbadmin.gdc.goog.create
backupplans.alloydbomni.dbadmin.gdc.goog.delete
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.patch
backupplans.alloydbomni.dbadmin.gdc.goog.update
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.create
backupplans.oracle.dbadmin.gdc.goog.delete
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.patch
backupplans.oracle.dbadmin.gdc.goog.update
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.create
backupplans.postgresql.dbadmin.gdc.goog.delete
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.patch
backupplans.postgresql.dbadmin.gdc.goog.update
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.create
dbclusters.alloydbomni.dbadmin.gdc.goog.delete
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.patch
dbclusters.alloydbomni.dbadmin.gdc.goog.update
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.create
dbclusters.oracle.dbadmin.gdc.goog.delete
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.patch
dbclusters.oracle.dbadmin.gdc.goog.update
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.create
dbclusters.postgresql.dbadmin.gdc.goog.delete
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.patch
dbclusters.postgresql.dbadmin.gdc.goog.update
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.create
exports.alloydbomni.dbadmin.gdc.goog.delete
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.create
exports.oracle.dbadmin.gdc.goog.delete
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.create
exports.postgresql.dbadmin.gdc.goog.delete
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.create
externalservers.alloydbomni.dbadmin.gdc.goog.delete
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.patch
externalservers.alloydbomni.dbadmin.gdc.goog.update
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.create
externalservers.postgresql.dbadmin.gdc.goog.delete
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.patch
externalservers.postgresql.dbadmin.gdc.goog.update
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.create
failovers.fleet.dbadmin.gdc.goog.delete
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.create
imports.alloydbomni.dbadmin.gdc.goog.delete
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.create
imports.oracle.dbadmin.gdc.goog.delete
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.create
imports.postgresql.dbadmin.gdc.goog.delete
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
maintenancepolicies.fleet.dbadmin.gdc.goog.patch
maintenancepolicies.fleet.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.create
migrations.alloydbomni.dbadmin.gdc.goog.delete
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.patch
migrations.alloydbomni.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.create
migrations.postgresql.dbadmin.gdc.goog.delete
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.patch
migrations.postgresql.dbadmin.gdc.goog.update
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.create
replications.postgresql.dbadmin.gdc.goog.delete
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.patch
replications.postgresql.dbadmin.gdc.goog.update
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.create
restores.alloydbomni.dbadmin.gdc.goog.delete
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.create
restores.oracle.dbadmin.gdc.goog.delete
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.create
restores.postgresql.dbadmin.gdc.goog.delete
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.get
softwarelibraries.fleet.dbadmin.gdc.goog.patch
softwarelibraries.fleet.dbadmin.gdc.goog.update
Lecteur de l'organisation de la base de données
(organization-db-viewer)

Affiche les ressources de la base de données de l'organisation.

Zonal
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.get
Administrateur des journaux de flux
(flowlog-admin)

Crée et gère les journaux de flux.

Zonal
flowlogs.networking.gdc.goog.create
flowlogs.networking.gdc.goog.delete
flowlogs.networking.gdc.goog.get
flowlogs.networking.gdc.goog.list
flowlogs.networking.gdc.goog.patch
flowlogs.networking.gdc.goog.update
flowlogs.networking.gdc.goog.watch
flowlogs/status.networking.gdc.goog.create
flowlogs/status.networking.gdc.goog.delete
flowlogs/status.networking.gdc.goog.get
flowlogs/status.networking.gdc.goog.list
flowlogs/status.networking.gdc.goog.patch
flowlogs/status.networking.gdc.goog.update
flowlogs/status.networking.gdc.goog.watch
Lecteur de journaux de flux
(flowlog-viewer)

Lit les configurations des journaux de flux.

Zonal
flowlogs.networking.gdc.goog.get
flowlogs.networking.gdc.goog.list
flowlogs.networking.gdc.goog.watch
flowlogs/status.networking.gdc.goog.get
flowlogs/status.networking.gdc.goog.list
flowlogs/status.networking.gdc.goog.watch
Éditeur de clés CTM HSM
(ctmkey-editor)

Lecture et suppression des clés CTM.

Zonal
ctmkeys.hsm.gdc.goog.delete
ctmkeys.hsm.gdc.goog.get
ctmkeys.hsm.gdc.goog.list
ctmkeys.hsm.gdc.goog.watch
Lecteur HSM CTMKey
(ctmkey-viewer)

Lit les clés CTM.

Zonal
ctmkeys.hsm.gdc.goog.get
ctmkeys.hsm.gdc.goog.list
ctmkeys.hsm.gdc.goog.watch
Administrateur IAM de l'organisation
(organization-iam-admin)

Gère les autorisations de l'organisation.

Monde
clusterrolebindings.rbac.authorization.k8s.io.create
clusterrolebindings.rbac.authorization.k8s.io.delete
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterrolebindings.rbac.authorization.k8s.io.patch
clusterrolebindings.rbac.authorization.k8s.io.update
clusterrolebindings.rbac.authorization.k8s.io.watch
clusterroles.rbac.authorization.k8s.io.create
clusterroles.rbac.authorization.k8s.io.delete
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.patch
clusterroles.rbac.authorization.k8s.io.update
clusterroles.rbac.authorization.k8s.io.watch
customroles.iam.global.gdc.goog.create
customroles.iam.global.gdc.goog.delete
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.patch
customroles.iam.global.gdc.goog.update
customroles.iam.global.gdc.goog.watch
iamrolebindings.iam.global.gdc.goog.create
iamrolebindings.iam.global.gdc.goog.delete
iamrolebindings.iam.global.gdc.goog.get
iamrolebindings.iam.global.gdc.goog.list
iamrolebindings.iam.global.gdc.goog.patch
iamrolebindings.iam.global.gdc.goog.update
iamrolebindings.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.create
iamroles.iam.global.gdc.goog.delete
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
iamroles.iam.global.gdc.goog.patch
iamroles.iam.global.gdc.goog.update
iamroles.iam.global.gdc.goog.watch
identityproviderconfigs.iam.global.gdc.goog.create
identityproviderconfigs.iam.global.gdc.goog.delete
identityproviderconfigs.iam.global.gdc.goog.get
identityproviderconfigs.iam.global.gdc.goog.list
identityproviderconfigs.iam.global.gdc.goog.patch
identityproviderconfigs.iam.global.gdc.goog.update
identityproviderconfigs.iam.global.gdc.goog.watch
projectserviceaccounts.resourcemanager.global.gdc.goog.create
projectserviceaccounts.resourcemanager.global.gdc.goog.delete
projectserviceaccounts.resourcemanager.global.gdc.goog.get
projectserviceaccounts.resourcemanager.global.gdc.goog.list
projectserviceaccounts.resourcemanager.global.gdc.goog.patch
projectserviceaccounts.resourcemanager.global.gdc.goog.update
rolebindings.rbac.authorization.k8s.io.create
rolebindings.rbac.authorization.k8s.io.delete
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.patch
rolebindings.rbac.authorization.k8s.io.update
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.create
roles.rbac.authorization.k8s.io.delete
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.patch
roles.rbac.authorization.k8s.io.update
roles.rbac.authorization.k8s.io.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterrolebindings.rbac.authorization.k8s.io.create
clusterrolebindings.rbac.authorization.k8s.io.delete
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterrolebindings.rbac.authorization.k8s.io.patch
clusterrolebindings.rbac.authorization.k8s.io.update
clusterrolebindings.rbac.authorization.k8s.io.watch
clusterroles.rbac.authorization.k8s.io.create
clusterroles.rbac.authorization.k8s.io.delete
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.patch
clusterroles.rbac.authorization.k8s.io.update
clusterroles.rbac.authorization.k8s.io.watch
customroles.iam.gdc.goog.create
customroles.iam.gdc.goog.delete
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.patch
customroles.iam.gdc.goog.update
customroles.iam.gdc.goog.watch
identityproviderconfigs.iam.gdc.goog.create
identityproviderconfigs.iam.gdc.goog.delete
identityproviderconfigs.iam.gdc.goog.get
identityproviderconfigs.iam.gdc.goog.list
identityproviderconfigs.iam.gdc.goog.patch
identityproviderconfigs.iam.gdc.goog.update
identityproviderconfigs.iam.gdc.goog.watch
organizationrolebindings.resourcemanager.gdc.goog.create
organizationrolebindings.resourcemanager.gdc.goog.delete
organizationrolebindings.resourcemanager.gdc.goog.get
organizationrolebindings.resourcemanager.gdc.goog.list
organizationrolebindings.resourcemanager.gdc.goog.patch
organizationrolebindings.resourcemanager.gdc.goog.update
organizationrolebindings.resourcemanager.gdc.goog.watch
organizationroles.resourcemanager.gdc.goog.create
organizationroles.resourcemanager.gdc.goog.delete
organizationroles.resourcemanager.gdc.goog.get
organizationroles.resourcemanager.gdc.goog.list
organizationroles.resourcemanager.gdc.goog.patch
organizationroles.resourcemanager.gdc.goog.update
organizationroles.resourcemanager.gdc.goog.watch
projectrolebindings.resourcemanager.gdc.goog.create
projectrolebindings.resourcemanager.gdc.goog.delete
projectrolebindings.resourcemanager.gdc.goog.get
projectrolebindings.resourcemanager.gdc.goog.list
projectrolebindings.resourcemanager.gdc.goog.patch
projectrolebindings.resourcemanager.gdc.goog.update
projectrolebindings.resourcemanager.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.create
projectroles.resourcemanager.gdc.goog.delete
projectroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.list
projectroles.resourcemanager.gdc.goog.patch
projectroles.resourcemanager.gdc.goog.update
projectroles.resourcemanager.gdc.goog.watch
projectserviceaccounts.resourcemanager.gdc.goog.create
projectserviceaccounts.resourcemanager.gdc.goog.delete
projectserviceaccounts.resourcemanager.gdc.goog.get
projectserviceaccounts.resourcemanager.gdc.goog.list
projectserviceaccounts.resourcemanager.gdc.goog.patch
projectserviceaccounts.resourcemanager.gdc.goog.update
projectserviceaccounts.resourcemanager.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.create
rolebindings.rbac.authorization.k8s.io.delete
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.patch
rolebindings.rbac.authorization.k8s.io.update
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.create
roles.rbac.authorization.k8s.io.delete
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.patch
roles.rbac.authorization.k8s.io.update
roles.rbac.authorization.k8s.io.watch
Lecteur IAM de l'organisation
(organization-iam-viewer)

Affiche les autorisations de l'organisation.

Monde
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterrolebindings.rbac.authorization.k8s.io.watch
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.watch
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.watch
iamrolebindings.iam.global.gdc.goog.get
iamrolebindings.iam.global.gdc.goog.list
iamrolebindings.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
iamroles.iam.global.gdc.goog.watch
projectserviceaccounts.resourcemanager.global.gdc.goog.get
projectserviceaccounts.resourcemanager.global.gdc.goog.list
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterrolebindings.rbac.authorization.k8s.io.watch
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.watch
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.watch
organizationrolebindings.resourcemanager.gdc.goog.get
organizationrolebindings.resourcemanager.gdc.goog.list
organizationrolebindings.resourcemanager.gdc.goog.watch
organizationroles.resourcemanager.gdc.goog.get
organizationroles.resourcemanager.gdc.goog.list
organizationroles.resourcemanager.gdc.goog.watch
projectrolebindings.resourcemanager.gdc.goog.get
projectrolebindings.resourcemanager.gdc.goog.list
projectrolebindings.resourcemanager.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.list
projectroles.resourcemanager.gdc.goog.watch
projectserviceaccounts.resourcemanager.gdc.goog.get
projectserviceaccounts.resourcemanager.gdc.goog.list
projectserviceaccounts.resourcemanager.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch
Administrateur de la fédération de fournisseurs d'identité
(idp-federation-admin)

Gère les configurations des fournisseurs d'identité.

Monde
identityproviderconfigs.iam.global.gdc.goog.create
identityproviderconfigs.iam.global.gdc.goog.delete
identityproviderconfigs.iam.global.gdc.goog.get
identityproviderconfigs.iam.global.gdc.goog.list
identityproviderconfigs.iam.global.gdc.goog.patch
identityproviderconfigs.iam.global.gdc.goog.update
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update

Zonal
identityproviderconfigs.iam.gdc.goog.create
identityproviderconfigs.iam.gdc.goog.delete
identityproviderconfigs.iam.gdc.goog.get
identityproviderconfigs.iam.gdc.goog.list
identityproviderconfigs.iam.gdc.goog.patch
identityproviderconfigs.iam.gdc.goog.update
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
Lecteur de la fédération de fournisseurs d'identité
(idp-federation-viewer)

Affiche les configurations des fournisseurs d'identité.

Monde
identityproviderconfigs.iam.global.gdc.goog.get
identityproviderconfigs.iam.global.gdc.goog.list
secrets.get
secrets.list

Zonal
identityproviderconfigs.iam.gdc.goog.get
identityproviderconfigs.iam.gdc.goog.list
secrets.get
secrets.list
Administrateur Interconnect
(interconnect-admin-mp)

Créer et gérer les ressources InterconnectAttachment et AttachmentGroup.

Zonal
attachmentgroups.system.private.gdc.goog.create
attachmentgroups.system.private.gdc.goog.delete
attachmentgroups.system.private.gdc.goog.get
attachmentgroups.system.private.gdc.goog.list
attachmentgroups.system.private.gdc.goog.patch
attachmentgroups.system.private.gdc.goog.update
attachmentgroups.system.private.gdc.goog.watch
interconnectattachments.system.private.gdc.goog.create
interconnectattachments.system.private.gdc.goog.delete
interconnectattachments.system.private.gdc.goog.get
interconnectattachments.system.private.gdc.goog.list
interconnectattachments.system.private.gdc.goog.patch
interconnectattachments.system.private.gdc.goog.update
interconnectattachments.system.private.gdc.goog.watch
Lecteur d'interconnexions
(interconnect-viewer-mp)

Affiche les ressources InterconnectAttachment et AttachmentGroup.

Zonal
attachmentgroups.system.private.gdc.goog.get
attachmentgroups.system.private.gdc.goog.list
attachmentgroups.system.private.gdc.goog.watch
interconnectattachments.system.private.gdc.goog.get
interconnectattachments.system.private.gdc.goog.list
interconnectattachments.system.private.gdc.goog.watch
Administrateur des jobs de rotation KMS
(kms-rotationjob-admin)

Gère les ressources RotationJob pour une organisation.

Zonal
rotationjobs.kms.gdc.goog.create
rotationjobs.kms.gdc.goog.delete
rotationjobs.kms.gdc.goog.get
rotationjobs.kms.gdc.goog.list
rotationjobs.kms.gdc.goog.patch
rotationjobs.kms.gdc.goog.update
rotationjobs.kms.gdc.goog.watch
Moniteur de tâches de rotation KMS
(kms-rotationjob-monitor)

Lit les jobs de rotation KMS dans une organisation.

Zonal
rotationjobs.kms.gdc.goog.get
rotationjobs.kms.gdc.goog.list
rotationjobs.kms.gdc.goog.watch
Interrogateur de journaux
(log-query-api-querier-pa)

Accédez à l'API Log Query pour interroger les journaux PA dans le projet platform-obs.

Zonal
labels.goog.gdc.logging.v1.get
labels.goog.gdc.logging.v1.list
labelvalues.goog.gdc.logging.v1.get
labelvalues.goog.gdc.logging.v1.list
listlabelsrequests.goog.gdc.logging.v1.get
listlabelsrequests.goog.gdc.logging.v1.list
listlabelsresponses.goog.gdc.logging.v1.get
listlabelsresponses.goog.gdc.logging.v1.list
listlabelvaluesrequests.goog.gdc.logging.v1.get
listlabelvaluesrequests.goog.gdc.logging.v1.list
listlabelvaluesresponses.goog.gdc.logging.v1.get
listlabelvaluesresponses.goog.gdc.logging.v1.list
listlogsfilters.goog.gdc.logging.v1.get
listlogsfilters.goog.gdc.logging.v1.list
listlogsrequests.goog.gdc.logging.v1.get
listlogsrequests.goog.gdc.logging.v1.list
listlogsresponses.goog.gdc.logging.v1.get
listlogsresponses.goog.gdc.logging.v1.list
logs.goog.gdc.logging.v1.get
logs.goog.gdc.logging.v1.list
Créateur de règles de journalisation
(loggingrule-pa-creator)

Crée et affiche des règles de journalisation.

Zonal
loggingrules.logging.gdc.goog.create
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.watch
Éditeur de règles de journalisation
(loggingrule-pa-editor)

Modifie les règles de journalisation.

Zonal
loggingrules.logging.gdc.goog.delete
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.patch
loggingrules.logging.gdc.goog.update
loggingrules.logging.gdc.goog.watch
Lecteur de règles de journalisation
(loggingrule-pa-viewer)

Affiche les règles de journalisation.

Zonal
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.watch
Créateur de cibles de journaux
(loggingtarget-pa-creator)

Crée et affiche les cibles de journalisation.

Zonal
loggingtargets.logging.gdc.goog.create
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.watch
Éditeur de cibles de journalisation
(loggingtarget-pa-editor)

Modifie les cibles de journalisation.

Zonal
loggingtargets.logging.gdc.goog.delete
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.patch
loggingtargets.logging.gdc.goog.update
loggingtargets.logging.gdc.goog.watch
Lecteur de cibles de journalisation
(loggingtarget-pa-viewer)

Affiche les cibles de journalisation des vues.

Zonal
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.watch
Administrateur ManagedKeycloak
(managedkeycloak-admin)

Accorde un accès en lecture et en écriture aux ressources managedkeycloak.

Monde
managedkeycloaks.keycloak.global.gdc.goog.create
managedkeycloaks.keycloak.global.gdc.goog.delete
managedkeycloaks.keycloak.global.gdc.goog.get
managedkeycloaks.keycloak.global.gdc.goog.list
managedkeycloaks.keycloak.global.gdc.goog.patch
managedkeycloaks.keycloak.global.gdc.goog.update
realmviews.keycloakview.global.gdc.goog.get
realmviews.keycloakview.global.gdc.goog.list
Lecteur ManagedKeycloak
(managedkeycloak-viewer)

Accorde un accès en lecture aux ressources managedkeycloak.

Monde
managedkeycloaks.keycloak.global.gdc.goog.get
managedkeycloaks.keycloak.global.gdc.goog.list
realmviews.keycloakview.global.gdc.goog.get
realmviews.keycloakview.global.gdc.goog.list
Uploader d'artefacts Marketplace
(marketplace-artifact-uploader)

Affiche l'instance Harbor du Marketplace ; affiche et crée des projets Harbor.

Zonal
harborinstanceprojects.artifactregistry.gdc.goog.create
harborinstanceprojects.artifactregistry.gdc.goog.get
harborinstanceprojects.artifactregistry.gdc.goog.list
harborinstanceprojects.artifactregistry.gdc.goog.watch
harborinstances.artifactregistry.gdc.goog.get
harborinstances.artifactregistry.gdc.goog.list
harborinstances.artifactregistry.gdc.goog.watch
Lecteur d'artefacts Marketplace
(marketplace-artifact-viewer)

Affiche l'instance Harbor de Views ; affiche les projets Harbor de Views.

Zonal
harborinstanceprojects.artifactregistry.gdc.goog.get
harborinstanceprojects.artifactregistry.gdc.goog.list
harborinstanceprojects.artifactregistry.gdc.goog.watch
harborinstances.artifactregistry.gdc.goog.get
harborinstances.artifactregistry.gdc.goog.list
harborinstances.artifactregistry.gdc.goog.watch
Éditeur de catalogue Marketplace
(marketplace-catalog-publisher)

Affiche, liste, crée, met à jour et supprime les liaisons de catalogue de services.

Monde
projects.resourcemanager.global.gdc.goog.get
projects.resourcemanager.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.watch
servicecatalogbindings.marketplace.global.gdc.goog.create
servicecatalogbindings.marketplace.global.gdc.goog.delete
servicecatalogbindings.marketplace.global.gdc.goog.get
servicecatalogbindings.marketplace.global.gdc.goog.list
servicecatalogbindings.marketplace.global.gdc.goog.patch
servicecatalogbindings.marketplace.global.gdc.goog.update
servicecatalogbindings.marketplace.global.gdc.goog.watch
Créateur de tableaux de bord Monitoring
(dashboard-pa-creator)

créer et afficher des tableaux de bord ;

Zonal
dashboards.observability.gdc.goog.create
dashboards.observability.gdc.goog.get
dashboards.observability.gdc.goog.list
dashboards.observability.gdc.goog.watch
Éditeur de tableau de bord Monitoring
(dashboard-pa-editor)

Modifie les tableaux de bord.

Zonal
dashboards.observability.gdc.goog.delete
dashboards.observability.gdc.goog.get
dashboards.observability.gdc.goog.list
dashboards.observability.gdc.goog.patch
dashboards.observability.gdc.goog.update
dashboards.observability.gdc.goog.watch
Lecteur du tableau de bord Monitoring
(dashboard-pa-viewer)

Permet d'afficher les tableaux de bord.

Zonal
dashboards.observability.gdc.goog.get
dashboards.observability.gdc.goog.list
dashboards.observability.gdc.goog.watch
Créateur de règles de surveillance
(monitoringrule-pa-creator)

Créer et afficher des règles de surveillance

Zonal
monitoringrules.monitoring.gdc.goog.create
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.watch
Éditeur de règles de surveillance
(monitoringrule-pa-editor)

Modifie les règles de surveillance.

Zonal
monitoringrules.monitoring.gdc.goog.delete
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.patch
monitoringrules.monitoring.gdc.goog.update
monitoringrules.monitoring.gdc.goog.watch
Lecteur de règles Monitoring
(monitoringrule-pa-viewer)

Affiche les règles de surveillance.

Zonal
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.watch
Créateur de cibles de surveillance
(monitoringtarget-pa-creator)

Crée et affiche des cibles de surveillance.

Zonal
monitoringtargets.monitoring.gdc.goog.create
monitoringtargets.monitoring.gdc.goog.get
monitoringtargets.monitoring.gdc.goog.list
monitoringtargets.monitoring.gdc.goog.watch
Éditeur de cibles de surveillance
(monitoringtarget-pa-editor)

Modifie les cibles de surveillance.

Zonal
monitoringtargets.monitoring.gdc.goog.delete
monitoringtargets.monitoring.gdc.goog.get
monitoringtargets.monitoring.gdc.goog.list
monitoringtargets.monitoring.gdc.goog.patch
monitoringtargets.monitoring.gdc.goog.update
monitoringtargets.monitoring.gdc.goog.watch
Lecteur de cibles de surveillance
(monitoringtarget-pa-viewer)

Affiche les cibles de surveillance.

Zonal
monitoringtargets.monitoring.gdc.goog.get
monitoringtargets.monitoring.gdc.goog.list
monitoringtargets.monitoring.gdc.goog.watch
Créateur de pipelines d'observabilité
(observabilitypipeline-pa-creator)

Crée et affiche des pipelines d'observabilité.

Zonal
observabilitypipelines.observability.gdc.goog.create
observabilitypipelines.observability.gdc.goog.get
observabilitypipelines.observability.gdc.goog.list
observabilitypipelines.observability.gdc.goog.watch
Éditeur de pipelines d'observabilité
(observabilitypipeline-pa-editor)

Modifie les pipelines d'observabilité.

Zonal
observabilitypipelines.observability.gdc.goog.delete
observabilitypipelines.observability.gdc.goog.get
observabilitypipelines.observability.gdc.goog.list
observabilitypipelines.observability.gdc.goog.patch
observabilitypipelines.observability.gdc.goog.update
observabilitypipelines.observability.gdc.goog.watch
Lecteur de pipelines d'observabilité
(observabilitypipeline-pa-viewer)

Affiche les pipelines d'observabilité.

Zonal
observabilitypipelines.observability.gdc.goog.get
observabilitypipelines.observability.gdc.goog.list
observabilitypipelines.observability.gdc.goog.watch
Débogueur Operable Component Lifecycle Manager
(mp-oclcm-debugger)

Gère les ressources OCLCM pour le débogage dans le plan de gestion.

Zonal
componentoverrides.lcm.private.gdc.goog.create
componentoverrides.lcm.private.gdc.goog.get
componentoverrides.lcm.private.gdc.goog.list
componentoverrides.lcm.private.gdc.goog.patch
componentoverrides.lcm.private.gdc.goog.update
componentrollouts.lcm.private.gdc.goog.get
componentrollouts.lcm.private.gdc.goog.list
componentrollouts.lcm.private.gdc.goog.patch
componentrollouts.lcm.private.gdc.goog.update
components.lcm.private.gdc.goog.create
components.lcm.private.gdc.goog.get
components.lcm.private.gdc.goog.list
subcomponentoverrides.lcm.private.gdc.goog.create
subcomponentoverrides.lcm.private.gdc.goog.get
subcomponentoverrides.lcm.private.gdc.goog.list
subcomponentoverrides.lcm.private.gdc.goog.patch
subcomponentoverrides.lcm.private.gdc.goog.update
subcomponents.lcm.private.gdc.goog.get
subcomponents.lcm.private.gdc.goog.list
subcomponents.lcm.private.gdc.goog.patch
subcomponents.lcm.private.gdc.goog.update
Lecteur Operable Component Lifecycle Manager
(mp-oclcm-viewer)

Affiche les ressources OCLCM dans le plan de gestion.

Zonal
componentoverrides.lcm.private.gdc.goog.get
componentoverrides.lcm.private.gdc.goog.list
componentrollouts.lcm.private.gdc.goog.get
componentrollouts.lcm.private.gdc.goog.list
components.lcm.private.gdc.goog.get
components.lcm.private.gdc.goog.list
subcomponentoverrides.lcm.private.gdc.goog.get
subcomponentoverrides.lcm.private.gdc.goog.list
subcomponents.lcm.private.gdc.goog.get
subcomponents.lcm.private.gdc.goog.list
Administrateur des sauvegardes de l'organisation
(organization-backup-admin)

Gère les sauvegardes, les restaurations et les dépôts de sauvegarde de l'organisation.

Zonal
backupplans.backup.gdc.goog.create
backupplans.backup.gdc.goog.delete
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backuprepositories.backup.gdc.goog.create
backuprepositories.backup.gdc.goog.delete
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
backuprepositorymanagers.backup.gdc.goog.create
backuprepositorymanagers.backup.gdc.goog.delete
backuprepositorymanagers.backup.gdc.goog.get
backuprepositorymanagers.backup.gdc.goog.list
backuprepositorymanagers.backup.gdc.goog.patch
backuprepositorymanagers.backup.gdc.goog.update
backuprepositorymanagers.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
deletebackuprequests.backup.gdc.goog.create
deletebackuprequests.backup.gdc.goog.delete
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.create
manualbackuprequests.backup.gdc.goog.delete
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
secrets.create
virtualmachinebackupplans.virtualmachine.gdc.goog.create
virtualmachinebackupplans.virtualmachine.gdc.goog.delete
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.patch
virtualmachinebackupplans.virtualmachine.gdc.goog.update
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.create
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.delete
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch
virtualmachinebackuprequests.virtualmachine.gdc.goog.create
virtualmachinebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinebackuprequests.virtualmachine.gdc.goog.get
virtualmachinebackuprequests.virtualmachine.gdc.goog.list
virtualmachinebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.delete
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.patch
virtualmachinebackups.virtualmachine.gdc.goog.update
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.create
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinerestorerequests.virtualmachine.gdc.goog.create
virtualmachinerestorerequests.virtualmachine.gdc.goog.delete
virtualmachinerestorerequests.virtualmachine.gdc.goog.get
virtualmachinerestorerequests.virtualmachine.gdc.goog.list
virtualmachinerestorerequests.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.delete
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.patch
virtualmachinerestores.virtualmachine.gdc.goog.update
virtualmachinerestores.virtualmachine.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
Lecteur des sauvegardes de l'organisation
(organization-backup-viewer)

Affiche les sauvegardes, les restaurations et les dépôts de sauvegarde de l'organisation.

Zonal
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch
virtualmachinebackuprequests.virtualmachine.gdc.goog.get
virtualmachinebackuprequests.virtualmachine.gdc.goog.list
virtualmachinebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinerestorerequests.virtualmachine.gdc.goog.get
virtualmachinerestorerequests.virtualmachine.gdc.goog.list
virtualmachinerestorerequests.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
Administrateur des sauvegardes de cluster de l'organisation
(organization-cluster-backup-admin)

Gère les sauvegardes et les restaurations des clusters de l'organisation.

Zonal
clusterbackupplans.backup.gdc.goog.create
clusterbackupplans.backup.gdc.goog.delete
clusterbackupplans.backup.gdc.goog.get
clusterbackupplans.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.patch
clusterbackupplans.backup.gdc.goog.update
clusterbackupplans.backup.gdc.goog.watch
clusterbackuprepositories.backup.gdc.goog.create
clusterbackuprepositories.backup.gdc.goog.delete
clusterbackuprepositories.backup.gdc.goog.get
clusterbackuprepositories.backup.gdc.goog.list
clusterbackuprepositories.backup.gdc.goog.patch
clusterbackuprepositories.backup.gdc.goog.update
clusterbackuprepositories.backup.gdc.goog.watch
clusterbackups.backup.gdc.goog.delete
clusterbackups.backup.gdc.goog.get
clusterbackups.backup.gdc.goog.list
clusterbackups.backup.gdc.goog.watch
clusterrestoreplans.backup.gdc.goog.create
clusterrestoreplans.backup.gdc.goog.delete
clusterrestoreplans.backup.gdc.goog.get
clusterrestoreplans.backup.gdc.goog.list
clusterrestoreplans.backup.gdc.goog.patch
clusterrestoreplans.backup.gdc.goog.update
clusterrestoreplans.backup.gdc.goog.watch
clusterrestores.backup.gdc.goog.create
clusterrestores.backup.gdc.goog.delete
clusterrestores.backup.gdc.goog.get
clusterrestores.backup.gdc.goog.list
clusterrestores.backup.gdc.goog.watch
clustervolumebackups.backup.gdc.goog.get
clustervolumebackups.backup.gdc.goog.list
clustervolumebackups.backup.gdc.goog.watch
clustervolumerestores.backup.gdc.goog.get
clustervolumerestores.backup.gdc.goog.list
clustervolumerestores.backup.gdc.goog.watch
deleteclusterbackuprequests.backup.gdc.goog.create
deleteclusterbackuprequests.backup.gdc.goog.delete
deleteclusterbackuprequests.backup.gdc.goog.get
deleteclusterbackuprequests.backup.gdc.goog.list
deleteclusterbackuprequests.backup.gdc.goog.watch
manualclusterbackuprequests.backup.gdc.goog.create
manualclusterbackuprequests.backup.gdc.goog.delete
manualclusterbackuprequests.backup.gdc.goog.get
manualclusterbackuprequests.backup.gdc.goog.list
manualclusterbackuprequests.backup.gdc.goog.watch
manualclusterrestorerequests.backup.gdc.goog.create
manualclusterrestorerequests.backup.gdc.goog.delete
manualclusterrestorerequests.backup.gdc.goog.get
manualclusterrestorerequests.backup.gdc.goog.list
manualclusterrestorerequests.backup.gdc.goog.watch
secrets.create
Lecteur des sauvegardes de cluster de l'organisation
(organization-cluster-backup-viewer)

Affiche les sauvegardes et les restaurations de clusters de l'organisation.

Zonal
clusterbackupplans.backup.gdc.goog.get
clusterbackupplans.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.watch
clusterbackuprepositories.backup.gdc.goog.get
clusterbackuprepositories.backup.gdc.goog.list
clusterbackuprepositories.backup.gdc.goog.watch
clusterbackups.backup.gdc.goog.get
clusterbackups.backup.gdc.goog.list
clusterbackups.backup.gdc.goog.watch
clusterrestoreplans.backup.gdc.goog.get
clusterrestoreplans.backup.gdc.goog.list
clusterrestoreplans.backup.gdc.goog.watch
clusterrestores.backup.gdc.goog.get
clusterrestores.backup.gdc.goog.list
clusterrestores.backup.gdc.goog.watch
clustervolumebackups.backup.gdc.goog.get
clustervolumebackups.backup.gdc.goog.list
clustervolumebackups.backup.gdc.goog.watch
clustervolumerestores.backup.gdc.goog.get
clustervolumerestores.backup.gdc.goog.list
clustervolumerestores.backup.gdc.goog.watch
deleteclusterbackuprequests.backup.gdc.goog.get
deleteclusterbackuprequests.backup.gdc.goog.list
deleteclusterbackuprequests.backup.gdc.goog.watch
manualclusterbackuprequests.backup.gdc.goog.get
manualclusterbackuprequests.backup.gdc.goog.list
manualclusterbackuprequests.backup.gdc.goog.watch
manualclusterrestorerequests.backup.gdc.goog.get
manualclusterrestorerequests.backup.gdc.goog.list
manualclusterrestorerequests.backup.gdc.goog.watch
Lecteur Grafana de l'organisation
(organization-grafana-viewer)

Affiche l'instance Grafana de l'organisation.

Zonal
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.DELETE
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.GET
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.HEAD
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.OPTIONS
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.PATCH
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.POST
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.PUT
Administrateur des règles réseau de l'organisation
(org-network-policy-admin)

Créez et gérez des règles de réseau d'organisation.

Zonal
organizationnetworkpolicies.networking.gdc.goog.create
organizationnetworkpolicies.networking.gdc.goog.delete
organizationnetworkpolicies.networking.gdc.goog.get
organizationnetworkpolicies.networking.gdc.goog.list
organizationnetworkpolicies.networking.gdc.goog.patch
organizationnetworkpolicies.networking.gdc.goog.update
organizationnetworkpolicies.networking.gdc.goog.watch
Lecteur des règles réseau de l'organisation
(org-network-policy-viewer)

Afficher les règles de réseau de l'organisation

Zonal
organizationnetworkpolicies.networking.gdc.goog.get
organizationnetworkpolicies.networking.gdc.goog.list
organizationnetworkpolicies.networking.gdc.goog.watch
Administrateur de quotas de l'organisation
(organization-quota-admin)

Gère les ressources de quota global pour une organisation.

Monde
quotavalues.quotamanagement.global.gdc.goog.create
quotavalues.quotamanagement.global.gdc.goog.delete
quotavalues.quotamanagement.global.gdc.goog.get
quotavalues.quotamanagement.global.gdc.goog.list
quotavalues.quotamanagement.global.gdc.goog.patch
quotavalues.quotamanagement.global.gdc.goog.update
quotavalues.quotamanagement.global.gdc.goog.watch
Lecteur de quotas de l'organisation
(organization-quota-viewer)

Affiche les ressources de quota global pour une organisation.

Monde
quotavalues.quotamanagement.global.gdc.goog.get
quotavalues.quotamanagement.global.gdc.goog.list
quotavalues.quotamanagement.global.gdc.goog.watch
Administrateur de l'infrastructure PKI
(infra-pki-admin)

Crée et gère les CertificateIssuers et les CertificateAuthorities.

Zonal
certificateauthorities.pki.security.gdc.goog.create
certificateauthorities.pki.security.gdc.goog.delete
certificateauthorities.pki.security.gdc.goog.get
certificateauthorities.pki.security.gdc.goog.list
certificateauthorities.pki.security.gdc.goog.patch
certificateauthorities.pki.security.gdc.goog.update
certificateauthorities.pki.security.gdc.goog.watch
certificateissuers.pki.security.gdc.goog.create
certificateissuers.pki.security.gdc.goog.delete
certificateissuers.pki.security.gdc.goog.get
certificateissuers.pki.security.gdc.goog.list
certificateissuers.pki.security.gdc.goog.patch
certificateissuers.pki.security.gdc.goog.update
certificateissuers.pki.security.gdc.goog.watch
secrets.get
secrets.list
Lecteur d'infrastructure PKI
(infra-pki-viewer)

Affiche les CertificateIssuers et les CertificateAuthorities.

Zonal
certificateauthorities.pki.security.gdc.goog.get
certificateauthorities.pki.security.gdc.goog.list
certificateauthorities.pki.security.gdc.goog.watch
certificateissuers.pki.security.gdc.goog.get
certificateissuers.pki.security.gdc.goog.list
certificateissuers.pki.security.gdc.goog.watch
secrets.get
secrets.list
Créateur de projet
(project-creator)

Crée et consulte des projets.

Monde
projects.resourcemanager.global.gdc.goog.create
projects.resourcemanager.global.gdc.goog.get
projects.resourcemanager.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
namespaces.create
namespaces.get
namespaces.list
namespaces.watch
projectbindings.resourcemanager.gdc.goog.create
projects.resourcemanager.gdc.goog.create
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.watch
Éditeur de projet
(project-editor)

Gère les projets et les zones de vue.

Monde
projects.resourcemanager.global.gdc.goog.delete
projects.resourcemanager.global.gdc.goog.get
projects.resourcemanager.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.patch
projects.resourcemanager.global.gdc.goog.update
projects.resourcemanager.global.gdc.goog.watch
zones.location.mz.global.private.gdc.goog.get
zones.location.mz.global.private.gdc.goog.list
zones.location.mz.global.private.gdc.goog.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
namespaces.delete
namespaces.get
namespaces.list
namespaces.watch
projectbindings.resourcemanager.gdc.goog.delete
projectbindings.resourcemanager.gdc.goog.get
projectbindings.resourcemanager.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.patch
projectbindings.resourcemanager.gdc.goog.update
projects.resourcemanager.gdc.goog.delete
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.patch
projects.resourcemanager.gdc.goog.update
projects.resourcemanager.gdc.goog.watch
Arbitre des quotas de projet
(project-quota-adjudicator)

Arbitre les ressources de quota au niveau du projet global d'une organisation.

Monde
quotavalues.quotamanagement.global.gdc.goog.create
quotavalues.quotamanagement.global.gdc.goog.delete
quotavalues.quotamanagement.global.gdc.goog.get
quotavalues.quotamanagement.global.gdc.goog.list
quotavalues.quotamanagement.global.gdc.goog.patch
quotavalues.quotamanagement.global.gdc.goog.update
quotavalues.quotamanagement.global.gdc.goog.watch
Administrateur des règles "Restreindre par attributs"
(gdchrestrictbyattributes-policy-admin)

Permet de créer, lire, mettre à jour et supprimer la stratégie "Restreindre par attributs".

Monde
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.create
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.delete
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.patch
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.update

Zonal
gdchrestrictbyattributes.constraints.gatekeeper.sh.create
gdchrestrictbyattributes.constraints.gatekeeper.sh.delete
gdchrestrictbyattributes.constraints.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.gatekeeper.sh.list
gdchrestrictbyattributes.constraints.gatekeeper.sh.patch
gdchrestrictbyattributes.constraints.gatekeeper.sh.update
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.create
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.delete
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.patch
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.update
Lecteur de la stratégie "Restreindre par attributs"
(gdchrestrictbyattributes-policy-viewer)

Accorde un accès en lecture à la règle "Restreindre par attributs".

Monde
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list

Zonal
gdchrestrictbyattributes.constraints.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.gatekeeper.sh.list
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list
Administrateur des règles relatives aux services restreints
(gdchrestrictedservice-policy-admin)

Accorde un accès en création, lecture, mise à jour et suppression à la règle relative aux services restreints.

Monde
gdchrestrictedservice.constraints.global.gatekeeper.sh.create
gdchrestrictedservice.constraints.global.gatekeeper.sh.delete
gdchrestrictedservice.constraints.global.gatekeeper.sh.get
gdchrestrictedservice.constraints.global.gatekeeper.sh.list
gdchrestrictedservice.constraints.global.gatekeeper.sh.patch
gdchrestrictedservice.constraints.global.gatekeeper.sh.update

Zonal
gdchrestrictedservice.constraints.gatekeeper.sh.create
gdchrestrictedservice.constraints.gatekeeper.sh.delete
gdchrestrictedservice.constraints.gatekeeper.sh.get
gdchrestrictedservice.constraints.gatekeeper.sh.list
gdchrestrictedservice.constraints.gatekeeper.sh.patch
gdchrestrictedservice.constraints.gatekeeper.sh.update
gdchrestrictedservice.constraints.global.gatekeeper.sh.create
gdchrestrictedservice.constraints.global.gatekeeper.sh.delete
gdchrestrictedservice.constraints.global.gatekeeper.sh.get
gdchrestrictedservice.constraints.global.gatekeeper.sh.list
gdchrestrictedservice.constraints.global.gatekeeper.sh.patch
gdchrestrictedservice.constraints.global.gatekeeper.sh.update
Lecteur de la stratégie relative aux services soumis à restriction
(gdchrestrictedservice-policy-viewer)

Accorde un accès en lecture à la stratégie relative aux services restreints.

Monde
gdchrestrictedservice.constraints.global.gatekeeper.sh.get
gdchrestrictedservice.constraints.global.gatekeeper.sh.list

Zonal
gdchrestrictedservice.constraints.gatekeeper.sh.get
gdchrestrictedservice.constraints.gatekeeper.sh.list
gdchrestrictedservice.constraints.global.gatekeeper.sh.get
gdchrestrictedservice.constraints.global.gatekeeper.sh.list
Administrateur de l'organisation de session
(org-session-admin)

Révoque les sessions utilisateur.

Zonal
iam-admin-session-manager-backend/iam-admin-session-manager-backend.istio.resourcemanager.gdc.goog.GET
iam-admin-session-manager-backend/iam-admin-session-manager-backend.istio.resourcemanager.gdc.goog.POST
Lecteur de l'organisation de la session
(org-session-viewer)

Révoque les sessions utilisateur.

Zonal
iam-admin-session-manager-backend/iam-admin-session-manager-backend.istio.resourcemanager.gdc.goog.GET
Administrateur de l'organisation du sous-réseau
(subnet-org-admin)

Crée et gère des sous-réseaux dans l'organisation.

Monde
subnets.ipam.global.gdc.goog.create
subnets.ipam.global.gdc.goog.delete
subnets.ipam.global.gdc.goog.get
subnets.ipam.global.gdc.goog.list
subnets.ipam.global.gdc.goog.manage
subnets.ipam.global.gdc.goog.patch
subnets.ipam.global.gdc.goog.update
subnets.ipam.global.gdc.goog.watch

Zonal
subnets.ipam.gdc.goog.create
subnets.ipam.gdc.goog.delete
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
subnets.ipam.gdc.goog.manage
subnets.ipam.gdc.goog.patch
subnets.ipam.gdc.goog.update
subnets.ipam.gdc.goog.use
subnets.ipam.gdc.goog.watch
Lecteur de l'organisation du sous-réseau
(subnet-org-viewer)

Affiche les sous-réseaux de l'organisation.

Monde
subnets.ipam.global.gdc.goog.get
subnets.ipam.global.gdc.goog.list
subnets.ipam.global.gdc.goog.watch

Zonal
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
subnets.ipam.gdc.goog.watch
Lecteur de plate-forme de sous-réseau
(subnet-platform-viewer)

Affiche les sous-réseaux.

Zonal
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
Administrateur du dépôt de sauvegarde du cluster système
(system-cluster-backup-repository-admin)

Gère les dépôts de sauvegarde dans le cluster système.

Cluster Kubernetes
backuprepositories.backup.gdc.goog.create
backuprepositories.backup.gdc.goog.delete
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
Lecteur CRD de cluster système
(system-cluster-crd-viewer)

Affiche les définitions de ressources personnalisées dans le cluster système.

Cluster Kubernetes
customresourcedefinitions.apiextensions.k8s.io.get
customresourcedefinitions.apiextensions.k8s.io.list
Administrateur de tags
(tag-admin)

Zonal
roles.rbac.authorization.k8s.io.bind
tagkeys.resourcemanager.gdc.goog.bind-tag
tagkeys.resourcemanager.gdc.goog.create
tagkeys.resourcemanager.gdc.goog.delete
tagkeys.resourcemanager.gdc.goog.get
tagkeys.resourcemanager.gdc.goog.list
tagkeys.resourcemanager.gdc.goog.patch
tagkeys.resourcemanager.gdc.goog.update
tagvalues.resourcemanager.gdc.goog.bind-tag
tagvalues.resourcemanager.gdc.goog.create
tagvalues.resourcemanager.gdc.goog.delete
tagvalues.resourcemanager.gdc.goog.get
tagvalues.resourcemanager.gdc.goog.list
tagvalues.resourcemanager.gdc.goog.patch
tagvalues.resourcemanager.gdc.goog.update
Créateur de demandes Transfer Appliance
(transfer-appliance-request-creator)

Crée et affiche les demandes de serveur Transfer Appliance.

Zonal
transferappliancerequests.system.private.gdc.goog.create
transferappliancerequests.system.private.gdc.goog.get
transferappliancerequests.system.private.gdc.goog.list
transferappliancerequests.system.private.gdc.goog.watch
transferappliancerequests/status.system.private.gdc.goog.patch
Lecteur de demandes Transfer Appliance
(transfer-appliance-request-viewer)

Affiche les demandes de Transfer Appliance.

Zonal
transferappliancerequests.system.private.gdc.goog.get
transferappliancerequests.system.private.gdc.goog.list
transferappliancerequests.system.private.gdc.goog.watch
Administrateur du magasin de confiance
(trust-store-admin)

Crée et gère le secret custom-ca.

Zonal
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
Lecteur du magasin de confiance
(trust-store-viewer)

Affiche les secrets spécifiques du magasin de confiance.

Zonal
secrets.get
secrets.list
secrets.watch
Administrateur du règlement relatif aux images de confiance
(trusted-image-policy-admin)

Gère les règlements relatifs aux images de confiance.

Monde
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.create
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.delete
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.get
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.list
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.patch
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.update
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.watch
Mettre à niveau le lecteur de l'organisation
(organization-upgrade-viewer)

Affiche les ressources de mise à niveau de l'organisation.

Zonal
componentreleasemetadata.upgrade.private.gdc.goog.get
componentreleasemetadata.upgrade.private.gdc.goog.list
harborprojects.artifact.private.gdc.goog.get
harborprojects.artifact.private.gdc.goog.list
harborprojects.artifact.private.gdc.goog.watch
harborusercredentials.artifact.private.gdc.goog.get
maintenancewindows.upgrade.gdc.goog.get
maintenancewindows.upgrade.gdc.goog.list
maintenancewindows.upgrade.gdc.goog.watch
Administrateur de cluster utilisateur
(user-cluster-admin)

Gère le cycle de vie des clusters d'utilisateur et les ressources de mise à niveau.

Zonal
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
clusters.baremetal.cluster.gke.io.get
clusters.baremetal.cluster.gke.io.list
clusters.baremetal.cluster.gke.io.watch
clusters.cluster.gdc.goog.create
clusters.cluster.gdc.goog.delete
clusters.cluster.gdc.goog.get
clusters.cluster.gdc.goog.list
clusters.cluster.gdc.goog.patch
clusters.cluster.gdc.goog.update
clusters.cluster.gdc.goog.watch
componentreleasemetadata.upgrade.private.gdc.goog.get
componentreleasemetadata.upgrade.private.gdc.goog.list
harborclusters.goharbor.io.get
inventorymachines.baremetal.cluster.gke.io.get
inventorymachines.baremetal.cluster.gke.io.list
machineclasses.baremetal.cluster.gke.io.get
machineclasses.baremetal.cluster.gke.io.list
machineclasses.baremetal.cluster.gke.io.watch
nodepoolclaims.baremetal.cluster.gke.io.get
nodepoolclaims.baremetal.cluster.gke.io.list
nodepoolclaims.baremetal.cluster.gke.io.watch
nodepools.baremetal.cluster.gke.io.get
nodepools.baremetal.cluster.gke.io.list
nodepools.baremetal.cluster.gke.io.watch
nodeupgrades.upgrade.private.gdc.goog.create
nodeupgrades.upgrade.private.gdc.goog.get
nodeupgrades.upgrade.private.gdc.goog.list
nodeupgrades.upgrade.private.gdc.goog.patch
nodeupgrades.upgrade.private.gdc.goog.update
projectbindings.resourcemanager.gdc.goog.create
projectbindings.resourcemanager.gdc.goog.delete
projectbindings.resourcemanager.gdc.goog.get
projectbindings.resourcemanager.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.watch
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.watch
projects.visibility.resourcemanager.gdc.goog.get
userclustermetadata.upgrade.private.gdc.goog.get
userclustermetadata.upgrade.private.gdc.goog.list
userclustermetadata.upgrade.private.gdc.goog.watch
userclusterupgraderequests.cluster.gdc.goog.create
userclusterupgraderequests.cluster.gdc.goog.delete
userclusterupgraderequests.cluster.gdc.goog.get
userclusterupgraderequests.cluster.gdc.goog.list
userclusterupgraderequests.cluster.gdc.goog.patch
userclusterupgraderequests.cluster.gdc.goog.update
userclusterupgraderequests.cluster.gdc.goog.watch
userclusterupgrades.upgrade.private.gdc.goog.create
userclusterupgrades.upgrade.private.gdc.goog.delete
userclusterupgrades.upgrade.private.gdc.goog.get
userclusterupgrades.upgrade.private.gdc.goog.list
userclusterupgrades.upgrade.private.gdc.goog.patch
userclusterupgrades.upgrade.private.gdc.goog.update
userclusterupgrades.upgrade.private.gdc.goog.watch
virtualmachinetypes.virtualmachine.gdc.goog.get
virtualmachinetypes.virtualmachine.gdc.goog.list
virtualmachinetypes.virtualmachine.gdc.goog.watch
Administrateur de la sauvegarde des clusters utilisateur
(user-cluster-backup-admin)

Gère les sauvegardes, les restaurations et les applications protégées des clusters d'utilisateur.

Cluster Kubernetes
backupplans.backup.gdc.goog.create
backupplans.backup.gdc.goog.delete
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.patch
backupplans.backup.gdc.goog.update
backupplans.backup.gdc.goog.watch
backuprepositories.backup.gdc.goog.create
backuprepositories.backup.gdc.goog.delete
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.create
deletebackuprequests.backup.gdc.goog.delete
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
deployments.apps.create
deployments.apps.delete
deployments.apps.get
deployments.apps.list
deployments.apps.patch
deployments.apps.update
deployments.apps.watch
manualbackuprequests.backup.gdc.goog.create
manualbackuprequests.backup.gdc.goog.delete
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.create
manualrestorerequests.backup.gdc.goog.delete
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.watch
persistentvolumeclaims.create
persistentvolumeclaims.delete
persistentvolumeclaims.get
persistentvolumeclaims.list
persistentvolumeclaims.patch
persistentvolumeclaims.update
persistentvolumeclaims.watch
pods.create
pods.delete
pods.get
pods.list
pods.patch
pods.update
pods.watch
protectedapplications.gkebackup.gke.io.create
protectedapplications.gkebackup.gke.io.delete
protectedapplications.gkebackup.gke.io.get
protectedapplications.gkebackup.gke.io.list
protectedapplications.gkebackup.gke.io.patch
protectedapplications.gkebackup.gke.io.update
protectedapplications.gkebackup.gke.io.watch
restoreplans.backup.gdc.goog.create
restoreplans.backup.gdc.goog.delete
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.patch
restoreplans.backup.gdc.goog.update
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.create
restores.backup.gdc.goog.delete
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
services.create
services.delete
services.get
services.list
services.patch
services.update
services.watch
statefulsets.apps.create
statefulsets.apps.delete
statefulsets.apps.get
statefulsets.apps.list
statefulsets.apps.patch
statefulsets.apps.update
statefulsets.apps.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
Lecteur des sauvegardes de clusters d'utilisateur
(user-cluster-backup-viewer)

Affiche les sauvegardes, les restaurations et les applications protégées des clusters d'utilisateur.

Cluster Kubernetes
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
deployments.apps.get
deployments.apps.list
deployments.apps.watch
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.watch
persistentvolumeclaims.get
persistentvolumeclaims.list
persistentvolumeclaims.watch
pods.get
pods.list
pods.watch
protectedapplications.gkebackup.gke.io.get
protectedapplications.gkebackup.gke.io.list
protectedapplications.gkebackup.gke.io.watch
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
services.get
services.list
services.watch
statefulsets.apps.get
statefulsets.apps.list
statefulsets.apps.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
Lecteur de CRD de cluster utilisateur
(user-cluster-crd-viewer)

Affiche les définitions de ressources personnalisées dans les clusters utilisateur.

Cluster Kubernetes
customresourcedefinitions.apiextensions.k8s.io.get
customresourcedefinitions.apiextensions.k8s.io.list
Développeur de clusters d'utilisateur
(user-cluster-developer)

Affiche différentes ressources dans le cluster d'utilisateur.

Cluster Kubernetes
*.constraints.gatekeeper.sh.get
*.constraints.gatekeeper.sh.list
*.templates.gatekeeper.sh/v1.get
*.templates.gatekeeper.sh/v1.list
apiservices.apiregistration.k8s.io.get
apiservices.apiregistration.k8s.io.list
backupjobs.gkebackup.gke.io.get
backupjobs.gkebackup.gke.io.list
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
certificatesigningrequests.certificates.k8s.io.get
certificatesigningrequests.certificates.k8s.io.list
ciliumclusterwidenetworkpolicies.cilium.io.get
ciliumclusterwidenetworkpolicies.cilium.io.list
ciliumegressgatewaypolicies.cilium.io.get
ciliumegressgatewaypolicies.cilium.io.list
ciliumegressnatpolicies.cilium.io.get
ciliumegressnatpolicies.cilium.io.list
ciliumexternalworkloads.cilium.io.get
ciliumexternalworkloads.cilium.io.list
ciliumidentities.cilium.io.get
ciliumidentities.cilium.io.list
ciliumnodes.cilium.io.get
ciliumnodes.cilium.io.list
clustercidrconfigs.networking.gke.io.get
clustercidrconfigs.networking.gke.io.list
clusterdns.networking.gke.io.get
clusterdns.networking.gke.io.list
clusterissuers.cert-manager.io.get
clusterissuers.cert-manager.io.list
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
csidrivers.storage.k8s.io.get
csidrivers.storage.k8s.io.list
csinodes.storage.k8s.io.get
csinodes.storage.k8s.io.list
customresourcedefinitions.apiextensions.k8s.io.get
customresourcedefinitions.apiextensions.k8s.io.list
egressnatpolicies.networking.gke.io.get
egressnatpolicies.networking.gke.io.list
events.get
events.list
events.watch
flatipmodes.networking.gke.io.get
flatipmodes.networking.gke.io.list
ingressclasses.networking.gke.io.get
ingressclasses.networking.gke.io.list
metricsserver.addons.gke.io.get
metricsserver.addons.gke.io.list
mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.get
mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.list
namespaces.get
namespaces.list
networkloggings.networking.gke.io.get
networkloggings.networking.gke.io.list
networks.networking.gke.io.get
networks.networking.gke.io.list
nodes.get
nodes.list
nodes.patch
nodes.update
objectbuckets.objectbucket.io.get
objectbuckets.objectbucket.io.list
persistentvolumes.get
persistentvolumes.list
pods.create
pods.delete
pods.get
pods.list
pods.metrics.k8s.io.get
pods.metrics.k8s.io.list
pods.patch
pods.update
pods.watch
pods/exec.create
pods/log.get
priorityclasses.scheduling.k8s.io.get
priorityclasses.scheduling.k8s.io.list
restorejobs.gkebackup.gke.io.get
restorejobs.gkebackup.gke.io.list
runtimeclasses.node.k8s.io.get
runtimeclasses.node.k8s.io.list
storageclasses.storage.k8s.io.get
storageclasses.storage.k8s.io.list
validatingwebhookconfigurations.admissionregistration.k8s.io/v1.get
validatingwebhookconfigurations.admissionregistration.k8s.io/v1.list
vmruntimes.virtualmachine.private.gdc.goog.get
vmruntimes.virtualmachine.private.gdc.goog.list
volumeattachments.storage.k8s.io.get
volumeattachments.storage.k8s.io.list
volumesnapshotclasses.snapshot.storage.k8s.io.get
volumesnapshotclasses.snapshot.storage.k8s.io.list
volumesnapshotcontents.snapshot.storage.k8s.io.get
volumesnapshotcontents.snapshot.storage.k8s.io.list
Lecteur de développeur de cluster utilisateur
(user-cluster-developer-viewer)

Affiche différentes ressources dans le cluster d'utilisateur.

Cluster Kubernetes
*.constraints.gatekeeper.sh.get
*.constraints.gatekeeper.sh.list
*.templates.gatekeeper.sh/v1.get
*.templates.gatekeeper.sh/v1.list
apiservices.apiregistration.k8s.io.get
apiservices.apiregistration.k8s.io.list
backupjobs.gkebackup.gke.io.get
backupjobs.gkebackup.gke.io.list
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
certificatesigningrequests.certificates.k8s.io.get
certificatesigningrequests.certificates.k8s.io.list
ciliumclusterwidenetworkpolicies.cilium.io.get
ciliumclusterwidenetworkpolicies.cilium.io.list
ciliumegressgatewaypolicies.cilium.io.get
ciliumegressgatewaypolicies.cilium.io.list
ciliumegressnatpolicies.cilium.io.get
ciliumegressnatpolicies.cilium.io.list
ciliumexternalworkloads.cilium.io.get
ciliumexternalworkloads.cilium.io.list
ciliumidentities.cilium.io.get
ciliumidentities.cilium.io.list
ciliumnodes.cilium.io.get
ciliumnodes.cilium.io.list
clustercidrconfigs.networking.gke.io.get
clustercidrconfigs.networking.gke.io.list
clusterdns.networking.gke.io.get
clusterdns.networking.gke.io.list
clusterissuers.cert-manager.io.get
clusterissuers.cert-manager.io.list
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
csidrivers.storage.k8s.io.get
csidrivers.storage.k8s.io.list
csinodes.storage.k8s.io.get
csinodes.storage.k8s.io.list
customresourcedefinitions.apiextensions.k8s.io.get
customresourcedefinitions.apiextensions.k8s.io.list
egressnatpolicies.networking.gke.io.get
egressnatpolicies.networking.gke.io.list
events.get
events.list
events.watch
flatipmodes.networking.gke.io.get
flatipmodes.networking.gke.io.list
ingressclasses.networking.gke.io.get
ingressclasses.networking.gke.io.list
metricsserver.addons.gke.io.get
metricsserver.addons.gke.io.list
mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.get
mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.list
namespaces.get
namespaces.list
networkloggings.networking.gke.io.get
networkloggings.networking.gke.io.list
networks.networking.gke.io.get
networks.networking.gke.io.list
nodes.get
nodes.list
objectbuckets.objectbucket.io.get
objectbuckets.objectbucket.io.list
persistentvolumes.get
persistentvolumes.list
pods.get
pods.list
pods.metrics.k8s.io.get
pods.metrics.k8s.io.list
pods.watch
pods/log.get
priorityclasses.scheduling.k8s.io.get
priorityclasses.scheduling.k8s.io.list
restorejobs.gkebackup.gke.io.get
restorejobs.gkebackup.gke.io.list
runtimeclasses.node.k8s.io.get
runtimeclasses.node.k8s.io.list
storageclasses.storage.k8s.io.get
storageclasses.storage.k8s.io.list
validatingwebhookconfigurations.admissionregistration.k8s.io/v1.get
validatingwebhookconfigurations.admissionregistration.k8s.io/v1.list
vmruntimes.virtualmachine.private.gdc.goog.get
vmruntimes.virtualmachine.private.gdc.goog.list
volumeattachments.storage.k8s.io.get
volumeattachments.storage.k8s.io.list
volumesnapshotclasses.snapshot.storage.k8s.io.get
volumesnapshotclasses.snapshot.storage.k8s.io.list
volumesnapshotcontents.snapshot.storage.k8s.io.get
volumesnapshotcontents.snapshot.storage.k8s.io.list
Lecteur de nœuds de cluster d'utilisateur
(user-cluster-node-viewer)

Affiche les nœuds du cluster d'utilisateur.

Cluster Kubernetes
nodes.get
nodes.list
nodes.watch
Lecteur de clusters utilisateur
(user-cluster-viewer)

Affiche le cycle de vie du cluster d'utilisateur et les ressources de mise à niveau.

Zonal
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
clusters.baremetal.cluster.gke.io.get
clusters.baremetal.cluster.gke.io.list
clusters.baremetal.cluster.gke.io.watch
clusters.cluster.gdc.goog.get
clusters.cluster.gdc.goog.list
clusters.cluster.gdc.goog.watch
componentreleasemetadata.upgrade.private.gdc.goog.get
componentreleasemetadata.upgrade.private.gdc.goog.list
harborclusters.goharbor.io.get
inventorymachines.baremetal.cluster.gke.io.get
inventorymachines.baremetal.cluster.gke.io.list
machineclasses.baremetal.cluster.gke.io.get
machineclasses.baremetal.cluster.gke.io.list
machineclasses.baremetal.cluster.gke.io.watch
nodepoolclaims.baremetal.cluster.gke.io.get
nodepoolclaims.baremetal.cluster.gke.io.list
nodepoolclaims.baremetal.cluster.gke.io.watch
nodepools.baremetal.cluster.gke.io.get
nodepools.baremetal.cluster.gke.io.list
nodepools.baremetal.cluster.gke.io.watch
nodeupgrades.upgrade.private.gdc.goog.get
nodeupgrades.upgrade.private.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.get
projectbindings.resourcemanager.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.watch
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.watch
projects.visibility.resourcemanager.gdc.goog.get
userclustermetadata.upgrade.private.gdc.goog.get
userclustermetadata.upgrade.private.gdc.goog.list
userclustermetadata.upgrade.private.gdc.goog.watch
userclusterupgraderequests.cluster.gdc.goog.get
userclusterupgraderequests.cluster.gdc.goog.list
userclusterupgraderequests.cluster.gdc.goog.watch
userclusterupgrades.upgrade.private.gdc.goog.get
userclusterupgrades.upgrade.private.gdc.goog.list
userclusterupgrades.upgrade.private.gdc.goog.watch
virtualmachinetypes.virtualmachine.gdc.goog.get
virtualmachinetypes.virtualmachine.gdc.goog.list
virtualmachinetypes.virtualmachine.gdc.goog.watch
Administrateur VPN
(vpn-admin)

Crée et gère les ressources liées au VPN.

Zonal
peergateways.networking.gdc.goog.create
peergateways.networking.gdc.goog.delete
peergateways.networking.gdc.goog.get
peergateways.networking.gdc.goog.list
peergateways.networking.gdc.goog.patch
peergateways.networking.gdc.goog.update
peergateways.networking.gdc.goog.watch
peergateways/status.networking.gdc.goog.create
peergateways/status.networking.gdc.goog.delete
peergateways/status.networking.gdc.goog.get
peergateways/status.networking.gdc.goog.list
peergateways/status.networking.gdc.goog.patch
peergateways/status.networking.gdc.goog.update
peergateways/status.networking.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
vpnbgppeers.networking.gdc.goog.create
vpnbgppeers.networking.gdc.goog.delete
vpnbgppeers.networking.gdc.goog.get
vpnbgppeers.networking.gdc.goog.list
vpnbgppeers.networking.gdc.goog.patch
vpnbgppeers.networking.gdc.goog.update
vpnbgppeers.networking.gdc.goog.watch
vpnbgppeers/status.networking.gdc.goog.create
vpnbgppeers/status.networking.gdc.goog.delete
vpnbgppeers/status.networking.gdc.goog.get
vpnbgppeers/status.networking.gdc.goog.list
vpnbgppeers/status.networking.gdc.goog.patch
vpnbgppeers/status.networking.gdc.goog.update
vpnbgppeers/status.networking.gdc.goog.watch
vpngateways.networking.gdc.goog.create
vpngateways.networking.gdc.goog.delete
vpngateways.networking.gdc.goog.get
vpngateways.networking.gdc.goog.list
vpngateways.networking.gdc.goog.patch
vpngateways.networking.gdc.goog.update
vpngateways.networking.gdc.goog.watch
vpngateways/status.networking.gdc.goog.create
vpngateways/status.networking.gdc.goog.delete
vpngateways/status.networking.gdc.goog.get
vpngateways/status.networking.gdc.goog.list
vpngateways/status.networking.gdc.goog.patch
vpngateways/status.networking.gdc.goog.update
vpngateways/status.networking.gdc.goog.watch
vpntunnels.networking.gdc.goog.create
vpntunnels.networking.gdc.goog.delete
vpntunnels.networking.gdc.goog.get
vpntunnels.networking.gdc.goog.list
vpntunnels.networking.gdc.goog.patch
vpntunnels.networking.gdc.goog.update
vpntunnels.networking.gdc.goog.watch
vpntunnels/status.networking.gdc.goog.create
vpntunnels/status.networking.gdc.goog.delete
vpntunnels/status.networking.gdc.goog.get
vpntunnels/status.networking.gdc.goog.list
vpntunnels/status.networking.gdc.goog.patch
vpntunnels/status.networking.gdc.goog.update
vpntunnels/status.networking.gdc.goog.watch
Lecteur VPN
(vpn-viewer)

Lit les ressources liées au VPN.

Zonal
peergateways.networking.gdc.goog.get
peergateways.networking.gdc.goog.list
peergateways.networking.gdc.goog.watch
peergateways/status.networking.gdc.goog.get
peergateways/status.networking.gdc.goog.list
peergateways/status.networking.gdc.goog.watch
secrets.get
secrets.list
secrets.watch
vpnbgppeers.networking.gdc.goog.get
vpnbgppeers.networking.gdc.goog.list
vpnbgppeers.networking.gdc.goog.watch
vpnbgppeers/status.networking.gdc.goog.get
vpnbgppeers/status.networking.gdc.goog.list
vpnbgppeers/status.networking.gdc.goog.watch
vpngateways.networking.gdc.goog.get
vpngateways.networking.gdc.goog.list
vpngateways.networking.gdc.goog.watch
vpngateways/status.networking.gdc.goog.get
vpngateways/status.networking.gdc.goog.list
vpngateways/status.networking.gdc.goog.watch
vpntunnels.networking.gdc.goog.get
vpntunnels.networking.gdc.goog.list
vpntunnels.networking.gdc.goog.watch
vpntunnels/status.networking.gdc.goog.get
vpntunnels/status.networking.gdc.goog.list
vpntunnels/status.networking.gdc.goog.watch
Administrateur Vertex AI Platform
(ai-platform-admin)

Gère l'interface utilisateur AI Platform.

Zonal
aiplatform/ui.istio.resourcemanager.gdc.goog.create
aiplatform/ui.istio.resourcemanager.gdc.goog.delete
aiplatform/ui.istio.resourcemanager.gdc.goog.deletecollection
aiplatform/ui.istio.resourcemanager.gdc.goog.get
aiplatform/ui.istio.resourcemanager.gdc.goog.list
aiplatform/ui.istio.resourcemanager.gdc.goog.patch
aiplatform/ui.istio.resourcemanager.gdc.goog.update
aiplatform/ui.istio.resourcemanager.gdc.goog.watch
Administrateur de sauvegarde des machines virtuelles
(vmbackup-admin)

Permet de créer, d'afficher, de mettre à jour et de supprimer des plans de sauvegarde de VM, des sauvegardes, des restaurations et des demandes associées.

Zonal
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.create
virtualmachinebackupplans.virtualmachine.gdc.goog.delete
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.patch
virtualmachinebackupplans.virtualmachine.gdc.goog.update
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.create
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.delete
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.patch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.update
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch
virtualmachinebackuprequests.virtualmachine.gdc.goog.create
virtualmachinebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinebackuprequests.virtualmachine.gdc.goog.get
virtualmachinebackuprequests.virtualmachine.gdc.goog.list
virtualmachinebackuprequests.virtualmachine.gdc.goog.patch
virtualmachinebackuprequests.virtualmachine.gdc.goog.update
virtualmachinebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.create
virtualmachinebackups.virtualmachine.gdc.goog.delete
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.patch
virtualmachinebackups.virtualmachine.gdc.goog.update
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.create
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.patch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.update
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinerestorerequests.virtualmachine.gdc.goog.create
virtualmachinerestorerequests.virtualmachine.gdc.goog.delete
virtualmachinerestorerequests.virtualmachine.gdc.goog.get
virtualmachinerestorerequests.virtualmachine.gdc.goog.list
virtualmachinerestorerequests.virtualmachine.gdc.goog.patch
virtualmachinerestorerequests.virtualmachine.gdc.goog.update
virtualmachinerestorerequests.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.create
virtualmachinerestores.virtualmachine.gdc.goog.delete
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.patch
virtualmachinerestores.virtualmachine.gdc.goog.update
virtualmachinerestores.virtualmachine.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
Administrateur mondial de la réplication de volumes
(volume-replication-admin)

Gère les relations de réplication de volumes.

Monde
volumereplicationrelationships.storage.global.gdc.goog.create
volumereplicationrelationships.storage.global.gdc.goog.delete
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
volumefailovers.storage.gdc.goog.create
volumefailovers.storage.gdc.goog.delete
volumefailovers.storage.gdc.goog.get
volumefailovers.storage.gdc.goog.list
volumefailovers.storage.gdc.goog.watch
volumereplicationrelationshipreplicas.storage.global.gdc.goog.create
volumereplicationrelationshipreplicas.storage.global.gdc.goog.delete
volumereplicationrelationshipreplicas.storage.global.gdc.goog.get
volumereplicationrelationshipreplicas.storage.global.gdc.goog.list
volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
Administrateur mondial de la réplication de volumes
(app-volume-replication-admin)

Gère les relations de réplication de volumes.

Monde
volumereplicationrelationships.storage.global.gdc.goog.create
volumereplicationrelationships.storage.global.gdc.goog.delete
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
volumefailovers.storage.gdc.goog.create
volumefailovers.storage.gdc.goog.delete
volumefailovers.storage.gdc.goog.get
volumefailovers.storage.gdc.goog.list
volumefailovers.storage.gdc.goog.watch
volumereplicationrelationshipreplicas.storage.global.gdc.goog.create
volumereplicationrelationshipreplicas.storage.global.gdc.goog.delete
volumereplicationrelationshipreplicas.storage.global.gdc.goog.get
volumereplicationrelationshipreplicas.storage.global.gdc.goog.list
volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
Lecteur global de la réplication de volumes
(app-volume-replication-viewer)

Affiche les relations de réplication de volumes.

Monde
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
volumefailovers.storage.gdc.goog.get
volumefailovers.storage.gdc.goog.list
volumefailovers.storage.gdc.goog.watch
volumereplicationrelationshipreplicas.storage.global.gdc.goog.get
volumereplicationrelationshipreplicas.storage.global.gdc.goog.list
volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
Lecteur global de la réplication de volumes
(volume-replication-viewer)

Affiche les relations de réplication de volumes.

Monde
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
volumefailovers.storage.gdc.goog.get
volumefailovers.storage.gdc.goog.list
volumefailovers.storage.gdc.goog.watch
volumereplicationrelationshipreplicas.storage.global.gdc.goog.get
volumereplicationrelationshipreplicas.storage.global.gdc.goog.list
volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
Administrateur de certificats TLS Web
(web-tls-cert-admin)

Crée et gère les certificats et secrets PKI spécifiques à TLS Web.

Monde
certificates.pki.security.gdc.goog.create
certificates.pki.security.gdc.goog.delete
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.patch
certificates.pki.security.gdc.goog.update
certificates.pki.security.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch

Zonal
certificates.pki.security.gdc.goog.create
certificates.pki.security.gdc.goog.delete
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.patch
certificates.pki.security.gdc.goog.update
certificates.pki.security.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
Lecteur de certificats TLS Web
(web-tls-cert-viewer)

Affiche les certificats et secrets PKI spécifiques à TLS Web.

Monde
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.watch
secrets.get
secrets.list
secrets.watch

Zonal
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.watch
secrets.get
secrets.list
secrets.watch

Rôles et autorisations au niveau du projet

Les rôles suivants sont accordés dans un projet spécifique.

Nom et description du rôle Autorisations
Développeur Gemini Large avec IA
(ai-large-gemini-developer)

Accorde les autorisations permettant d'accéder au grand modèle Gemini dans le projet.

Zonal
endpoints.large-gemini.gdc.goog.cancel-batch
endpoints.large-gemini.gdc.goog.cancel-upload
endpoints.large-gemini.gdc.goog.chat-completions
endpoints.large-gemini.gdc.goog.complete-upload
endpoints.large-gemini.gdc.goog.create-batch
endpoints.large-gemini.gdc.goog.create-cached-content
endpoints.large-gemini.gdc.goog.create-file
endpoints.large-gemini.gdc.goog.create-part
endpoints.large-gemini.gdc.goog.create-upload
endpoints.large-gemini.gdc.goog.delete-cached-content
endpoints.large-gemini.gdc.goog.delete-file
endpoints.large-gemini.gdc.goog.generate-content
endpoints.large-gemini.gdc.goog.get-batch
endpoints.large-gemini.gdc.goog.get-cached-content
endpoints.large-gemini.gdc.goog.get-file
endpoints.large-gemini.gdc.goog.list-available-models
endpoints.large-gemini.gdc.goog.list-batches
endpoints.large-gemini.gdc.goog.list-cached-contents
endpoints.large-gemini.gdc.goog.list-files
endpoints.large-gemini.gdc.goog.list-models
endpoints.large-gemini.gdc.goog.stream-generate-content
endpoints.large-gemini.gdc.goog.update-cached-content
Lecteur Gemini Large AI
(ai-large-gemini-viewer)

Accorde les autorisations permettant d'accéder au grand modèle Gemini dans le projet.

Zonal
endpoints.large-gemini.gdc.goog.get-batch
endpoints.large-gemini.gdc.goog.get-cached-content
endpoints.large-gemini.gdc.goog.get-file
endpoints.large-gemini.gdc.goog.list-available-models
endpoints.large-gemini.gdc.goog.list-batches
endpoints.large-gemini.gdc.goog.list-cached-contents
endpoints.large-gemini.gdc.goog.list-files
Créateur de sauvegarde
(backup-creator)

Crée des sauvegardes et les restaure.

Cluster Kubernetes
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.create
manualbackuprequests.backup.gdc.goog.delete
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.create
manualrestorerequests.backup.gdc.goog.delete
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.watch
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
Lecteur de sauvegarde
(backup-viewer)

Affiche les sauvegardes et les restaurations.

Cluster Kubernetes
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.watch
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
Administrateur de la librairie
(bookstore-admin)

Crée et affiche des étagères de la bibliothèque.

Zonal
shelves.bookstore-grpc.googleapis.com.create
shelves.bookstore-grpc.googleapis.com.get
shelves.cloudresourcemanager.googleapis.com.create
shelves.cloudresourcemanager.googleapis.com.get
Lecteur Bookstore
(bookstore-viewer)

Permet d'afficher les étagères de la librairie.

Zonal
shelves.bookstore-grpc.googleapis.com.get
shelves.cloudresourcemanager.googleapis.com.get
Administrateur de projet d'objets de bucket
(project-bucket-object-admin)

Lit les CR de bucket de projet global, lit les métadonnées des buckets de backend correspondants et gère les objets dans ces buckets via l'API S3

Monde
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.watch
buckets.object.global.gdc.goog.write-object

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
Lecteur de projet d'objets de bucket
(project-bucket-object-viewer)

Lit les CR de bucket de projet global, lit les métadonnées des buckets de backend correspondants et lit les objets de ces buckets via l'API S3.

Monde
bucketlocations.object.global.gdc.goog.get
bucketlocations.object.global.gdc.goog.list
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.watch

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
Administrateur de projet du bucket
(project-bucket-admin)

Gère les CR de bucket de projet global, lit les métadonnées des buckets de backend correspondants et gère les objets de ces buckets via l'API S3.

Monde
bucketlocations.object.global.gdc.goog.get
bucketlocations.object.global.gdc.goog.list
buckets.object.global.gdc.goog.create
buckets.object.global.gdc.goog.delete
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.patch
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.update
buckets.object.global.gdc.goog.watch
buckets.object.global.gdc.goog.write-object

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
bucketinfos.object.gdc.goog.patch
bucketinfos.object.gdc.goog.update
bucketinfos.object.gdc.goog.watch
buckets.object.gdc.goog.create
buckets.object.gdc.goog.delete
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.patch
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.update
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
Demandeur de certificat du service CA
(certificate-authority-service-certificate-requester)

Crée et affiche les demandes de certificat, et récupère les certificats émis.

Zonal
certificaterequests.pki.security.gdc.goog.create
certificaterequests.pki.security.gdc.goog.get
certificaterequests.pki.security.gdc.goog.list
secrets.get
secrets.list
Responsable des opérations du service CA
(certificate-authority-service-operation-manager)

Gère les autorités de certification et révoque les certificats.

Zonal
certificateauthorities.pki.security.gdc.goog.create
certificateauthorities.pki.security.gdc.goog.delete
certificateauthorities.pki.security.gdc.goog.get
certificateauthorities.pki.security.gdc.goog.list
certificateauthorities.pki.security.gdc.goog.patch
certificateauthorities.pki.security.gdc.goog.update
certificateauthorities.pki.security.gdc.goog.watch
certificaterequests.pki.security.gdc.goog.get
certificaterequests.pki.security.gdc.goog.list
certificaterequests.pki.security.gdc.goog.watch
revokecertificaterequests.pki.security.gdc.goog.create
revokecertificaterequests.pki.security.gdc.goog.delete
revokecertificaterequests.pki.security.gdc.goog.get
revokecertificaterequests.pki.security.gdc.goog.list
revokecertificaterequests.pki.security.gdc.goog.patch
revokecertificaterequests.pki.security.gdc.goog.update
revokecertificaterequests.pki.security.gdc.goog.watch
secrets.get
secrets.list
Administrateur de Certificate Authority Service
(certificate-authority-service-admin)

Crée et gère les CertificateAuthorities, les CertificateRequests et les RevokeCertificateRequests.

Zonal
certificateauthorities.pki.security.gdc.goog.create
certificateauthorities.pki.security.gdc.goog.delete
certificateauthorities.pki.security.gdc.goog.get
certificateauthorities.pki.security.gdc.goog.list
certificateauthorities.pki.security.gdc.goog.patch
certificateauthorities.pki.security.gdc.goog.update
certificateauthorities.pki.security.gdc.goog.watch
certificaterequests.pki.security.gdc.goog.create
certificaterequests.pki.security.gdc.goog.delete
certificaterequests.pki.security.gdc.goog.get
certificaterequests.pki.security.gdc.goog.list
certificaterequests.pki.security.gdc.goog.patch
certificaterequests.pki.security.gdc.goog.update
certificaterequests.pki.security.gdc.goog.watch
revokecertificaterequests.pki.security.gdc.goog.create
revokecertificaterequests.pki.security.gdc.goog.delete
revokecertificaterequests.pki.security.gdc.goog.get
revokecertificaterequests.pki.security.gdc.goog.list
revokecertificaterequests.pki.security.gdc.goog.patch
revokecertificaterequests.pki.security.gdc.goog.update
revokecertificaterequests.pki.security.gdc.goog.watch
secrets.get
secrets.list
Lecteur Certificate Authority Service
(certificate-authority-service-viewer)

Accès Lecteur aux CertificateAuthorities, CertificateRequests et RevokeCertificateRequests.

Zonal
certificateauthorities.pki.security.gdc.goog.get
certificateauthorities.pki.security.gdc.goog.list
certificaterequests.pki.security.gdc.goog.get
certificaterequests.pki.security.gdc.goog.list
revokecertificaterequests.pki.security.gdc.goog.get
revokecertificaterequests.pki.security.gdc.goog.list
secrets.get
secrets.list
Administrateur du service de certificats
(certificate-service-admin)

Crée et gère les certificats et les émetteurs de certificats.

Zonal
certificateissuers.pki.security.gdc.goog.create
certificateissuers.pki.security.gdc.goog.delete
certificateissuers.pki.security.gdc.goog.get
certificateissuers.pki.security.gdc.goog.list
certificateissuers.pki.security.gdc.goog.patch
certificateissuers.pki.security.gdc.goog.update
certificateissuers.pki.security.gdc.goog.watch
certificates.pki.security.gdc.goog.create
certificates.pki.security.gdc.goog.delete
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.patch
certificates.pki.security.gdc.goog.update
certificates.pki.security.gdc.goog.watch
Lecteur du service de certificats
(certificate-service-viewer)

Affiche les certificats et les émetteurs de certificats.

Zonal
certificateissuers.pki.security.gdc.goog.get
certificateissuers.pki.security.gdc.goog.list
certificateissuers.pki.security.gdc.goog.watch
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.watch
Développeur Cloud NAT
(cloud-nat-developer)

Peut effectuer des opérations CRUD sur les ressources Cloud NAT du projet.

Zonal
cloudnatgateways.networking.gdc.goog.create
cloudnatgateways.networking.gdc.goog.delete
cloudnatgateways.networking.gdc.goog.get
cloudnatgateways.networking.gdc.goog.list
cloudnatgateways.networking.gdc.goog.patch
cloudnatgateways.networking.gdc.goog.update
cloudnatgateways.networking.gdc.goog.watch
Cloud NAT Manager
(cloud-nat-manager)

Peut effectuer des opérations CRUD sur les ressources Cloud NAT du projet.

Zonal
cloudnatgateways.networking.gdc.goog.create
cloudnatgateways.networking.gdc.goog.delete
cloudnatgateways.networking.gdc.goog.get
cloudnatgateways.networking.gdc.goog.list
cloudnatgateways.networking.gdc.goog.patch
cloudnatgateways.networking.gdc.goog.update
cloudnatgateways.networking.gdc.goog.watch
Lecteur Cloud NAT
(cloud-nat-viewer)

Peut afficher les ressources/l'état Cloud NAT dans le projet

Zonal
cloudnatgateways.networking.gdc.goog.get
cloudnatgateways.networking.gdc.goog.list
cloudnatgateways.networking.gdc.goog.watch
Utilisateur de la sauvegarde de cluster
(clusterbackup-user)

Accorde l'accès en lecture aux plans de sauvegarde et de restauration des clusters, et l'accès complet aux sauvegardes et restaurations des clusters.

Zonal
clusterbackupplans.backup.gdc.goog.get
clusterbackupplans.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.watch
clusterbackups.backup.gdc.goog.get
clusterbackups.backup.gdc.goog.list
clusterbackups.backup.gdc.goog.watch
clusterrestoreplans.backup.gdc.goog.get
clusterrestoreplans.backup.gdc.goog.list
clusterrestoreplans.backup.gdc.goog.watch
clusterrestores.backup.gdc.goog.get
clusterrestores.backup.gdc.goog.list
clusterrestores.backup.gdc.goog.watch
manualclusterbackuprequest.backup.gdc.goog.create
manualclusterbackuprequest.backup.gdc.goog.delete
manualclusterbackuprequest.backup.gdc.goog.get
manualclusterbackuprequest.backup.gdc.goog.list
manualclusterbackuprequest.backup.gdc.goog.patch
manualclusterbackuprequest.backup.gdc.goog.update
manualclusterbackuprequest.backup.gdc.goog.watch
manualclusterrestorerequest.backup.gdc.goog.create
manualclusterrestorerequest.backup.gdc.goog.delete
manualclusterrestorerequest.backup.gdc.goog.get
manualclusterrestorerequest.backup.gdc.goog.list
manualclusterrestorerequest.backup.gdc.goog.patch
manualclusterrestorerequest.backup.gdc.goog.update
manualclusterrestorerequest.backup.gdc.goog.watch
Lecteur de sauvegardes de cluster
(clusterbackup-viewer)

Accorde un accès en lecture aux sauvegardes, aux restaurations, aux plans de sauvegarde et aux plans de restauration de clusters.

Zonal
clusterbackupplans.backup.gdc.goog.get
clusterbackupplans.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.watch
clusterbackups.backup.gdc.goog.get
clusterbackups.backup.gdc.goog.list
clusterbackups.backup.gdc.goog.watch
clusterrestoreplans.backup.gdc.goog.get
clusterrestoreplans.backup.gdc.goog.list
clusterrestoreplans.backup.gdc.goog.watch
clusterrestores.backup.gdc.goog.get
clusterrestores.backup.gdc.goog.list
clusterrestores.backup.gdc.goog.watch
manualclusterbackuprequest.backup.gdc.goog.get
manualclusterbackuprequest.backup.gdc.goog.list
manualclusterbackuprequest.backup.gdc.goog.watch
manualclusterrestorerequest.backup.gdc.goog.get
manualclusterrestorerequest.backup.gdc.goog.list
manualclusterrestorerequest.backup.gdc.goog.watch
Administrateur de projet avec rôle personnalisé
(custom-role-project-admin)

Gère les rôles personnalisés dans les espaces de noms du projet.

Monde
customroles.iam.global.gdc.goog.create
customroles.iam.global.gdc.goog.delete
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.patch
customroles.iam.global.gdc.goog.update
customroles.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
roles.rbac.authorization.k8s.io.get

Zonal
customroles.iam.gdc.goog.create
customroles.iam.gdc.goog.delete
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.patch
customroles.iam.gdc.goog.update
customroles.iam.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.get
roles.rbac.authorization.k8s.io.get
Lecteur de projet avec rôle personnalisé
(custom-role-project-viewer)

Affiche les rôles personnalisés dans les espaces de noms du projet.

Monde
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
roles.rbac.authorization.k8s.io.get

Zonal
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.get
roles.rbac.authorization.k8s.io.get
Éditeur de tableaux de bord
(dashboard-editor)

Modifie les tableaux de bord.

Zonal
configmaps.create
configmaps.delete
configmaps.get
configmaps.list
configmaps.patch
configmaps.update
configmaps.watch
dashboards.observability.gdc.goog.delete
dashboards.observability.gdc.goog.get
dashboards.observability.gdc.goog.list
dashboards.observability.gdc.goog.patch
dashboards.observability.gdc.goog.update
dashboards.observability.gdc.goog.watch
Lecteur de tableaux de bord
(dashboard-viewer)

Permet d'afficher les tableaux de bord.

Zonal
dashboards.observability.gdc.goog.get
dashboards.observability.gdc.goog.list
dashboards.observability.gdc.goog.watch
Administrateur de projet de base de données
(project-db-admin)

Gère les ressources de la base de données de projets mondiaux.

Monde
backupplans.alloydbomni.dbadmin.gdc.goog.create
backupplans.alloydbomni.dbadmin.gdc.goog.delete
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.patch
backupplans.alloydbomni.dbadmin.gdc.goog.update
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.create
backupplans.oracle.dbadmin.gdc.goog.delete
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.patch
backupplans.oracle.dbadmin.gdc.goog.update
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.create
backupplans.postgresql.dbadmin.gdc.goog.delete
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.patch
backupplans.postgresql.dbadmin.gdc.goog.update
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.create
dbclusters.alloydbomni.dbadmin.gdc.goog.delete
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.patch
dbclusters.alloydbomni.dbadmin.gdc.goog.update
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.create
dbclusters.oracle.dbadmin.gdc.goog.delete
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.patch
dbclusters.oracle.dbadmin.gdc.goog.update
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.create
dbclusters.postgresql.dbadmin.gdc.goog.delete
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.patch
dbclusters.postgresql.dbadmin.gdc.goog.update
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.create
exports.alloydbomni.dbadmin.gdc.goog.delete
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.create
exports.oracle.dbadmin.gdc.goog.delete
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.create
exports.postgresql.dbadmin.gdc.goog.delete
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.create
externalservers.alloydbomni.dbadmin.gdc.goog.delete
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.patch
externalservers.alloydbomni.dbadmin.gdc.goog.update
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.create
externalservers.postgresql.dbadmin.gdc.goog.delete
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.patch
externalservers.postgresql.dbadmin.gdc.goog.update
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.create
failovers.fleet.dbadmin.gdc.goog.delete
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.create
imports.alloydbomni.dbadmin.gdc.goog.delete
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.create
imports.oracle.dbadmin.gdc.goog.delete
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.create
imports.postgresql.dbadmin.gdc.goog.delete
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.create
migrations.alloydbomni.dbadmin.gdc.goog.delete
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.patch
migrations.alloydbomni.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.create
migrations.postgresql.dbadmin.gdc.goog.delete
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.patch
migrations.postgresql.dbadmin.gdc.goog.update
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.create
replications.postgresql.dbadmin.gdc.goog.delete
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.patch
replications.postgresql.dbadmin.gdc.goog.update
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.create
restores.alloydbomni.dbadmin.gdc.goog.delete
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.create
restores.oracle.dbadmin.gdc.goog.delete
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.create
restores.postgresql.dbadmin.gdc.goog.delete
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.update

Zonal
backupplans.alloydbomni.dbadmin.gdc.goog.create
backupplans.alloydbomni.dbadmin.gdc.goog.delete
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.patch
backupplans.alloydbomni.dbadmin.gdc.goog.update
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.create
backupplans.oracle.dbadmin.gdc.goog.delete
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.patch
backupplans.oracle.dbadmin.gdc.goog.update
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.create
backupplans.postgresql.dbadmin.gdc.goog.delete
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.patch
backupplans.postgresql.dbadmin.gdc.goog.update
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.create
dbclusters.alloydbomni.dbadmin.gdc.goog.delete
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.patch
dbclusters.alloydbomni.dbadmin.gdc.goog.update
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.create
dbclusters.oracle.dbadmin.gdc.goog.delete
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.patch
dbclusters.oracle.dbadmin.gdc.goog.update
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.create
dbclusters.postgresql.dbadmin.gdc.goog.delete
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.patch
dbclusters.postgresql.dbadmin.gdc.goog.update
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.create
exports.alloydbomni.dbadmin.gdc.goog.delete
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.create
exports.oracle.dbadmin.gdc.goog.delete
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.create
exports.postgresql.dbadmin.gdc.goog.delete
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.create
externalservers.alloydbomni.dbadmin.gdc.goog.delete
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.patch
externalservers.alloydbomni.dbadmin.gdc.goog.update
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.create
externalservers.postgresql.dbadmin.gdc.goog.delete
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.patch
externalservers.postgresql.dbadmin.gdc.goog.update
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.create
failovers.fleet.dbadmin.gdc.goog.delete
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.create
imports.alloydbomni.dbadmin.gdc.goog.delete
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.create
imports.oracle.dbadmin.gdc.goog.delete
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.create
imports.postgresql.dbadmin.gdc.goog.delete
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.create
migrations.alloydbomni.dbadmin.gdc.goog.delete
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.patch
migrations.alloydbomni.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.create
migrations.postgresql.dbadmin.gdc.goog.delete
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.patch
migrations.postgresql.dbadmin.gdc.goog.update
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.create
replications.postgresql.dbadmin.gdc.goog.delete
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.patch
replications.postgresql.dbadmin.gdc.goog.update
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.create
restores.alloydbomni.dbadmin.gdc.goog.delete
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.create
restores.oracle.dbadmin.gdc.goog.delete
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.create
restores.postgresql.dbadmin.gdc.goog.delete
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.update
Éditeur de projet de base de données
(project-db-editor)

Modifie les ressources de la base de données du projet global.

Monde
gkebackup.backupPlans.getIamPolicy
gkebackup.backupPlans.list
gkebackup.backupPlans.watch
gkebackup.backups.get
gkebackup.backups.list
gkebackup.backups.watch
gkebackup.restores.get
gkebackup.restores.list
gkebackup.restores.watch
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.patch
dbclusters.alloydbomni.dbadmin.gdc.goog.update
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.patch
dbclusters.oracle.dbadmin.gdc.goog.update
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.patch
dbclusters.postgresql.dbadmin.gdc.goog.update
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.create
exports.alloydbomni.dbadmin.gdc.goog.delete
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.create
exports.oracle.dbadmin.gdc.goog.delete
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.create
exports.postgresql.dbadmin.gdc.goog.delete
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.create
externalservers.alloydbomni.dbadmin.gdc.goog.delete
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.patch
externalservers.alloydbomni.dbadmin.gdc.goog.update
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.create
externalservers.postgresql.dbadmin.gdc.goog.delete
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.patch
externalservers.postgresql.dbadmin.gdc.goog.update
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.create
failovers.fleet.dbadmin.gdc.goog.delete
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.create
imports.alloydbomni.dbadmin.gdc.goog.delete
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.create
imports.oracle.dbadmin.gdc.goog.delete
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.create
imports.postgresql.dbadmin.gdc.goog.delete
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.patch
migrations.alloydbomni.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.patch
migrations.postgresql.dbadmin.gdc.goog.update
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.patch
replications.postgresql.dbadmin.gdc.goog.update
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.update

Zonal
gkebackup.backupPlans.getIamPolicy
gkebackup.backupPlans.list
gkebackup.backupPlans.watch
gkebackup.backups.get
gkebackup.backups.list
gkebackup.backups.watch
gkebackup.restores.get
gkebackup.restores.list
gkebackup.restores.watch
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.patch
dbclusters.alloydbomni.dbadmin.gdc.goog.update
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.patch
dbclusters.oracle.dbadmin.gdc.goog.update
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.patch
dbclusters.postgresql.dbadmin.gdc.goog.update
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.create
exports.alloydbomni.dbadmin.gdc.goog.delete
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.create
exports.oracle.dbadmin.gdc.goog.delete
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.create
exports.postgresql.dbadmin.gdc.goog.delete
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.create
externalservers.alloydbomni.dbadmin.gdc.goog.delete
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.patch
externalservers.alloydbomni.dbadmin.gdc.goog.update
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.create
externalservers.postgresql.dbadmin.gdc.goog.delete
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.patch
externalservers.postgresql.dbadmin.gdc.goog.update
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.create
failovers.fleet.dbadmin.gdc.goog.delete
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.create
imports.alloydbomni.dbadmin.gdc.goog.delete
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.create
imports.oracle.dbadmin.gdc.goog.delete
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.create
imports.postgresql.dbadmin.gdc.goog.delete
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.patch
migrations.alloydbomni.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.patch
migrations.postgresql.dbadmin.gdc.goog.update
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.patch
replications.postgresql.dbadmin.gdc.goog.update
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.update
Lecteur de projets de base de données
(project-db-viewer)

Affiche les ressources de la base de données de projet globale.

Monde
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.get
secrets.list

Zonal
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.get
secrets.list
Lecteur de l'équilibreur de charge externe
(external-load-balancer-viewer)

Affiche les ressources d'équilibreur de charge externe dans un projet.

Monde
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.watch
forwardingruleexternals.networking.global.gdc.goog.get
forwardingruleexternals.networking.global.gdc.goog.list
forwardingruleexternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.watch
forwardingruleexternals.networking.gdc.goog.get
forwardingruleexternals.networking.gdc.goog.list
forwardingruleexternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.watch
Administrateur de projet File Share
(project-fileshare-admin)

Gérez les partages de fichiers, les liaisons de groupes d'exportation et les groupes d'exportation.

Zonal
exportgroupbindings.file.gdc.goog.create
exportgroupbindings.file.gdc.goog.delete
exportgroupbindings.file.gdc.goog.get
exportgroupbindings.file.gdc.goog.list
exportgroupbindings.file.gdc.goog.patch
exportgroupbindings.file.gdc.goog.update
exportgroupbindings.file.gdc.goog.watch
exportgroups.file.gdc.goog.create
exportgroups.file.gdc.goog.delete
exportgroups.file.gdc.goog.get
exportgroups.file.gdc.goog.list
exportgroups.file.gdc.goog.patch
exportgroups.file.gdc.goog.update
exportgroups.file.gdc.goog.watch
fileshares.file.gdc.goog.create
fileshares.file.gdc.goog.delete
fileshares.file.gdc.goog.get
fileshares.file.gdc.goog.list
fileshares.file.gdc.goog.patch
fileshares.file.gdc.goog.update
fileshares.file.gdc.goog.watch
Lecteur de projets File Share
(project-fileshare-viewer)

Afficher les partages de fichiers, les liaisons de groupes d'exportation et les groupes d'exportation

Zonal
exportgroupbindings.file.gdc.goog.get
exportgroupbindings.file.gdc.goog.list
exportgroupbindings.file.gdc.goog.watch
exportgroups.file.gdc.goog.get
exportgroups.file.gdc.goog.list
exportgroups.file.gdc.goog.watch
fileshares.file.gdc.goog.get
fileshares.file.gdc.goog.list
fileshares.file.gdc.goog.watch
Administrateur de l'équilibreur de charge externe global
(external-load-balancer-admin)

Crée et gère les ressources d'équilibreur de charge externe global dans un projet global.

Monde
backendservicepolicies.networking.global.gdc.goog.create
backendservicepolicies.networking.global.gdc.goog.delete
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.patch
backendservicepolicies.networking.global.gdc.goog.update
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.create
backendservices.networking.global.gdc.goog.delete
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.patch
backendservices.networking.global.gdc.goog.update
backendservices.networking.global.gdc.goog.watch
forwardingruleexternals.networking.global.gdc.goog.create
forwardingruleexternals.networking.global.gdc.goog.delete
forwardingruleexternals.networking.global.gdc.goog.get
forwardingruleexternals.networking.global.gdc.goog.list
forwardingruleexternals.networking.global.gdc.goog.patch
forwardingruleexternals.networking.global.gdc.goog.update
forwardingruleexternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.create
healthchecks.networking.global.gdc.goog.delete
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.patch
healthchecks.networking.global.gdc.goog.update
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.create
backends.networking.gdc.goog.delete
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.patch
backends.networking.gdc.goog.update
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.create
backendservicepolicies.networking.gdc.goog.delete
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.patch
backendservicepolicies.networking.gdc.goog.update
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.create
backendservices.networking.gdc.goog.delete
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.patch
backendservices.networking.gdc.goog.update
backendservices.networking.gdc.goog.watch
forwardingruleexternals.networking.gdc.goog.create
forwardingruleexternals.networking.gdc.goog.delete
forwardingruleexternals.networking.gdc.goog.get
forwardingruleexternals.networking.gdc.goog.list
forwardingruleexternals.networking.gdc.goog.patch
forwardingruleexternals.networking.gdc.goog.update
forwardingruleexternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.create
healthchecks.networking.gdc.goog.delete
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.patch
healthchecks.networking.gdc.goog.update
healthchecks.networking.gdc.goog.watch
Administrateur de l'équilibreur de charge interne mondial
(internal-load-balancer-admin)

Crée et gère les ressources d'équilibreur de charge interne global dans un projet global.

Monde
backendservicepolicies.networking.global.gdc.goog.create
backendservicepolicies.networking.global.gdc.goog.delete
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.patch
backendservicepolicies.networking.global.gdc.goog.update
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.create
backendservices.networking.global.gdc.goog.delete
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.patch
backendservices.networking.global.gdc.goog.update
backendservices.networking.global.gdc.goog.watch
forwardingruleinternals.networking.global.gdc.goog.create
forwardingruleinternals.networking.global.gdc.goog.delete
forwardingruleinternals.networking.global.gdc.goog.get
forwardingruleinternals.networking.global.gdc.goog.list
forwardingruleinternals.networking.global.gdc.goog.patch
forwardingruleinternals.networking.global.gdc.goog.update
forwardingruleinternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.create
healthchecks.networking.global.gdc.goog.delete
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.patch
healthchecks.networking.global.gdc.goog.update
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.create
backends.networking.gdc.goog.delete
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.patch
backends.networking.gdc.goog.update
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.create
backendservicepolicies.networking.gdc.goog.delete
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.patch
backendservicepolicies.networking.gdc.goog.update
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.create
backendservices.networking.gdc.goog.delete
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.patch
backendservices.networking.gdc.goog.update
backendservices.networking.gdc.goog.watch
forwardingruleinternals.networking.gdc.goog.create
forwardingruleinternals.networking.gdc.goog.delete
forwardingruleinternals.networking.gdc.goog.get
forwardingruleinternals.networking.gdc.goog.list
forwardingruleinternals.networking.gdc.goog.patch
forwardingruleinternals.networking.gdc.goog.update
forwardingruleinternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.create
healthchecks.networking.gdc.goog.delete
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.patch
healthchecks.networking.gdc.goog.update
healthchecks.networking.gdc.goog.watch
Lecteur d'équilibreur de charge interne mondial
(internal-load-balancer-viewer)

Affiche les ressources d'équilibreur de charge interne mondial dans un projet mondial.

Monde
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.watch
forwardingruleinternals.networking.global.gdc.goog.get
forwardingruleinternals.networking.global.gdc.goog.list
forwardingruleinternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.watch
forwardingruleinternals.networking.gdc.goog.get
forwardingruleinternals.networking.gdc.goog.list
forwardingruleinternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.watch
Développeur d'équilibreur de charge mondial
(load-balancer-developer)

Crée et gère les vérifications de l'état et les services de backend des équilibreurs de charge mondiaux dans un projet mondial.

Monde
backendservicepolicies.networking.global.gdc.goog.create
backendservicepolicies.networking.global.gdc.goog.delete
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.patch
backendservicepolicies.networking.global.gdc.goog.update
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.create
backendservices.networking.global.gdc.goog.delete
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.patch
backendservices.networking.global.gdc.goog.update
backendservices.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.create
healthchecks.networking.global.gdc.goog.delete
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.patch
healthchecks.networking.global.gdc.goog.update
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.create
backends.networking.gdc.goog.delete
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.patch
backends.networking.gdc.goog.update
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.create
backendservicepolicies.networking.gdc.goog.delete
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.patch
backendservicepolicies.networking.gdc.goog.update
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.create
backendservices.networking.gdc.goog.delete
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.patch
backendservices.networking.gdc.goog.update
backendservices.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.create
healthchecks.networking.gdc.goog.delete
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.patch
healthchecks.networking.gdc.goog.update
healthchecks.networking.gdc.goog.watch
Suppresseur de clés MZAEAD mondiales
(global-mzaeadkey-deleter)

Supprime les clés MZAEADKeys de son projet.

Monde
mzaeadkeys.kms.global.gdc.goog.delete
mzaeadkeys.kms.global.gdc.goog.get
mzaeadkeys.kms.global.gdc.goog.list
mzaeadkeys.kms.global.gdc.goog.watch
Administrateur d'instances Harbor
(harbor-instance-admin)

Gère les instances, les projets et les sauvegardes Harbor.

Zonal
harborinstancebackupplans.artifactregistry.gdc.goog.create
harborinstancebackupplans.artifactregistry.gdc.goog.delete
harborinstancebackupplans.artifactregistry.gdc.goog.get
harborinstancebackupplans.artifactregistry.gdc.goog.list
harborinstancebackupplans.artifactregistry.gdc.goog.patch
harborinstancebackupplans.artifactregistry.gdc.goog.update
harborinstancebackupplans.artifactregistry.gdc.goog.watch
harborinstancebackuprepositories.artifactregistry.gdc.goog.create
harborinstancebackuprepositories.artifactregistry.gdc.goog.delete
harborinstancebackuprepositories.artifactregistry.gdc.goog.get
harborinstancebackuprepositories.artifactregistry.gdc.goog.list
harborinstancebackuprepositories.artifactregistry.gdc.goog.patch
harborinstancebackuprepositories.artifactregistry.gdc.goog.update
harborinstancebackuprepositories.artifactregistry.gdc.goog.watch
harborinstancebackups.artifactregistry.gdc.goog.create
harborinstancebackups.artifactregistry.gdc.goog.delete
harborinstancebackups.artifactregistry.gdc.goog.get
harborinstancebackups.artifactregistry.gdc.goog.list
harborinstancebackups.artifactregistry.gdc.goog.patch
harborinstancebackups.artifactregistry.gdc.goog.update
harborinstancebackups.artifactregistry.gdc.goog.watch
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.create
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.delete
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.get
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.list
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.patch
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.update
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.watch
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.create
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.delete
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.get
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.list
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.patch
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.update
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.watch
harborinstanceprojects.artifactregistry.gdc.goog.create
harborinstanceprojects.artifactregistry.gdc.goog.get
harborinstanceprojects.artifactregistry.gdc.goog.patch
harborinstanceprojects.artifactregistry.gdc.goog.update
harborinstanceprojects.artifactregistry.gdc.goog.watch
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.create
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.delete
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.get
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.list
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.patch
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.update
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.watch
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.create
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.delete
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.get
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.list
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.patch
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.update
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.watch
harborinstancerestores.artifactregistry.gdc.goog.create
harborinstancerestores.artifactregistry.gdc.goog.delete
harborinstancerestores.artifactregistry.gdc.goog.get
harborinstancerestores.artifactregistry.gdc.goog.list
harborinstancerestores.artifactregistry.gdc.goog.patch
harborinstancerestores.artifactregistry.gdc.goog.update
harborinstancerestores.artifactregistry.gdc.goog.watch
harborinstances.artifactregistry.gdc.goog.create
harborinstances.artifactregistry.gdc.goog.delete
harborinstances.artifactregistry.gdc.goog.get
harborinstances.artifactregistry.gdc.goog.list
harborinstances.artifactregistry.gdc.goog.patch
harborinstances.artifactregistry.gdc.goog.update
harborinstances.artifactregistry.gdc.goog.watch
Lecteur d'instances Harbor
(harbor-instance-viewer)

Affiche les instances, les projets et les sauvegardes Harbor.

Zonal
harborinstancebackupplans.artifactregistry.gdc.goog.get
harborinstancebackupplans.artifactregistry.gdc.goog.list
harborinstancebackupplans.artifactregistry.gdc.goog.watch
harborinstancebackuprepositories.artifactregistry.gdc.goog.get
harborinstancebackuprepositories.artifactregistry.gdc.goog.list
harborinstancebackuprepositories.artifactregistry.gdc.goog.watch
harborinstancebackups.artifactregistry.gdc.goog.get
harborinstancebackups.artifactregistry.gdc.goog.list
harborinstancebackups.artifactregistry.gdc.goog.watch
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.get
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.list
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.get
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.list
harborinstanceprojects.artifactregistry.gdc.goog.get
harborinstanceprojects.artifactregistry.gdc.goog.watch
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.get
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.list
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.get
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.list
harborinstancerestores.artifactregistry.gdc.goog.get
harborinstancerestores.artifactregistry.gdc.goog.list
harborinstancerestores.artifactregistry.gdc.goog.watch
harborinstances.artifactregistry.gdc.goog.get
harborinstances.artifactregistry.gdc.goog.list
harborinstances.artifactregistry.gdc.goog.watch
Créateur de projet Harbor
(harbor-project-creator)

Crée et affiche les projets d'instance Harbor.

Zonal
harborinstanceprojects.artifactregistry.gdc.goog.create
harborinstanceprojects.artifactregistry.gdc.goog.get
harborinstanceprojects.artifactregistry.gdc.goog.watch
Administrateur de projet IAM
(project-iam-admin)

Gère les autorisations du projet.

Monde
customroles.iam.global.gdc.goog.create
customroles.iam.global.gdc.goog.delete
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.patch
customroles.iam.global.gdc.goog.update
customroles.iam.global.gdc.goog.watch
iamrolebindings.iam.global.gdc.goog.create
iamrolebindings.iam.global.gdc.goog.delete
iamrolebindings.iam.global.gdc.goog.get
iamrolebindings.iam.global.gdc.goog.list
iamrolebindings.iam.global.gdc.goog.patch
iamrolebindings.iam.global.gdc.goog.update
iamrolebindings.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.create
iamroles.iam.global.gdc.goog.delete
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
iamroles.iam.global.gdc.goog.patch
iamroles.iam.global.gdc.goog.update
iamroles.iam.global.gdc.goog.watch
projectserviceaccounts.resourcemanager.global.gdc.goog.create
projectserviceaccounts.resourcemanager.global.gdc.goog.delete
projectserviceaccounts.resourcemanager.global.gdc.goog.get
projectserviceaccounts.resourcemanager.global.gdc.goog.list
projectserviceaccounts.resourcemanager.global.gdc.goog.patch
projectserviceaccounts.resourcemanager.global.gdc.goog.update
rolebindings.rbac.authorization.k8s.io.create
rolebindings.rbac.authorization.k8s.io.delete
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.patch
rolebindings.rbac.authorization.k8s.io.update
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.create
roles.rbac.authorization.k8s.io.delete
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.patch
roles.rbac.authorization.k8s.io.update
roles.rbac.authorization.k8s.io.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
customroles.iam.gdc.goog.create
customroles.iam.gdc.goog.delete
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.patch
customroles.iam.gdc.goog.update
customroles.iam.gdc.goog.watch
projectrolebindings.resourcemanager.gdc.goog.create
projectrolebindings.resourcemanager.gdc.goog.delete
projectrolebindings.resourcemanager.gdc.goog.get
projectrolebindings.resourcemanager.gdc.goog.list
projectrolebindings.resourcemanager.gdc.goog.patch
projectrolebindings.resourcemanager.gdc.goog.update
projectrolebindings.resourcemanager.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.create
projectroles.resourcemanager.gdc.goog.delete
projectroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.list
projectroles.resourcemanager.gdc.goog.patch
projectroles.resourcemanager.gdc.goog.update
projectroles.resourcemanager.gdc.goog.watch
projectserviceaccounts.resourcemanager.gdc.goog.create
projectserviceaccounts.resourcemanager.gdc.goog.delete
projectserviceaccounts.resourcemanager.gdc.goog.get
projectserviceaccounts.resourcemanager.gdc.goog.list
projectserviceaccounts.resourcemanager.gdc.goog.patch
projectserviceaccounts.resourcemanager.gdc.goog.update
projectserviceaccounts.resourcemanager.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.create
rolebindings.rbac.authorization.k8s.io.delete
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.patch
rolebindings.rbac.authorization.k8s.io.update
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.create
roles.rbac.authorization.k8s.io.delete
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.patch
roles.rbac.authorization.k8s.io.update
roles.rbac.authorization.k8s.io.watch
standardclusterrolebindings.iam.gdc.goog.create
standardclusterrolebindings.iam.gdc.goog.delete
standardclusterrolebindings.iam.gdc.goog.get
standardclusterrolebindings.iam.gdc.goog.list
standardclusterrolebindings.iam.gdc.goog.patch
standardclusterrolebindings.iam.gdc.goog.update
standardclusterrolebindings.iam.gdc.goog.watch
standardclusterroles.iam.gdc.goog.create
standardclusterroles.iam.gdc.goog.delete
standardclusterroles.iam.gdc.goog.get
standardclusterroles.iam.gdc.goog.list
standardclusterroles.iam.gdc.goog.patch
standardclusterroles.iam.gdc.goog.update
standardclusterroles.iam.gdc.goog.watch
Lecteur de projet IAM
(project-iam-viewer)

Affiche les autorisations du projet.

Monde
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.watch
iamrolebindings.iam.global.gdc.goog.get
iamrolebindings.iam.global.gdc.goog.list
iamrolebindings.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
iamroles.iam.global.gdc.goog.watch
projectserviceaccounts.resourcemanager.global.gdc.goog.get
projectserviceaccounts.resourcemanager.global.gdc.goog.list
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.watch
projectrolebindings.resourcemanager.gdc.goog.get
projectrolebindings.resourcemanager.gdc.goog.list
projectrolebindings.resourcemanager.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.list
projectroles.resourcemanager.gdc.goog.watch
projectserviceaccounts.resourcemanager.gdc.goog.get
projectserviceaccounts.resourcemanager.gdc.goog.list
projectserviceaccounts.resourcemanager.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch
standardclusterrolebindings.iam.gdc.goog.get
standardclusterrolebindings.iam.gdc.goog.list
standardclusterrolebindings.iam.gdc.goog.watch
standardclusterroles.iam.gdc.goog.get
standardclusterroles.iam.gdc.goog.list
standardclusterroles.iam.gdc.goog.watch
Administrateur de règles réseau K8S
(k8s-networkpolicy-admin)

Créez et gérez des règles de réseau k8s.

Cluster Kubernetes
networkpolicies.networking.k8s.io.create
networkpolicies.networking.k8s.io.delete
networkpolicies.networking.k8s.io.get
networkpolicies.networking.k8s.io.list
networkpolicies.networking.k8s.io.patch
networkpolicies.networking.k8s.io.update
networkpolicies.networking.k8s.io.watch
Lecteur de règles de réseau K8S
(k8s-networkpolicy-viewer)

Affichez les règles de réseau k8s.

Cluster Kubernetes
networkpolicies.networking.k8s.io.get
networkpolicies.networking.k8s.io.list
networkpolicies.networking.k8s.io.watch
Administrateur KMS
(kms-admin)

Gère les clés KMS dans son projet et lit les importations et exportations de clés.

Zonal
aeadkeys.kms.gdc.goog.create
aeadkeys.kms.gdc.goog.decrypt
aeadkeys.kms.gdc.goog.delete
aeadkeys.kms.gdc.goog.encrypt
aeadkeys.kms.gdc.goog.generatedatakey
aeadkeys.kms.gdc.goog.get
aeadkeys.kms.gdc.goog.list
aeadkeys.kms.gdc.goog.patch
aeadkeys.kms.gdc.goog.update
aeadkeys.kms.gdc.goog.watch
keyexports.kms.gdc.goog.get
keyexports.kms.gdc.goog.list
keyexports.kms.gdc.goog.watch
keyimports.kms.gdc.goog.get
keyimports.kms.gdc.goog.list
keyimports.kms.gdc.goog.watch
signingkeys.kms.gdc.goog.create
signingkeys.kms.gdc.goog.delete
signingkeys.kms.gdc.goog.get
signingkeys.kms.gdc.goog.list
signingkeys.kms.gdc.goog.patch
signingkeys.kms.gdc.goog.sign
signingkeys.kms.gdc.goog.update
signingkeys.kms.gdc.goog.watch
Créateur KMS
(kms-creator)

Crée et lit les clés KMS dans son projet.

Zonal
aeadkeys.kms.gdc.goog.create
aeadkeys.kms.gdc.goog.get
aeadkeys.kms.gdc.goog.list
aeadkeys.kms.gdc.goog.watch
signingkeys.kms.gdc.goog.create
signingkeys.kms.gdc.goog.get
signingkeys.kms.gdc.goog.list
signingkeys.kms.gdc.goog.watch
Développeur KMS
(kms-developer)

Effectue des opérations de chiffrement à l'aide de clés KMS dans son projet.

Zonal
aeadkeys.kms.gdc.goog.decrypt
aeadkeys.kms.gdc.goog.encrypt
aeadkeys.kms.gdc.goog.generatedatakey
aeadkeys.kms.gdc.goog.get
aeadkeys.kms.gdc.goog.list
aeadkeys.kms.gdc.goog.watch
signingkeys.kms.gdc.goog.get
signingkeys.kms.gdc.goog.list
signingkeys.kms.gdc.goog.sign
signingkeys.kms.gdc.goog.watch
Administrateur de l'exportation de clés KMS
(kms-keyexport-admin)

Exporte les clés KMS de leur projet en tant que clés encapsulées depuis KMS.

Zonal
keyexports.kms.gdc.goog.create
keyexports.kms.gdc.goog.delete
keyexports.kms.gdc.goog.get
keyexports.kms.gdc.goog.list
keyexports.kms.gdc.goog.patch
keyexports.kms.gdc.goog.update
keyexports.kms.gdc.goog.watch
Administrateur de l'importation de clés KMS
(kms-keyimport-admin)

Importe les clés KMS dans KMS en tant que clés encapsulées dans leur projet.

Zonal
keyimports.kms.gdc.goog.create
keyimports.kms.gdc.goog.delete
keyimports.kms.gdc.goog.get
keyimports.kms.gdc.goog.list
keyimports.kms.gdc.goog.patch
keyimports.kms.gdc.goog.update
keyimports.kms.gdc.goog.watch
Lecteur KMS
(kms-viewer)

Lit les clés KMS dans leur projet.

Zonal
aeadkeys.kms.gdc.goog.get
aeadkeys.kms.gdc.goog.list
aeadkeys.kms.gdc.goog.watch
keyexports.kms.gdc.goog.get
keyexports.kms.gdc.goog.list
keyexports.kms.gdc.goog.watch
keyimports.kms.gdc.goog.get
keyimports.kms.gdc.goog.list
keyimports.kms.gdc.goog.watch
signingkeys.kms.gdc.goog.get
signingkeys.kms.gdc.goog.list
signingkeys.kms.gdc.goog.watch
Utilisateur LibraryAgent
(libraryagent-user)

Autoriser les clients à utiliser les API du service de démonstration Libraryagent

Zonal
shelves.cloudresourcemanager.googleapis.com.list
shelves.libraryagent.api.v1alpha1.get
Administrateur de l'équilibreur de charge
(load-balancer-admin)

Administrateur de l'équilibrage de charge

Monde
backendservicepolicies.networking.global.gdc.goog.create
backendservicepolicies.networking.global.gdc.goog.delete
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.patch
backendservicepolicies.networking.global.gdc.goog.update
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.create
backendservices.networking.global.gdc.goog.delete
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.patch
backendservices.networking.global.gdc.goog.update
backendservices.networking.global.gdc.goog.watch
forwardingruleexternals.networking.global.gdc.goog.create
forwardingruleexternals.networking.global.gdc.goog.delete
forwardingruleexternals.networking.global.gdc.goog.get
forwardingruleexternals.networking.global.gdc.goog.list
forwardingruleexternals.networking.global.gdc.goog.patch
forwardingruleexternals.networking.global.gdc.goog.update
forwardingruleexternals.networking.global.gdc.goog.watch
forwardingruleinternals.networking.global.gdc.goog.create
forwardingruleinternals.networking.global.gdc.goog.delete
forwardingruleinternals.networking.global.gdc.goog.get
forwardingruleinternals.networking.global.gdc.goog.list
forwardingruleinternals.networking.global.gdc.goog.patch
forwardingruleinternals.networking.global.gdc.goog.update
forwardingruleinternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.create
healthchecks.networking.global.gdc.goog.delete
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.patch
healthchecks.networking.global.gdc.goog.update
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.create
backends.networking.gdc.goog.delete
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.patch
backends.networking.gdc.goog.update
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.create
backendservicepolicies.networking.gdc.goog.delete
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.patch
backendservicepolicies.networking.gdc.goog.update
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.create
backendservices.networking.gdc.goog.delete
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.patch
backendservices.networking.gdc.goog.update
backendservices.networking.gdc.goog.watch
forwardingruleexternals.networking.gdc.goog.create
forwardingruleexternals.networking.gdc.goog.delete
forwardingruleexternals.networking.gdc.goog.get
forwardingruleexternals.networking.gdc.goog.list
forwardingruleexternals.networking.gdc.goog.patch
forwardingruleexternals.networking.gdc.goog.update
forwardingruleexternals.networking.gdc.goog.watch
forwardingruleinternals.networking.gdc.goog.create
forwardingruleinternals.networking.gdc.goog.delete
forwardingruleinternals.networking.gdc.goog.get
forwardingruleinternals.networking.gdc.goog.list
forwardingruleinternals.networking.gdc.goog.patch
forwardingruleinternals.networking.gdc.goog.update
forwardingruleinternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.create
healthchecks.networking.gdc.goog.delete
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.patch
healthchecks.networking.gdc.goog.update
healthchecks.networking.gdc.goog.watch
Lecteur d'équilibreur de charge
(load-balancer-viewer)

Lecteur de l'équilibreur de charge

Monde
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.watch
forwardingruleexternals.networking.global.gdc.goog.get
forwardingruleexternals.networking.global.gdc.goog.list
forwardingruleexternals.networking.global.gdc.goog.watch
forwardingruleinternals.networking.global.gdc.goog.get
forwardingruleinternals.networking.global.gdc.goog.list
forwardingruleinternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.watch
forwardingruleexternals.networking.gdc.goog.get
forwardingruleexternals.networking.gdc.goog.list
forwardingruleexternals.networking.gdc.goog.watch
forwardingruleinternals.networking.gdc.goog.get
forwardingruleinternals.networking.gdc.goog.list
forwardingruleinternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.watch
Interrogateur de journaux
(log-query-api-querier)

Accédez à l'API Log Query pour interroger les journaux dans le projet AO.

Zonal
labels.goog.gdc.logging.v1.get
labels.goog.gdc.logging.v1.list
labelvalues.goog.gdc.logging.v1.get
labelvalues.goog.gdc.logging.v1.list
listlabelsrequests.goog.gdc.logging.v1.get
listlabelsrequests.goog.gdc.logging.v1.list
listlabelsresponses.goog.gdc.logging.v1.get
listlabelsresponses.goog.gdc.logging.v1.list
listlabelvaluesrequests.goog.gdc.logging.v1.get
listlabelvaluesrequests.goog.gdc.logging.v1.list
listlabelvaluesresponses.goog.gdc.logging.v1.get
listlabelvaluesresponses.goog.gdc.logging.v1.list
listlogsfilters.goog.gdc.logging.v1.get
listlogsfilters.goog.gdc.logging.v1.list
listlogsrequests.goog.gdc.logging.v1.get
listlogsrequests.goog.gdc.logging.v1.list
listlogsresponses.goog.gdc.logging.v1.get
listlogsresponses.goog.gdc.logging.v1.list
logs.goog.gdc.logging.v1.get
logs.goog.gdc.logging.v1.list
Débogueur de ressources cibles pour l'audit de journalisation
(auditloggingtarget-monitor)

Affiche et met à jour les cibles de journalisation des audits.

Zonal
auditloggingtargets.logging.private.gdc.goog.get
auditloggingtargets.logging.private.gdc.goog.list
auditloggingtargets.logging.private.gdc.goog.update
dnsregistrations.network.private.gdc.goog.get
dnsregistrations.network.private.gdc.goog.list
Créateur de règles de journalisation
(loggingrule-creator)

Crée et affiche des règles de journalisation.

Zonal
loggingrules.logging.gdc.goog.create
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.watch
Éditeur de règles de journalisation
(loggingrule-editor)

Modifie les règles de journalisation.

Zonal
loggingrules.logging.gdc.goog.delete
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.patch
loggingrules.logging.gdc.goog.update
loggingrules.logging.gdc.goog.watch
Lecteur de règles de journalisation
(loggingrule-viewer)

Affiche les règles de journalisation.

Zonal
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.watch
Créateur de cibles de journaux
(loggingtarget-creator)

Crée et affiche les cibles de journalisation.

Zonal
loggingtargets.logging.gdc.goog.create
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.watch
Éditeur de cibles de journalisation
(loggingtarget-editor)

Modifie les cibles de journalisation.

Zonal
loggingtargets.logging.gdc.goog.delete
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.patch
loggingtargets.logging.gdc.goog.update
loggingtargets.logging.gdc.goog.watch
Lecteur de cibles de journalisation
(loggingtarget-viewer)

Affiche les cibles de journalisation des vues.

Zonal
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.watch
Éditeur de projet de liaison de stratégie de maintenance
(project-mpb-editor)

Gère les ressources MaintenancePolicyBinding dans le projet.

Zonal
maintenancepolicybindings.maintenance.goog.create
maintenancepolicybindings.maintenance.goog.delete
maintenancepolicybindings.maintenance.goog.get
maintenancepolicybindings.maintenance.goog.list
maintenancepolicybindings.maintenance.goog.patch
maintenancepolicybindings.maintenance.goog.update
maintenancepolicybindings.maintenance.goog.watch
Lecteur de projets de liaison de règles de maintenance
(project-mpb-viewer)

Lit les ressources MaintenancePolicyBinding dans le projet.

Zonal
maintenancepolicybindings.maintenance.goog.get
maintenancepolicybindings.maintenance.goog.list
maintenancepolicybindings.maintenance.goog.watch
Administrateur de projet de règles de maintenance
(project-mp-admin)

Gère les ressources Maintenance Policy et Maintenance Policy Binding dans le projet.

Zonal
maintenancepolicies.maintenance.goog.create
maintenancepolicies.maintenance.goog.delete
maintenancepolicies.maintenance.goog.get
maintenancepolicies.maintenance.goog.list
maintenancepolicies.maintenance.goog.patch
maintenancepolicies.maintenance.goog.update
maintenancepolicies.maintenance.goog.watch
maintenancepolicybindings.maintenance.goog.create
maintenancepolicybindings.maintenance.goog.delete
maintenancepolicybindings.maintenance.goog.get
maintenancepolicybindings.maintenance.goog.list
maintenancepolicybindings.maintenance.goog.patch
maintenancepolicybindings.maintenance.goog.update
maintenancepolicybindings.maintenance.goog.watch
Éditeur de projet de règles de maintenance
(project-mp-editor)

Gère les ressources MaintenancePolicy dans le projet.

Zonal
maintenancepolicies.maintenance.goog.create
maintenancepolicies.maintenance.goog.delete
maintenancepolicies.maintenance.goog.get
maintenancepolicies.maintenance.goog.list
maintenancepolicies.maintenance.goog.patch
maintenancepolicies.maintenance.goog.update
maintenancepolicies.maintenance.goog.watch
Lecteur de projets de règles de maintenance
(project-mp-viewer)

Lit les ressources MaintenancePolicy et Maintenance Policy Binding dans le projet.

Zonal
maintenancepolicies.maintenance.goog.get
maintenancepolicies.maintenance.goog.list
maintenancepolicies.maintenance.goog.watch
Administrateur de projet DNS géré
(managed-dns-project-admin)

Gère tous les aspects des zones DNS gérées et des ensembles d'enregistrements de ressources dans un projet de l'API Global.

Monde
manageddnszones.networking.global.gdc.goog.create
manageddnszones.networking.global.gdc.goog.delete
manageddnszones.networking.global.gdc.goog.get
manageddnszones.networking.global.gdc.goog.list
manageddnszones.networking.global.gdc.goog.patch
manageddnszones.networking.global.gdc.goog.update
manageddnszones.networking.global.gdc.goog.watch
resourcerecordsets.networking.global.gdc.goog.create
resourcerecordsets.networking.global.gdc.goog.delete
resourcerecordsets.networking.global.gdc.goog.get
resourcerecordsets.networking.global.gdc.goog.list
resourcerecordsets.networking.global.gdc.goog.patch
resourcerecordsets.networking.global.gdc.goog.update
resourcerecordsets.networking.global.gdc.goog.watch
Lecteur de projet DNS géré
(managed-dns-project-viewer)

Affiche les zones DNS gérées et les ensembles d'enregistrements de ressources dans un projet de l'API Global.

Monde
manageddnszones.networking.global.gdc.goog.get
manageddnszones.networking.global.gdc.goog.list
resourcerecordsets.networking.global.gdc.goog.get
resourcerecordsets.networking.global.gdc.goog.list
Éditeur de catalogue Marketplace
(marketplace-catalog-editor)

Affiche, liste, crée, met à jour et supprime les catalogues de services.

Monde
servicecatalogs.marketplace.global.gdc.goog.create
servicecatalogs.marketplace.global.gdc.goog.delete
servicecatalogs.marketplace.global.gdc.goog.get
servicecatalogs.marketplace.global.gdc.goog.list
servicecatalogs.marketplace.global.gdc.goog.patch
servicecatalogs.marketplace.global.gdc.goog.update
servicecatalogs.marketplace.global.gdc.goog.watch
Lecteur du catalogue Marketplace
(marketplace-catalog-viewer)

Affiche les catalogues de services.

Monde
projects.resourcemanager.global.gdc.goog.get
projects.resourcemanager.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.watch
servicecatalogbindings.marketplace.global.gdc.goog.get
servicecatalogbindings.marketplace.global.gdc.goog.list
servicecatalogbindings.marketplace.global.gdc.goog.watch
Éditeur Marketplace
(marketplace-editor)

Crée, met à jour et supprime des instances de service.

Zonal
serviceinstances.marketplace.gdc.goog.create
serviceinstances.marketplace.gdc.goog.delete
serviceinstances.marketplace.gdc.goog.get
serviceinstances.marketplace.gdc.goog.list
serviceinstances.marketplace.gdc.goog.patch
serviceinstances.marketplace.gdc.goog.update
serviceinstances.marketplace.gdc.goog.watch
Consommateur de services Marketplace
(marketplace-service-consumer)

Crée, met à jour et supprime des instances de service.

Zonal
serviceinstances.marketplace.gdc.goog.create
serviceinstances.marketplace.gdc.goog.delete
serviceinstances.marketplace.gdc.goog.get
serviceinstances.marketplace.gdc.goog.list
serviceinstances.marketplace.gdc.goog.patch
serviceinstances.marketplace.gdc.goog.update
serviceinstances.marketplace.gdc.goog.watch
Éditeur de services Marketplace
(marketplace-service-editor)

Affiche, liste, crée, modifie et supprime les versions et les descriptions de service.

Monde
servicedescriptions.marketplace.global.gdc.goog.create
servicedescriptions.marketplace.global.gdc.goog.delete
servicedescriptions.marketplace.global.gdc.goog.get
servicedescriptions.marketplace.global.gdc.goog.list
servicedescriptions.marketplace.global.gdc.goog.patch
servicedescriptions.marketplace.global.gdc.goog.update
servicedescriptions.marketplace.global.gdc.goog.watch
serviceversions.marketplace.global.gdc.goog.create
serviceversions.marketplace.global.gdc.goog.delete
serviceversions.marketplace.global.gdc.goog.get
serviceversions.marketplace.global.gdc.goog.list
serviceversions.marketplace.global.gdc.goog.patch
serviceversions.marketplace.global.gdc.goog.update
serviceversions.marketplace.global.gdc.goog.watch

Zonal
servicedescriptions.marketplace.gdc.goog.create
servicedescriptions.marketplace.gdc.goog.delete
servicedescriptions.marketplace.gdc.goog.get
servicedescriptions.marketplace.gdc.goog.list
servicedescriptions.marketplace.gdc.goog.patch
servicedescriptions.marketplace.gdc.goog.update
servicedescriptions.marketplace.gdc.goog.watch
serviceversions.marketplace.gdc.goog.create
serviceversions.marketplace.gdc.goog.delete
serviceversions.marketplace.gdc.goog.get
serviceversions.marketplace.gdc.goog.list
serviceversions.marketplace.gdc.goog.patch
serviceversions.marketplace.gdc.goog.update
serviceversions.marketplace.gdc.goog.watch
Lecteur de services Marketplace
(marketplace-service-viewer)

Affiche et liste les versions de service, les descriptions de service et les catalogues de services.

Monde
servicecatalogs.marketplace.global.gdc.goog.get
servicecatalogs.marketplace.global.gdc.goog.list
servicecatalogs.marketplace.global.gdc.goog.watch
servicedescriptions.marketplace.global.gdc.goog.get
servicedescriptions.marketplace.global.gdc.goog.list
servicedescriptions.marketplace.global.gdc.goog.watch
serviceversions.marketplace.global.gdc.goog.get
serviceversions.marketplace.global.gdc.goog.list
serviceversions.marketplace.global.gdc.goog.watch

Zonal
catalogbundles.marketplaceview.gdc.goog.get
catalogbundles.marketplaceview.gdc.goog.list
catalogbundles.marketplaceview.gdc.goog.watch
servicedescriptions.marketplace.gdc.goog.get
servicedescriptions.marketplace.gdc.goog.list
servicedescriptions.marketplace.gdc.goog.watch
serviceinstances.marketplace.gdc.goog.get
serviceinstances.marketplace.gdc.goog.list
serviceinstances.marketplace.gdc.goog.watch
serviceversions.marketplace.gdc.goog.get
serviceversions.marketplace.gdc.goog.list
serviceversions.marketplace.gdc.goog.watch
Éditeur Alertmanager de projet Monitoring
(project-cortex-alertmanager-editor)

Modifie les règles et l'Alertmanager de Project Cortex.

Zonal
${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.DELETE
${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.GET
${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.POST
loggingrules.logging.gdc.goog.create
loggingrules.logging.gdc.goog.delete
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.patch
loggingrules.logging.gdc.goog.update
loggingrules.monitoring.gdc.goog.create
loggingrules.monitoring.gdc.goog.delete
loggingrules.monitoring.gdc.goog.get
loggingrules.monitoring.gdc.goog.list
loggingrules.monitoring.gdc.goog.patch
loggingrules.monitoring.gdc.goog.update
monitoringrules.monitoring.gdc.goog.create
monitoringrules.monitoring.gdc.goog.delete
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.patch
monitoringrules.monitoring.gdc.goog.update
Lecteur Alertmanager du projet Monitoring
(project-cortex-alertmanager-viewer)

Affiche le projet Cortex Alertmanager.

Zonal
${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.GET
${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.POST
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.monitoring.gdc.goog.get
loggingrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
Lecteur Prometheus du projet Monitoring
(project-cortex-prometheus-viewer)

Gère les métriques et Prometheus du projet Cortex.

Zonal
${.ProjectNamespace}-cortex-system/cortex-metrics.istio.resourcemanager.gdc.goog.GET
${.ProjectNamespace}-cortex-system/cortex-metrics.istio.resourcemanager.gdc.goog.POST
${.ProjectNamespace}-cortex-system/cortex-prometheus.istio.resourcemanager.gdc.goog.GET
${.ProjectNamespace}-cortex-system/cortex-prometheus.istio.resourcemanager.gdc.goog.POST
Éditeur MonitoringRule
(monitoringrule-editor)

Gère les règles de surveillance.

Zonal
monitoringrules.monitoring.gdc.goog.delete
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.patch
monitoringrules.monitoring.gdc.goog.update
monitoringrules.monitoring.gdc.goog.watch
Lecteur MonitoringRule
(monitoringrule-viewer)

Affiche les règles de surveillance.

Zonal
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.watch
Éditeur MonitoringTarget
(monitoringtarget-editor)

Modifie les cibles de surveillance.

Zonal
monitoringtargets.monitoring.gdc.goog.delete
monitoringtargets.monitoring.gdc.goog.get
monitoringtargets.monitoring.gdc.goog.list
monitoringtargets.monitoring.gdc.goog.patch
monitoringtargets.monitoring.gdc.goog.update
monitoringtargets.monitoring.gdc.goog.watch
Lecteur MonitoringTarget
(monitoringtarget-viewer)

Affiche les cibles de surveillance.

Zonal
monitoringtargets.monitoring.gdc.goog.get
monitoringtargets.monitoring.gdc.goog.list
monitoringtargets.monitoring.gdc.goog.watch
Lecteur NAT
(nat-viewer)

Lire les déploiements dans les clusters d'utilisateur.

Cluster Kubernetes
deployments.apps.get
deployments.apps.list
Administrateur de l'espace de noms
(namespace-admin)

Gère toutes les ressources du projet.

Cluster Kubernetes
*.*.create
*.*.delete
*.*.get
*.*.list
*.*.patch
*.*.update
*.*.watch
Lecteur d'espaces de noms
(namespace-viewer)

Affiche toutes les ressources du projet.

Cluster Kubernetes
*.*.get
*.*.list
*.*.watch
Éditeur ObservabilityPipeline
(observabilitypipeline-editor)

Modifie les pipelines d'observabilité.

Zonal
observabilitypipelines.observability.gdc.goog.delete
observabilitypipelines.observability.gdc.goog.get
observabilitypipelines.observability.gdc.goog.list
observabilitypipelines.observability.gdc.goog.patch
observabilitypipelines.observability.gdc.goog.update
observabilitypipelines.observability.gdc.goog.watch
Lecteur ObservabilityPipeline
(observabilitypipeline-viewer)

Affiche les pipelines d'observabilité.

Zonal
observabilitypipelines.observability.gdc.goog.get
observabilitypipelines.observability.gdc.goog.list
observabilitypipelines.observability.gdc.goog.watch
Lecteur Grafana du projet
(project-grafana-viewer)

Affiche l'instance Grafana du projet.

Zonal
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.DELETE
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.GET
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.HEAD
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.OPTIONS
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.PATCH
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.POST
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.PUT
Administrateur de règles réseau du projet
(project-networkpolicy-admin)

Créez et gérez des règles de réseau de projet.

Monde
projectnetworkpolicies.networking.global.gdc.goog.create
projectnetworkpolicies.networking.global.gdc.goog.delete
projectnetworkpolicies.networking.global.gdc.goog.get
projectnetworkpolicies.networking.global.gdc.goog.list
projectnetworkpolicies.networking.global.gdc.goog.patch
projectnetworkpolicies.networking.global.gdc.goog.update
projectnetworkpolicies.networking.global.gdc.goog.watch
projectnetworkpolicyreplicas.networking.global.gdc.goog.create
projectnetworkpolicyreplicas.networking.global.gdc.goog.delete
projectnetworkpolicyreplicas.networking.global.gdc.goog.get
projectnetworkpolicyreplicas.networking.global.gdc.goog.list
projectnetworkpolicyreplicas.networking.global.gdc.goog.patch
projectnetworkpolicyreplicas.networking.global.gdc.goog.update
projectnetworkpolicyreplicas.networking.global.gdc.goog.watch

Zonal
projectnetworkpolicies.networking.gdc.goog.create
projectnetworkpolicies.networking.gdc.goog.delete
projectnetworkpolicies.networking.gdc.goog.get
projectnetworkpolicies.networking.gdc.goog.list
projectnetworkpolicies.networking.gdc.goog.patch
projectnetworkpolicies.networking.gdc.goog.update
projectnetworkpolicies.networking.gdc.goog.watch
Lecteur de règles réseau du projet
(project-networkpolicy-viewer)

Affichez les règles de réseau du projet.

Monde
projectnetworkpolicies.networking.global.gdc.goog.get
projectnetworkpolicies.networking.global.gdc.goog.list
projectnetworkpolicies.networking.global.gdc.goog.watch
projectnetworkpolicyreplicas.networking.global.gdc.goog.get
projectnetworkpolicyreplicas.networking.global.gdc.goog.list
projectnetworkpolicyreplicas.networking.global.gdc.goog.watch

Zonal
projectnetworkpolicies.networking.gdc.goog.get
projectnetworkpolicies.networking.gdc.goog.list
projectnetworkpolicies.networking.gdc.goog.watch
Administrateur de quotas du projet
(project-quota-admin)

Gère les ressources de quota au niveau du projet global pour une organisation.

Monde
quotavalues.quotamanagement.global.gdc.goog.create
quotavalues.quotamanagement.global.gdc.goog.delete
quotavalues.quotamanagement.global.gdc.goog.get
quotavalues.quotamanagement.global.gdc.goog.list
quotavalues.quotamanagement.global.gdc.goog.patch
quotavalues.quotamanagement.global.gdc.goog.update
quotavalues.quotamanagement.global.gdc.goog.watch
Lecteur de quotas de projet
(project-quota-viewer)

Affiche les ressources de quota au niveau du projet global pour une organisation.

Monde
quotavalues.quotamanagement.global.gdc.goog.get
quotavalues.quotamanagement.global.gdc.goog.list
quotavalues.quotamanagement.global.gdc.goog.watch
Lecteur de projet
(project-viewer)

Affiche les ressources et les autorisations du projet.

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
customresourcedefinitions.apiextensions.k8s.io.get
customresourcedefinitions.apiextensions.k8s.io.list
customresourcedefinitions.apiextensions.k8s.io.watch
projectrolebindings.resourcemanager.gdc.goog.get
projectrolebindings.resourcemanager.gdc.goog.list
projectrolebindings.resourcemanager.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.list
projectroles.resourcemanager.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch
Créateur d'organisation d'exportation SIEM
(siemexport-org-creator)

Crée et affiche les ressources d'exportation SIEM.

Zonal
secrets.create
secrets.get
secrets.list
secrets.watch
siemorgforwarders.logging.gdc.goog.create
siemorgforwarders.logging.gdc.goog.get
siemorgforwarders.logging.gdc.goog.list
siemorgforwarders.logging.gdc.goog.watch
Éditeur de l'organisation d'exportation SIEM
(siemexport-org-editor)

Gère les ressources d'exportation SIEM.

Zonal
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
siemorgforwarders.logging.gdc.goog.delete
siemorgforwarders.logging.gdc.goog.get
siemorgforwarders.logging.gdc.goog.list
siemorgforwarders.logging.gdc.goog.patch
siemorgforwarders.logging.gdc.goog.update
siemorgforwarders.logging.gdc.goog.watch
Lecteur de l'organisation d'exportation SIEM
(siemexport-org-viewer)

Affiche les ressources d'exportation SIEM.

Zonal
secrets.get
secrets.list
secrets.watch
siemorgforwarders.logging.gdc.goog.get
siemorgforwarders.logging.gdc.goog.list
siemorgforwarders.logging.gdc.goog.watch
Administrateur Secret
(secret-admin)

Gère les secrets Kubernetes dans les espaces de noms du projet.

Monde
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update

Zonal
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
Lecteur de secrets
(secret-viewer)

Affiche les secrets Kubernetes dans les espaces de noms du projet.

Monde
secrets.get
secrets.list
secrets.watch

Zonal
secrets.get
secrets.list
secrets.watch
Administrateur de cluster standard
(standard-cluster-admin)

Gère la création et la mise à jour des clusters standards

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
clusters.cluster.gdc.goog.create
clusters.cluster.gdc.goog.delete
clusters.cluster.gdc.goog.get
clusters.cluster.gdc.goog.list
clusters.cluster.gdc.goog.patch
clusters.cluster.gdc.goog.update
clusters.cluster.gdc.goog.watch
projectbindings.resourcemanager.gdc.goog.create
projectbindings.resourcemanager.gdc.goog.delete
projectbindings.resourcemanager.gdc.goog.get
projectbindings.resourcemanager.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.watch
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.watch
userclusterupgraderequests.cluster.gdc.goog.create
userclusterupgraderequests.cluster.gdc.goog.delete
userclusterupgraderequests.cluster.gdc.goog.get
userclusterupgraderequests.cluster.gdc.goog.list
userclusterupgraderequests.cluster.gdc.goog.patch
userclusterupgraderequests.cluster.gdc.goog.update
userclusterupgraderequests.cluster.gdc.goog.watch
userclusterupgrades.upgrade.private.gdc.goog.create
userclusterupgrades.upgrade.private.gdc.goog.delete
userclusterupgrades.upgrade.private.gdc.goog.get
userclusterupgrades.upgrade.private.gdc.goog.list
userclusterupgrades.upgrade.private.gdc.goog.patch
userclusterupgrades.upgrade.private.gdc.goog.update
userclusterupgrades.upgrade.private.gdc.goog.watch
Lecteur de cluster standard
(standard-cluster-viewer)

Affiche la création et la mise à jour des clusters standards

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
clusters.cluster.gdc.goog.get
clusters.cluster.gdc.goog.list
clusters.cluster.gdc.goog.watch
projectbindings.resourcemanager.gdc.goog.get
projectbindings.resourcemanager.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.watch
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.watch
userclusterupgraderequests.cluster.gdc.goog.get
userclusterupgraderequests.cluster.gdc.goog.list
userclusterupgraderequests.cluster.gdc.goog.watch
userclusterupgrades.upgrade.private.gdc.goog.get
userclusterupgrades.upgrade.private.gdc.goog.list
userclusterupgrades.upgrade.private.gdc.goog.watch
Administrateur de projet de sous-réseau
(subnet-project-admin)

Crée et gère des sous-réseaux dans le projet.

Monde
subnets.ipam.global.gdc.goog.create
subnets.ipam.global.gdc.goog.delete
subnets.ipam.global.gdc.goog.get
subnets.ipam.global.gdc.goog.list
subnets.ipam.global.gdc.goog.patch
subnets.ipam.global.gdc.goog.update
subnets.ipam.global.gdc.goog.watch

Zonal
subnets.ipam.gdc.goog.create
subnets.ipam.gdc.goog.customized-allocate
subnets.ipam.gdc.goog.delete
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
subnets.ipam.gdc.goog.patch
subnets.ipam.gdc.goog.update
subnets.ipam.gdc.goog.watch
Opérateur de projet de sous-réseau
(subnet-project-operator)

Crée et gère des sous-réseaux dans le projet.

Zonal
subnets.ipam.gdc.goog.create
subnets.ipam.gdc.goog.delete
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
subnets.ipam.gdc.goog.patch
subnets.ipam.gdc.goog.update
subnets.ipam.gdc.goog.watch
Lecteur de projet de sous-réseau
(subnet-project-viewer)

Affiche les sous-réseaux du projet.

Monde
subnets.ipam.global.gdc.goog.get
subnets.ipam.global.gdc.goog.list
subnets.ipam.global.gdc.goog.watch

Zonal
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
subnets.ipam.gdc.goog.watch
Administrateur de la sauvegarde des clusters utilisateur
(usercluster-backup-admin)

Administrateur standard de la sauvegarde du cluster d'utilisateur dans le champ "Projet".

Zonal
backupplans.backup.gdc.goog.create
backupplans.backup.gdc.goog.delete
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.patch
backupplans.backup.gdc.goog.update
backupplans.backup.gdc.goog.watch
backups.backup.gdc.goog.create
backups.backup.gdc.goog.delete
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.patch
backups.backup.gdc.goog.update
backups.backup.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.create
deletebackuprequests.backup.gdc.goog.delete
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.patch
deletebackuprequests.backup.gdc.goog.update
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.create
manualbackuprequests.backup.gdc.goog.delete
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.patch
manualbackuprequests.backup.gdc.goog.update
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.create
manualrestorerequests.backup.gdc.goog.delete
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.patch
manualrestorerequests.backup.gdc.goog.update
manualrestorerequests.backup.gdc.goog.watch
restoreplans.backup.gdc.goog.create
restoreplans.backup.gdc.goog.delete
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.patch
restoreplans.backup.gdc.goog.update
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.create
restores.backup.gdc.goog.delete
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.patch
restores.backup.gdc.goog.update
restores.backup.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
Lecteur des sauvegardes de clusters d'utilisateur
(usercluster-backup-viewer)

Lecteur standard de sauvegarde de cluster d'utilisateur dans le champ d'application du projet.

Zonal
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.watch
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
Administrateur VAISEARCH
(vaisearch-admin)

Administre toutes les ressources VAISEARCH du projet.

Zonal
answers.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.create
collections.discoveryengine.gdc.goog.delete
collections.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.list
collections.discoveryengine.gdc.goog.update
dataconnectorruns.discoveryengine.gdc.goog.list
dataconnectorruns.discoveryengine.gdc.goog.start
dataconnectors.discoveryengine.gdc.goog.get
dataconnectors.discoveryengine.gdc.goog.setup
dataconnectors.discoveryengine.gdc.goog.update
dataconnectorsources.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.create
datastores.discoveryengine.gdc.goog.delete
datastores.discoveryengine.gdc.goog.get
datastores.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.update
documents.discoveryengine.gdc.goog.create
documents.discoveryengine.gdc.goog.delete
documents.discoveryengine.gdc.goog.get
documents.discoveryengine.gdc.goog.import
documents.discoveryengine.gdc.goog.list
documents.discoveryengine.gdc.goog.update
engines.discoveryengine.gdc.goog.create
engines.discoveryengine.gdc.goog.delete
engines.discoveryengine.gdc.goog.get
engines.discoveryengine.gdc.goog.list
engines.discoveryengine.gdc.goog.search
engines.discoveryengine.gdc.goog.update
files.discoveryengine.gdc.goog.create
files.discoveryengine.gdc.goog.delete
files.discoveryengine.gdc.goog.get
files.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.create
identitymappingstores.discoveryengine.gdc.goog.delete
identitymappingstores.discoveryengine.gdc.goog.get
identitymappingstores.discoveryengine.gdc.goog.import
identitymappingstores.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.listidentitymappings
identitymappingstores.discoveryengine.gdc.goog.purge
operations.discoveryengine.gdc.goog.get
operations.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.answer
sessions.discoveryengine.gdc.goog.create
sessions.discoveryengine.gdc.goog.delete
sessions.discoveryengine.gdc.goog.get
sessions.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.update
Administrateur de l'interface utilisateur de la console VAISEARCH
(vaisearch-admin-ui)

Administre les ressources VAISEARCH via l'interface utilisateur de la console.

Zonal
collections.discoveryengine.gdc.goog.list
dataconnectorruns.discoveryengine.gdc.goog.list
dataconnectors.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.create
datastores.discoveryengine.gdc.goog.delete
datastores.discoveryengine.gdc.goog.get
datastores.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.patch
datastores.discoveryengine.gdc.goog.update
datastores.discoveryengine.gdc.goog.watch
documents.discoveryengine.gdc.goog.import
engines.discoveryengine.gdc.goog.create
engines.discoveryengine.gdc.goog.delete
engines.discoveryengine.gdc.goog.get
engines.discoveryengine.gdc.goog.list
engines.discoveryengine.gdc.goog.patch
engines.discoveryengine.gdc.goog.update
engines.discoveryengine.gdc.goog.watch
files.discoveryengine.gdc.goog.create
files.discoveryengine.gdc.goog.delete
files.discoveryengine.gdc.goog.get
files.discoveryengine.gdc.goog.list
operations.discoveryengine.gdc.goog.get
Développeur VAISEARCH
(vaisearch-developer)

Gère toutes les ressources VAISEARCH du projet.

Zonal
answers.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.create
collections.discoveryengine.gdc.goog.delete
collections.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.list
collections.discoveryengine.gdc.goog.update
dataconnectorruns.discoveryengine.gdc.goog.list
dataconnectorruns.discoveryengine.gdc.goog.start
dataconnectors.discoveryengine.gdc.goog.get
dataconnectors.discoveryengine.gdc.goog.setup
dataconnectors.discoveryengine.gdc.goog.update
dataconnectorsources.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.create
datastores.discoveryengine.gdc.goog.delete
datastores.discoveryengine.gdc.goog.get
datastores.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.update
documents.discoveryengine.gdc.goog.create
documents.discoveryengine.gdc.goog.delete
documents.discoveryengine.gdc.goog.get
documents.discoveryengine.gdc.goog.import
documents.discoveryengine.gdc.goog.list
documents.discoveryengine.gdc.goog.update
engines.discoveryengine.gdc.goog.create
engines.discoveryengine.gdc.goog.delete
engines.discoveryengine.gdc.goog.get
engines.discoveryengine.gdc.goog.list
engines.discoveryengine.gdc.goog.search
engines.discoveryengine.gdc.goog.update
files.discoveryengine.gdc.goog.create
files.discoveryengine.gdc.goog.delete
files.discoveryengine.gdc.goog.get
files.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.create
identitymappingstores.discoveryengine.gdc.goog.delete
identitymappingstores.discoveryengine.gdc.goog.get
identitymappingstores.discoveryengine.gdc.goog.import
identitymappingstores.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.listidentitymappings
identitymappingstores.discoveryengine.gdc.goog.purge
operations.discoveryengine.gdc.goog.get
operations.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.answer
sessions.discoveryengine.gdc.goog.create
sessions.discoveryengine.gdc.goog.delete
sessions.discoveryengine.gdc.goog.get
sessions.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.update
Utilisateur VAISEARCH
(vaisearch-user)

Interagit avec l'interface utilisateur de chat VAISEARCH.

Zonal
answers.discoveryengine.gdc.goog.get
engines.discoveryengine.gdc.goog.search
files.discoveryengine.gdc.goog.create
files.discoveryengine.gdc.goog.delete
files.discoveryengine.gdc.goog.get
files.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.answer
Lecteur VAISEARCH
(vaisearch-viewer)

Affiche toutes les ressources VAISEARCH du projet.

Zonal
answers.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.list
dataconnectorruns.discoveryengine.gdc.goog.list
dataconnectors.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.get
datastores.discoveryengine.gdc.goog.list
documents.discoveryengine.gdc.goog.get
documents.discoveryengine.gdc.goog.list
engines.discoveryengine.gdc.goog.get
engines.discoveryengine.gdc.goog.list
engines.discoveryengine.gdc.goog.search
files.discoveryengine.gdc.goog.get
files.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.get
identitymappingstores.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.listidentitymappings
operations.discoveryengine.gdc.goog.get
operations.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.answer
sessions.discoveryengine.gdc.goog.get
sessions.discoveryengine.gdc.goog.list
Développeur Vertex AI Gemini Flash
(ai-gemini-flash-developer)

Effectue des requêtes de prédiction et de chat-completions sur les points de terminaison du modèle Gemini Flash.

Zonal
endpoints.gemini-flash.gdc.goog.chat-completions
endpoints.gemini-flash.gdc.goog.predict
Développeur Vertex AI Multimodal Embedding
(ai-multimodal-embedding-developer)

Effectue des requêtes de prédiction sur les points de terminaison du modèle d'embeddings multimodaux.

Zonal
endpoints.multimodal-embedding.gdc.goog.predict
Développeur Vertex AI OCR
(ai-ocr-developer)

Accède au service OCR.

Zonal
annotators.vision.gdc.goog.async-batch-annotate-files
annotators.vision.gdc.goog.async-batch-annotate-images
annotators.vision.gdc.goog.batch-annotate-files
annotators.vision.gdc.goog.batch-annotate-images
annotators.vision.gdc.goog.create
annotators.vision.gdc.goog.delete
annotators.vision.gdc.goog.get
annotators.vision.gdc.goog.list
annotators.vision.gdc.goog.patch
annotators.vision.gdc.goog.update
annotators.vision.gdc.goog.watch
Administrateur Vertex AI Prediction
(vertex-ai-prediction-admin)

Gère les ressources liées à la prédiction en ligne.

Cluster Kubernetes
deployedmodels.prediction.aiplatform.gdc.goog.create
deployedmodels.prediction.aiplatform.gdc.goog.delete
deployedmodels.prediction.aiplatform.gdc.goog.deletecollection
deployedmodels.prediction.aiplatform.gdc.goog.get
deployedmodels.prediction.aiplatform.gdc.goog.list
deployedmodels.prediction.aiplatform.gdc.goog.patch
deployedmodels.prediction.aiplatform.gdc.goog.update
deployedmodels.prediction.aiplatform.gdc.goog.watch
endpoints.aiplatform.gdc.goog.create
endpoints.aiplatform.gdc.goog.delete
endpoints.aiplatform.gdc.goog.deletecollection
endpoints.aiplatform.gdc.goog.get
endpoints.aiplatform.gdc.goog.list
endpoints.aiplatform.gdc.goog.patch
endpoints.aiplatform.gdc.goog.update
endpoints.aiplatform.gdc.goog.watch
resourcepools.prediction.aiplatform.gdc.goog.create
resourcepools.prediction.aiplatform.gdc.goog.delete
resourcepools.prediction.aiplatform.gdc.goog.deletecollection
resourcepools.prediction.aiplatform.gdc.goog.get
resourcepools.prediction.aiplatform.gdc.goog.list
resourcepools.prediction.aiplatform.gdc.goog.patch
resourcepools.prediction.aiplatform.gdc.goog.update
resourcepools.prediction.aiplatform.gdc.goog.watch
Utilisateur Vertex AI Prediction
(vertex-ai-prediction-user)

Effectue des requêtes de prédiction sur les points de terminaison AI Platform.

Zonal
endpoints.aiplatform.googleapis.com.predict
Développeur Vertex AI Speech Chirp
(ai-speech-chirp-developer)

Accède au service Speech Chirp.

Zonal
recognizers.speech.gdc.goog.create
recognizers.speech.gdc.goog.delete
recognizers.speech.gdc.goog.get
recognizers.speech.gdc.goog.list
recognizers.speech.gdc.goog.patch
recognizers.speech.gdc.goog.recognize
recognizers.speech.gdc.goog.streaming-recognize
recognizers.speech.gdc.goog.update
recognizers.speech.gdc.goog.watch
Développeur Vertex AI Speech
(ai-speech-developer)

Accède au service Speech.

Zonal
recognizers.speech.gdc.goog.create
recognizers.speech.gdc.goog.delete
recognizers.speech.gdc.goog.get
recognizers.speech.gdc.goog.list
recognizers.speech.gdc.goog.patch
recognizers.speech.gdc.goog.recognize
recognizers.speech.gdc.goog.streaming-recognize
recognizers.speech.gdc.goog.update
recognizers.speech.gdc.goog.watch
Développeur Vertex AI Text Embedding
(ai-text-embedding-developer)

Effectue des requêtes de prédiction sur les points de terminaison de modèles d'embeddings textuels.

Zonal
endpoints.text-embedding-005.gdc.goog.predict
endpoints.text-embedding.gdc.goog.predict
Développeur Vertex AI Text Embedding Multilingual
(ai-text-embedding-multilingual-developer)

Effectue des requêtes de prédiction sur les points de terminaison du modèle d'embedding textuel multilingue.

Zonal
endpoints.text-embedding-multilingual.gdc.goog.predict
Développeur Vertex AI Translation
(ai-translation-developer)

Accède au service de traduction.

Zonal
operations.translation.gdc.goog.batch-translate-document
operations.translation.gdc.goog.create
operations.translation.gdc.goog.create-glossary
operations.translation.gdc.goog.delete
operations.translation.gdc.goog.delete-glossary
operations.translation.gdc.goog.detect-language
operations.translation.gdc.goog.get
operations.translation.gdc.goog.get-glossary
operations.translation.gdc.goog.get-supported-languages
operations.translation.gdc.goog.list
operations.translation.gdc.goog.list-glossaries
operations.translation.gdc.goog.patch
operations.translation.gdc.goog.translate-document
operations.translation.gdc.goog.translate-text
operations.translation.gdc.goog.update
operations.translation.gdc.goog.watch
translators.translation.gdc.goog.batch-translate-document
translators.translation.gdc.goog.create
translators.translation.gdc.goog.create-glossary
translators.translation.gdc.goog.delete
translators.translation.gdc.goog.delete-glossary
translators.translation.gdc.goog.detect-language
translators.translation.gdc.goog.get
translators.translation.gdc.goog.get-glossary
translators.translation.gdc.goog.get-supported-languages
translators.translation.gdc.goog.list
translators.translation.gdc.goog.list-glossaries
translators.translation.gdc.goog.patch
translators.translation.gdc.goog.translate-document
translators.translation.gdc.goog.translate-text
translators.translation.gdc.goog.update
translators.translation.gdc.goog.watch
Administrateur de projet d'image de machine virtuelle
(project-vm-image-admin)

Gère les images de VM dans l'espace de noms du projet.

Monde
virtualmachineimages.virtualmachine.global.gdc.goog.get
virtualmachineimages.virtualmachine.global.gdc.goog.list
virtualmachineimages.virtualmachine.global.gdc.goog.watch

Zonal
buckets.object.gdc.goog.create
buckets.object.gdc.goog.delete
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.patch
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.update
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
virtualmachineimage.virtualmachineview.gdc.goog.get
virtualmachineimage.virtualmachineview.gdc.goog.list
virtualmachineimage.virtualmachineview.gdc.goog.watch
virtualmachineimageimports.virtualmachine.gdc.goog.create
virtualmachineimageimports.virtualmachine.gdc.goog.delete
virtualmachineimageimports.virtualmachine.gdc.goog.get
virtualmachineimageimports.virtualmachine.gdc.goog.list
virtualmachineimageimports.virtualmachine.gdc.goog.patch
virtualmachineimageimports.virtualmachine.gdc.goog.update
virtualmachineimageimports.virtualmachine.gdc.goog.watch
virtualmachineimages.virtualmachine.gdc.goog.get
virtualmachineimages.virtualmachine.gdc.goog.list
virtualmachineimages.virtualmachine.gdc.goog.watch
Lecteur de projet d'image de machine virtuelle
(project-vm-image-viewer)

Affiche les images de VM dans l'espace de noms du projet.

Monde
virtualmachineimages.virtualmachine.global.gdc.goog.get
virtualmachineimages.virtualmachine.global.gdc.goog.list
virtualmachineimages.virtualmachine.global.gdc.goog.watch

Zonal
virtualmachineimage.virtualmachineview.gdc.goog.get
virtualmachineimage.virtualmachineview.gdc.goog.list
virtualmachineimage.virtualmachineview.gdc.goog.watch
virtualmachineimages.virtualmachine.gdc.goog.get
virtualmachineimages.virtualmachine.gdc.goog.list
virtualmachineimages.virtualmachine.gdc.goog.watch
Administrateur de projet de machine virtuelle
(project-vm-admin)

Gère les VM dans l'espace de noms du projet.

Monde
virtualmachineimages.virtualmachine.global.gdc.goog.get
virtualmachineimages.virtualmachine.global.gdc.goog.list
virtualmachineimages.virtualmachine.global.gdc.goog.watch
virtualmachinetemplates.virtualmachine.global.gdc.goog.create
virtualmachinetemplates.virtualmachine.global.gdc.goog.delete
virtualmachinetemplates.virtualmachine.global.gdc.goog.get
virtualmachinetemplates.virtualmachine.global.gdc.goog.list
virtualmachinetemplates.virtualmachine.global.gdc.goog.watch
volumereplicationrelationships.storage.global.gdc.goog.create
volumereplicationrelationships.storage.global.gdc.goog.delete
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.patch
volumereplicationrelationships.storage.global.gdc.goog.update
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
projectnetworkpolicies.networking.gdc.goog.get
projectnetworkpolicies.networking.gdc.goog.list
secrets.get
secrets.list
virtualmachineaccessrequests.virtualmachine.gdc.goog.create
virtualmachineaccessrequests.virtualmachine.gdc.goog.delete
virtualmachineaccessrequests.virtualmachine.gdc.goog.get
virtualmachineaccessrequests.virtualmachine.gdc.goog.list
virtualmachineaccessrequests.virtualmachine.gdc.goog.patch
virtualmachineaccessrequests.virtualmachine.gdc.goog.update
virtualmachineaccessrequests.virtualmachine.gdc.goog.watch
virtualmachinebackupplans.virtualmachine.gdc.goog.delete
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.patch
virtualmachinebackupplans.virtualmachine.gdc.goog.update
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.create
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.delete
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.patch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.update
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch
virtualmachinebackuprequests.virtualmachine.gdc.goog.create
virtualmachinebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinebackuprequests.virtualmachine.gdc.goog.get
virtualmachinebackuprequests.virtualmachine.gdc.goog.list
virtualmachinebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.create
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinedisks.virtualmachine.gdc.goog.create
virtualmachinedisks.virtualmachine.gdc.goog.delete
virtualmachinedisks.virtualmachine.gdc.goog.get
virtualmachinedisks.virtualmachine.gdc.goog.list
virtualmachinedisks.virtualmachine.gdc.goog.patch
virtualmachinedisks.virtualmachine.gdc.goog.update
virtualmachinedisks.virtualmachine.gdc.goog.watch
virtualmachineexternalaccesses.virtualmachine.gdc.goog.create
virtualmachineexternalaccesses.virtualmachine.gdc.goog.delete
virtualmachineexternalaccesses.virtualmachine.gdc.goog.get
virtualmachineexternalaccesses.virtualmachine.gdc.goog.list
virtualmachineexternalaccesses.virtualmachine.gdc.goog.patch
virtualmachineexternalaccesses.virtualmachine.gdc.goog.update
virtualmachineexternalaccesses.virtualmachine.gdc.goog.watch
virtualmachineimages.virtualmachine.gdc.goog.get
virtualmachineimages.virtualmachine.gdc.goog.list
virtualmachineimages.virtualmachine.gdc.goog.watch
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.create
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.delete
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.get
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.list
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.patch
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.update
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.watch
virtualmachinerestorerequests.virtualmachine.gdc.goog.create
virtualmachinerestorerequests.virtualmachine.gdc.goog.delete
virtualmachinerestorerequests.virtualmachine.gdc.goog.get
virtualmachinerestorerequests.virtualmachine.gdc.goog.list
virtualmachinerestorerequests.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.delete
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.patch
virtualmachinerestores.virtualmachine.gdc.goog.update
virtualmachinerestores.virtualmachine.gdc.goog.watch
virtualmachines.virtualmachine.gdc.goog.console
virtualmachines.virtualmachine.gdc.goog.create
virtualmachines.virtualmachine.gdc.goog.delete
virtualmachines.virtualmachine.gdc.goog.get
virtualmachines.virtualmachine.gdc.goog.getmetadata
virtualmachines.virtualmachine.gdc.goog.list
virtualmachines.virtualmachine.gdc.goog.patch
virtualmachines.virtualmachine.gdc.goog.setmetadata
virtualmachines.virtualmachine.gdc.goog.update
virtualmachines.virtualmachine.gdc.goog.watch
virtualmachines/restart.virtualmachineoperations.gdc.goog.update
Lecteur de projet de machine virtuelle
(project-vm-viewer)

Affiche les VM dans l'espace de noms du projet.

Monde
virtualmachineimages.virtualmachine.global.gdc.goog.get
virtualmachineimages.virtualmachine.global.gdc.goog.list
virtualmachineimages.virtualmachine.global.gdc.goog.watch
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
projectnetworkpolicies.networking.gdc.goog.get
projectnetworkpolicies.networking.gdc.goog.list
secrets.get
secrets.list
virtualmachineaccessrequests.virtualmachine.gdc.goog.get
virtualmachineaccessrequests.virtualmachine.gdc.goog.list
virtualmachineaccessrequests.virtualmachine.gdc.goog.watch
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch
virtualmachinebackuprequests.virtualmachine.gdc.goog.get
virtualmachinebackuprequests.virtualmachine.gdc.goog.list
virtualmachinebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinedisks.virtualmachine.gdc.goog.get
virtualmachinedisks.virtualmachine.gdc.goog.list
virtualmachinedisks.virtualmachine.gdc.goog.watch
virtualmachineexternalaccesses.virtualmachine.gdc.goog.get
virtualmachineexternalaccesses.virtualmachine.gdc.goog.list
virtualmachineexternalaccesses.virtualmachine.gdc.goog.watch
virtualmachineimages.virtualmachine.gdc.goog.get
virtualmachineimages.virtualmachine.gdc.goog.list
virtualmachineimages.virtualmachine.gdc.goog.watch
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.get
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.list
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.watch
virtualmachinerestorerequests.virtualmachine.gdc.goog.get
virtualmachinerestorerequests.virtualmachine.gdc.goog.list
virtualmachinerestorerequests.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.watch
virtualmachines.virtualmachine.gdc.goog.get
virtualmachines.virtualmachine.gdc.goog.getmetadata
virtualmachines.virtualmachine.gdc.goog.list
virtualmachines.virtualmachine.gdc.goog.watch
Utilisateur des sauvegardes de machines virtuelles
(vmbackup-user)

Accorde l'accès à la création de sauvegardes et de restaurations de VM, ainsi que l'accès en lecture aux plans de sauvegarde de VM.

Zonal
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackuprequest.virtualmachine.gdc.goog.create
virtualmachinebackuprequest.virtualmachine.gdc.goog.delete
virtualmachinebackuprequest.virtualmachine.gdc.goog.get
virtualmachinebackuprequest.virtualmachine.gdc.goog.list
virtualmachinebackuprequest.virtualmachine.gdc.goog.patch
virtualmachinebackuprequest.virtualmachine.gdc.goog.update
virtualmachinebackuprequest.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinerestorerequest.virtualmachine.gdc.goog.create
virtualmachinerestorerequest.virtualmachine.gdc.goog.delete
virtualmachinerestorerequest.virtualmachine.gdc.goog.get
virtualmachinerestorerequest.virtualmachine.gdc.goog.list
virtualmachinerestorerequest.virtualmachine.gdc.goog.patch
virtualmachinerestorerequest.virtualmachine.gdc.goog.update
virtualmachinerestorerequest.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.watch
Lecteur de sauvegardes de machines virtuelles
(vmbackup-viewer)

Accorde l'accès en lecture aux sauvegardes de VM, aux restaurations de VM, aux plans de sauvegarde de VM et aux plans de restauration de VM.

Zonal
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackuprequest.virtualmachine.gdc.goog.get
virtualmachinebackuprequest.virtualmachine.gdc.goog.list
virtualmachinebackuprequest.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinerestorerequest.virtualmachine.gdc.goog.get
virtualmachinerestorerequest.virtualmachine.gdc.goog.list
virtualmachinerestorerequest.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.watch
Administrateur Notebooks Workbench
(workbench-notebooks-admin)

Accès permettant de créer, lire et supprimer des notebooks Workbench. Accès en lecture à ClusterInfos

Zonal
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
notebook/notebook-root.istio.resourcemanager.gdc.goog.CONNECT
notebook/notebook-root.istio.resourcemanager.gdc.goog.DELETE
notebook/notebook-root.istio.resourcemanager.gdc.goog.GET
notebook/notebook-root.istio.resourcemanager.gdc.goog.HEAD
notebook/notebook-root.istio.resourcemanager.gdc.goog.OPTIONS
notebook/notebook-root.istio.resourcemanager.gdc.goog.PATCH
notebook/notebook-root.istio.resourcemanager.gdc.goog.POST
notebook/notebook-root.istio.resourcemanager.gdc.goog.PUT
notebook/notebook-root.istio.resourcemanager.gdc.goog.TRACE
notebooks.aiplatform.gdc.goog.create
notebooks.aiplatform.gdc.goog.delete
notebooks.aiplatform.gdc.goog.deletecollection
notebooks.aiplatform.gdc.goog.get
notebooks.aiplatform.gdc.goog.list
notebooks.aiplatform.gdc.goog.patch
notebooks.aiplatform.gdc.goog.update
notebooks.aiplatform.gdc.goog.watch
notebooks/status.aiplatform.gdc.goog.get
notebooks/status.aiplatform.gdc.goog.list
Lecteur de notebooks Workbench
(workbench-notebooks-viewer)

Accès en lecture aux notebooks Workbench

Zonal
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
notebook/notebook-root.istio.resourcemanager.gdc.goog.CONNECT
notebook/notebook-root.istio.resourcemanager.gdc.goog.DELETE
notebook/notebook-root.istio.resourcemanager.gdc.goog.GET
notebook/notebook-root.istio.resourcemanager.gdc.goog.HEAD
notebook/notebook-root.istio.resourcemanager.gdc.goog.OPTIONS
notebook/notebook-root.istio.resourcemanager.gdc.goog.PATCH
notebook/notebook-root.istio.resourcemanager.gdc.goog.POST
notebook/notebook-root.istio.resourcemanager.gdc.goog.PUT
notebook/notebook-root.istio.resourcemanager.gdc.goog.TRACE
notebooks.aiplatform.gdc.goog.get
notebooks.aiplatform.gdc.goog.list
notebooks/status.aiplatform.gdc.goog.get
notebooks/status.aiplatform.gdc.goog.list
Lecteur de charges de travail
(workload-viewer)

Affiche les pods et les déploiements dans un projet.

Cluster Kubernetes
deployments.apps.get
deployments.apps.list
deployments.apps.watch
pods.get
pods.list
pods.watch