Izin peran bawaan

Referensi ini menjelaskan peran dan izin standar yang tersedia di Google Distributed Cloud (GDC) air-gapped. Informasi ini ditujukan bagi audiens dalam grup administrator platform (seperti admin IT) dan grup operator aplikasi (seperti tim DevOps) saat mengelola akses ke resource dalam deployment mereka. Untuk mengetahui informasi selengkapnya, lihat Dokumentasi Audiens untuk GDC.

Tentang tabel peran bawaan

Satu subjek dapat terikat ke beberapa peran di server API global. Izin bersifat tambahan; tidak ada aturan penolakan.

Tabel peran diatur berdasarkan tingkat pemberian peran:

• Peran dan izin tingkat organisasi
• Peran dan izin tingkat project

Setiap tabel menampilkan detail peran berikut:

• Nama dan deskripsi peran: Mencantumkan nama peran bawaan yang ditampilkan di antarmuka pengguna (UI), nama resource kustom Kubernetes yang sesuai, dan deskripsi peran.

  Anda mungkin melihat nama tampilan UI yang sama digunakan untuk peran yang berbeda. Peran ini berbeda, masing-masing diidentifikasi secara unik oleh nama resource kustom Kubernetes dan kumpulan izinnya. Hal ini terjadi saat peran menawarkan fungsi terkait atau tingkat akses yang berbeda ke suatu layanan.

• Izin: Mencantumkan operasi API tertentu yang diberikan oleh peran. Label cakupan menunjukkan tempat operasi tersebut dapat dilakukan, yang ditentukan oleh server API yang mengelola target resource:

  • Global: Resource yang dikelola oleh server API global.
  • Zona: Resource yang dikelola dalam zona tertentu oleh server API pengelolaan zona.
  • Cluster Kubernetes: Resource yang dikelola dalam cluster Kubernetes oleh server Kubernetes API-nya.

  Untuk mengetahui informasi selengkapnya tentang cara resource dikelola dalam cakupan ini, lihat Resource global dan zona dan Cluster Kubernetes di GDC.

Semua peran yang tercantum memiliki jenis peran IAMRole, yang merupakan resource kustom Kubernetes yang menentukan serangkaian izin. Untuk memberikan izin ini kepada pengguna atau grup, buat resource IAMRoleBinding, yang menautkan pengguna ke IAMRole. Untuk mengetahui informasi tentang cara menyiapkan binding peran, lihat Memberikan dan mencabut akses.

Resource IAMRole dan IAMRoleBinding dikelola dalam server API global. Artinya, resource tersebut adalah resource global dan ikatannya diterapkan di semua zona dalam organisasi GDC Anda. Meskipun peran ditentukan secara global, izin yang diberikan dijalankan dalam konteks tertentu, seperti project. Misalnya, "peran level project" memberikan izin ke resource dalam project. Resource tersebut dapat dikelola dalam cakupan cluster global, zona, atau Kubernetes.

Peran dan izin tingkat organisasi

Peran berikut diberikan di seluruh organisasi.

Nama dan deskripsi peran	Izin
Audit Logs Platform Bucket Viewer (audit-logs-platform-bucket-viewer) Melihat bucket platform log audit.	Zonal buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.read-object buckets.object.gdc.goog.watch secrets.get secrets.list secrets.watch
Audit Logs Platform Restore Bucket Creator (audit-logs-platform-restore-bucket-creator) Membuat dan mengelola bucket pemulihan platform log audit.	Zonal buckets.object.gdc.goog.create buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.read-object buckets.object.gdc.goog.watch buckets.object.gdc.goog.write-object secrets.get secrets.list secrets.watch
Backup Repository Admin (backup-repo-admin) Memberikan akses buat, lihat, update, dan hapus ke repositori cadangan.	Zonal backuprepositories.backup.gdc.goog.create backuprepositories.backup.gdc.goog.delete backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list backuprepositories.backup.gdc.goog.patch backuprepositories.backup.gdc.goog.update backuprepositories.backup.gdc.goog.watch bucketinfos.object.gdc.goog.get bucketinfos.object.gdc.goog.list buckets.object.gdc.goog.get buckets.object.gdc.goog.list
Backup Repository Admin (backup-repo-viewer) Memberikan akses lihat dan daftar ke repositori cadangan.	Zonal backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list backuprepositories.backup.gdc.goog.watch
Billing Account Org Admin (organization-billing-account-admin) Mengelola Akun Penagihan untuk organisasi.	Global billingaccounts.billing.global.gdc.goog.bind billingaccounts.billing.global.gdc.goog.create billingaccounts.billing.global.gdc.goog.get billingaccounts.billing.global.gdc.goog.list billingaccounts.billing.global.gdc.goog.patch billingaccounts.billing.global.gdc.goog.update billingaccounts.billing.global.gdc.goog.watch Zonal billingaccountreplicas.billing.global.gdc.goog.create billingaccountreplicas.billing.global.gdc.goog.get billingaccountreplicas.billing.global.gdc.goog.list billingaccountreplicas.billing.global.gdc.goog.patch billingaccountreplicas.billing.global.gdc.goog.update billingaccountreplicas.billing.global.gdc.goog.watch
Billing Account Org User (organization-billing-account-user) Melihat dan mengikat Akun Penagihan untuk organisasi.	Global billingaccounts.billing.global.gdc.goog.bind billingaccounts.billing.global.gdc.goog.get billingaccounts.billing.global.gdc.goog.list billingaccounts.billing.global.gdc.goog.watch
Billing Org Manager (organization-billing-manager) Mengelola BillingAccountBinding di namespace platform atau namespace Project mana pun.	Global billingaccountbindings.billing.global.gdc.goog.create billingaccountbindings.billing.global.gdc.goog.get billingaccountbindings.billing.global.gdc.goog.list billingaccountbindings.billing.global.gdc.goog.patch billingaccountbindings.billing.global.gdc.goog.update billingaccountbindings.billing.global.gdc.goog.watch Zonal billingaccountbindingreplicas.billing.global.gdc.goog.create billingaccountbindingreplicas.billing.global.gdc.goog.get billingaccountbindingreplicas.billing.global.gdc.goog.list billingaccountbindingreplicas.billing.global.gdc.goog.patch billingaccountbindingreplicas.billing.global.gdc.goog.update billingaccountbindingreplicas.billing.global.gdc.goog.watch
Billing Viewer (billing-viewer) Melihat invoice penagihan dan SKUDescription dalam organisasi.	Zonal skudescriptions.billing.gdc.goog.get skudescriptions.billing.gdc.goog.list skudescriptions.billing.gdc.goog.watch
Bucket Admin (bucket-admin) Mengelola CR Bucket; mengelola objek di bucket backend yang sesuai melalui S3 API.	Global bucketlocations.object.global.gdc.goog.get bucketlocations.object.global.gdc.goog.list buckets.object.global.gdc.goog.create buckets.object.global.gdc.goog.delete buckets.object.global.gdc.goog.get buckets.object.global.gdc.goog.list buckets.object.global.gdc.goog.patch buckets.object.global.gdc.goog.read-object buckets.object.global.gdc.goog.update buckets.object.global.gdc.goog.watch buckets.object.global.gdc.goog.write-object Zonal bucketinfos.object.gdc.goog.get bucketinfos.object.gdc.goog.list bucketinfos.object.gdc.goog.patch bucketinfos.object.gdc.goog.update bucketinfos.object.gdc.goog.watch buckets.object.gdc.goog.create buckets.object.gdc.goog.delete buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.patch buckets.object.gdc.goog.read-object buckets.object.gdc.goog.update buckets.object.gdc.goog.watch buckets.object.gdc.goog.write-object
Bucket Object Admin (bucket-object-admin) Membaca CR Bucket; membaca metadata bucket backend yang sesuai, dan mengelola objek di bucket tersebut, melalui S3 API.	Global buckets.object.global.gdc.goog.get buckets.object.global.gdc.goog.list buckets.object.global.gdc.goog.read-object buckets.object.global.gdc.goog.watch buckets.object.global.gdc.goog.write-object Zonal bucketinfos.object.gdc.goog.get bucketinfos.object.gdc.goog.list bucketinfos.object.gdc.goog.patch bucketinfos.object.gdc.goog.update bucketinfos.object.gdc.goog.watch buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.read-object buckets.object.gdc.goog.watch buckets.object.gdc.goog.write-object
Bucket Object Viewer (bucket-object-viewer) Membaca CR Bucket; membaca metadata bucket backend yang sesuai, dan membaca objek di bucket tersebut, melalui S3 API.	Global bucketlocations.object.global.gdc.goog.get bucketlocations.object.global.gdc.goog.list buckets.object.global.gdc.goog.get buckets.object.global.gdc.goog.list buckets.object.global.gdc.goog.read-object buckets.object.global.gdc.goog.watch Zonal bucketinfos.object.gdc.goog.get bucketinfos.object.gdc.goog.list buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.read-object buckets.object.gdc.goog.watch
Cluster Backup Administrator (clusterbackup-admin) Mengelola rencana pencadangan cluster, pencadangan cluster, rencana pemulihan cluster, dan pemulihan cluster.	Zonal backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backups.backup.gdc.goog.get backups.backup.gdc.goog.list clusterbackupplans.backup.gdc.goog.create clusterbackupplans.backup.gdc.goog.delete clusterbackupplans.backup.gdc.goog.get clusterbackupplans.backup.gdc.goog.list clusterbackupplans.backup.gdc.goog.patch clusterbackupplans.backup.gdc.goog.update clusterbackupplans.backup.gdc.goog.watch clusterbackups.backup.gdc.goog.create clusterbackups.backup.gdc.goog.delete clusterbackups.backup.gdc.goog.get clusterbackups.backup.gdc.goog.list clusterbackups.backup.gdc.goog.patch clusterbackups.backup.gdc.goog.update clusterbackups.backup.gdc.goog.watch clusterrestoreplans.backup.gdc.goog.create clusterrestoreplans.backup.gdc.goog.delete clusterrestoreplans.backup.gdc.goog.get clusterrestoreplans.backup.gdc.goog.list clusterrestoreplans.backup.gdc.goog.patch clusterrestoreplans.backup.gdc.goog.update clusterrestoreplans.backup.gdc.goog.watch clusterrestores.backup.gdc.goog.create clusterrestores.backup.gdc.goog.delete clusterrestores.backup.gdc.goog.get clusterrestores.backup.gdc.goog.list clusterrestores.backup.gdc.goog.patch clusterrestores.backup.gdc.goog.update clusterrestores.backup.gdc.goog.watch deletebackuprequests.backup.gdc.goog.get deletebackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list restores.backup.gdc.goog.get restores.backup.gdc.goog.list volumebackups.backup.gdc.goog.get volumebackups.backup.gdc.goog.list volumerestores.backup.gdc.goog.get volumerestores.backup.gdc.goog.list
Editor ConfigMap (observabilitypipeline-configmap-editor) Mengedit peta konfigurasi di namespace platform.	Zonal configmaps.create configmaps.get configmaps.list configmaps.patch configmaps.update configmaps.watch
ConfigMap Viewer (observabilitypipeline-configmap-viewer) Melihat peta konfigurasi di namespace platform.	Zonal configmaps.get configmaps.list configmaps.watch
Admin Org Peran Kustom (custom-role-org-admin) Mengelola peran kustom dalam organisasi.	Global clusterroles.rbac.authorization.k8s.io.get customroles.iam.global.gdc.goog.create customroles.iam.global.gdc.goog.delete customroles.iam.global.gdc.goog.get customroles.iam.global.gdc.goog.list customroles.iam.global.gdc.goog.patch customroles.iam.global.gdc.goog.update customroles.iam.global.gdc.goog.watch iamroles.iam.global.gdc.goog.get iamroles.iam.global.gdc.goog.list projects.resourcemanager.global.gdc.goog.list roles.rbac.authorization.k8s.io.get Zonal clusterroles.rbac.authorization.k8s.io.get customroles.iam.gdc.goog.create customroles.iam.gdc.goog.delete customroles.iam.gdc.goog.get customroles.iam.gdc.goog.list customroles.iam.gdc.goog.patch customroles.iam.gdc.goog.update customroles.iam.gdc.goog.watch organizationroles.resourcemanager.gdc.goog.get projectroles.resourcemanager.gdc.goog.get projects.resourcemanager.gdc.goog.list roles.rbac.authorization.k8s.io.get
Custom Role Org Viewer (custom-role-org-viewer) Melihat peran khusus dalam organisasi.	Global clusterroles.rbac.authorization.k8s.io.get customroles.iam.global.gdc.goog.get customroles.iam.global.gdc.goog.list customroles.iam.global.gdc.goog.watch iamroles.iam.global.gdc.goog.get iamroles.iam.global.gdc.goog.list projects.resourcemanager.global.gdc.goog.list roles.rbac.authorization.k8s.io.get Zonal clusterroles.rbac.authorization.k8s.io.get customroles.iam.gdc.goog.get customroles.iam.gdc.goog.list customroles.iam.gdc.goog.watch organizationroles.resourcemanager.gdc.goog.get projectroles.resourcemanager.gdc.goog.get projects.resourcemanager.gdc.goog.list roles.rbac.authorization.k8s.io.get
DR Backup Admin (dr-backup-admin) Memungkinkan pengelolaan resource terkait pencadangan.	Zonal backupplans.backup.gdc.goog.create backupplans.backup.gdc.goog.delete backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backupplans.backup.gdc.goog.patch backuprepositories.backup.gdc.goog.create backuprepositories.backup.gdc.goog.delete backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list backuprepositories.backup.gdc.goog.patch backups.backup.gdc.goog.get backups.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.create manualbackuprequests.backup.gdc.goog.delete manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.patch
DR Backup Viewer (dr-backup-viewer) Memungkinkan pengelolaan resource terkait pencadangan.	Zonal backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list backups.backup.gdc.goog.get backups.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list
DR System Admin (dr-system-admin) Mengaktifkan pengelolaan resource terkait object storage di cluster infra-cp.	Zonal buckets.object.gdc.goog.create buckets.object.gdc.goog.delete buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.patch buckets.object.gdc.goog.read-object buckets.object.gdc.goog.update buckets.object.gdc.goog.watch buckets.object.gdc.goog.write-object rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.patch rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.patch roles.rbac.authorization.k8s.io.watch secrets.create secrets.delete secrets.get secrets.list secrets.patch secrets.update secrets.watch serviceaccounts.create serviceaccounts.delete serviceaccounts.get serviceaccounts.list serviceaccounts.patch serviceaccounts.update serviceaccounts.watch
DR System Viewer (dr-system-viewer) Mengaktifkan pengelolaan resource terkait object storage di cluster infra-cp.	Zonal buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.read-object buckets.object.gdc.goog.watch rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.watch secrets.get secrets.list secrets.watch serviceaccounts.get serviceaccounts.list serviceaccounts.watch
Database Org Admin (organization-db-admin) Mengelola resource database organisasi.	Zonal com.google.android.gms/.backup.BackupTransportService
Database Org Viewer (organization-db-viewer) Melihat resource database organisasi.	Zonal backupplans.alloydbomni.dbadmin.gdc.goog.get backupplans.alloydbomni.dbadmin.gdc.goog.list backupplans.alloydbomni.dbadmin.gdc.goog.watch backupplans.oracle.dbadmin.gdc.goog.get backupplans.oracle.dbadmin.gdc.goog.list backupplans.oracle.dbadmin.gdc.goog.watch backupplans.postgresql.dbadmin.gdc.goog.get backupplans.postgresql.dbadmin.gdc.goog.list backupplans.postgresql.dbadmin.gdc.goog.watch backups.alloydbomni.dbadmin.gdc.goog.get backups.alloydbomni.dbadmin.gdc.goog.list backups.alloydbomni.dbadmin.gdc.goog.watch backups.oracle.dbadmin.gdc.goog.get backups.oracle.dbadmin.gdc.goog.list backups.oracle.dbadmin.gdc.goog.watch backups.postgresql.dbadmin.gdc.goog.get backups.postgresql.dbadmin.gdc.goog.list backups.postgresql.dbadmin.gdc.goog.watch configmaps.get dbclusters.alloydbomni.dbadmin.gdc.goog.get dbclusters.alloydbomni.dbadmin.gdc.goog.list dbclusters.alloydbomni.dbadmin.gdc.goog.watch dbclusters.oracle.dbadmin.gdc.goog.get dbclusters.oracle.dbadmin.gdc.goog.list dbclusters.oracle.dbadmin.gdc.goog.watch dbclusters.postgresql.dbadmin.gdc.goog.get dbclusters.postgresql.dbadmin.gdc.goog.list dbclusters.postgresql.dbadmin.gdc.goog.watch exports.alloydbomni.dbadmin.gdc.goog.get exports.alloydbomni.dbadmin.gdc.goog.list exports.alloydbomni.dbadmin.gdc.goog.watch exports.oracle.dbadmin.gdc.goog.get exports.oracle.dbadmin.gdc.goog.list exports.oracle.dbadmin.gdc.goog.watch exports.postgresql.dbadmin.gdc.goog.get exports.postgresql.dbadmin.gdc.goog.list exports.postgresql.dbadmin.gdc.goog.watch externalservers.alloydbomni.dbadmin.gdc.goog.get externalservers.alloydbomni.dbadmin.gdc.goog.list externalservers.alloydbomni.dbadmin.gdc.goog.watch externalservers.postgresql.dbadmin.gdc.goog.get externalservers.postgresql.dbadmin.gdc.goog.list externalservers.postgresql.dbadmin.gdc.goog.watch failovers.fleet.dbadmin.gdc.goog.get failovers.fleet.dbadmin.gdc.goog.list failovers.fleet.dbadmin.gdc.goog.watch imports.alloydbomni.dbadmin.gdc.goog.get imports.alloydbomni.dbadmin.gdc.goog.list imports.alloydbomni.dbadmin.gdc.goog.watch imports.oracle.dbadmin.gdc.goog.get imports.oracle.dbadmin.gdc.goog.list imports.oracle.dbadmin.gdc.goog.watch imports.postgresql.dbadmin.gdc.goog.get imports.postgresql.dbadmin.gdc.goog.list imports.postgresql.dbadmin.gdc.goog.watch migrations.alloydbomni.dbadmin.gdc.goog.get migrations.alloydbomni.dbadmin.gdc.goog.list migrations.alloydbomni.dbadmin.gdc.goog.watch migrations.postgresql.dbadmin.gdc.goog.get migrations.postgresql.dbadmin.gdc.goog.list migrations.postgresql.dbadmin.gdc.goog.watch replications.postgresql.dbadmin.gdc.goog.get replications.postgresql.dbadmin.gdc.goog.list replications.postgresql.dbadmin.gdc.goog.watch restores.alloydbomni.dbadmin.gdc.goog.get restores.alloydbomni.dbadmin.gdc.goog.list restores.alloydbomni.dbadmin.gdc.goog.watch restores.oracle.dbadmin.gdc.goog.get restores.oracle.dbadmin.gdc.goog.list restores.oracle.dbadmin.gdc.goog.watch restores.postgresql.dbadmin.gdc.goog.get restores.postgresql.dbadmin.gdc.goog.list restores.postgresql.dbadmin.gdc.goog.watch secrets.get
Flow Log Admin (flowlog-admin) Membuat dan mengelola Log Alur.	Zonal flowlogs.networking.gdc.goog.create flowlogs.networking.gdc.goog.delete flowlogs.networking.gdc.goog.get flowlogs.networking.gdc.goog.list flowlogs.networking.gdc.goog.patch flowlogs.networking.gdc.goog.update flowlogs.networking.gdc.goog.watch flowlogs/status.networking.gdc.goog.create flowlogs/status.networking.gdc.goog.delete flowlogs/status.networking.gdc.goog.get flowlogs/status.networking.gdc.goog.list flowlogs/status.networking.gdc.goog.patch flowlogs/status.networking.gdc.goog.update flowlogs/status.networking.gdc.goog.watch
Flow Log Viewer (flowlog-viewer) Membaca konfigurasi Log Aliran.	Zonal flowlogs.networking.gdc.goog.get flowlogs.networking.gdc.goog.list flowlogs.networking.gdc.goog.watch flowlogs/status.networking.gdc.goog.get flowlogs/status.networking.gdc.goog.list flowlogs/status.networking.gdc.goog.watch
Editor CTMKey HSM (ctmkey-editor) Membaca dan menghapus kunci CTM.	Zonal ctmkeys.hsm.gdc.goog.delete ctmkeys.hsm.gdc.goog.get ctmkeys.hsm.gdc.goog.list ctmkeys.hsm.gdc.goog.watch
HSM CTMKey Viewer (ctmkey-viewer) Membaca kunci CTM.	Zonal ctmkeys.hsm.gdc.goog.get ctmkeys.hsm.gdc.goog.list ctmkeys.hsm.gdc.goog.watch
IAM Org Admin (organization-iam-admin) Mengelola izin organisasi.	Global clusterrolebindings.rbac.authorization.k8s.io.create clusterrolebindings.rbac.authorization.k8s.io.delete clusterrolebindings.rbac.authorization.k8s.io.get clusterrolebindings.rbac.authorization.k8s.io.list clusterrolebindings.rbac.authorization.k8s.io.patch clusterrolebindings.rbac.authorization.k8s.io.update clusterrolebindings.rbac.authorization.k8s.io.watch clusterroles.rbac.authorization.k8s.io.create clusterroles.rbac.authorization.k8s.io.delete clusterroles.rbac.authorization.k8s.io.get clusterroles.rbac.authorization.k8s.io.list clusterroles.rbac.authorization.k8s.io.patch clusterroles.rbac.authorization.k8s.io.update clusterroles.rbac.authorization.k8s.io.watch customroles.iam.global.gdc.goog.create customroles.iam.global.gdc.goog.delete customroles.iam.global.gdc.goog.get customroles.iam.global.gdc.goog.list customroles.iam.global.gdc.goog.patch customroles.iam.global.gdc.goog.update customroles.iam.global.gdc.goog.watch iamrolebindings.iam.global.gdc.goog.create iamrolebindings.iam.global.gdc.goog.delete iamrolebindings.iam.global.gdc.goog.get iamrolebindings.iam.global.gdc.goog.list iamrolebindings.iam.global.gdc.goog.patch iamrolebindings.iam.global.gdc.goog.update iamrolebindings.iam.global.gdc.goog.watch iamroles.iam.global.gdc.goog.create iamroles.iam.global.gdc.goog.delete iamroles.iam.global.gdc.goog.get iamroles.iam.global.gdc.goog.list iamroles.iam.global.gdc.goog.patch iamroles.iam.global.gdc.goog.update iamroles.iam.global.gdc.goog.watch identityproviderconfigs.iam.global.gdc.goog.create identityproviderconfigs.iam.global.gdc.goog.delete identityproviderconfigs.iam.global.gdc.goog.get identityproviderconfigs.iam.global.gdc.goog.list identityproviderconfigs.iam.global.gdc.goog.patch identityproviderconfigs.iam.global.gdc.goog.update identityproviderconfigs.iam.global.gdc.goog.watch projectserviceaccounts.resourcemanager.global.gdc.goog.create projectserviceaccounts.resourcemanager.global.gdc.goog.delete projectserviceaccounts.resourcemanager.global.gdc.goog.get projectserviceaccounts.resourcemanager.global.gdc.goog.list projectserviceaccounts.resourcemanager.global.gdc.goog.patch projectserviceaccounts.resourcemanager.global.gdc.goog.update rolebindings.rbac.authorization.k8s.io.create rolebindings.rbac.authorization.k8s.io.delete rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.patch rolebindings.rbac.authorization.k8s.io.update rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.create roles.rbac.authorization.k8s.io.delete roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.patch roles.rbac.authorization.k8s.io.update roles.rbac.authorization.k8s.io.watch Zonal *.visibility.resourcemanager.gdc.goog.get clusterrolebindings.rbac.authorization.k8s.io.create clusterrolebindings.rbac.authorization.k8s.io.delete clusterrolebindings.rbac.authorization.k8s.io.get clusterrolebindings.rbac.authorization.k8s.io.list clusterrolebindings.rbac.authorization.k8s.io.patch clusterrolebindings.rbac.authorization.k8s.io.update clusterrolebindings.rbac.authorization.k8s.io.watch clusterroles.rbac.authorization.k8s.io.create clusterroles.rbac.authorization.k8s.io.delete clusterroles.rbac.authorization.k8s.io.get clusterroles.rbac.authorization.k8s.io.list clusterroles.rbac.authorization.k8s.io.patch clusterroles.rbac.authorization.k8s.io.update clusterroles.rbac.authorization.k8s.io.watch customroles.iam.gdc.goog.create customroles.iam.gdc.goog.delete customroles.iam.gdc.goog.get customroles.iam.gdc.goog.list customroles.iam.gdc.goog.patch customroles.iam.gdc.goog.update customroles.iam.gdc.goog.watch identityproviderconfigs.iam.gdc.goog.create identityproviderconfigs.iam.gdc.goog.delete identityproviderconfigs.iam.gdc.goog.get identityproviderconfigs.iam.gdc.goog.list identityproviderconfigs.iam.gdc.goog.patch identityproviderconfigs.iam.gdc.goog.update identityproviderconfigs.iam.gdc.goog.watch organizationrolebindings.resourcemanager.gdc.goog.create organizationrolebindings.resourcemanager.gdc.goog.delete organizationrolebindings.resourcemanager.gdc.goog.get organizationrolebindings.resourcemanager.gdc.goog.list organizationrolebindings.resourcemanager.gdc.goog.patch organizationrolebindings.resourcemanager.gdc.goog.update organizationrolebindings.resourcemanager.gdc.goog.watch organizationroles.resourcemanager.gdc.goog.create organizationroles.resourcemanager.gdc.goog.delete organizationroles.resourcemanager.gdc.goog.get organizationroles.resourcemanager.gdc.goog.list organizationroles.resourcemanager.gdc.goog.patch organizationroles.resourcemanager.gdc.goog.update organizationroles.resourcemanager.gdc.goog.watch projectrolebindings.resourcemanager.gdc.goog.create projectrolebindings.resourcemanager.gdc.goog.delete projectrolebindings.resourcemanager.gdc.goog.get projectrolebindings.resourcemanager.gdc.goog.list projectrolebindings.resourcemanager.gdc.goog.patch projectrolebindings.resourcemanager.gdc.goog.update projectrolebindings.resourcemanager.gdc.goog.watch projectroles.resourcemanager.gdc.goog.create projectroles.resourcemanager.gdc.goog.delete projectroles.resourcemanager.gdc.goog.get projectroles.resourcemanager.gdc.goog.list projectroles.resourcemanager.gdc.goog.patch projectroles.resourcemanager.gdc.goog.update projectroles.resourcemanager.gdc.goog.watch projectserviceaccounts.resourcemanager.gdc.goog.create projectserviceaccounts.resourcemanager.gdc.goog.delete projectserviceaccounts.resourcemanager.gdc.goog.get projectserviceaccounts.resourcemanager.gdc.goog.list projectserviceaccounts.resourcemanager.gdc.goog.patch projectserviceaccounts.resourcemanager.gdc.goog.update projectserviceaccounts.resourcemanager.gdc.goog.watch rolebindings.rbac.authorization.k8s.io.create rolebindings.rbac.authorization.k8s.io.delete rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.patch rolebindings.rbac.authorization.k8s.io.update rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.create roles.rbac.authorization.k8s.io.delete roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.patch roles.rbac.authorization.k8s.io.update roles.rbac.authorization.k8s.io.watch
IAM Org Viewer (organization-iam-viewer) Melihat izin organisasi.	Global clusterrolebindings.rbac.authorization.k8s.io.get clusterrolebindings.rbac.authorization.k8s.io.list clusterrolebindings.rbac.authorization.k8s.io.watch clusterroles.rbac.authorization.k8s.io.get clusterroles.rbac.authorization.k8s.io.list clusterroles.rbac.authorization.k8s.io.watch customroles.iam.global.gdc.goog.get customroles.iam.global.gdc.goog.list customroles.iam.global.gdc.goog.watch iamrolebindings.iam.global.gdc.goog.get iamrolebindings.iam.global.gdc.goog.list iamrolebindings.iam.global.gdc.goog.watch iamroles.iam.global.gdc.goog.get iamroles.iam.global.gdc.goog.list iamroles.iam.global.gdc.goog.watch projectserviceaccounts.resourcemanager.global.gdc.goog.get projectserviceaccounts.resourcemanager.global.gdc.goog.list rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.watch Zonal *.visibility.resourcemanager.gdc.goog.get clusterrolebindings.rbac.authorization.k8s.io.get clusterrolebindings.rbac.authorization.k8s.io.list clusterrolebindings.rbac.authorization.k8s.io.watch clusterroles.rbac.authorization.k8s.io.get clusterroles.rbac.authorization.k8s.io.list clusterroles.rbac.authorization.k8s.io.watch customroles.iam.gdc.goog.get customroles.iam.gdc.goog.list customroles.iam.gdc.goog.watch organizationrolebindings.resourcemanager.gdc.goog.get organizationrolebindings.resourcemanager.gdc.goog.list organizationrolebindings.resourcemanager.gdc.goog.watch organizationroles.resourcemanager.gdc.goog.get organizationroles.resourcemanager.gdc.goog.list organizationroles.resourcemanager.gdc.goog.watch projectrolebindings.resourcemanager.gdc.goog.get projectrolebindings.resourcemanager.gdc.goog.list projectrolebindings.resourcemanager.gdc.goog.watch projectroles.resourcemanager.gdc.goog.get projectroles.resourcemanager.gdc.goog.list projectroles.resourcemanager.gdc.goog.watch projectserviceaccounts.resourcemanager.gdc.goog.get projectserviceaccounts.resourcemanager.gdc.goog.list projectserviceaccounts.resourcemanager.gdc.goog.watch rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.watch
Identity Provider Federation Admin (idp-federation-admin) Mengelola konfigurasi penyedia identitas.	Global identityproviderconfigs.iam.global.gdc.goog.create identityproviderconfigs.iam.global.gdc.goog.delete identityproviderconfigs.iam.global.gdc.goog.get identityproviderconfigs.iam.global.gdc.goog.list identityproviderconfigs.iam.global.gdc.goog.patch identityproviderconfigs.iam.global.gdc.goog.update secrets.create secrets.delete secrets.get secrets.list secrets.patch secrets.update Zonal identityproviderconfigs.iam.gdc.goog.create identityproviderconfigs.iam.gdc.goog.delete identityproviderconfigs.iam.gdc.goog.get identityproviderconfigs.iam.gdc.goog.list identityproviderconfigs.iam.gdc.goog.patch identityproviderconfigs.iam.gdc.goog.update secrets.create secrets.delete secrets.get secrets.list secrets.patch secrets.update
Identity Provider Federation Viewer (idp-federation-viewer) Melihat konfigurasi penyedia identitas.	Global identityproviderconfigs.iam.global.gdc.goog.get identityproviderconfigs.iam.global.gdc.goog.list secrets.get secrets.list Zonal identityproviderconfigs.iam.gdc.goog.get identityproviderconfigs.iam.gdc.goog.list secrets.get secrets.list
Interconnect Admin (interconnect-admin-mp) Buat dan kelola resource InterconnectAttachment dan AttachmentGroup.	Zonal attachmentgroups.system.private.gdc.goog.create attachmentgroups.system.private.gdc.goog.delete attachmentgroups.system.private.gdc.goog.get attachmentgroups.system.private.gdc.goog.list attachmentgroups.system.private.gdc.goog.patch attachmentgroups.system.private.gdc.goog.update attachmentgroups.system.private.gdc.goog.watch interconnectattachments.system.private.gdc.goog.create interconnectattachments.system.private.gdc.goog.delete interconnectattachments.system.private.gdc.goog.get interconnectattachments.system.private.gdc.goog.list interconnectattachments.system.private.gdc.goog.patch interconnectattachments.system.private.gdc.goog.update interconnectattachments.system.private.gdc.goog.watch
Interconnect Viewer (interconnect-viewer-mp) Melihat resource InterconnectAttachment dan AttachmentGroup.	Zonal attachmentgroups.system.private.gdc.goog.get attachmentgroups.system.private.gdc.goog.list attachmentgroups.system.private.gdc.goog.watch interconnectattachments.system.private.gdc.goog.get interconnectattachments.system.private.gdc.goog.list interconnectattachments.system.private.gdc.goog.watch
KMS Rotation Job Admin (kms-rotationjob-admin) Mengelola resource RotationJob untuk organisasi.	Zonal rotationjobs.kms.gdc.goog.create rotationjobs.kms.gdc.goog.delete rotationjobs.kms.gdc.goog.get rotationjobs.kms.gdc.goog.list rotationjobs.kms.gdc.goog.patch rotationjobs.kms.gdc.goog.update rotationjobs.kms.gdc.goog.watch
KMS Rotation Job Monitor (kms-rotationjob-monitor) Membaca tugas rotasi KMS dalam organisasi.	Zonal rotationjobs.kms.gdc.goog.get rotationjobs.kms.gdc.goog.list rotationjobs.kms.gdc.goog.watch
Log Querier (log-query-api-querier-pa) Akses Log Query API untuk membuat kueri log PA di project platform-obs.	Zonal labels.goog.gdc.logging.v1.get labels.goog.gdc.logging.v1.list labelvalues.goog.gdc.logging.v1.get labelvalues.goog.gdc.logging.v1.list listlabelsrequests.goog.gdc.logging.v1.get listlabelsrequests.goog.gdc.logging.v1.list listlabelsresponses.goog.gdc.logging.v1.get listlabelsresponses.goog.gdc.logging.v1.list listlabelvaluesrequests.goog.gdc.logging.v1.get listlabelvaluesrequests.goog.gdc.logging.v1.list listlabelvaluesresponses.goog.gdc.logging.v1.get listlabelvaluesresponses.goog.gdc.logging.v1.list listlogsfilters.goog.gdc.logging.v1.get listlogsfilters.goog.gdc.logging.v1.list listlogsrequests.goog.gdc.logging.v1.get listlogsrequests.goog.gdc.logging.v1.list listlogsresponses.goog.gdc.logging.v1.get listlogsresponses.goog.gdc.logging.v1.list logs.goog.gdc.logging.v1.get logs.goog.gdc.logging.v1.list
Logging Rule Creator (loggingrule-pa-creator) Membuat dan melihat aturan logging.	Zonal loggingrules.logging.gdc.goog.create loggingrules.logging.gdc.goog.get loggingrules.logging.gdc.goog.list loggingrules.logging.gdc.goog.watch
Logging Rule Editor (loggingrule-pa-editor) Mengedit aturan logging.	Zonal loggingrules.logging.gdc.goog.delete loggingrules.logging.gdc.goog.get loggingrules.logging.gdc.goog.list loggingrules.logging.gdc.goog.patch loggingrules.logging.gdc.goog.update loggingrules.logging.gdc.goog.watch
Logging Rule Viewer (loggingrule-pa-viewer) Melihat aturan logging.	Zonal loggingrules.logging.gdc.goog.get loggingrules.logging.gdc.goog.list loggingrules.logging.gdc.goog.watch
Logging Target Creator (loggingtarget-pa-creator) Membuat dan melihat target logging.	Zonal loggingtargets.logging.gdc.goog.create loggingtargets.logging.gdc.goog.get loggingtargets.logging.gdc.goog.list loggingtargets.logging.gdc.goog.watch
Logging Target Editor (loggingtarget-pa-editor) Mengedit target logging.	Zonal loggingtargets.logging.gdc.goog.delete loggingtargets.logging.gdc.goog.get loggingtargets.logging.gdc.goog.list loggingtargets.logging.gdc.goog.patch loggingtargets.logging.gdc.goog.update loggingtargets.logging.gdc.goog.watch
Logging Target Viewer (loggingtarget-pa-viewer) Melihat target logging.	Zonal loggingtargets.logging.gdc.goog.get loggingtargets.logging.gdc.goog.list loggingtargets.logging.gdc.goog.watch
ManagedKeycloak Admin (managedkeycloak-admin) Memberikan akses baca dan tulis ke resource managedkeycloak.	Global managedkeycloaks.keycloak.global.gdc.goog.create managedkeycloaks.keycloak.global.gdc.goog.delete managedkeycloaks.keycloak.global.gdc.goog.get managedkeycloaks.keycloak.global.gdc.goog.list managedkeycloaks.keycloak.global.gdc.goog.patch managedkeycloaks.keycloak.global.gdc.goog.update realmviews.keycloakview.global.gdc.goog.get realmviews.keycloakview.global.gdc.goog.list
ManagedKeycloak Viewer (managedkeycloak-viewer) Memberikan akses lihat ke resource managedkeycloak.	Global managedkeycloaks.keycloak.global.gdc.goog.get managedkeycloaks.keycloak.global.gdc.goog.list realmviews.keycloakview.global.gdc.goog.get realmviews.keycloakview.global.gdc.goog.list
Pengupload Artefak Marketplace (marketplace-artifact-uploader) Melihat instance Harbor marketplace; Melihat dan membuat project Harbor.	Zonal harborinstanceprojects.artifactregistry.gdc.goog.create harborinstanceprojects.artifactregistry.gdc.goog.get harborinstanceprojects.artifactregistry.gdc.goog.list harborinstanceprojects.artifactregistry.gdc.goog.watch harborinstances.artifactregistry.gdc.goog.get harborinstances.artifactregistry.gdc.goog.list harborinstances.artifactregistry.gdc.goog.watch
Marketplace Artifact Viewer (marketplace-artifact-viewer) Melihat instance Harbor Marketplace; Melihat project Harbor.	Zonal harborinstanceprojects.artifactregistry.gdc.goog.get harborinstanceprojects.artifactregistry.gdc.goog.list harborinstanceprojects.artifactregistry.gdc.goog.watch harborinstances.artifactregistry.gdc.goog.get harborinstances.artifactregistry.gdc.goog.list harborinstances.artifactregistry.gdc.goog.watch
Marketplace Catalog Publisher (marketplace-catalog-publisher) Melihat, mencantumkan, membuat, memperbarui, dan menghapus binding katalog layanan.	Global projects.resourcemanager.global.gdc.goog.get projects.resourcemanager.global.gdc.goog.list projects.resourcemanager.global.gdc.goog.watch servicecatalogbindings.marketplace.global.gdc.goog.create servicecatalogbindings.marketplace.global.gdc.goog.delete servicecatalogbindings.marketplace.global.gdc.goog.get servicecatalogbindings.marketplace.global.gdc.goog.list servicecatalogbindings.marketplace.global.gdc.goog.patch servicecatalogbindings.marketplace.global.gdc.goog.update servicecatalogbindings.marketplace.global.gdc.goog.watch
Monitoring Dashboard Creator (dashboard-pa-creator) Membuat dan melihat dasbor.	Zonal dashboards.observability.gdc.goog.create dashboards.observability.gdc.goog.get dashboards.observability.gdc.goog.list dashboards.observability.gdc.goog.watch
Editor Dasbor Monitoring (dashboard-pa-editor) Mengedit dasbor.	Zonal dashboards.observability.gdc.goog.delete dashboards.observability.gdc.goog.get dashboards.observability.gdc.goog.list dashboards.observability.gdc.goog.patch dashboards.observability.gdc.goog.update dashboards.observability.gdc.goog.watch
Monitoring Dashboard Viewer (dashboard-pa-viewer) Melihat dasbor.	Zonal dashboards.observability.gdc.goog.get dashboards.observability.gdc.goog.list dashboards.observability.gdc.goog.watch
Monitoring Rule Creator (monitoringrule-pa-creator) Membuat dan melihat aturan pemantauan.	Zonal monitoringrules.monitoring.gdc.goog.create monitoringrules.monitoring.gdc.goog.get monitoringrules.monitoring.gdc.goog.list monitoringrules.monitoring.gdc.goog.watch
Editor Aturan Monitoring (monitoringrule-pa-editor) Mengedit aturan pemantauan.	Zonal monitoringrules.monitoring.gdc.goog.delete monitoringrules.monitoring.gdc.goog.get monitoringrules.monitoring.gdc.goog.list monitoringrules.monitoring.gdc.goog.patch monitoringrules.monitoring.gdc.goog.update monitoringrules.monitoring.gdc.goog.watch
Monitoring Rule Viewer (monitoringrule-pa-viewer) Melihat aturan pemantauan.	Zonal monitoringrules.monitoring.gdc.goog.get monitoringrules.monitoring.gdc.goog.list monitoringrules.monitoring.gdc.goog.watch
Monitoring Target Creator (monitoringtarget-pa-creator) Membuat dan melihat target pemantauan.	Zonal monitoringtargets.monitoring.gdc.goog.create monitoringtargets.monitoring.gdc.goog.get monitoringtargets.monitoring.gdc.goog.list monitoringtargets.monitoring.gdc.goog.watch
Monitoring Target Editor (monitoringtarget-pa-editor) Mengedit target pemantauan.	Zonal monitoringtargets.monitoring.gdc.goog.delete monitoringtargets.monitoring.gdc.goog.get monitoringtargets.monitoring.gdc.goog.list monitoringtargets.monitoring.gdc.goog.patch monitoringtargets.monitoring.gdc.goog.update monitoringtargets.monitoring.gdc.goog.watch
Monitoring Target Viewer (monitoringtarget-pa-viewer) Melihat target pemantauan tampilan.	Zonal monitoringtargets.monitoring.gdc.goog.get monitoringtargets.monitoring.gdc.goog.list monitoringtargets.monitoring.gdc.goog.watch
Pembuat Pipeline Observasi (observabilitypipeline-pa-creator) Membuat dan melihat pipeline observasi.	Zonal observabilitypipelines.observability.gdc.goog.create observabilitypipelines.observability.gdc.goog.get observabilitypipelines.observability.gdc.goog.list observabilitypipelines.observability.gdc.goog.watch
Editor Pipeline Observabilitas (observabilitypipeline-pa-editor) Mengedit pipeline observasi.	Zonal observabilitypipelines.observability.gdc.goog.delete observabilitypipelines.observability.gdc.goog.get observabilitypipelines.observability.gdc.goog.list observabilitypipelines.observability.gdc.goog.patch observabilitypipelines.observability.gdc.goog.update observabilitypipelines.observability.gdc.goog.watch
Observability Pipeline Viewer (observabilitypipeline-pa-viewer) Melihat pipeline kemampuan observasi.	Zonal observabilitypipelines.observability.gdc.goog.get observabilitypipelines.observability.gdc.goog.list observabilitypipelines.observability.gdc.goog.watch
Operable Component Lifecycle Manager Debugger (mp-oclcm-debugger) Mengelola resource OCLCM untuk proses debug di bidang pengelolaan.	Zonal componentoverrides.lcm.private.gdc.goog.create componentoverrides.lcm.private.gdc.goog.get componentoverrides.lcm.private.gdc.goog.list componentoverrides.lcm.private.gdc.goog.patch componentoverrides.lcm.private.gdc.goog.update componentrollouts.lcm.private.gdc.goog.get componentrollouts.lcm.private.gdc.goog.list componentrollouts.lcm.private.gdc.goog.patch componentrollouts.lcm.private.gdc.goog.update components.lcm.private.gdc.goog.create components.lcm.private.gdc.goog.get components.lcm.private.gdc.goog.list subcomponentoverrides.lcm.private.gdc.goog.create subcomponentoverrides.lcm.private.gdc.goog.get subcomponentoverrides.lcm.private.gdc.goog.list subcomponentoverrides.lcm.private.gdc.goog.patch subcomponentoverrides.lcm.private.gdc.goog.update subcomponents.lcm.private.gdc.goog.get subcomponents.lcm.private.gdc.goog.list subcomponents.lcm.private.gdc.goog.patch subcomponents.lcm.private.gdc.goog.update
Operable Component Lifecycle Manager Viewer (mp-oclcm-viewer) Melihat resource OCLCM di bidang pengelolaan.	Zonal componentoverrides.lcm.private.gdc.goog.get componentoverrides.lcm.private.gdc.goog.list componentrollouts.lcm.private.gdc.goog.get componentrollouts.lcm.private.gdc.goog.list components.lcm.private.gdc.goog.get components.lcm.private.gdc.goog.list subcomponentoverrides.lcm.private.gdc.goog.get subcomponentoverrides.lcm.private.gdc.goog.list subcomponents.lcm.private.gdc.goog.get subcomponents.lcm.private.gdc.goog.list
Organization Backup Admin (organization-backup-admin) Mengelola pencadangan, pemulihan, dan repositori cadangan organisasi.	Zonal backupplans.backup.gdc.goog.create backupplans.backup.gdc.goog.delete backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backupplans.backup.gdc.goog.watch backuprepositories.backup.gdc.goog.create backuprepositories.backup.gdc.goog.delete backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list backuprepositories.backup.gdc.goog.watch backuprepositorymanagers.backup.gdc.goog.create backuprepositorymanagers.backup.gdc.goog.delete backuprepositorymanagers.backup.gdc.goog.get backuprepositorymanagers.backup.gdc.goog.list backuprepositorymanagers.backup.gdc.goog.patch backuprepositorymanagers.backup.gdc.goog.update backuprepositorymanagers.backup.gdc.goog.watch backups.backup.gdc.goog.get backups.backup.gdc.goog.list backups.backup.gdc.goog.watch clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list deletebackuprequests.backup.gdc.goog.create deletebackuprequests.backup.gdc.goog.delete deletebackuprequests.backup.gdc.goog.get deletebackuprequests.backup.gdc.goog.list deletebackuprequests.backup.gdc.goog.watch manualbackuprequests.backup.gdc.goog.create manualbackuprequests.backup.gdc.goog.delete manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.watch restores.backup.gdc.goog.get restores.backup.gdc.goog.list restores.backup.gdc.goog.watch secrets.create virtualmachinebackupplans.virtualmachine.gdc.goog.create virtualmachinebackupplans.virtualmachine.gdc.goog.delete virtualmachinebackupplans.virtualmachine.gdc.goog.get virtualmachinebackupplans.virtualmachine.gdc.goog.list virtualmachinebackupplans.virtualmachine.gdc.goog.patch virtualmachinebackupplans.virtualmachine.gdc.goog.update virtualmachinebackupplans.virtualmachine.gdc.goog.watch virtualmachinebackupplantemplates.virtualmachine.gdc.goog.create virtualmachinebackupplantemplates.virtualmachine.gdc.goog.delete virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch virtualmachinebackuprequests.virtualmachine.gdc.goog.create virtualmachinebackuprequests.virtualmachine.gdc.goog.delete virtualmachinebackuprequests.virtualmachine.gdc.goog.get virtualmachinebackuprequests.virtualmachine.gdc.goog.list virtualmachinebackuprequests.virtualmachine.gdc.goog.watch virtualmachinebackups.virtualmachine.gdc.goog.delete virtualmachinebackups.virtualmachine.gdc.goog.get virtualmachinebackups.virtualmachine.gdc.goog.list virtualmachinebackups.virtualmachine.gdc.goog.patch virtualmachinebackups.virtualmachine.gdc.goog.update virtualmachinebackups.virtualmachine.gdc.goog.watch virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.create virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.delete virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch virtualmachinerestorerequests.virtualmachine.gdc.goog.create virtualmachinerestorerequests.virtualmachine.gdc.goog.delete virtualmachinerestorerequests.virtualmachine.gdc.goog.get virtualmachinerestorerequests.virtualmachine.gdc.goog.list virtualmachinerestorerequests.virtualmachine.gdc.goog.watch virtualmachinerestores.virtualmachine.gdc.goog.delete virtualmachinerestores.virtualmachine.gdc.goog.get virtualmachinerestores.virtualmachine.gdc.goog.list virtualmachinerestores.virtualmachine.gdc.goog.patch virtualmachinerestores.virtualmachine.gdc.goog.update virtualmachinerestores.virtualmachine.gdc.goog.watch volumebackups.backup.gdc.goog.get volumebackups.backup.gdc.goog.list volumebackups.backup.gdc.goog.watch volumerestores.backup.gdc.goog.get volumerestores.backup.gdc.goog.list volumerestores.backup.gdc.goog.watch
Organization Backup Viewer (organization-backup-viewer) Melihat cadangan, pemulihan, dan repositori cadangan organisasi.	Zonal backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backupplans.backup.gdc.goog.watch backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list backuprepositories.backup.gdc.goog.watch backups.backup.gdc.goog.get backups.backup.gdc.goog.list backups.backup.gdc.goog.watch clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list deletebackuprequests.backup.gdc.goog.get deletebackuprequests.backup.gdc.goog.list deletebackuprequests.backup.gdc.goog.watch manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.watch restores.backup.gdc.goog.get restores.backup.gdc.goog.list restores.backup.gdc.goog.watch virtualmachinebackupplans.virtualmachine.gdc.goog.get virtualmachinebackupplans.virtualmachine.gdc.goog.list virtualmachinebackupplans.virtualmachine.gdc.goog.watch virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch virtualmachinebackuprequests.virtualmachine.gdc.goog.get virtualmachinebackuprequests.virtualmachine.gdc.goog.list virtualmachinebackuprequests.virtualmachine.gdc.goog.watch virtualmachinebackups.virtualmachine.gdc.goog.get virtualmachinebackups.virtualmachine.gdc.goog.list virtualmachinebackups.virtualmachine.gdc.goog.watch virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch virtualmachinerestorerequests.virtualmachine.gdc.goog.get virtualmachinerestorerequests.virtualmachine.gdc.goog.list virtualmachinerestorerequests.virtualmachine.gdc.goog.watch virtualmachinerestores.virtualmachine.gdc.goog.get virtualmachinerestores.virtualmachine.gdc.goog.list virtualmachinerestores.virtualmachine.gdc.goog.watch volumebackups.backup.gdc.goog.get volumebackups.backup.gdc.goog.list volumebackups.backup.gdc.goog.watch volumerestores.backup.gdc.goog.get volumerestores.backup.gdc.goog.list volumerestores.backup.gdc.goog.watch
Organization Cluster Backup Admin (organization-cluster-backup-admin) Mengelola pencadangan dan pemulihan cluster organisasi.	Zonal clusterbackupplans.backup.gdc.goog.create clusterbackupplans.backup.gdc.goog.delete clusterbackupplans.backup.gdc.goog.get clusterbackupplans.backup.gdc.goog.list clusterbackupplans.backup.gdc.goog.patch clusterbackupplans.backup.gdc.goog.update clusterbackupplans.backup.gdc.goog.watch clusterbackuprepositories.backup.gdc.goog.create clusterbackuprepositories.backup.gdc.goog.delete clusterbackuprepositories.backup.gdc.goog.get clusterbackuprepositories.backup.gdc.goog.list clusterbackuprepositories.backup.gdc.goog.patch clusterbackuprepositories.backup.gdc.goog.update clusterbackuprepositories.backup.gdc.goog.watch clusterbackups.backup.gdc.goog.delete clusterbackups.backup.gdc.goog.get clusterbackups.backup.gdc.goog.list clusterbackups.backup.gdc.goog.watch clusterrestoreplans.backup.gdc.goog.create clusterrestoreplans.backup.gdc.goog.delete clusterrestoreplans.backup.gdc.goog.get clusterrestoreplans.backup.gdc.goog.list clusterrestoreplans.backup.gdc.goog.patch clusterrestoreplans.backup.gdc.goog.update clusterrestoreplans.backup.gdc.goog.watch clusterrestores.backup.gdc.goog.create clusterrestores.backup.gdc.goog.delete clusterrestores.backup.gdc.goog.get clusterrestores.backup.gdc.goog.list clusterrestores.backup.gdc.goog.watch clustervolumebackups.backup.gdc.goog.get clustervolumebackups.backup.gdc.goog.list clustervolumebackups.backup.gdc.goog.watch clustervolumerestores.backup.gdc.goog.get clustervolumerestores.backup.gdc.goog.list clustervolumerestores.backup.gdc.goog.watch deleteclusterbackuprequests.backup.gdc.goog.create deleteclusterbackuprequests.backup.gdc.goog.delete deleteclusterbackuprequests.backup.gdc.goog.get deleteclusterbackuprequests.backup.gdc.goog.list deleteclusterbackuprequests.backup.gdc.goog.watch manualclusterbackuprequests.backup.gdc.goog.create manualclusterbackuprequests.backup.gdc.goog.delete manualclusterbackuprequests.backup.gdc.goog.get manualclusterbackuprequests.backup.gdc.goog.list manualclusterbackuprequests.backup.gdc.goog.watch manualclusterrestorerequests.backup.gdc.goog.create manualclusterrestorerequests.backup.gdc.goog.delete manualclusterrestorerequests.backup.gdc.goog.get manualclusterrestorerequests.backup.gdc.goog.list manualclusterrestorerequests.backup.gdc.goog.watch secrets.create
Organization Cluster Backup Viewer (organization-cluster-backup-viewer) Melihat pencadangan dan pemulihan cluster organisasi.	Zonal clusterbackupplans.backup.gdc.goog.get clusterbackupplans.backup.gdc.goog.list clusterbackupplans.backup.gdc.goog.watch clusterbackuprepositories.backup.gdc.goog.get clusterbackuprepositories.backup.gdc.goog.list clusterbackuprepositories.backup.gdc.goog.watch clusterbackups.backup.gdc.goog.get clusterbackups.backup.gdc.goog.list clusterbackups.backup.gdc.goog.watch clusterrestoreplans.backup.gdc.goog.get clusterrestoreplans.backup.gdc.goog.list clusterrestoreplans.backup.gdc.goog.watch clusterrestores.backup.gdc.goog.get clusterrestores.backup.gdc.goog.list clusterrestores.backup.gdc.goog.watch clustervolumebackups.backup.gdc.goog.get clustervolumebackups.backup.gdc.goog.list clustervolumebackups.backup.gdc.goog.watch clustervolumerestores.backup.gdc.goog.get clustervolumerestores.backup.gdc.goog.list clustervolumerestores.backup.gdc.goog.watch deleteclusterbackuprequests.backup.gdc.goog.get deleteclusterbackuprequests.backup.gdc.goog.list deleteclusterbackuprequests.backup.gdc.goog.watch manualclusterbackuprequests.backup.gdc.goog.get manualclusterbackuprequests.backup.gdc.goog.list manualclusterbackuprequests.backup.gdc.goog.watch manualclusterrestorerequests.backup.gdc.goog.get manualclusterrestorerequests.backup.gdc.goog.list manualclusterrestorerequests.backup.gdc.goog.watch
Organization Grafana Viewer (organization-grafana-viewer) Melihat instance Grafana organisasi.	Zonal platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.DELETE platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.GET platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.HEAD platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.OPTIONS platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.PATCH platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.POST platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.PUT
Admin Kebijakan Jaringan Organisasi (org-network-policy-admin) Buat dan kelola Kebijakan Jaringan Organisasi.	Zonal organizationnetworkpolicies.networking.gdc.goog.create organizationnetworkpolicies.networking.gdc.goog.delete organizationnetworkpolicies.networking.gdc.goog.get organizationnetworkpolicies.networking.gdc.goog.list organizationnetworkpolicies.networking.gdc.goog.patch organizationnetworkpolicies.networking.gdc.goog.update organizationnetworkpolicies.networking.gdc.goog.watch
Organization Network Policy Viewer (org-network-policy-viewer) Melihat Kebijakan Jaringan Organisasi.	Zonal organizationnetworkpolicies.networking.gdc.goog.get organizationnetworkpolicies.networking.gdc.goog.list organizationnetworkpolicies.networking.gdc.goog.watch
Organization Quota Administrator (organization-quota-admin) Mengelola Resource Kuota Global untuk Organisasi.	Global quotavalues.quotamanagement.global.gdc.goog.create quotavalues.quotamanagement.global.gdc.goog.delete quotavalues.quotamanagement.global.gdc.goog.get quotavalues.quotamanagement.global.gdc.goog.list quotavalues.quotamanagement.global.gdc.goog.patch quotavalues.quotamanagement.global.gdc.goog.update quotavalues.quotamanagement.global.gdc.goog.watch
Organization Quota Viewer (organization-quota-viewer) Melihat Resource Kuota Global untuk Organisasi.	Global quotavalues.quotamanagement.global.gdc.goog.get quotavalues.quotamanagement.global.gdc.goog.list quotavalues.quotamanagement.global.gdc.goog.watch
PKI Infra Admin (infra-pki-admin) Membuat dan mengelola CertificateIssuers dan CertificateAuthorities.	Zonal certificateauthorities.pki.security.gdc.goog.create certificateauthorities.pki.security.gdc.goog.delete certificateauthorities.pki.security.gdc.goog.get certificateauthorities.pki.security.gdc.goog.list certificateauthorities.pki.security.gdc.goog.patch certificateauthorities.pki.security.gdc.goog.update certificateauthorities.pki.security.gdc.goog.watch certificateissuers.pki.security.gdc.goog.create certificateissuers.pki.security.gdc.goog.delete certificateissuers.pki.security.gdc.goog.get certificateissuers.pki.security.gdc.goog.list certificateissuers.pki.security.gdc.goog.patch certificateissuers.pki.security.gdc.goog.update certificateissuers.pki.security.gdc.goog.watch secrets.get secrets.list
PKI Infra Viewer (infra-pki-viewer) Melihat CertificateIssuers dan CertificateAuthorities.	Zonal certificateauthorities.pki.security.gdc.goog.get certificateauthorities.pki.security.gdc.goog.list certificateauthorities.pki.security.gdc.goog.watch certificateissuers.pki.security.gdc.goog.get certificateissuers.pki.security.gdc.goog.list certificateissuers.pki.security.gdc.goog.watch secrets.get secrets.list
Project Creator (project-creator) Membuat dan melihat project.	Global projects.resourcemanager.global.gdc.goog.create projects.resourcemanager.global.gdc.goog.get projects.resourcemanager.global.gdc.goog.list projects.resourcemanager.global.gdc.goog.watch Zonal *.visibility.resourcemanager.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list namespaces.create namespaces.get namespaces.list namespaces.watch projectbindings.resourcemanager.gdc.goog.create projects.resourcemanager.gdc.goog.create projects.resourcemanager.gdc.goog.get projects.resourcemanager.gdc.goog.list projects.resourcemanager.gdc.goog.watch
Project Editor (project-editor) Mengelola project dan melihat zona.	Global projects.resourcemanager.global.gdc.goog.delete projects.resourcemanager.global.gdc.goog.get projects.resourcemanager.global.gdc.goog.list projects.resourcemanager.global.gdc.goog.patch projects.resourcemanager.global.gdc.goog.update projects.resourcemanager.global.gdc.goog.watch zones.location.mz.global.private.gdc.goog.get zones.location.mz.global.private.gdc.goog.list zones.location.mz.global.private.gdc.goog.watch Zonal *.visibility.resourcemanager.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list namespaces.delete namespaces.get namespaces.list namespaces.watch projectbindings.resourcemanager.gdc.goog.delete projectbindings.resourcemanager.gdc.goog.get projectbindings.resourcemanager.gdc.goog.list projectbindings.resourcemanager.gdc.goog.patch projectbindings.resourcemanager.gdc.goog.update projects.resourcemanager.gdc.goog.delete projects.resourcemanager.gdc.goog.get projects.resourcemanager.gdc.goog.list projects.resourcemanager.gdc.goog.patch projects.resourcemanager.gdc.goog.update projects.resourcemanager.gdc.goog.watch
Project Quota Adjudicator (project-quota-adjudicator) Menyelesaikan Konflik Resource Kuota Level Project Global Organisasi.	Global quotavalues.quotamanagement.global.gdc.goog.create quotavalues.quotamanagement.global.gdc.goog.delete quotavalues.quotamanagement.global.gdc.goog.get quotavalues.quotamanagement.global.gdc.goog.list quotavalues.quotamanagement.global.gdc.goog.patch quotavalues.quotamanagement.global.gdc.goog.update quotavalues.quotamanagement.global.gdc.goog.watch
Restrict By Attributes Policy Admin (gdchrestrictbyattributes-policy-admin) Memberikan akses buat, baca, update, dan hapus ke kebijakan Batasi Menurut Atribut.	Global gdchrestrictbyattributes.constraints.global.gatekeeper.sh.create gdchrestrictbyattributes.constraints.global.gatekeeper.sh.delete gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list gdchrestrictbyattributes.constraints.global.gatekeeper.sh.patch gdchrestrictbyattributes.constraints.global.gatekeeper.sh.update Zonal gdchrestrictbyattributes.constraints.gatekeeper.sh.create gdchrestrictbyattributes.constraints.gatekeeper.sh.delete gdchrestrictbyattributes.constraints.gatekeeper.sh.get gdchrestrictbyattributes.constraints.gatekeeper.sh.list gdchrestrictbyattributes.constraints.gatekeeper.sh.patch gdchrestrictbyattributes.constraints.gatekeeper.sh.update gdchrestrictbyattributes.constraints.global.gatekeeper.sh.create gdchrestrictbyattributes.constraints.global.gatekeeper.sh.delete gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list gdchrestrictbyattributes.constraints.global.gatekeeper.sh.patch gdchrestrictbyattributes.constraints.global.gatekeeper.sh.update
Restrict By Attributes Policy Viewer (gdchrestrictbyattributes-policy-viewer) Memberikan akses lihat ke kebijakan Batasi Menurut Atribut.	Global gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list Zonal gdchrestrictbyattributes.constraints.gatekeeper.sh.get gdchrestrictbyattributes.constraints.gatekeeper.sh.list gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list
Restricted Service Policy Admin (gdchrestrictedservice-policy-admin) Memberikan akses buat, baca, update, dan hapus ke kebijakan Layanan yang Dibatasi.	Global gdchrestrictedservice.constraints.global.gatekeeper.sh.create gdchrestrictedservice.constraints.global.gatekeeper.sh.delete gdchrestrictedservice.constraints.global.gatekeeper.sh.get gdchrestrictedservice.constraints.global.gatekeeper.sh.list gdchrestrictedservice.constraints.global.gatekeeper.sh.patch gdchrestrictedservice.constraints.global.gatekeeper.sh.update Zonal gdchrestrictedservice.constraints.gatekeeper.sh.create gdchrestrictedservice.constraints.gatekeeper.sh.delete gdchrestrictedservice.constraints.gatekeeper.sh.get gdchrestrictedservice.constraints.gatekeeper.sh.list gdchrestrictedservice.constraints.gatekeeper.sh.patch gdchrestrictedservice.constraints.gatekeeper.sh.update gdchrestrictedservice.constraints.global.gatekeeper.sh.create gdchrestrictedservice.constraints.global.gatekeeper.sh.delete gdchrestrictedservice.constraints.global.gatekeeper.sh.get gdchrestrictedservice.constraints.global.gatekeeper.sh.list gdchrestrictedservice.constraints.global.gatekeeper.sh.patch gdchrestrictedservice.constraints.global.gatekeeper.sh.update
Restricted Service Policy Viewer (gdchrestrictedservice-policy-viewer) Memberikan akses lihat ke kebijakan Layanan Terbatas.	Global gdchrestrictedservice.constraints.global.gatekeeper.sh.get gdchrestrictedservice.constraints.global.gatekeeper.sh.list Zonal gdchrestrictedservice.constraints.gatekeeper.sh.get gdchrestrictedservice.constraints.gatekeeper.sh.list gdchrestrictedservice.constraints.global.gatekeeper.sh.get gdchrestrictedservice.constraints.global.gatekeeper.sh.list
Session Org Admin (org-session-admin) Membatalkan sesi pengguna.	Zonal iam-admin-session-manager-backend/iam-admin-session-manager-backend.istio.resourcemanager.gdc.goog.GET iam-admin-session-manager-backend/iam-admin-session-manager-backend.istio.resourcemanager.gdc.goog.POST
Session Org Viewer (org-session-viewer) Membatalkan sesi pengguna.	Zonal iam-admin-session-manager-backend/iam-admin-session-manager-backend.istio.resourcemanager.gdc.goog.GET
Subnet Org Admin (subnet-org-admin) Membuat dan mengelola subnet di organisasi.	Global subnets.ipam.global.gdc.goog.create subnets.ipam.global.gdc.goog.delete subnets.ipam.global.gdc.goog.get subnets.ipam.global.gdc.goog.list subnets.ipam.global.gdc.goog.manage subnets.ipam.global.gdc.goog.patch subnets.ipam.global.gdc.goog.update subnets.ipam.global.gdc.goog.watch Zonal subnets.ipam.gdc.goog.create subnets.ipam.gdc.goog.delete subnets.ipam.gdc.goog.get subnets.ipam.gdc.goog.list subnets.ipam.gdc.goog.manage subnets.ipam.gdc.goog.patch subnets.ipam.gdc.goog.update subnets.ipam.gdc.goog.use subnets.ipam.gdc.goog.watch
Subnet Org Viewer (subnet-org-viewer) Melihat subnet di organisasi.	Global subnets.ipam.global.gdc.goog.get subnets.ipam.global.gdc.goog.list subnets.ipam.global.gdc.goog.watch Zonal subnets.ipam.gdc.goog.get subnets.ipam.gdc.goog.list subnets.ipam.gdc.goog.watch
Subnet Platform Viewer (subnet-platform-viewer) Melihat subnet.	Zonal subnets.ipam.gdc.goog.get subnets.ipam.gdc.goog.list
System Cluster Backup Repository Admin (system-cluster-backup-repository-admin) Mengelola repositori cadangan di cluster sistem.	Cluster Kubernetes backuprepositories.backup.gdc.goog.create backuprepositories.backup.gdc.goog.delete backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list backuprepositories.backup.gdc.goog.watch
System Cluster CRD Viewer (system-cluster-crd-viewer) Melihat Definisi Resource Kustom di Cluster Sistem.	Cluster Kubernetes customresourcedefinitions.apiextensions.k8s.io.get customresourcedefinitions.apiextensions.k8s.io.list
Admin Tag (tag-admin)	Zonal roles.rbac.authorization.k8s.io.bind tagkeys.resourcemanager.gdc.goog.bind-tag tagkeys.resourcemanager.gdc.goog.create tagkeys.resourcemanager.gdc.goog.delete tagkeys.resourcemanager.gdc.goog.get tagkeys.resourcemanager.gdc.goog.list tagkeys.resourcemanager.gdc.goog.patch tagkeys.resourcemanager.gdc.goog.update tagvalues.resourcemanager.gdc.goog.bind-tag tagvalues.resourcemanager.gdc.goog.create tagvalues.resourcemanager.gdc.goog.delete tagvalues.resourcemanager.gdc.goog.get tagvalues.resourcemanager.gdc.goog.list tagvalues.resourcemanager.gdc.goog.patch tagvalues.resourcemanager.gdc.goog.update
Transfer Appliance Request Creator (transfer-appliance-request-creator) Membuat dan melihat permintaan alat transfer.	Zonal transferappliancerequests.system.private.gdc.goog.create transferappliancerequests.system.private.gdc.goog.get transferappliancerequests.system.private.gdc.goog.list transferappliancerequests.system.private.gdc.goog.watch transferappliancerequests/status.system.private.gdc.goog.patch
Transfer Appliance Request Viewer (transfer-appliance-request-viewer) Melihat permintaan Transfer Appliance.	Zonal transferappliancerequests.system.private.gdc.goog.get transferappliancerequests.system.private.gdc.goog.list transferappliancerequests.system.private.gdc.goog.watch
Trust Store Admin (trust-store-admin) Membuat dan mengelola secret CA kustom.	Zonal secrets.create secrets.delete secrets.get secrets.list secrets.patch secrets.update secrets.watch
Trust Store Viewer (trust-store-viewer) Melihat secret penyimpanan tepercaya tertentu.	Zonal secrets.get secrets.list secrets.watch
Trusted Image Policy Admin (trusted-image-policy-admin) Mengelola kebijakan image tepercaya.	Global vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.create vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.delete vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.get vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.list vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.patch vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.update vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.watch
Upgrade Org Viewer (organization-upgrade-viewer) Melihat resource upgrade organisasi.	Zonal componentreleasemetadata.upgrade.private.gdc.goog.get componentreleasemetadata.upgrade.private.gdc.goog.list harborprojects.artifact.private.gdc.goog.get harborprojects.artifact.private.gdc.goog.list harborprojects.artifact.private.gdc.goog.watch harborusercredentials.artifact.private.gdc.goog.get maintenancewindows.upgrade.gdc.goog.get maintenancewindows.upgrade.gdc.goog.list maintenancewindows.upgrade.gdc.goog.watch
User Cluster Admin (user-cluster-admin) Mengelola siklus proses cluster pengguna dan mengupgrade resource.	Zonal clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list clusterinfos.resourcemanager.private.gdc.goog.watch clusters.baremetal.cluster.gke.io.get clusters.baremetal.cluster.gke.io.list clusters.baremetal.cluster.gke.io.watch clusters.cluster.gdc.goog.create clusters.cluster.gdc.goog.delete clusters.cluster.gdc.goog.get clusters.cluster.gdc.goog.list clusters.cluster.gdc.goog.patch clusters.cluster.gdc.goog.update clusters.cluster.gdc.goog.watch componentreleasemetadata.upgrade.private.gdc.goog.get componentreleasemetadata.upgrade.private.gdc.goog.list harborclusters.goharbor.io.get inventorymachines.baremetal.cluster.gke.io.get inventorymachines.baremetal.cluster.gke.io.list machineclasses.baremetal.cluster.gke.io.get machineclasses.baremetal.cluster.gke.io.list machineclasses.baremetal.cluster.gke.io.watch nodepoolclaims.baremetal.cluster.gke.io.get nodepoolclaims.baremetal.cluster.gke.io.list nodepoolclaims.baremetal.cluster.gke.io.watch nodepools.baremetal.cluster.gke.io.get nodepools.baremetal.cluster.gke.io.list nodepools.baremetal.cluster.gke.io.watch nodeupgrades.upgrade.private.gdc.goog.create nodeupgrades.upgrade.private.gdc.goog.get nodeupgrades.upgrade.private.gdc.goog.list nodeupgrades.upgrade.private.gdc.goog.patch nodeupgrades.upgrade.private.gdc.goog.update projectbindings.resourcemanager.gdc.goog.create projectbindings.resourcemanager.gdc.goog.delete projectbindings.resourcemanager.gdc.goog.get projectbindings.resourcemanager.gdc.goog.list projectbindings.resourcemanager.gdc.goog.watch projects.resourcemanager.gdc.goog.get projects.resourcemanager.gdc.goog.list projects.resourcemanager.gdc.goog.watch projects.visibility.resourcemanager.gdc.goog.get userclustermetadata.upgrade.private.gdc.goog.get userclustermetadata.upgrade.private.gdc.goog.list userclustermetadata.upgrade.private.gdc.goog.watch userclusterupgraderequests.cluster.gdc.goog.create userclusterupgraderequests.cluster.gdc.goog.delete userclusterupgraderequests.cluster.gdc.goog.get userclusterupgraderequests.cluster.gdc.goog.list userclusterupgraderequests.cluster.gdc.goog.patch userclusterupgraderequests.cluster.gdc.goog.update userclusterupgraderequests.cluster.gdc.goog.watch userclusterupgrades.upgrade.private.gdc.goog.create userclusterupgrades.upgrade.private.gdc.goog.delete userclusterupgrades.upgrade.private.gdc.goog.get userclusterupgrades.upgrade.private.gdc.goog.list userclusterupgrades.upgrade.private.gdc.goog.patch userclusterupgrades.upgrade.private.gdc.goog.update userclusterupgrades.upgrade.private.gdc.goog.watch virtualmachinetypes.virtualmachine.gdc.goog.get virtualmachinetypes.virtualmachine.gdc.goog.list virtualmachinetypes.virtualmachine.gdc.goog.watch
User Cluster Backup Admin (user-cluster-backup-admin) Mengelola pencadangan, pemulihan, dan aplikasi yang dilindungi cluster pengguna.	Cluster Kubernetes backupplans.backup.gdc.goog.create backupplans.backup.gdc.goog.delete backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backupplans.backup.gdc.goog.patch backupplans.backup.gdc.goog.update backupplans.backup.gdc.goog.watch backuprepositories.backup.gdc.goog.create backuprepositories.backup.gdc.goog.delete backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list backuprepositories.backup.gdc.goog.watch backups.backup.gdc.goog.get backups.backup.gdc.goog.list backups.backup.gdc.goog.watch clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list clusterinfos.resourcemanager.private.gdc.goog.watch deletebackuprequests.backup.gdc.goog.create deletebackuprequests.backup.gdc.goog.delete deletebackuprequests.backup.gdc.goog.get deletebackuprequests.backup.gdc.goog.list deletebackuprequests.backup.gdc.goog.watch deployments.apps.create deployments.apps.delete deployments.apps.get deployments.apps.list deployments.apps.patch deployments.apps.update deployments.apps.watch manualbackuprequests.backup.gdc.goog.create manualbackuprequests.backup.gdc.goog.delete manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.watch manualrestorerequests.backup.gdc.goog.create manualrestorerequests.backup.gdc.goog.delete manualrestorerequests.backup.gdc.goog.get manualrestorerequests.backup.gdc.goog.list manualrestorerequests.backup.gdc.goog.watch persistentvolumeclaims.create persistentvolumeclaims.delete persistentvolumeclaims.get persistentvolumeclaims.list persistentvolumeclaims.patch persistentvolumeclaims.update persistentvolumeclaims.watch pods.create pods.delete pods.get pods.list pods.patch pods.update pods.watch protectedapplications.gkebackup.gke.io.create protectedapplications.gkebackup.gke.io.delete protectedapplications.gkebackup.gke.io.get protectedapplications.gkebackup.gke.io.list protectedapplications.gkebackup.gke.io.patch protectedapplications.gkebackup.gke.io.update protectedapplications.gkebackup.gke.io.watch restoreplans.backup.gdc.goog.create restoreplans.backup.gdc.goog.delete restoreplans.backup.gdc.goog.get restoreplans.backup.gdc.goog.list restoreplans.backup.gdc.goog.patch restoreplans.backup.gdc.goog.update restoreplans.backup.gdc.goog.watch restores.backup.gdc.goog.create restores.backup.gdc.goog.delete restores.backup.gdc.goog.get restores.backup.gdc.goog.list restores.backup.gdc.goog.watch services.create services.delete services.get services.list services.patch services.update services.watch statefulsets.apps.create statefulsets.apps.delete statefulsets.apps.get statefulsets.apps.list statefulsets.apps.patch statefulsets.apps.update statefulsets.apps.watch volumebackups.backup.gdc.goog.get volumebackups.backup.gdc.goog.list volumebackups.backup.gdc.goog.watch volumerestores.backup.gdc.goog.get volumerestores.backup.gdc.goog.list volumerestores.backup.gdc.goog.watch
User Cluster Backup Viewer (user-cluster-backup-viewer) Melihat pencadangan, pemulihan, dan aplikasi yang dilindungi di cluster pengguna.	Cluster Kubernetes backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backupplans.backup.gdc.goog.watch backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list backuprepositories.backup.gdc.goog.watch backups.backup.gdc.goog.get backups.backup.gdc.goog.list backups.backup.gdc.goog.watch clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list clusterinfos.resourcemanager.private.gdc.goog.watch deletebackuprequests.backup.gdc.goog.get deletebackuprequests.backup.gdc.goog.list deletebackuprequests.backup.gdc.goog.watch deployments.apps.get deployments.apps.list deployments.apps.watch manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.watch manualrestorerequests.backup.gdc.goog.get manualrestorerequests.backup.gdc.goog.list manualrestorerequests.backup.gdc.goog.watch persistentvolumeclaims.get persistentvolumeclaims.list persistentvolumeclaims.watch pods.get pods.list pods.watch protectedapplications.gkebackup.gke.io.get protectedapplications.gkebackup.gke.io.list protectedapplications.gkebackup.gke.io.watch restoreplans.backup.gdc.goog.get restoreplans.backup.gdc.goog.list restoreplans.backup.gdc.goog.watch restores.backup.gdc.goog.get restores.backup.gdc.goog.list restores.backup.gdc.goog.watch services.get services.list services.watch statefulsets.apps.get statefulsets.apps.list statefulsets.apps.watch volumebackups.backup.gdc.goog.get volumebackups.backup.gdc.goog.list volumebackups.backup.gdc.goog.watch volumerestores.backup.gdc.goog.get volumerestores.backup.gdc.goog.list volumerestores.backup.gdc.goog.watch
User Cluster CRD Viewer (user-cluster-crd-viewer) Melihat Definisi Resource Kustom di Cluster Pengguna.	Cluster Kubernetes customresourcedefinitions.apiextensions.k8s.io.get customresourcedefinitions.apiextensions.k8s.io.list
User Cluster Developer (user-cluster-developer) Melihat berbagai resource di cluster pengguna.	Cluster Kubernetes *.constraints.gatekeeper.sh.get *.constraints.gatekeeper.sh.list *.templates.gatekeeper.sh/v1.get *.templates.gatekeeper.sh/v1.list apiservices.apiregistration.k8s.io.get apiservices.apiregistration.k8s.io.list backupjobs.gkebackup.gke.io.get backupjobs.gkebackup.gke.io.list backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list certificatesigningrequests.certificates.k8s.io.get certificatesigningrequests.certificates.k8s.io.list ciliumclusterwidenetworkpolicies.cilium.io.get ciliumclusterwidenetworkpolicies.cilium.io.list ciliumegressgatewaypolicies.cilium.io.get ciliumegressgatewaypolicies.cilium.io.list ciliumegressnatpolicies.cilium.io.get ciliumegressnatpolicies.cilium.io.list ciliumexternalworkloads.cilium.io.get ciliumexternalworkloads.cilium.io.list ciliumidentities.cilium.io.get ciliumidentities.cilium.io.list ciliumnodes.cilium.io.get ciliumnodes.cilium.io.list clustercidrconfigs.networking.gke.io.get clustercidrconfigs.networking.gke.io.list clusterdns.networking.gke.io.get clusterdns.networking.gke.io.list clusterissuers.cert-manager.io.get clusterissuers.cert-manager.io.list clusterrolebindings.rbac.authorization.k8s.io.get clusterrolebindings.rbac.authorization.k8s.io.list clusterroles.rbac.authorization.k8s.io.get clusterroles.rbac.authorization.k8s.io.list csidrivers.storage.k8s.io.get csidrivers.storage.k8s.io.list csinodes.storage.k8s.io.get csinodes.storage.k8s.io.list customresourcedefinitions.apiextensions.k8s.io.get customresourcedefinitions.apiextensions.k8s.io.list egressnatpolicies.networking.gke.io.get egressnatpolicies.networking.gke.io.list events.get events.list events.watch flatipmodes.networking.gke.io.get flatipmodes.networking.gke.io.list ingressclasses.networking.gke.io.get ingressclasses.networking.gke.io.list metricsserver.addons.gke.io.get metricsserver.addons.gke.io.list mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.get mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.list namespaces.get namespaces.list networkloggings.networking.gke.io.get networkloggings.networking.gke.io.list networks.networking.gke.io.get networks.networking.gke.io.list nodes.get nodes.list nodes.patch nodes.update objectbuckets.objectbucket.io.get objectbuckets.objectbucket.io.list persistentvolumes.get persistentvolumes.list pods.create pods.delete pods.get pods.list pods.metrics.k8s.io.get pods.metrics.k8s.io.list pods.patch pods.update pods.watch pods/exec.create pods/log.get priorityclasses.scheduling.k8s.io.get priorityclasses.scheduling.k8s.io.list restorejobs.gkebackup.gke.io.get restorejobs.gkebackup.gke.io.list runtimeclasses.node.k8s.io.get runtimeclasses.node.k8s.io.list storageclasses.storage.k8s.io.get storageclasses.storage.k8s.io.list validatingwebhookconfigurations.admissionregistration.k8s.io/v1.get validatingwebhookconfigurations.admissionregistration.k8s.io/v1.list vmruntimes.virtualmachine.private.gdc.goog.get vmruntimes.virtualmachine.private.gdc.goog.list volumeattachments.storage.k8s.io.get volumeattachments.storage.k8s.io.list volumesnapshotclasses.snapshot.storage.k8s.io.get volumesnapshotclasses.snapshot.storage.k8s.io.list volumesnapshotcontents.snapshot.storage.k8s.io.get volumesnapshotcontents.snapshot.storage.k8s.io.list
User Cluster Developer Viewer (user-cluster-developer-viewer) Melihat berbagai resource di cluster pengguna.	Cluster Kubernetes *.constraints.gatekeeper.sh.get *.constraints.gatekeeper.sh.list *.templates.gatekeeper.sh/v1.get *.templates.gatekeeper.sh/v1.list apiservices.apiregistration.k8s.io.get apiservices.apiregistration.k8s.io.list backupjobs.gkebackup.gke.io.get backupjobs.gkebackup.gke.io.list backuprepositories.backup.gdc.goog.get backuprepositories.backup.gdc.goog.list certificatesigningrequests.certificates.k8s.io.get certificatesigningrequests.certificates.k8s.io.list ciliumclusterwidenetworkpolicies.cilium.io.get ciliumclusterwidenetworkpolicies.cilium.io.list ciliumegressgatewaypolicies.cilium.io.get ciliumegressgatewaypolicies.cilium.io.list ciliumegressnatpolicies.cilium.io.get ciliumegressnatpolicies.cilium.io.list ciliumexternalworkloads.cilium.io.get ciliumexternalworkloads.cilium.io.list ciliumidentities.cilium.io.get ciliumidentities.cilium.io.list ciliumnodes.cilium.io.get ciliumnodes.cilium.io.list clustercidrconfigs.networking.gke.io.get clustercidrconfigs.networking.gke.io.list clusterdns.networking.gke.io.get clusterdns.networking.gke.io.list clusterissuers.cert-manager.io.get clusterissuers.cert-manager.io.list clusterrolebindings.rbac.authorization.k8s.io.get clusterrolebindings.rbac.authorization.k8s.io.list clusterroles.rbac.authorization.k8s.io.get clusterroles.rbac.authorization.k8s.io.list csidrivers.storage.k8s.io.get csidrivers.storage.k8s.io.list csinodes.storage.k8s.io.get csinodes.storage.k8s.io.list customresourcedefinitions.apiextensions.k8s.io.get customresourcedefinitions.apiextensions.k8s.io.list egressnatpolicies.networking.gke.io.get egressnatpolicies.networking.gke.io.list events.get events.list events.watch flatipmodes.networking.gke.io.get flatipmodes.networking.gke.io.list ingressclasses.networking.gke.io.get ingressclasses.networking.gke.io.list metricsserver.addons.gke.io.get metricsserver.addons.gke.io.list mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.get mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.list namespaces.get namespaces.list networkloggings.networking.gke.io.get networkloggings.networking.gke.io.list networks.networking.gke.io.get networks.networking.gke.io.list nodes.get nodes.list objectbuckets.objectbucket.io.get objectbuckets.objectbucket.io.list persistentvolumes.get persistentvolumes.list pods.get pods.list pods.metrics.k8s.io.get pods.metrics.k8s.io.list pods.watch pods/log.get priorityclasses.scheduling.k8s.io.get priorityclasses.scheduling.k8s.io.list restorejobs.gkebackup.gke.io.get restorejobs.gkebackup.gke.io.list runtimeclasses.node.k8s.io.get runtimeclasses.node.k8s.io.list storageclasses.storage.k8s.io.get storageclasses.storage.k8s.io.list validatingwebhookconfigurations.admissionregistration.k8s.io/v1.get validatingwebhookconfigurations.admissionregistration.k8s.io/v1.list vmruntimes.virtualmachine.private.gdc.goog.get vmruntimes.virtualmachine.private.gdc.goog.list volumeattachments.storage.k8s.io.get volumeattachments.storage.k8s.io.list volumesnapshotclasses.snapshot.storage.k8s.io.get volumesnapshotclasses.snapshot.storage.k8s.io.list volumesnapshotcontents.snapshot.storage.k8s.io.get volumesnapshotcontents.snapshot.storage.k8s.io.list
User Cluster Node Viewer (user-cluster-node-viewer) Melihat node di cluster pengguna.	Cluster Kubernetes nodes.get nodes.list nodes.watch
User Cluster Viewer (user-cluster-viewer) Melihat siklus proses cluster pengguna dan resource upgrade.	Zonal clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list clusterinfos.resourcemanager.private.gdc.goog.watch clusters.baremetal.cluster.gke.io.get clusters.baremetal.cluster.gke.io.list clusters.baremetal.cluster.gke.io.watch clusters.cluster.gdc.goog.get clusters.cluster.gdc.goog.list clusters.cluster.gdc.goog.watch componentreleasemetadata.upgrade.private.gdc.goog.get componentreleasemetadata.upgrade.private.gdc.goog.list harborclusters.goharbor.io.get inventorymachines.baremetal.cluster.gke.io.get inventorymachines.baremetal.cluster.gke.io.list machineclasses.baremetal.cluster.gke.io.get machineclasses.baremetal.cluster.gke.io.list machineclasses.baremetal.cluster.gke.io.watch nodepoolclaims.baremetal.cluster.gke.io.get nodepoolclaims.baremetal.cluster.gke.io.list nodepoolclaims.baremetal.cluster.gke.io.watch nodepools.baremetal.cluster.gke.io.get nodepools.baremetal.cluster.gke.io.list nodepools.baremetal.cluster.gke.io.watch nodeupgrades.upgrade.private.gdc.goog.get nodeupgrades.upgrade.private.gdc.goog.list projectbindings.resourcemanager.gdc.goog.get projectbindings.resourcemanager.gdc.goog.list projectbindings.resourcemanager.gdc.goog.watch projects.resourcemanager.gdc.goog.get projects.resourcemanager.gdc.goog.list projects.resourcemanager.gdc.goog.watch projects.visibility.resourcemanager.gdc.goog.get userclustermetadata.upgrade.private.gdc.goog.get userclustermetadata.upgrade.private.gdc.goog.list userclustermetadata.upgrade.private.gdc.goog.watch userclusterupgraderequests.cluster.gdc.goog.get userclusterupgraderequests.cluster.gdc.goog.list userclusterupgraderequests.cluster.gdc.goog.watch userclusterupgrades.upgrade.private.gdc.goog.get userclusterupgrades.upgrade.private.gdc.goog.list userclusterupgrades.upgrade.private.gdc.goog.watch virtualmachinetypes.virtualmachine.gdc.goog.get virtualmachinetypes.virtualmachine.gdc.goog.list virtualmachinetypes.virtualmachine.gdc.goog.watch
VPN Admin (vpn-admin) Membuat dan mengelola resource terkait VPN.	Zonal peergateways.networking.gdc.goog.create peergateways.networking.gdc.goog.delete peergateways.networking.gdc.goog.get peergateways.networking.gdc.goog.list peergateways.networking.gdc.goog.patch peergateways.networking.gdc.goog.update peergateways.networking.gdc.goog.watch peergateways/status.networking.gdc.goog.create peergateways/status.networking.gdc.goog.delete peergateways/status.networking.gdc.goog.get peergateways/status.networking.gdc.goog.list peergateways/status.networking.gdc.goog.patch peergateways/status.networking.gdc.goog.update peergateways/status.networking.gdc.goog.watch secrets.create secrets.delete secrets.get secrets.list secrets.patch secrets.update secrets.watch vpnbgppeers.networking.gdc.goog.create vpnbgppeers.networking.gdc.goog.delete vpnbgppeers.networking.gdc.goog.get vpnbgppeers.networking.gdc.goog.list vpnbgppeers.networking.gdc.goog.patch vpnbgppeers.networking.gdc.goog.update vpnbgppeers.networking.gdc.goog.watch vpnbgppeers/status.networking.gdc.goog.create vpnbgppeers/status.networking.gdc.goog.delete vpnbgppeers/status.networking.gdc.goog.get vpnbgppeers/status.networking.gdc.goog.list vpnbgppeers/status.networking.gdc.goog.patch vpnbgppeers/status.networking.gdc.goog.update vpnbgppeers/status.networking.gdc.goog.watch vpngateways.networking.gdc.goog.create vpngateways.networking.gdc.goog.delete vpngateways.networking.gdc.goog.get vpngateways.networking.gdc.goog.list vpngateways.networking.gdc.goog.patch vpngateways.networking.gdc.goog.update vpngateways.networking.gdc.goog.watch vpngateways/status.networking.gdc.goog.create vpngateways/status.networking.gdc.goog.delete vpngateways/status.networking.gdc.goog.get vpngateways/status.networking.gdc.goog.list vpngateways/status.networking.gdc.goog.patch vpngateways/status.networking.gdc.goog.update vpngateways/status.networking.gdc.goog.watch vpntunnels.networking.gdc.goog.create vpntunnels.networking.gdc.goog.delete vpntunnels.networking.gdc.goog.get vpntunnels.networking.gdc.goog.list vpntunnels.networking.gdc.goog.patch vpntunnels.networking.gdc.goog.update vpntunnels.networking.gdc.goog.watch vpntunnels/status.networking.gdc.goog.create vpntunnels/status.networking.gdc.goog.delete vpntunnels/status.networking.gdc.goog.get vpntunnels/status.networking.gdc.goog.list vpntunnels/status.networking.gdc.goog.patch vpntunnels/status.networking.gdc.goog.update vpntunnels/status.networking.gdc.goog.watch
VPN Viewer (vpn-viewer) Membaca resource terkait VPN.	Zonal peergateways.networking.gdc.goog.get peergateways.networking.gdc.goog.list peergateways.networking.gdc.goog.watch peergateways/status.networking.gdc.goog.get peergateways/status.networking.gdc.goog.list peergateways/status.networking.gdc.goog.watch secrets.get secrets.list secrets.watch vpnbgppeers.networking.gdc.goog.get vpnbgppeers.networking.gdc.goog.list vpnbgppeers.networking.gdc.goog.watch vpnbgppeers/status.networking.gdc.goog.get vpnbgppeers/status.networking.gdc.goog.list vpnbgppeers/status.networking.gdc.goog.watch vpngateways.networking.gdc.goog.get vpngateways.networking.gdc.goog.list vpngateways.networking.gdc.goog.watch vpngateways/status.networking.gdc.goog.get vpngateways/status.networking.gdc.goog.list vpngateways/status.networking.gdc.goog.watch vpntunnels.networking.gdc.goog.get vpntunnels.networking.gdc.goog.list vpntunnels.networking.gdc.goog.watch vpntunnels/status.networking.gdc.goog.get vpntunnels/status.networking.gdc.goog.list vpntunnels/status.networking.gdc.goog.watch
Admin Platform Vertex AI (ai-platform-admin) Mengelola UI AI Platform.	Zonal aiplatform/ui.istio.resourcemanager.gdc.goog.create aiplatform/ui.istio.resourcemanager.gdc.goog.delete aiplatform/ui.istio.resourcemanager.gdc.goog.deletecollection aiplatform/ui.istio.resourcemanager.gdc.goog.get aiplatform/ui.istio.resourcemanager.gdc.goog.list aiplatform/ui.istio.resourcemanager.gdc.goog.patch aiplatform/ui.istio.resourcemanager.gdc.goog.update aiplatform/ui.istio.resourcemanager.gdc.goog.watch
Administrator Pencadangan Virtual Machine (vmbackup-admin) Memberikan akses buat, lihat, perbarui, dan hapus ke rencana pencadangan VM, pencadangan, pemulihan, dan permintaan terkait.	Zonal backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backups.backup.gdc.goog.get backups.backup.gdc.goog.list deletebackuprequests.backup.gdc.goog.get deletebackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list restores.backup.gdc.goog.get restores.backup.gdc.goog.list virtualmachinebackupplans.virtualmachine.gdc.goog.create virtualmachinebackupplans.virtualmachine.gdc.goog.delete virtualmachinebackupplans.virtualmachine.gdc.goog.get virtualmachinebackupplans.virtualmachine.gdc.goog.list virtualmachinebackupplans.virtualmachine.gdc.goog.patch virtualmachinebackupplans.virtualmachine.gdc.goog.update virtualmachinebackupplans.virtualmachine.gdc.goog.watch virtualmachinebackupplantemplates.virtualmachine.gdc.goog.create virtualmachinebackupplantemplates.virtualmachine.gdc.goog.delete virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list virtualmachinebackupplantemplates.virtualmachine.gdc.goog.patch virtualmachinebackupplantemplates.virtualmachine.gdc.goog.update virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch virtualmachinebackuprequests.virtualmachine.gdc.goog.create virtualmachinebackuprequests.virtualmachine.gdc.goog.delete virtualmachinebackuprequests.virtualmachine.gdc.goog.get virtualmachinebackuprequests.virtualmachine.gdc.goog.list virtualmachinebackuprequests.virtualmachine.gdc.goog.patch virtualmachinebackuprequests.virtualmachine.gdc.goog.update virtualmachinebackuprequests.virtualmachine.gdc.goog.watch virtualmachinebackups.virtualmachine.gdc.goog.create virtualmachinebackups.virtualmachine.gdc.goog.delete virtualmachinebackups.virtualmachine.gdc.goog.get virtualmachinebackups.virtualmachine.gdc.goog.list virtualmachinebackups.virtualmachine.gdc.goog.patch virtualmachinebackups.virtualmachine.gdc.goog.update virtualmachinebackups.virtualmachine.gdc.goog.watch virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.create virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.delete virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.patch virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.update virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch virtualmachinerestorerequests.virtualmachine.gdc.goog.create virtualmachinerestorerequests.virtualmachine.gdc.goog.delete virtualmachinerestorerequests.virtualmachine.gdc.goog.get virtualmachinerestorerequests.virtualmachine.gdc.goog.list virtualmachinerestorerequests.virtualmachine.gdc.goog.patch virtualmachinerestorerequests.virtualmachine.gdc.goog.update virtualmachinerestorerequests.virtualmachine.gdc.goog.watch virtualmachinerestores.virtualmachine.gdc.goog.create virtualmachinerestores.virtualmachine.gdc.goog.delete virtualmachinerestores.virtualmachine.gdc.goog.get virtualmachinerestores.virtualmachine.gdc.goog.list virtualmachinerestores.virtualmachine.gdc.goog.patch virtualmachinerestores.virtualmachine.gdc.goog.update virtualmachinerestores.virtualmachine.gdc.goog.watch volumebackups.backup.gdc.goog.get volumebackups.backup.gdc.goog.list volumerestores.backup.gdc.goog.get volumerestores.backup.gdc.goog.list
Volume Replication Global Admin (volume-replication-admin) Mengelola hubungan replikasi volume.	Global volumereplicationrelationships.storage.global.gdc.goog.create volumereplicationrelationships.storage.global.gdc.goog.delete volumereplicationrelationships.storage.global.gdc.goog.get volumereplicationrelationships.storage.global.gdc.goog.list volumereplicationrelationships.storage.global.gdc.goog.watch Zonal volumefailovers.storage.gdc.goog.create volumefailovers.storage.gdc.goog.delete volumefailovers.storage.gdc.goog.get volumefailovers.storage.gdc.goog.list volumefailovers.storage.gdc.goog.watch volumereplicationrelationshipreplicas.storage.global.gdc.goog.create volumereplicationrelationshipreplicas.storage.global.gdc.goog.delete volumereplicationrelationshipreplicas.storage.global.gdc.goog.get volumereplicationrelationshipreplicas.storage.global.gdc.goog.list volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
Volume Replication Global Admin (app-volume-replication-admin) Mengelola hubungan replikasi volume.	Global volumereplicationrelationships.storage.global.gdc.goog.create volumereplicationrelationships.storage.global.gdc.goog.delete volumereplicationrelationships.storage.global.gdc.goog.get volumereplicationrelationships.storage.global.gdc.goog.list volumereplicationrelationships.storage.global.gdc.goog.watch Zonal volumefailovers.storage.gdc.goog.create volumefailovers.storage.gdc.goog.delete volumefailovers.storage.gdc.goog.get volumefailovers.storage.gdc.goog.list volumefailovers.storage.gdc.goog.watch volumereplicationrelationshipreplicas.storage.global.gdc.goog.create volumereplicationrelationshipreplicas.storage.global.gdc.goog.delete volumereplicationrelationshipreplicas.storage.global.gdc.goog.get volumereplicationrelationshipreplicas.storage.global.gdc.goog.list volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
Volume Replication Global Viewer (app-volume-replication-viewer) Melihat hubungan replikasi volume.	Global volumereplicationrelationships.storage.global.gdc.goog.get volumereplicationrelationships.storage.global.gdc.goog.list volumereplicationrelationships.storage.global.gdc.goog.watch Zonal volumefailovers.storage.gdc.goog.get volumefailovers.storage.gdc.goog.list volumefailovers.storage.gdc.goog.watch volumereplicationrelationshipreplicas.storage.global.gdc.goog.get volumereplicationrelationshipreplicas.storage.global.gdc.goog.list volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
Volume Replication Global Viewer (volume-replication-viewer) Melihat hubungan replikasi volume.	Global volumereplicationrelationships.storage.global.gdc.goog.get volumereplicationrelationships.storage.global.gdc.goog.list volumereplicationrelationships.storage.global.gdc.goog.watch Zonal volumefailovers.storage.gdc.goog.get volumefailovers.storage.gdc.goog.list volumefailovers.storage.gdc.goog.watch volumereplicationrelationshipreplicas.storage.global.gdc.goog.get volumereplicationrelationshipreplicas.storage.global.gdc.goog.list volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
Web TLS Certificate Admin (web-tls-cert-admin) Membuat dan mengelola sertifikat dan rahasia PKI khusus Web TLS.	Global certificates.pki.security.gdc.goog.create certificates.pki.security.gdc.goog.delete certificates.pki.security.gdc.goog.get certificates.pki.security.gdc.goog.list certificates.pki.security.gdc.goog.patch certificates.pki.security.gdc.goog.update certificates.pki.security.gdc.goog.watch secrets.create secrets.delete secrets.get secrets.list secrets.patch secrets.update secrets.watch Zonal certificates.pki.security.gdc.goog.create certificates.pki.security.gdc.goog.delete certificates.pki.security.gdc.goog.get certificates.pki.security.gdc.goog.list certificates.pki.security.gdc.goog.patch certificates.pki.security.gdc.goog.update certificates.pki.security.gdc.goog.watch secrets.create secrets.delete secrets.get secrets.list secrets.patch secrets.update secrets.watch
Web TLS Certificate Viewer (web-tls-cert-viewer) Melihat sertifikat dan rahasia PKI khusus TLS Web.	Global certificates.pki.security.gdc.goog.get certificates.pki.security.gdc.goog.list certificates.pki.security.gdc.goog.watch secrets.get secrets.list secrets.watch Zonal certificates.pki.security.gdc.goog.get certificates.pki.security.gdc.goog.list certificates.pki.security.gdc.goog.watch secrets.get secrets.list secrets.watch

Peran dan izin level project

Peran berikut diberikan dalam project tertentu.

Nama dan deskripsi peran	Izin
AI Large Gemini Developer (ai-large-gemini-developer) Memberikan izin untuk mengakses layanan Gemini yang besar dalam project.	Zonal endpoints.large-gemini.gdc.goog.cancel-batch endpoints.large-gemini.gdc.goog.cancel-upload endpoints.large-gemini.gdc.goog.chat-completions endpoints.large-gemini.gdc.goog.complete-upload endpoints.large-gemini.gdc.goog.create-batch endpoints.large-gemini.gdc.goog.create-cached-content endpoints.large-gemini.gdc.goog.create-file endpoints.large-gemini.gdc.goog.create-part endpoints.large-gemini.gdc.goog.create-upload endpoints.large-gemini.gdc.goog.delete-cached-content endpoints.large-gemini.gdc.goog.delete-file endpoints.large-gemini.gdc.goog.generate-content endpoints.large-gemini.gdc.goog.get-batch endpoints.large-gemini.gdc.goog.get-cached-content endpoints.large-gemini.gdc.goog.get-file endpoints.large-gemini.gdc.goog.list-available-models endpoints.large-gemini.gdc.goog.list-batches endpoints.large-gemini.gdc.goog.list-cached-contents endpoints.large-gemini.gdc.goog.list-files endpoints.large-gemini.gdc.goog.list-models endpoints.large-gemini.gdc.goog.stream-generate-content endpoints.large-gemini.gdc.goog.update-cached-content
AI Large Gemini Viewer (ai-large-gemini-viewer) Memberikan izin untuk mengakses layanan Gemini yang besar dalam project.	Zonal endpoints.large-gemini.gdc.goog.get-batch endpoints.large-gemini.gdc.goog.get-cached-content endpoints.large-gemini.gdc.goog.get-file endpoints.large-gemini.gdc.goog.list-available-models endpoints.large-gemini.gdc.goog.list-batches endpoints.large-gemini.gdc.goog.list-cached-contents endpoints.large-gemini.gdc.goog.list-files
Backup Creator (backup-creator) Membuat cadangan dan pemulihan.	Cluster Kubernetes backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backupplans.backup.gdc.goog.watch backups.backup.gdc.goog.get backups.backup.gdc.goog.list backups.backup.gdc.goog.watch deletebackuprequests.backup.gdc.goog.get deletebackuprequests.backup.gdc.goog.list deletebackuprequests.backup.gdc.goog.watch manualbackuprequests.backup.gdc.goog.create manualbackuprequests.backup.gdc.goog.delete manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.watch manualrestorerequests.backup.gdc.goog.create manualrestorerequests.backup.gdc.goog.delete manualrestorerequests.backup.gdc.goog.get manualrestorerequests.backup.gdc.goog.list manualrestorerequests.backup.gdc.goog.watch restoreplans.backup.gdc.goog.get restoreplans.backup.gdc.goog.list restoreplans.backup.gdc.goog.watch restores.backup.gdc.goog.get restores.backup.gdc.goog.list restores.backup.gdc.goog.watch volumebackups.backup.gdc.goog.get volumebackups.backup.gdc.goog.list volumebackups.backup.gdc.goog.watch volumerestores.backup.gdc.goog.get volumerestores.backup.gdc.goog.list volumerestores.backup.gdc.goog.watch
Backup Viewer (backup-viewer) Melihat pencadangan dan pemulihan.	Cluster Kubernetes backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backupplans.backup.gdc.goog.watch backups.backup.gdc.goog.get backups.backup.gdc.goog.list backups.backup.gdc.goog.watch deletebackuprequests.backup.gdc.goog.get deletebackuprequests.backup.gdc.goog.list deletebackuprequests.backup.gdc.goog.watch manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.watch manualrestorerequests.backup.gdc.goog.get manualrestorerequests.backup.gdc.goog.list manualrestorerequests.backup.gdc.goog.watch restoreplans.backup.gdc.goog.get restoreplans.backup.gdc.goog.list restoreplans.backup.gdc.goog.watch restores.backup.gdc.goog.get restores.backup.gdc.goog.list restores.backup.gdc.goog.watch volumebackups.backup.gdc.goog.get volumebackups.backup.gdc.goog.list volumebackups.backup.gdc.goog.watch volumerestores.backup.gdc.goog.get volumerestores.backup.gdc.goog.list volumerestores.backup.gdc.goog.watch
Bookstore Admin (bookstore-admin) Membuat dan melihat Rak Buku Play Store.	Zonal shelves.bookstore-grpc.googleapis.com.create shelves.bookstore-grpc.googleapis.com.get shelves.cloudresourcemanager.googleapis.com.create shelves.cloudresourcemanager.googleapis.com.get
Bookstore Viewer (bookstore-viewer) Melihat Rak Buku Toko Buku.	Zonal shelves.bookstore-grpc.googleapis.com.get shelves.cloudresourcemanager.googleapis.com.get
Bucket Object Project Admin (project-bucket-object-admin) Membaca CR Bucket project global; membaca metadata bucket backend yang sesuai, dan mengelola objek di bucket tersebut, melalui S3 API	Global buckets.object.global.gdc.goog.get buckets.object.global.gdc.goog.list buckets.object.global.gdc.goog.read-object buckets.object.global.gdc.goog.watch buckets.object.global.gdc.goog.write-object Zonal bucketinfos.object.gdc.goog.get bucketinfos.object.gdc.goog.list buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.read-object buckets.object.gdc.goog.watch buckets.object.gdc.goog.write-object
Bucket Object Project Viewer (project-bucket-object-viewer) Membaca CR Bucket project global; membaca metadata bucket backend yang sesuai, dan membaca objek di bucket tersebut, melalui S3 API.	Global bucketlocations.object.global.gdc.goog.get bucketlocations.object.global.gdc.goog.list buckets.object.global.gdc.goog.get buckets.object.global.gdc.goog.list buckets.object.global.gdc.goog.read-object buckets.object.global.gdc.goog.watch Zonal bucketinfos.object.gdc.goog.get bucketinfos.object.gdc.goog.list buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.read-object buckets.object.gdc.goog.watch
Bucket Project Admin (project-bucket-admin) Mengelola CR Bucket project global; membaca metadata bucket backend yang sesuai, dan mengelola objek di bucket tersebut, melalui S3 API.	Global bucketlocations.object.global.gdc.goog.get bucketlocations.object.global.gdc.goog.list buckets.object.global.gdc.goog.create buckets.object.global.gdc.goog.delete buckets.object.global.gdc.goog.get buckets.object.global.gdc.goog.list buckets.object.global.gdc.goog.patch buckets.object.global.gdc.goog.read-object buckets.object.global.gdc.goog.update buckets.object.global.gdc.goog.watch buckets.object.global.gdc.goog.write-object Zonal bucketinfos.object.gdc.goog.get bucketinfos.object.gdc.goog.list bucketinfos.object.gdc.goog.patch bucketinfos.object.gdc.goog.update bucketinfos.object.gdc.goog.watch buckets.object.gdc.goog.create buckets.object.gdc.goog.delete buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.patch buckets.object.gdc.goog.read-object buckets.object.gdc.goog.update buckets.object.gdc.goog.watch buckets.object.gdc.goog.write-object
CA Service Certificate Requester (certificate-authority-service-certificate-requester) Membuat dan melihat permintaan sertifikat serta mengambil sertifikat yang diterbitkan.	Zonal certificaterequests.pki.security.gdc.goog.create certificaterequests.pki.security.gdc.goog.get certificaterequests.pki.security.gdc.goog.list secrets.get secrets.list
CA Service Operation Manager (certificate-authority-service-operation-manager) Mengelola Otoritas Sertifikat dan mencabut sertifikat.	Zonal certificateauthorities.pki.security.gdc.goog.create certificateauthorities.pki.security.gdc.goog.delete certificateauthorities.pki.security.gdc.goog.get certificateauthorities.pki.security.gdc.goog.list certificateauthorities.pki.security.gdc.goog.patch certificateauthorities.pki.security.gdc.goog.update certificateauthorities.pki.security.gdc.goog.watch certificaterequests.pki.security.gdc.goog.get certificaterequests.pki.security.gdc.goog.list certificaterequests.pki.security.gdc.goog.watch revokecertificaterequests.pki.security.gdc.goog.create revokecertificaterequests.pki.security.gdc.goog.delete revokecertificaterequests.pki.security.gdc.goog.get revokecertificaterequests.pki.security.gdc.goog.list revokecertificaterequests.pki.security.gdc.goog.patch revokecertificaterequests.pki.security.gdc.goog.update revokecertificaterequests.pki.security.gdc.goog.watch secrets.get secrets.list
Certificate Authority Service Admin (certificate-authority-service-admin) Membuat dan mengelola CertificateAuthorities, CertificateRequests, dan RevokeCertificateRequests.	Zonal certificateauthorities.pki.security.gdc.goog.create certificateauthorities.pki.security.gdc.goog.delete certificateauthorities.pki.security.gdc.goog.get certificateauthorities.pki.security.gdc.goog.list certificateauthorities.pki.security.gdc.goog.patch certificateauthorities.pki.security.gdc.goog.update certificateauthorities.pki.security.gdc.goog.watch certificaterequests.pki.security.gdc.goog.create certificaterequests.pki.security.gdc.goog.delete certificaterequests.pki.security.gdc.goog.get certificaterequests.pki.security.gdc.goog.list certificaterequests.pki.security.gdc.goog.patch certificaterequests.pki.security.gdc.goog.update certificaterequests.pki.security.gdc.goog.watch revokecertificaterequests.pki.security.gdc.goog.create revokecertificaterequests.pki.security.gdc.goog.delete revokecertificaterequests.pki.security.gdc.goog.get revokecertificaterequests.pki.security.gdc.goog.list revokecertificaterequests.pki.security.gdc.goog.patch revokecertificaterequests.pki.security.gdc.goog.update revokecertificaterequests.pki.security.gdc.goog.watch secrets.get secrets.list
Certificate Authority Service Viewer (certificate-authority-service-viewer) Akses pelihat ke CertificateAuthorities, CertificateRequests, dan RevokeCertificateRequests.	Zonal certificateauthorities.pki.security.gdc.goog.get certificateauthorities.pki.security.gdc.goog.list certificaterequests.pki.security.gdc.goog.get certificaterequests.pki.security.gdc.goog.list revokecertificaterequests.pki.security.gdc.goog.get revokecertificaterequests.pki.security.gdc.goog.list secrets.get secrets.list
Certificate Service Admin (certificate-service-admin) Membuat dan mengelola Sertifikat dan CertificateIssuers.	Zonal certificateissuers.pki.security.gdc.goog.create certificateissuers.pki.security.gdc.goog.delete certificateissuers.pki.security.gdc.goog.get certificateissuers.pki.security.gdc.goog.list certificateissuers.pki.security.gdc.goog.patch certificateissuers.pki.security.gdc.goog.update certificateissuers.pki.security.gdc.goog.watch certificates.pki.security.gdc.goog.create certificates.pki.security.gdc.goog.delete certificates.pki.security.gdc.goog.get certificates.pki.security.gdc.goog.list certificates.pki.security.gdc.goog.patch certificates.pki.security.gdc.goog.update certificates.pki.security.gdc.goog.watch
Certificate Service Viewer (certificate-service-viewer) Melihat Sertifikat dan CertificateIssuers.	Zonal certificateissuers.pki.security.gdc.goog.get certificateissuers.pki.security.gdc.goog.list certificateissuers.pki.security.gdc.goog.watch certificates.pki.security.gdc.goog.get certificates.pki.security.gdc.goog.list certificates.pki.security.gdc.goog.watch
Cloud NAT Developer (cloud-nat-developer) Dapat melakukan CRUD resource CloudNAT dalam project.	Zonal cloudnatgateways.networking.gdc.goog.create cloudnatgateways.networking.gdc.goog.delete cloudnatgateways.networking.gdc.goog.get cloudnatgateways.networking.gdc.goog.list cloudnatgateways.networking.gdc.goog.patch cloudnatgateways.networking.gdc.goog.update cloudnatgateways.networking.gdc.goog.watch
Pengelola Cloud NAT (cloud-nat-manager) Dapat melakukan CRUD resource CloudNAT dalam project.	Zonal cloudnatgateways.networking.gdc.goog.create cloudnatgateways.networking.gdc.goog.delete cloudnatgateways.networking.gdc.goog.get cloudnatgateways.networking.gdc.goog.list cloudnatgateways.networking.gdc.goog.patch cloudnatgateways.networking.gdc.goog.update cloudnatgateways.networking.gdc.goog.watch
Pelihat Cloud NAT (cloud-nat-viewer) Dapat melihat resource/status CloudNAT dalam project	Zonal cloudnatgateways.networking.gdc.goog.get cloudnatgateways.networking.gdc.goog.list cloudnatgateways.networking.gdc.goog.watch
Cluster Backup User (clusterbackup-user) Memberikan akses lihat ke rencana pencadangan dan pemulihan cluster, serta akses penuh ke pencadangan dan pemulihan cluster.	Zonal clusterbackupplans.backup.gdc.goog.get clusterbackupplans.backup.gdc.goog.list clusterbackupplans.backup.gdc.goog.watch clusterbackups.backup.gdc.goog.get clusterbackups.backup.gdc.goog.list clusterbackups.backup.gdc.goog.watch clusterrestoreplans.backup.gdc.goog.get clusterrestoreplans.backup.gdc.goog.list clusterrestoreplans.backup.gdc.goog.watch clusterrestores.backup.gdc.goog.get clusterrestores.backup.gdc.goog.list clusterrestores.backup.gdc.goog.watch manualclusterbackuprequest.backup.gdc.goog.create manualclusterbackuprequest.backup.gdc.goog.delete manualclusterbackuprequest.backup.gdc.goog.get manualclusterbackuprequest.backup.gdc.goog.list manualclusterbackuprequest.backup.gdc.goog.patch manualclusterbackuprequest.backup.gdc.goog.update manualclusterbackuprequest.backup.gdc.goog.watch manualclusterrestorerequest.backup.gdc.goog.create manualclusterrestorerequest.backup.gdc.goog.delete manualclusterrestorerequest.backup.gdc.goog.get manualclusterrestorerequest.backup.gdc.goog.list manualclusterrestorerequest.backup.gdc.goog.patch manualclusterrestorerequest.backup.gdc.goog.update manualclusterrestorerequest.backup.gdc.goog.watch
Cluster Backup Viewer (clusterbackup-viewer) Memberikan akses lihat ke cadangan cluster, pemulihan cluster, rencana pencadangan cluster, dan rencana pemulihan cluster.	Zonal clusterbackupplans.backup.gdc.goog.get clusterbackupplans.backup.gdc.goog.list clusterbackupplans.backup.gdc.goog.watch clusterbackups.backup.gdc.goog.get clusterbackups.backup.gdc.goog.list clusterbackups.backup.gdc.goog.watch clusterrestoreplans.backup.gdc.goog.get clusterrestoreplans.backup.gdc.goog.list clusterrestoreplans.backup.gdc.goog.watch clusterrestores.backup.gdc.goog.get clusterrestores.backup.gdc.goog.list clusterrestores.backup.gdc.goog.watch manualclusterbackuprequest.backup.gdc.goog.get manualclusterbackuprequest.backup.gdc.goog.list manualclusterbackuprequest.backup.gdc.goog.watch manualclusterrestorerequest.backup.gdc.goog.get manualclusterrestorerequest.backup.gdc.goog.list manualclusterrestorerequest.backup.gdc.goog.watch
Custom Role Project Admin (custom-role-project-admin) Mengelola peran khusus di namespace project.	Global customroles.iam.global.gdc.goog.create customroles.iam.global.gdc.goog.delete customroles.iam.global.gdc.goog.get customroles.iam.global.gdc.goog.list customroles.iam.global.gdc.goog.patch customroles.iam.global.gdc.goog.update customroles.iam.global.gdc.goog.watch iamroles.iam.global.gdc.goog.get iamroles.iam.global.gdc.goog.list roles.rbac.authorization.k8s.io.get Zonal customroles.iam.gdc.goog.create customroles.iam.gdc.goog.delete customroles.iam.gdc.goog.get customroles.iam.gdc.goog.list customroles.iam.gdc.goog.patch customroles.iam.gdc.goog.update customroles.iam.gdc.goog.watch projectroles.resourcemanager.gdc.goog.get roles.rbac.authorization.k8s.io.get
Custom Role Project Viewer (custom-role-project-viewer) Melihat peran khusus di namespace project.	Global customroles.iam.global.gdc.goog.get customroles.iam.global.gdc.goog.list customroles.iam.global.gdc.goog.watch iamroles.iam.global.gdc.goog.get iamroles.iam.global.gdc.goog.list roles.rbac.authorization.k8s.io.get Zonal customroles.iam.gdc.goog.get customroles.iam.gdc.goog.list customroles.iam.gdc.goog.watch projectroles.resourcemanager.gdc.goog.get roles.rbac.authorization.k8s.io.get
Editor Dasbor (dashboard-editor) Mengedit dasbor.	Zonal configmaps.create configmaps.delete configmaps.get configmaps.list configmaps.patch configmaps.update configmaps.watch dashboards.observability.gdc.goog.delete dashboards.observability.gdc.goog.get dashboards.observability.gdc.goog.list dashboards.observability.gdc.goog.patch dashboards.observability.gdc.goog.update dashboards.observability.gdc.goog.watch
Dashboard Viewer (dashboard-viewer) Melihat dasbor.	Zonal dashboards.observability.gdc.goog.get dashboards.observability.gdc.goog.list dashboards.observability.gdc.goog.watch
Database Project Admin (project-db-admin) Mengelola resource database project global.	Global com.google.android.gms/.backup.BackupTransportService Zonal com.google.android.gms/.backup.BackupTransportService
Database Project Editor (project-db-editor) Mengedit resource database project global.	Global backupplans.alloydbomni.dbadmin.gdc.goog.get backupplans.alloydbomni.dbadmin.gdc.goog.list backupplans.alloydbomni.dbadmin.gdc.goog.watch backupplans.oracle.dbadmin.gdc.goog.get backupplans.oracle.dbadmin.gdc.goog.list backupplans.oracle.dbadmin.gdc.goog.watch backupplans.postgresql.dbadmin.gdc.goog.get backupplans.postgresql.dbadmin.gdc.goog.list backupplans.postgresql.dbadmin.gdc.goog.watch backups.alloydbomni.dbadmin.gdc.goog.get backups.alloydbomni.dbadmin.gdc.goog.list backups.alloydbomni.dbadmin.gdc.goog.watch backups.oracle.dbadmin.gdc.goog.get backups.oracle.dbadmin.gdc.goog.list backups.oracle.dbadmin.gdc.goog.watch backups.postgresql.dbadmin.gdc.goog.get backups.postgresql.dbadmin.gdc.goog.list backups.postgresql.dbadmin.gdc.goog.watch dbclusters.alloydbomni.dbadmin.gdc.goog.get dbclusters.alloydbomni.dbadmin.gdc.goog.list dbclusters.alloydbomni.dbadmin.gdc.goog.patch dbclusters.alloydbomni.dbadmin.gdc.goog.update dbclusters.alloydbomni.dbadmin.gdc.goog.watch dbclusters.oracle.dbadmin.gdc.goog.get dbclusters.oracle.dbadmin.gdc.goog.list dbclusters.oracle.dbadmin.gdc.goog.patch dbclusters.oracle.dbadmin.gdc.goog.update dbclusters.oracle.dbadmin.gdc.goog.watch dbclusters.postgresql.dbadmin.gdc.goog.get dbclusters.postgresql.dbadmin.gdc.goog.list dbclusters.postgresql.dbadmin.gdc.goog.patch dbclusters.postgresql.dbadmin.gdc.goog.update dbclusters.postgresql.dbadmin.gdc.goog.watch exports.alloydbomni.dbadmin.gdc.goog.create exports.alloydbomni.dbadmin.gdc.goog.delete exports.alloydbomni.dbadmin.gdc.goog.get exports.alloydbomni.dbadmin.gdc.goog.list exports.alloydbomni.dbadmin.gdc.goog.watch exports.oracle.dbadmin.gdc.goog.create exports.oracle.dbadmin.gdc.goog.delete exports.oracle.dbadmin.gdc.goog.get exports.oracle.dbadmin.gdc.goog.list exports.oracle.dbadmin.gdc.goog.watch exports.postgresql.dbadmin.gdc.goog.create exports.postgresql.dbadmin.gdc.goog.delete exports.postgresql.dbadmin.gdc.goog.get exports.postgresql.dbadmin.gdc.goog.list exports.postgresql.dbadmin.gdc.goog.watch externalservers.alloydbomni.dbadmin.gdc.goog.create externalservers.alloydbomni.dbadmin.gdc.goog.delete externalservers.alloydbomni.dbadmin.gdc.goog.get externalservers.alloydbomni.dbadmin.gdc.goog.list externalservers.alloydbomni.dbadmin.gdc.goog.patch externalservers.alloydbomni.dbadmin.gdc.goog.update externalservers.alloydbomni.dbadmin.gdc.goog.watch externalservers.postgresql.dbadmin.gdc.goog.create externalservers.postgresql.dbadmin.gdc.goog.delete externalservers.postgresql.dbadmin.gdc.goog.get externalservers.postgresql.dbadmin.gdc.goog.list externalservers.postgresql.dbadmin.gdc.goog.patch externalservers.postgresql.dbadmin.gdc.goog.update externalservers.postgresql.dbadmin.gdc.goog.watch failovers.fleet.dbadmin.gdc.goog.create failovers.fleet.dbadmin.gdc.goog.delete failovers.fleet.dbadmin.gdc.goog.get failovers.fleet.dbadmin.gdc.goog.list failovers.fleet.dbadmin.gdc.goog.watch imports.alloydbomni.dbadmin.gdc.goog.create imports.alloydbomni.dbadmin.gdc.goog.delete imports.alloydbomni.dbadmin.gdc.goog.get imports.alloydbomni.dbadmin.gdc.goog.list imports.alloydbomni.dbadmin.gdc.goog.watch imports.oracle.dbadmin.gdc.goog.create imports.oracle.dbadmin.gdc.goog.delete imports.oracle.dbadmin.gdc.goog.get imports.oracle.dbadmin.gdc.goog.list imports.oracle.dbadmin.gdc.goog.watch imports.postgresql.dbadmin.gdc.goog.create imports.postgresql.dbadmin.gdc.goog.delete imports.postgresql.dbadmin.gdc.goog.get imports.postgresql.dbadmin.gdc.goog.list imports.postgresql.dbadmin.gdc.goog.watch migrations.alloydbomni.dbadmin.gdc.goog.get migrations.alloydbomni.dbadmin.gdc.goog.list migrations.alloydbomni.dbadmin.gdc.goog.patch migrations.alloydbomni.dbadmin.gdc.goog.update migrations.alloydbomni.dbadmin.gdc.goog.watch migrations.postgresql.dbadmin.gdc.goog.get migrations.postgresql.dbadmin.gdc.goog.list migrations.postgresql.dbadmin.gdc.goog.patch migrations.postgresql.dbadmin.gdc.goog.update migrations.postgresql.dbadmin.gdc.goog.watch replications.postgresql.dbadmin.gdc.goog.get replications.postgresql.dbadmin.gdc.goog.list replications.postgresql.dbadmin.gdc.goog.patch replications.postgresql.dbadmin.gdc.goog.update replications.postgresql.dbadmin.gdc.goog.watch restores.alloydbomni.dbadmin.gdc.goog.get restores.alloydbomni.dbadmin.gdc.goog.list restores.alloydbomni.dbadmin.gdc.goog.watch restores.oracle.dbadmin.gdc.goog.get restores.oracle.dbadmin.gdc.goog.list restores.oracle.dbadmin.gdc.goog.watch restores.postgresql.dbadmin.gdc.goog.get restores.postgresql.dbadmin.gdc.goog.list restores.postgresql.dbadmin.gdc.goog.watch secrets.create secrets.delete secrets.get secrets.list secrets.update Zonal backupplans.alloydbomni.dbadmin.gdc.goog.get backupplans.alloydbomni.dbadmin.gdc.goog.list backupplans.alloydbomni.dbadmin.gdc.goog.watch backupplans.oracle.dbadmin.gdc.goog.get backupplans.oracle.dbadmin.gdc.goog.list backupplans.oracle.dbadmin.gdc.goog.watch backupplans.postgresql.dbadmin.gdc.goog.get backupplans.postgresql.dbadmin.gdc.goog.list backupplans.postgresql.dbadmin.gdc.goog.watch backups.alloydbomni.dbadmin.gdc.goog.get backups.alloydbomni.dbadmin.gdc.goog.list backups.alloydbomni.dbadmin.gdc.goog.watch backups.oracle.dbadmin.gdc.goog.get backups.oracle.dbadmin.gdc.goog.list backups.oracle.dbadmin.gdc.goog.watch backups.postgresql.dbadmin.gdc.goog.get backups.postgresql.dbadmin.gdc.goog.list backups.postgresql.dbadmin.gdc.goog.watch dbclusters.alloydbomni.dbadmin.gdc.goog.get dbclusters.alloydbomni.dbadmin.gdc.goog.list dbclusters.alloydbomni.dbadmin.gdc.goog.patch dbclusters.alloydbomni.dbadmin.gdc.goog.update dbclusters.alloydbomni.dbadmin.gdc.goog.watch dbclusters.oracle.dbadmin.gdc.goog.get dbclusters.oracle.dbadmin.gdc.goog.list dbclusters.oracle.dbadmin.gdc.goog.patch dbclusters.oracle.dbadmin.gdc.goog.update dbclusters.oracle.dbadmin.gdc.goog.watch dbclusters.postgresql.dbadmin.gdc.goog.get dbclusters.postgresql.dbadmin.gdc.goog.list dbclusters.postgresql.dbadmin.gdc.goog.patch dbclusters.postgresql.dbadmin.gdc.goog.update dbclusters.postgresql.dbadmin.gdc.goog.watch exports.alloydbomni.dbadmin.gdc.goog.create exports.alloydbomni.dbadmin.gdc.goog.delete exports.alloydbomni.dbadmin.gdc.goog.get exports.alloydbomni.dbadmin.gdc.goog.list exports.alloydbomni.dbadmin.gdc.goog.watch exports.oracle.dbadmin.gdc.goog.create exports.oracle.dbadmin.gdc.goog.delete exports.oracle.dbadmin.gdc.goog.get exports.oracle.dbadmin.gdc.goog.list exports.oracle.dbadmin.gdc.goog.watch exports.postgresql.dbadmin.gdc.goog.create exports.postgresql.dbadmin.gdc.goog.delete exports.postgresql.dbadmin.gdc.goog.get exports.postgresql.dbadmin.gdc.goog.list exports.postgresql.dbadmin.gdc.goog.watch externalservers.alloydbomni.dbadmin.gdc.goog.create externalservers.alloydbomni.dbadmin.gdc.goog.delete externalservers.alloydbomni.dbadmin.gdc.goog.get externalservers.alloydbomni.dbadmin.gdc.goog.list externalservers.alloydbomni.dbadmin.gdc.goog.patch externalservers.alloydbomni.dbadmin.gdc.goog.update externalservers.alloydbomni.dbadmin.gdc.goog.watch externalservers.postgresql.dbadmin.gdc.goog.create externalservers.postgresql.dbadmin.gdc.goog.delete externalservers.postgresql.dbadmin.gdc.goog.get externalservers.postgresql.dbadmin.gdc.goog.list externalservers.postgresql.dbadmin.gdc.goog.patch externalservers.postgresql.dbadmin.gdc.goog.update externalservers.postgresql.dbadmin.gdc.goog.watch failovers.fleet.dbadmin.gdc.goog.create failovers.fleet.dbadmin.gdc.goog.delete failovers.fleet.dbadmin.gdc.goog.get failovers.fleet.dbadmin.gdc.goog.list failovers.fleet.dbadmin.gdc.goog.watch imports.alloydbomni.dbadmin.gdc.goog.create imports.alloydbomni.dbadmin.gdc.goog.delete imports.alloydbomni.dbadmin.gdc.goog.get imports.alloydbomni.dbadmin.gdc.goog.list imports.alloydbomni.dbadmin.gdc.goog.watch imports.oracle.dbadmin.gdc.goog.create imports.oracle.dbadmin.gdc.goog.delete imports.oracle.dbadmin.gdc.goog.get imports.oracle.dbadmin.gdc.goog.list imports.oracle.dbadmin.gdc.goog.watch imports.postgresql.dbadmin.gdc.goog.create imports.postgresql.dbadmin.gdc.goog.delete imports.postgresql.dbadmin.gdc.goog.get imports.postgresql.dbadmin.gdc.goog.list imports.postgresql.dbadmin.gdc.goog.watch migrations.alloydbomni.dbadmin.gdc.goog.get migrations.alloydbomni.dbadmin.gdc.goog.list migrations.alloydbomni.dbadmin.gdc.goog.patch migrations.alloydbomni.dbadmin.gdc.goog.update migrations.alloydbomni.dbadmin.gdc.goog.watch migrations.postgresql.dbadmin.gdc.goog.get migrations.postgresql.dbadmin.gdc.goog.list migrations.postgresql.dbadmin.gdc.goog.patch migrations.postgresql.dbadmin.gdc.goog.update migrations.postgresql.dbadmin.gdc.goog.watch replications.postgresql.dbadmin.gdc.goog.get replications.postgresql.dbadmin.gdc.goog.list replications.postgresql.dbadmin.gdc.goog.patch replications.postgresql.dbadmin.gdc.goog.update replications.postgresql.dbadmin.gdc.goog.watch restores.alloydbomni.dbadmin.gdc.goog.get restores.alloydbomni.dbadmin.gdc.goog.list restores.alloydbomni.dbadmin.gdc.goog.watch restores.oracle.dbadmin.gdc.goog.get restores.oracle.dbadmin.gdc.goog.list restores.oracle.dbadmin.gdc.goog.watch restores.postgresql.dbadmin.gdc.goog.get restores.postgresql.dbadmin.gdc.goog.list restores.postgresql.dbadmin.gdc.goog.watch secrets.create secrets.delete secrets.get secrets.list secrets.update
Database Project Viewer (project-db-viewer) Melihat resource database project global.	Global backupplans.alloydbomni.dbadmin.gdc.goog.get backupplans.alloydbomni.dbadmin.gdc.goog.list backupplans.alloydbomni.dbadmin.gdc.goog.watch backupplans.oracle.dbadmin.gdc.goog.get backupplans.oracle.dbadmin.gdc.goog.list backupplans.oracle.dbadmin.gdc.goog.watch backupplans.postgresql.dbadmin.gdc.goog.get backupplans.postgresql.dbadmin.gdc.goog.list backupplans.postgresql.dbadmin.gdc.goog.watch backups.alloydbomni.dbadmin.gdc.goog.get backups.alloydbomni.dbadmin.gdc.goog.list backups.alloydbomni.dbadmin.gdc.goog.watch backups.oracle.dbadmin.gdc.goog.get backups.oracle.dbadmin.gdc.goog.list backups.oracle.dbadmin.gdc.goog.watch backups.postgresql.dbadmin.gdc.goog.get backups.postgresql.dbadmin.gdc.goog.list backups.postgresql.dbadmin.gdc.goog.watch configmaps.get dbclusters.alloydbomni.dbadmin.gdc.goog.get dbclusters.alloydbomni.dbadmin.gdc.goog.list dbclusters.alloydbomni.dbadmin.gdc.goog.watch dbclusters.oracle.dbadmin.gdc.goog.get dbclusters.oracle.dbadmin.gdc.goog.list dbclusters.oracle.dbadmin.gdc.goog.watch dbclusters.postgresql.dbadmin.gdc.goog.get dbclusters.postgresql.dbadmin.gdc.goog.list dbclusters.postgresql.dbadmin.gdc.goog.watch exports.alloydbomni.dbadmin.gdc.goog.get exports.alloydbomni.dbadmin.gdc.goog.list exports.alloydbomni.dbadmin.gdc.goog.watch exports.oracle.dbadmin.gdc.goog.get exports.oracle.dbadmin.gdc.goog.list exports.oracle.dbadmin.gdc.goog.watch exports.postgresql.dbadmin.gdc.goog.get exports.postgresql.dbadmin.gdc.goog.list exports.postgresql.dbadmin.gdc.goog.watch externalservers.alloydbomni.dbadmin.gdc.goog.get externalservers.alloydbomni.dbadmin.gdc.goog.list externalservers.alloydbomni.dbadmin.gdc.goog.watch externalservers.postgresql.dbadmin.gdc.goog.get externalservers.postgresql.dbadmin.gdc.goog.list externalservers.postgresql.dbadmin.gdc.goog.watch failovers.fleet.dbadmin.gdc.goog.get failovers.fleet.dbadmin.gdc.goog.list failovers.fleet.dbadmin.gdc.goog.watch imports.alloydbomni.dbadmin.gdc.goog.get imports.alloydbomni.dbadmin.gdc.goog.list imports.alloydbomni.dbadmin.gdc.goog.watch imports.oracle.dbadmin.gdc.goog.get imports.oracle.dbadmin.gdc.goog.list imports.oracle.dbadmin.gdc.goog.watch imports.postgresql.dbadmin.gdc.goog.get imports.postgresql.dbadmin.gdc.goog.list imports.postgresql.dbadmin.gdc.goog.watch migrations.alloydbomni.dbadmin.gdc.goog.get migrations.alloydbomni.dbadmin.gdc.goog.list migrations.alloydbomni.dbadmin.gdc.goog.watch migrations.postgresql.dbadmin.gdc.goog.get migrations.postgresql.dbadmin.gdc.goog.list migrations.postgresql.dbadmin.gdc.goog.watch replications.postgresql.dbadmin.gdc.goog.get replications.postgresql.dbadmin.gdc.goog.list replications.postgresql.dbadmin.gdc.goog.watch restores.alloydbomni.dbadmin.gdc.goog.get restores.alloydbomni.dbadmin.gdc.goog.list restores.alloydbomni.dbadmin.gdc.goog.watch restores.oracle.dbadmin.gdc.goog.get restores.oracle.dbadmin.gdc.goog.list restores.oracle.dbadmin.gdc.goog.watch restores.postgresql.dbadmin.gdc.goog.get restores.postgresql.dbadmin.gdc.goog.list restores.postgresql.dbadmin.gdc.goog.watch secrets.get secrets.list Zonal backupplans.alloydbomni.dbadmin.gdc.goog.get backupplans.alloydbomni.dbadmin.gdc.goog.list backupplans.alloydbomni.dbadmin.gdc.goog.watch backupplans.oracle.dbadmin.gdc.goog.get backupplans.oracle.dbadmin.gdc.goog.list backupplans.oracle.dbadmin.gdc.goog.watch backupplans.postgresql.dbadmin.gdc.goog.get backupplans.postgresql.dbadmin.gdc.goog.list backupplans.postgresql.dbadmin.gdc.goog.watch backups.alloydbomni.dbadmin.gdc.goog.get backups.alloydbomni.dbadmin.gdc.goog.list backups.alloydbomni.dbadmin.gdc.goog.watch backups.oracle.dbadmin.gdc.goog.get backups.oracle.dbadmin.gdc.goog.list backups.oracle.dbadmin.gdc.goog.watch backups.postgresql.dbadmin.gdc.goog.get backups.postgresql.dbadmin.gdc.goog.list backups.postgresql.dbadmin.gdc.goog.watch configmaps.get dbclusters.alloydbomni.dbadmin.gdc.goog.get dbclusters.alloydbomni.dbadmin.gdc.goog.list dbclusters.alloydbomni.dbadmin.gdc.goog.watch dbclusters.oracle.dbadmin.gdc.goog.get dbclusters.oracle.dbadmin.gdc.goog.list dbclusters.oracle.dbadmin.gdc.goog.watch dbclusters.postgresql.dbadmin.gdc.goog.get dbclusters.postgresql.dbadmin.gdc.goog.list dbclusters.postgresql.dbadmin.gdc.goog.watch exports.alloydbomni.dbadmin.gdc.goog.get exports.alloydbomni.dbadmin.gdc.goog.list exports.alloydbomni.dbadmin.gdc.goog.watch exports.oracle.dbadmin.gdc.goog.get exports.oracle.dbadmin.gdc.goog.list exports.oracle.dbadmin.gdc.goog.watch exports.postgresql.dbadmin.gdc.goog.get exports.postgresql.dbadmin.gdc.goog.list exports.postgresql.dbadmin.gdc.goog.watch externalservers.alloydbomni.dbadmin.gdc.goog.get externalservers.alloydbomni.dbadmin.gdc.goog.list externalservers.alloydbomni.dbadmin.gdc.goog.watch externalservers.postgresql.dbadmin.gdc.goog.get externalservers.postgresql.dbadmin.gdc.goog.list externalservers.postgresql.dbadmin.gdc.goog.watch failovers.fleet.dbadmin.gdc.goog.get failovers.fleet.dbadmin.gdc.goog.list failovers.fleet.dbadmin.gdc.goog.watch imports.alloydbomni.dbadmin.gdc.goog.get imports.alloydbomni.dbadmin.gdc.goog.list imports.alloydbomni.dbadmin.gdc.goog.watch imports.oracle.dbadmin.gdc.goog.get imports.oracle.dbadmin.gdc.goog.list imports.oracle.dbadmin.gdc.goog.watch imports.postgresql.dbadmin.gdc.goog.get imports.postgresql.dbadmin.gdc.goog.list imports.postgresql.dbadmin.gdc.goog.watch migrations.alloydbomni.dbadmin.gdc.goog.get migrations.alloydbomni.dbadmin.gdc.goog.list migrations.alloydbomni.dbadmin.gdc.goog.watch migrations.postgresql.dbadmin.gdc.goog.get migrations.postgresql.dbadmin.gdc.goog.list migrations.postgresql.dbadmin.gdc.goog.watch replications.postgresql.dbadmin.gdc.goog.get replications.postgresql.dbadmin.gdc.goog.list replications.postgresql.dbadmin.gdc.goog.watch restores.alloydbomni.dbadmin.gdc.goog.get restores.alloydbomni.dbadmin.gdc.goog.list restores.alloydbomni.dbadmin.gdc.goog.watch restores.oracle.dbadmin.gdc.goog.get restores.oracle.dbadmin.gdc.goog.list restores.oracle.dbadmin.gdc.goog.watch restores.postgresql.dbadmin.gdc.goog.get restores.postgresql.dbadmin.gdc.goog.list restores.postgresql.dbadmin.gdc.goog.watch secrets.get secrets.list
Pelihat Load Balancer Eksternal (external-load-balancer-viewer) Melihat resource load balancer eksternal dalam project.	Global backendservicepolicies.networking.global.gdc.goog.get backendservicepolicies.networking.global.gdc.goog.list backendservicepolicies.networking.global.gdc.goog.watch backendservices.networking.global.gdc.goog.get backendservices.networking.global.gdc.goog.list backendservices.networking.global.gdc.goog.watch forwardingruleexternals.networking.global.gdc.goog.get forwardingruleexternals.networking.global.gdc.goog.list forwardingruleexternals.networking.global.gdc.goog.watch healthchecks.networking.global.gdc.goog.get healthchecks.networking.global.gdc.goog.list healthchecks.networking.global.gdc.goog.watch Zonal backends.networking.gdc.goog.get backends.networking.gdc.goog.list backends.networking.gdc.goog.watch backendservicepolicies.networking.gdc.goog.get backendservicepolicies.networking.gdc.goog.list backendservicepolicies.networking.gdc.goog.watch backendservices.networking.gdc.goog.get backendservices.networking.gdc.goog.list backendservices.networking.gdc.goog.watch forwardingruleexternals.networking.gdc.goog.get forwardingruleexternals.networking.gdc.goog.list forwardingruleexternals.networking.gdc.goog.watch healthchecks.networking.gdc.goog.get healthchecks.networking.gdc.goog.list healthchecks.networking.gdc.goog.watch
File Share Project Admin (project-fileshare-admin) Mengelola berbagi file, exportgroupbindings, dan grup ekspor.	Zonal exportgroupbindings.file.gdc.goog.create exportgroupbindings.file.gdc.goog.delete exportgroupbindings.file.gdc.goog.get exportgroupbindings.file.gdc.goog.list exportgroupbindings.file.gdc.goog.patch exportgroupbindings.file.gdc.goog.update exportgroupbindings.file.gdc.goog.watch exportgroups.file.gdc.goog.create exportgroups.file.gdc.goog.delete exportgroups.file.gdc.goog.get exportgroups.file.gdc.goog.list exportgroups.file.gdc.goog.patch exportgroups.file.gdc.goog.update exportgroups.file.gdc.goog.watch fileshares.file.gdc.goog.create fileshares.file.gdc.goog.delete fileshares.file.gdc.goog.get fileshares.file.gdc.goog.list fileshares.file.gdc.goog.patch fileshares.file.gdc.goog.update fileshares.file.gdc.goog.watch
File Share Project Viewer (project-fileshare-viewer) Melihat fileshare, exportgroupbindings, dan grup ekspor.	Zonal exportgroupbindings.file.gdc.goog.get exportgroupbindings.file.gdc.goog.list exportgroupbindings.file.gdc.goog.watch exportgroups.file.gdc.goog.get exportgroups.file.gdc.goog.list exportgroups.file.gdc.goog.watch fileshares.file.gdc.goog.get fileshares.file.gdc.goog.list fileshares.file.gdc.goog.watch
Global External Load Balancer Admin (external-load-balancer-admin) Membuat dan mengelola resource load balancer eksternal global dalam project global.	Global backendservicepolicies.networking.global.gdc.goog.create backendservicepolicies.networking.global.gdc.goog.delete backendservicepolicies.networking.global.gdc.goog.get backendservicepolicies.networking.global.gdc.goog.list backendservicepolicies.networking.global.gdc.goog.patch backendservicepolicies.networking.global.gdc.goog.update backendservicepolicies.networking.global.gdc.goog.watch backendservices.networking.global.gdc.goog.create backendservices.networking.global.gdc.goog.delete backendservices.networking.global.gdc.goog.get backendservices.networking.global.gdc.goog.list backendservices.networking.global.gdc.goog.patch backendservices.networking.global.gdc.goog.update backendservices.networking.global.gdc.goog.watch forwardingruleexternals.networking.global.gdc.goog.create forwardingruleexternals.networking.global.gdc.goog.delete forwardingruleexternals.networking.global.gdc.goog.get forwardingruleexternals.networking.global.gdc.goog.list forwardingruleexternals.networking.global.gdc.goog.patch forwardingruleexternals.networking.global.gdc.goog.update forwardingruleexternals.networking.global.gdc.goog.watch healthchecks.networking.global.gdc.goog.create healthchecks.networking.global.gdc.goog.delete healthchecks.networking.global.gdc.goog.get healthchecks.networking.global.gdc.goog.list healthchecks.networking.global.gdc.goog.patch healthchecks.networking.global.gdc.goog.update healthchecks.networking.global.gdc.goog.watch Zonal backends.networking.gdc.goog.create backends.networking.gdc.goog.delete backends.networking.gdc.goog.get backends.networking.gdc.goog.list backends.networking.gdc.goog.patch backends.networking.gdc.goog.update backends.networking.gdc.goog.watch backendservicepolicies.networking.gdc.goog.create backendservicepolicies.networking.gdc.goog.delete backendservicepolicies.networking.gdc.goog.get backendservicepolicies.networking.gdc.goog.list backendservicepolicies.networking.gdc.goog.patch backendservicepolicies.networking.gdc.goog.update backendservicepolicies.networking.gdc.goog.watch backendservices.networking.gdc.goog.create backendservices.networking.gdc.goog.delete backendservices.networking.gdc.goog.get backendservices.networking.gdc.goog.list backendservices.networking.gdc.goog.patch backendservices.networking.gdc.goog.update backendservices.networking.gdc.goog.watch forwardingruleexternals.networking.gdc.goog.create forwardingruleexternals.networking.gdc.goog.delete forwardingruleexternals.networking.gdc.goog.get forwardingruleexternals.networking.gdc.goog.list forwardingruleexternals.networking.gdc.goog.patch forwardingruleexternals.networking.gdc.goog.update forwardingruleexternals.networking.gdc.goog.watch healthchecks.networking.gdc.goog.create healthchecks.networking.gdc.goog.delete healthchecks.networking.gdc.goog.get healthchecks.networking.gdc.goog.list healthchecks.networking.gdc.goog.patch healthchecks.networking.gdc.goog.update healthchecks.networking.gdc.goog.watch
Global Internal Load Balancer Admin (internal-load-balancer-admin) Membuat dan mengelola resource load balancer internal global dalam project global.	Global backendservicepolicies.networking.global.gdc.goog.create backendservicepolicies.networking.global.gdc.goog.delete backendservicepolicies.networking.global.gdc.goog.get backendservicepolicies.networking.global.gdc.goog.list backendservicepolicies.networking.global.gdc.goog.patch backendservicepolicies.networking.global.gdc.goog.update backendservicepolicies.networking.global.gdc.goog.watch backendservices.networking.global.gdc.goog.create backendservices.networking.global.gdc.goog.delete backendservices.networking.global.gdc.goog.get backendservices.networking.global.gdc.goog.list backendservices.networking.global.gdc.goog.patch backendservices.networking.global.gdc.goog.update backendservices.networking.global.gdc.goog.watch forwardingruleinternals.networking.global.gdc.goog.create forwardingruleinternals.networking.global.gdc.goog.delete forwardingruleinternals.networking.global.gdc.goog.get forwardingruleinternals.networking.global.gdc.goog.list forwardingruleinternals.networking.global.gdc.goog.patch forwardingruleinternals.networking.global.gdc.goog.update forwardingruleinternals.networking.global.gdc.goog.watch healthchecks.networking.global.gdc.goog.create healthchecks.networking.global.gdc.goog.delete healthchecks.networking.global.gdc.goog.get healthchecks.networking.global.gdc.goog.list healthchecks.networking.global.gdc.goog.patch healthchecks.networking.global.gdc.goog.update healthchecks.networking.global.gdc.goog.watch Zonal backends.networking.gdc.goog.create backends.networking.gdc.goog.delete backends.networking.gdc.goog.get backends.networking.gdc.goog.list backends.networking.gdc.goog.patch backends.networking.gdc.goog.update backends.networking.gdc.goog.watch backendservicepolicies.networking.gdc.goog.create backendservicepolicies.networking.gdc.goog.delete backendservicepolicies.networking.gdc.goog.get backendservicepolicies.networking.gdc.goog.list backendservicepolicies.networking.gdc.goog.patch backendservicepolicies.networking.gdc.goog.update backendservicepolicies.networking.gdc.goog.watch backendservices.networking.gdc.goog.create backendservices.networking.gdc.goog.delete backendservices.networking.gdc.goog.get backendservices.networking.gdc.goog.list backendservices.networking.gdc.goog.patch backendservices.networking.gdc.goog.update backendservices.networking.gdc.goog.watch forwardingruleinternals.networking.gdc.goog.create forwardingruleinternals.networking.gdc.goog.delete forwardingruleinternals.networking.gdc.goog.get forwardingruleinternals.networking.gdc.goog.list forwardingruleinternals.networking.gdc.goog.patch forwardingruleinternals.networking.gdc.goog.update forwardingruleinternals.networking.gdc.goog.watch healthchecks.networking.gdc.goog.create healthchecks.networking.gdc.goog.delete healthchecks.networking.gdc.goog.get healthchecks.networking.gdc.goog.list healthchecks.networking.gdc.goog.patch healthchecks.networking.gdc.goog.update healthchecks.networking.gdc.goog.watch
Global Internal Load Balancer Viewer (internal-load-balancer-viewer) Melihat resource load balancer internal global dalam project global.	Global backendservicepolicies.networking.global.gdc.goog.get backendservicepolicies.networking.global.gdc.goog.list backendservicepolicies.networking.global.gdc.goog.watch backendservices.networking.global.gdc.goog.get backendservices.networking.global.gdc.goog.list backendservices.networking.global.gdc.goog.watch forwardingruleinternals.networking.global.gdc.goog.get forwardingruleinternals.networking.global.gdc.goog.list forwardingruleinternals.networking.global.gdc.goog.watch healthchecks.networking.global.gdc.goog.get healthchecks.networking.global.gdc.goog.list healthchecks.networking.global.gdc.goog.watch Zonal backends.networking.gdc.goog.get backends.networking.gdc.goog.list backends.networking.gdc.goog.watch backendservicepolicies.networking.gdc.goog.get backendservicepolicies.networking.gdc.goog.list backendservicepolicies.networking.gdc.goog.watch backendservices.networking.gdc.goog.get backendservices.networking.gdc.goog.list backendservices.networking.gdc.goog.watch forwardingruleinternals.networking.gdc.goog.get forwardingruleinternals.networking.gdc.goog.list forwardingruleinternals.networking.gdc.goog.watch healthchecks.networking.gdc.goog.get healthchecks.networking.gdc.goog.list healthchecks.networking.gdc.goog.watch
Global Load Balancer Developer (load-balancer-developer) Membuat dan mengelola health check load balancer global dan layanan backend dalam project global.	Global backendservicepolicies.networking.global.gdc.goog.create backendservicepolicies.networking.global.gdc.goog.delete backendservicepolicies.networking.global.gdc.goog.get backendservicepolicies.networking.global.gdc.goog.list backendservicepolicies.networking.global.gdc.goog.patch backendservicepolicies.networking.global.gdc.goog.update backendservicepolicies.networking.global.gdc.goog.watch backendservices.networking.global.gdc.goog.create backendservices.networking.global.gdc.goog.delete backendservices.networking.global.gdc.goog.get backendservices.networking.global.gdc.goog.list backendservices.networking.global.gdc.goog.patch backendservices.networking.global.gdc.goog.update backendservices.networking.global.gdc.goog.watch healthchecks.networking.global.gdc.goog.create healthchecks.networking.global.gdc.goog.delete healthchecks.networking.global.gdc.goog.get healthchecks.networking.global.gdc.goog.list healthchecks.networking.global.gdc.goog.patch healthchecks.networking.global.gdc.goog.update healthchecks.networking.global.gdc.goog.watch Zonal backends.networking.gdc.goog.create backends.networking.gdc.goog.delete backends.networking.gdc.goog.get backends.networking.gdc.goog.list backends.networking.gdc.goog.patch backends.networking.gdc.goog.update backends.networking.gdc.goog.watch backendservicepolicies.networking.gdc.goog.create backendservicepolicies.networking.gdc.goog.delete backendservicepolicies.networking.gdc.goog.get backendservicepolicies.networking.gdc.goog.list backendservicepolicies.networking.gdc.goog.patch backendservicepolicies.networking.gdc.goog.update backendservicepolicies.networking.gdc.goog.watch backendservices.networking.gdc.goog.create backendservices.networking.gdc.goog.delete backendservices.networking.gdc.goog.get backendservices.networking.gdc.goog.list backendservices.networking.gdc.goog.patch backendservices.networking.gdc.goog.update backendservices.networking.gdc.goog.watch healthchecks.networking.gdc.goog.create healthchecks.networking.gdc.goog.delete healthchecks.networking.gdc.goog.get healthchecks.networking.gdc.goog.list healthchecks.networking.gdc.goog.patch healthchecks.networking.gdc.goog.update healthchecks.networking.gdc.goog.watch
Global MZAEADKey Deleter (global-mzaeadkey-deleter) Menghapus MZAEADKeys di project mereka.	Global mzaeadkeys.kms.global.gdc.goog.delete mzaeadkeys.kms.global.gdc.goog.get mzaeadkeys.kms.global.gdc.goog.list mzaeadkeys.kms.global.gdc.goog.watch
Harbor Instance Admin (harbor-instance-admin) Mengelola instance, project, dan cadangan Harbor.	Zonal harborinstancebackupplans.artifactregistry.gdc.goog.create harborinstancebackupplans.artifactregistry.gdc.goog.delete harborinstancebackupplans.artifactregistry.gdc.goog.get harborinstancebackupplans.artifactregistry.gdc.goog.list harborinstancebackupplans.artifactregistry.gdc.goog.patch harborinstancebackupplans.artifactregistry.gdc.goog.update harborinstancebackupplans.artifactregistry.gdc.goog.watch harborinstancebackuprepositories.artifactregistry.gdc.goog.create harborinstancebackuprepositories.artifactregistry.gdc.goog.delete harborinstancebackuprepositories.artifactregistry.gdc.goog.get harborinstancebackuprepositories.artifactregistry.gdc.goog.list harborinstancebackuprepositories.artifactregistry.gdc.goog.patch harborinstancebackuprepositories.artifactregistry.gdc.goog.update harborinstancebackuprepositories.artifactregistry.gdc.goog.watch harborinstancebackups.artifactregistry.gdc.goog.create harborinstancebackups.artifactregistry.gdc.goog.delete harborinstancebackups.artifactregistry.gdc.goog.get harborinstancebackups.artifactregistry.gdc.goog.list harborinstancebackups.artifactregistry.gdc.goog.patch harborinstancebackups.artifactregistry.gdc.goog.update harborinstancebackups.artifactregistry.gdc.goog.watch harborinstancedatabasebackups.artifactregistry.private.gdc.goog.create harborinstancedatabasebackups.artifactregistry.private.gdc.goog.delete harborinstancedatabasebackups.artifactregistry.private.gdc.goog.get harborinstancedatabasebackups.artifactregistry.private.gdc.goog.list harborinstancedatabasebackups.artifactregistry.private.gdc.goog.patch harborinstancedatabasebackups.artifactregistry.private.gdc.goog.update harborinstancedatabasebackups.artifactregistry.private.gdc.goog.watch harborinstancedatabaserestores.artifactregistry.private.gdc.goog.create harborinstancedatabaserestores.artifactregistry.private.gdc.goog.delete harborinstancedatabaserestores.artifactregistry.private.gdc.goog.get harborinstancedatabaserestores.artifactregistry.private.gdc.goog.list harborinstancedatabaserestores.artifactregistry.private.gdc.goog.patch harborinstancedatabaserestores.artifactregistry.private.gdc.goog.update harborinstancedatabaserestores.artifactregistry.private.gdc.goog.watch harborinstanceprojects.artifactregistry.gdc.goog.create harborinstanceprojects.artifactregistry.gdc.goog.get harborinstanceprojects.artifactregistry.gdc.goog.patch harborinstanceprojects.artifactregistry.gdc.goog.update harborinstanceprojects.artifactregistry.gdc.goog.watch harborinstanceregistrybackups.artifactregistry.private.gdc.goog.create harborinstanceregistrybackups.artifactregistry.private.gdc.goog.delete harborinstanceregistrybackups.artifactregistry.private.gdc.goog.get harborinstanceregistrybackups.artifactregistry.private.gdc.goog.list harborinstanceregistrybackups.artifactregistry.private.gdc.goog.patch harborinstanceregistrybackups.artifactregistry.private.gdc.goog.update harborinstanceregistrybackups.artifactregistry.private.gdc.goog.watch harborinstanceregistryrestores.artifactregistry.private.gdc.goog.create harborinstanceregistryrestores.artifactregistry.private.gdc.goog.delete harborinstanceregistryrestores.artifactregistry.private.gdc.goog.get harborinstanceregistryrestores.artifactregistry.private.gdc.goog.list harborinstanceregistryrestores.artifactregistry.private.gdc.goog.patch harborinstanceregistryrestores.artifactregistry.private.gdc.goog.update harborinstanceregistryrestores.artifactregistry.private.gdc.goog.watch harborinstancerestores.artifactregistry.gdc.goog.create harborinstancerestores.artifactregistry.gdc.goog.delete harborinstancerestores.artifactregistry.gdc.goog.get harborinstancerestores.artifactregistry.gdc.goog.list harborinstancerestores.artifactregistry.gdc.goog.patch harborinstancerestores.artifactregistry.gdc.goog.update harborinstancerestores.artifactregistry.gdc.goog.watch harborinstances.artifactregistry.gdc.goog.create harborinstances.artifactregistry.gdc.goog.delete harborinstances.artifactregistry.gdc.goog.get harborinstances.artifactregistry.gdc.goog.list harborinstances.artifactregistry.gdc.goog.patch harborinstances.artifactregistry.gdc.goog.update harborinstances.artifactregistry.gdc.goog.watch
Harbor Instance Viewer (harbor-instance-viewer) Melihat instance, project, dan cadangan Harbor.	Zonal harborinstancebackupplans.artifactregistry.gdc.goog.get harborinstancebackupplans.artifactregistry.gdc.goog.list harborinstancebackupplans.artifactregistry.gdc.goog.watch harborinstancebackuprepositories.artifactregistry.gdc.goog.get harborinstancebackuprepositories.artifactregistry.gdc.goog.list harborinstancebackuprepositories.artifactregistry.gdc.goog.watch harborinstancebackups.artifactregistry.gdc.goog.get harborinstancebackups.artifactregistry.gdc.goog.list harborinstancebackups.artifactregistry.gdc.goog.watch harborinstancedatabasebackups.artifactregistry.private.gdc.goog.get harborinstancedatabasebackups.artifactregistry.private.gdc.goog.list harborinstancedatabaserestores.artifactregistry.private.gdc.goog.get harborinstancedatabaserestores.artifactregistry.private.gdc.goog.list harborinstanceprojects.artifactregistry.gdc.goog.get harborinstanceprojects.artifactregistry.gdc.goog.watch harborinstanceregistrybackups.artifactregistry.private.gdc.goog.get harborinstanceregistrybackups.artifactregistry.private.gdc.goog.list harborinstanceregistryrestores.artifactregistry.private.gdc.goog.get harborinstanceregistryrestores.artifactregistry.private.gdc.goog.list harborinstancerestores.artifactregistry.gdc.goog.get harborinstancerestores.artifactregistry.gdc.goog.list harborinstancerestores.artifactregistry.gdc.goog.watch harborinstances.artifactregistry.gdc.goog.get harborinstances.artifactregistry.gdc.goog.list harborinstances.artifactregistry.gdc.goog.watch
Harbor Project Creator (harbor-project-creator) Membuat dan melihat project instance Harbor.	Zonal harborinstanceprojects.artifactregistry.gdc.goog.create harborinstanceprojects.artifactregistry.gdc.goog.get harborinstanceprojects.artifactregistry.gdc.goog.watch
IAM Project Admin (project-iam-admin) Mengelola izin project.	Global customroles.iam.global.gdc.goog.create customroles.iam.global.gdc.goog.delete customroles.iam.global.gdc.goog.get customroles.iam.global.gdc.goog.list customroles.iam.global.gdc.goog.patch customroles.iam.global.gdc.goog.update customroles.iam.global.gdc.goog.watch iamrolebindings.iam.global.gdc.goog.create iamrolebindings.iam.global.gdc.goog.delete iamrolebindings.iam.global.gdc.goog.get iamrolebindings.iam.global.gdc.goog.list iamrolebindings.iam.global.gdc.goog.patch iamrolebindings.iam.global.gdc.goog.update iamrolebindings.iam.global.gdc.goog.watch iamroles.iam.global.gdc.goog.create iamroles.iam.global.gdc.goog.delete iamroles.iam.global.gdc.goog.get iamroles.iam.global.gdc.goog.list iamroles.iam.global.gdc.goog.patch iamroles.iam.global.gdc.goog.update iamroles.iam.global.gdc.goog.watch projectserviceaccounts.resourcemanager.global.gdc.goog.create projectserviceaccounts.resourcemanager.global.gdc.goog.delete projectserviceaccounts.resourcemanager.global.gdc.goog.get projectserviceaccounts.resourcemanager.global.gdc.goog.list projectserviceaccounts.resourcemanager.global.gdc.goog.patch projectserviceaccounts.resourcemanager.global.gdc.goog.update rolebindings.rbac.authorization.k8s.io.create rolebindings.rbac.authorization.k8s.io.delete rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.patch rolebindings.rbac.authorization.k8s.io.update rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.create roles.rbac.authorization.k8s.io.delete roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.patch roles.rbac.authorization.k8s.io.update roles.rbac.authorization.k8s.io.watch Zonal *.visibility.resourcemanager.gdc.goog.get customroles.iam.gdc.goog.create customroles.iam.gdc.goog.delete customroles.iam.gdc.goog.get customroles.iam.gdc.goog.list customroles.iam.gdc.goog.patch customroles.iam.gdc.goog.update customroles.iam.gdc.goog.watch projectrolebindings.resourcemanager.gdc.goog.create projectrolebindings.resourcemanager.gdc.goog.delete projectrolebindings.resourcemanager.gdc.goog.get projectrolebindings.resourcemanager.gdc.goog.list projectrolebindings.resourcemanager.gdc.goog.patch projectrolebindings.resourcemanager.gdc.goog.update projectrolebindings.resourcemanager.gdc.goog.watch projectroles.resourcemanager.gdc.goog.create projectroles.resourcemanager.gdc.goog.delete projectroles.resourcemanager.gdc.goog.get projectroles.resourcemanager.gdc.goog.list projectroles.resourcemanager.gdc.goog.patch projectroles.resourcemanager.gdc.goog.update projectroles.resourcemanager.gdc.goog.watch projectserviceaccounts.resourcemanager.gdc.goog.create projectserviceaccounts.resourcemanager.gdc.goog.delete projectserviceaccounts.resourcemanager.gdc.goog.get projectserviceaccounts.resourcemanager.gdc.goog.list projectserviceaccounts.resourcemanager.gdc.goog.patch projectserviceaccounts.resourcemanager.gdc.goog.update projectserviceaccounts.resourcemanager.gdc.goog.watch rolebindings.rbac.authorization.k8s.io.create rolebindings.rbac.authorization.k8s.io.delete rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.patch rolebindings.rbac.authorization.k8s.io.update rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.create roles.rbac.authorization.k8s.io.delete roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.patch roles.rbac.authorization.k8s.io.update roles.rbac.authorization.k8s.io.watch standardclusterrolebindings.iam.gdc.goog.create standardclusterrolebindings.iam.gdc.goog.delete standardclusterrolebindings.iam.gdc.goog.get standardclusterrolebindings.iam.gdc.goog.list standardclusterrolebindings.iam.gdc.goog.patch standardclusterrolebindings.iam.gdc.goog.update standardclusterrolebindings.iam.gdc.goog.watch standardclusterroles.iam.gdc.goog.create standardclusterroles.iam.gdc.goog.delete standardclusterroles.iam.gdc.goog.get standardclusterroles.iam.gdc.goog.list standardclusterroles.iam.gdc.goog.patch standardclusterroles.iam.gdc.goog.update standardclusterroles.iam.gdc.goog.watch
IAM Project Viewer (project-iam-viewer) Melihat izin project.	Global customroles.iam.global.gdc.goog.get customroles.iam.global.gdc.goog.list customroles.iam.global.gdc.goog.watch iamrolebindings.iam.global.gdc.goog.get iamrolebindings.iam.global.gdc.goog.list iamrolebindings.iam.global.gdc.goog.watch iamroles.iam.global.gdc.goog.get iamroles.iam.global.gdc.goog.list iamroles.iam.global.gdc.goog.watch projectserviceaccounts.resourcemanager.global.gdc.goog.get projectserviceaccounts.resourcemanager.global.gdc.goog.list rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.watch Zonal *.visibility.resourcemanager.gdc.goog.get customroles.iam.gdc.goog.get customroles.iam.gdc.goog.list customroles.iam.gdc.goog.watch projectrolebindings.resourcemanager.gdc.goog.get projectrolebindings.resourcemanager.gdc.goog.list projectrolebindings.resourcemanager.gdc.goog.watch projectroles.resourcemanager.gdc.goog.get projectroles.resourcemanager.gdc.goog.list projectroles.resourcemanager.gdc.goog.watch projectserviceaccounts.resourcemanager.gdc.goog.get projectserviceaccounts.resourcemanager.gdc.goog.list projectserviceaccounts.resourcemanager.gdc.goog.watch rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.watch standardclusterrolebindings.iam.gdc.goog.get standardclusterrolebindings.iam.gdc.goog.list standardclusterrolebindings.iam.gdc.goog.watch standardclusterroles.iam.gdc.goog.get standardclusterroles.iam.gdc.goog.list standardclusterroles.iam.gdc.goog.watch
Admin Kebijakan Jaringan K8S (k8s-networkpolicy-admin) Buat dan kelola Kebijakan Jaringan k8s.	Cluster Kubernetes networkpolicies.networking.k8s.io.create networkpolicies.networking.k8s.io.delete networkpolicies.networking.k8s.io.get networkpolicies.networking.k8s.io.list networkpolicies.networking.k8s.io.patch networkpolicies.networking.k8s.io.update networkpolicies.networking.k8s.io.watch
K8S Network Policy Viewer (k8s-networkpolicy-viewer) Lihat Kebijakan Jaringan k8s.	Cluster Kubernetes networkpolicies.networking.k8s.io.get networkpolicies.networking.k8s.io.list networkpolicies.networking.k8s.io.watch
KMS Admin (kms-admin) Mengelola kunci KMS di projectnya dan membaca KeyImports dan KeyExports.	Zonal aeadkeys.kms.gdc.goog.create aeadkeys.kms.gdc.goog.decrypt aeadkeys.kms.gdc.goog.delete aeadkeys.kms.gdc.goog.encrypt aeadkeys.kms.gdc.goog.generatedatakey aeadkeys.kms.gdc.goog.get aeadkeys.kms.gdc.goog.list aeadkeys.kms.gdc.goog.patch aeadkeys.kms.gdc.goog.update aeadkeys.kms.gdc.goog.watch keyexports.kms.gdc.goog.get keyexports.kms.gdc.goog.list keyexports.kms.gdc.goog.watch keyimports.kms.gdc.goog.get keyimports.kms.gdc.goog.list keyimports.kms.gdc.goog.watch signingkeys.kms.gdc.goog.create signingkeys.kms.gdc.goog.delete signingkeys.kms.gdc.goog.get signingkeys.kms.gdc.goog.list signingkeys.kms.gdc.goog.patch signingkeys.kms.gdc.goog.sign signingkeys.kms.gdc.goog.update signingkeys.kms.gdc.goog.watch
KMS Creator (kms-creator) Membuat dan membaca kunci KMS di projectnya.	Zonal aeadkeys.kms.gdc.goog.create aeadkeys.kms.gdc.goog.get aeadkeys.kms.gdc.goog.list aeadkeys.kms.gdc.goog.watch signingkeys.kms.gdc.goog.create signingkeys.kms.gdc.goog.get signingkeys.kms.gdc.goog.list signingkeys.kms.gdc.goog.watch
KMS Developer (kms-developer) Menjalankan operasi kripto menggunakan kunci KMS di project mereka.	Zonal aeadkeys.kms.gdc.goog.decrypt aeadkeys.kms.gdc.goog.encrypt aeadkeys.kms.gdc.goog.generatedatakey aeadkeys.kms.gdc.goog.get aeadkeys.kms.gdc.goog.list aeadkeys.kms.gdc.goog.watch signingkeys.kms.gdc.goog.get signingkeys.kms.gdc.goog.list signingkeys.kms.gdc.goog.sign signingkeys.kms.gdc.goog.watch
KMS Key Export Admin (kms-keyexport-admin) Mengekspor kunci KMS dalam projectnya sebagai kunci yang di-wrap dari KMS.	Zonal keyexports.kms.gdc.goog.create keyexports.kms.gdc.goog.delete keyexports.kms.gdc.goog.get keyexports.kms.gdc.goog.list keyexports.kms.gdc.goog.patch keyexports.kms.gdc.goog.update keyexports.kms.gdc.goog.watch
KMS Key Import Admin (kms-keyimport-admin) Mengimpor kunci KMS ke KMS sebagai kunci yang di-wrap di project-nya.	Zonal keyimports.kms.gdc.goog.create keyimports.kms.gdc.goog.delete keyimports.kms.gdc.goog.get keyimports.kms.gdc.goog.list keyimports.kms.gdc.goog.patch keyimports.kms.gdc.goog.update keyimports.kms.gdc.goog.watch
KMS Viewer (kms-viewer) Membaca kunci KMS dalam projectnya.	Zonal aeadkeys.kms.gdc.goog.get aeadkeys.kms.gdc.goog.list aeadkeys.kms.gdc.goog.watch keyexports.kms.gdc.goog.get keyexports.kms.gdc.goog.list keyexports.kms.gdc.goog.watch keyimports.kms.gdc.goog.get keyimports.kms.gdc.goog.list keyimports.kms.gdc.goog.watch signingkeys.kms.gdc.goog.get signingkeys.kms.gdc.goog.list signingkeys.kms.gdc.goog.watch
Pengguna LibraryAgent (libraryagent-user) Mengizinkan Pelanggan menggunakan API layanan Demo Libraryagent	Zonal shelves.cloudresourcemanager.googleapis.com.list shelves.libraryagent.api.v1alpha1.get
Load Balancer Admin (load-balancer-admin) Admin Load Balancer	Global backendservicepolicies.networking.global.gdc.goog.create backendservicepolicies.networking.global.gdc.goog.delete backendservicepolicies.networking.global.gdc.goog.get backendservicepolicies.networking.global.gdc.goog.list backendservicepolicies.networking.global.gdc.goog.patch backendservicepolicies.networking.global.gdc.goog.update backendservicepolicies.networking.global.gdc.goog.watch backendservices.networking.global.gdc.goog.create backendservices.networking.global.gdc.goog.delete backendservices.networking.global.gdc.goog.get backendservices.networking.global.gdc.goog.list backendservices.networking.global.gdc.goog.patch backendservices.networking.global.gdc.goog.update backendservices.networking.global.gdc.goog.watch forwardingruleexternals.networking.global.gdc.goog.create forwardingruleexternals.networking.global.gdc.goog.delete forwardingruleexternals.networking.global.gdc.goog.get forwardingruleexternals.networking.global.gdc.goog.list forwardingruleexternals.networking.global.gdc.goog.patch forwardingruleexternals.networking.global.gdc.goog.update forwardingruleexternals.networking.global.gdc.goog.watch forwardingruleinternals.networking.global.gdc.goog.create forwardingruleinternals.networking.global.gdc.goog.delete forwardingruleinternals.networking.global.gdc.goog.get forwardingruleinternals.networking.global.gdc.goog.list forwardingruleinternals.networking.global.gdc.goog.patch forwardingruleinternals.networking.global.gdc.goog.update forwardingruleinternals.networking.global.gdc.goog.watch healthchecks.networking.global.gdc.goog.create healthchecks.networking.global.gdc.goog.delete healthchecks.networking.global.gdc.goog.get healthchecks.networking.global.gdc.goog.list healthchecks.networking.global.gdc.goog.patch healthchecks.networking.global.gdc.goog.update healthchecks.networking.global.gdc.goog.watch Zonal backends.networking.gdc.goog.create backends.networking.gdc.goog.delete backends.networking.gdc.goog.get backends.networking.gdc.goog.list backends.networking.gdc.goog.patch backends.networking.gdc.goog.update backends.networking.gdc.goog.watch backendservicepolicies.networking.gdc.goog.create backendservicepolicies.networking.gdc.goog.delete backendservicepolicies.networking.gdc.goog.get backendservicepolicies.networking.gdc.goog.list backendservicepolicies.networking.gdc.goog.patch backendservicepolicies.networking.gdc.goog.update backendservicepolicies.networking.gdc.goog.watch backendservices.networking.gdc.goog.create backendservices.networking.gdc.goog.delete backendservices.networking.gdc.goog.get backendservices.networking.gdc.goog.list backendservices.networking.gdc.goog.patch backendservices.networking.gdc.goog.update backendservices.networking.gdc.goog.watch forwardingruleexternals.networking.gdc.goog.create forwardingruleexternals.networking.gdc.goog.delete forwardingruleexternals.networking.gdc.goog.get forwardingruleexternals.networking.gdc.goog.list forwardingruleexternals.networking.gdc.goog.patch forwardingruleexternals.networking.gdc.goog.update forwardingruleexternals.networking.gdc.goog.watch forwardingruleinternals.networking.gdc.goog.create forwardingruleinternals.networking.gdc.goog.delete forwardingruleinternals.networking.gdc.goog.get forwardingruleinternals.networking.gdc.goog.list forwardingruleinternals.networking.gdc.goog.patch forwardingruleinternals.networking.gdc.goog.update forwardingruleinternals.networking.gdc.goog.watch healthchecks.networking.gdc.goog.create healthchecks.networking.gdc.goog.delete healthchecks.networking.gdc.goog.get healthchecks.networking.gdc.goog.list healthchecks.networking.gdc.goog.patch healthchecks.networking.gdc.goog.update healthchecks.networking.gdc.goog.watch
Load Balancer Viewer (load-balancer-viewer) Pelihat Load Balancer.	Global backendservicepolicies.networking.global.gdc.goog.get backendservicepolicies.networking.global.gdc.goog.list backendservicepolicies.networking.global.gdc.goog.watch backendservices.networking.global.gdc.goog.get backendservices.networking.global.gdc.goog.list backendservices.networking.global.gdc.goog.watch forwardingruleexternals.networking.global.gdc.goog.get forwardingruleexternals.networking.global.gdc.goog.list forwardingruleexternals.networking.global.gdc.goog.watch forwardingruleinternals.networking.global.gdc.goog.get forwardingruleinternals.networking.global.gdc.goog.list forwardingruleinternals.networking.global.gdc.goog.watch healthchecks.networking.global.gdc.goog.get healthchecks.networking.global.gdc.goog.list healthchecks.networking.global.gdc.goog.watch Zonal backends.networking.gdc.goog.get backends.networking.gdc.goog.list backends.networking.gdc.goog.watch backendservicepolicies.networking.gdc.goog.get backendservicepolicies.networking.gdc.goog.list backendservicepolicies.networking.gdc.goog.watch backendservices.networking.gdc.goog.get backendservices.networking.gdc.goog.list backendservices.networking.gdc.goog.watch forwardingruleexternals.networking.gdc.goog.get forwardingruleexternals.networking.gdc.goog.list forwardingruleexternals.networking.gdc.goog.watch forwardingruleinternals.networking.gdc.goog.get forwardingruleinternals.networking.gdc.goog.list forwardingruleinternals.networking.gdc.goog.watch healthchecks.networking.gdc.goog.get healthchecks.networking.gdc.goog.list healthchecks.networking.gdc.goog.watch
Log Querier (log-query-api-querier) Akses Log Query API untuk membuat kueri log di project AO.	Zonal labels.goog.gdc.logging.v1.get labels.goog.gdc.logging.v1.list labelvalues.goog.gdc.logging.v1.get labelvalues.goog.gdc.logging.v1.list listlabelsrequests.goog.gdc.logging.v1.get listlabelsrequests.goog.gdc.logging.v1.list listlabelsresponses.goog.gdc.logging.v1.get listlabelsresponses.goog.gdc.logging.v1.list listlabelvaluesrequests.goog.gdc.logging.v1.get listlabelvaluesrequests.goog.gdc.logging.v1.list listlabelvaluesresponses.goog.gdc.logging.v1.get listlabelvaluesresponses.goog.gdc.logging.v1.list listlogsfilters.goog.gdc.logging.v1.get listlogsfilters.goog.gdc.logging.v1.list listlogsrequests.goog.gdc.logging.v1.get listlogsrequests.goog.gdc.logging.v1.list listlogsresponses.goog.gdc.logging.v1.get listlogsresponses.goog.gdc.logging.v1.list logs.goog.gdc.logging.v1.get logs.goog.gdc.logging.v1.list
Logging Audit Logging Target Resource Debugger (auditloggingtarget-monitor) Melihat dan memperbarui target logging audit.	Zonal auditloggingtargets.logging.private.gdc.goog.get auditloggingtargets.logging.private.gdc.goog.list auditloggingtargets.logging.private.gdc.goog.update dnsregistrations.network.private.gdc.goog.get dnsregistrations.network.private.gdc.goog.list
Logging Rule Creator (loggingrule-creator) Membuat dan melihat aturan logging.	Zonal loggingrules.logging.gdc.goog.create loggingrules.logging.gdc.goog.get loggingrules.logging.gdc.goog.list loggingrules.logging.gdc.goog.watch
Logging Rule Editor (loggingrule-editor) Mengedit aturan logging.	Zonal loggingrules.logging.gdc.goog.delete loggingrules.logging.gdc.goog.get loggingrules.logging.gdc.goog.list loggingrules.logging.gdc.goog.patch loggingrules.logging.gdc.goog.update loggingrules.logging.gdc.goog.watch
Logging Rule Viewer (loggingrule-viewer) Melihat aturan logging.	Zonal loggingrules.logging.gdc.goog.get loggingrules.logging.gdc.goog.list loggingrules.logging.gdc.goog.watch
Logging Target Creator (loggingtarget-creator) Membuat dan melihat target logging.	Zonal loggingtargets.logging.gdc.goog.create loggingtargets.logging.gdc.goog.get loggingtargets.logging.gdc.goog.list loggingtargets.logging.gdc.goog.watch
Logging Target Editor (loggingtarget-editor) Mengedit target logging.	Zonal loggingtargets.logging.gdc.goog.delete loggingtargets.logging.gdc.goog.get loggingtargets.logging.gdc.goog.list loggingtargets.logging.gdc.goog.patch loggingtargets.logging.gdc.goog.update loggingtargets.logging.gdc.goog.watch
Logging Target Viewer (loggingtarget-viewer) Melihat target logging.	Zonal loggingtargets.logging.gdc.goog.get loggingtargets.logging.gdc.goog.list loggingtargets.logging.gdc.goog.watch
Maintenance Policy Binding Project Editor (project-mpb-editor) Mengelola resource MaintenancePolicyBinding dalam project.	Zonal maintenancepolicybindings.maintenance.goog.create maintenancepolicybindings.maintenance.goog.delete maintenancepolicybindings.maintenance.goog.get maintenancepolicybindings.maintenance.goog.list maintenancepolicybindings.maintenance.goog.patch maintenancepolicybindings.maintenance.goog.update maintenancepolicybindings.maintenance.goog.watch
Project Viewer untuk Binding Kebijakan Pemeliharaan (project-mpb-viewer) Membaca resource MaintenancePolicyBinding dalam project.	Zonal maintenancepolicybindings.maintenance.goog.get maintenancepolicybindings.maintenance.goog.list maintenancepolicybindings.maintenance.goog.watch
Admin Project Kebijakan Pemeliharaan (project-mp-admin) Mengelola resource Kebijakan Pemeliharaan dan Pengikatan Kebijakan Pemeliharaan dalam project.	Zonal maintenancepolicies.maintenance.goog.create maintenancepolicies.maintenance.goog.delete maintenancepolicies.maintenance.goog.get maintenancepolicies.maintenance.goog.list maintenancepolicies.maintenance.goog.patch maintenancepolicies.maintenance.goog.update maintenancepolicies.maintenance.goog.watch maintenancepolicybindings.maintenance.goog.create maintenancepolicybindings.maintenance.goog.delete maintenancepolicybindings.maintenance.goog.get maintenancepolicybindings.maintenance.goog.list maintenancepolicybindings.maintenance.goog.patch maintenancepolicybindings.maintenance.goog.update maintenancepolicybindings.maintenance.goog.watch
Maintenance Policy Project Editor (project-mp-editor) Mengelola resource MaintenancePolicy dalam project.	Zonal maintenancepolicies.maintenance.goog.create maintenancepolicies.maintenance.goog.delete maintenancepolicies.maintenance.goog.get maintenancepolicies.maintenance.goog.list maintenancepolicies.maintenance.goog.patch maintenancepolicies.maintenance.goog.update maintenancepolicies.maintenance.goog.watch
Project Viewer Kebijakan Pemeliharaan (project-mp-viewer) Membaca resource MaintenancePolicy dan Maintenance Policy Binding dalam project.	Zonal maintenancepolicies.maintenance.goog.get maintenancepolicies.maintenance.goog.list maintenancepolicies.maintenance.goog.watch
Managed DNS Project Admin (managed-dns-project-admin) Mengelola semua aspek zona DNS Terkelola dan set data resource dalam project di Global API.	Global manageddnszones.networking.global.gdc.goog.create manageddnszones.networking.global.gdc.goog.delete manageddnszones.networking.global.gdc.goog.get manageddnszones.networking.global.gdc.goog.list manageddnszones.networking.global.gdc.goog.patch manageddnszones.networking.global.gdc.goog.update manageddnszones.networking.global.gdc.goog.watch resourcerecordsets.networking.global.gdc.goog.create resourcerecordsets.networking.global.gdc.goog.delete resourcerecordsets.networking.global.gdc.goog.get resourcerecordsets.networking.global.gdc.goog.list resourcerecordsets.networking.global.gdc.goog.patch resourcerecordsets.networking.global.gdc.goog.update resourcerecordsets.networking.global.gdc.goog.watch
Managed DNS Project Viewer (managed-dns-project-viewer) Melihat zona DNS Terkelola dan set data resource dalam project di Global API.	Global manageddnszones.networking.global.gdc.goog.get manageddnszones.networking.global.gdc.goog.list resourcerecordsets.networking.global.gdc.goog.get resourcerecordsets.networking.global.gdc.goog.list
Marketplace Catalog Editor (marketplace-catalog-editor) Melihat, mencantumkan, membuat, memperbarui, dan menghapus katalog layanan.	Global servicecatalogs.marketplace.global.gdc.goog.create servicecatalogs.marketplace.global.gdc.goog.delete servicecatalogs.marketplace.global.gdc.goog.get servicecatalogs.marketplace.global.gdc.goog.list servicecatalogs.marketplace.global.gdc.goog.patch servicecatalogs.marketplace.global.gdc.goog.update servicecatalogs.marketplace.global.gdc.goog.watch
Marketplace Catalog Viewer (marketplace-catalog-viewer) Melihat katalog layanan.	Global projects.resourcemanager.global.gdc.goog.get projects.resourcemanager.global.gdc.goog.list projects.resourcemanager.global.gdc.goog.watch servicecatalogbindings.marketplace.global.gdc.goog.get servicecatalogbindings.marketplace.global.gdc.goog.list servicecatalogbindings.marketplace.global.gdc.goog.watch
Editor Marketplace (marketplace-editor) Membuat, mengupdate, dan menghapus instance layanan.	Zonal serviceinstances.marketplace.gdc.goog.create serviceinstances.marketplace.gdc.goog.delete serviceinstances.marketplace.gdc.goog.get serviceinstances.marketplace.gdc.goog.list serviceinstances.marketplace.gdc.goog.patch serviceinstances.marketplace.gdc.goog.update serviceinstances.marketplace.gdc.goog.watch
Marketplace Service Consumer (marketplace-service-consumer) Membuat, mengupdate, dan menghapus instance layanan.	Zonal serviceinstances.marketplace.gdc.goog.create serviceinstances.marketplace.gdc.goog.delete serviceinstances.marketplace.gdc.goog.get serviceinstances.marketplace.gdc.goog.list serviceinstances.marketplace.gdc.goog.patch serviceinstances.marketplace.gdc.goog.update serviceinstances.marketplace.gdc.goog.watch
Marketplace Service Editor (marketplace-service-editor) Melihat, mencantumkan, membuat, memperbarui, dan menghapus versi layanan dan deskripsi layanan.	Global servicedescriptions.marketplace.global.gdc.goog.create servicedescriptions.marketplace.global.gdc.goog.delete servicedescriptions.marketplace.global.gdc.goog.get servicedescriptions.marketplace.global.gdc.goog.list servicedescriptions.marketplace.global.gdc.goog.patch servicedescriptions.marketplace.global.gdc.goog.update servicedescriptions.marketplace.global.gdc.goog.watch serviceversions.marketplace.global.gdc.goog.create serviceversions.marketplace.global.gdc.goog.delete serviceversions.marketplace.global.gdc.goog.get serviceversions.marketplace.global.gdc.goog.list serviceversions.marketplace.global.gdc.goog.patch serviceversions.marketplace.global.gdc.goog.update serviceversions.marketplace.global.gdc.goog.watch Zonal servicedescriptions.marketplace.gdc.goog.create servicedescriptions.marketplace.gdc.goog.delete servicedescriptions.marketplace.gdc.goog.get servicedescriptions.marketplace.gdc.goog.list servicedescriptions.marketplace.gdc.goog.patch servicedescriptions.marketplace.gdc.goog.update servicedescriptions.marketplace.gdc.goog.watch serviceversions.marketplace.gdc.goog.create serviceversions.marketplace.gdc.goog.delete serviceversions.marketplace.gdc.goog.get serviceversions.marketplace.gdc.goog.list serviceversions.marketplace.gdc.goog.patch serviceversions.marketplace.gdc.goog.update serviceversions.marketplace.gdc.goog.watch
Marketplace Service Viewer (marketplace-service-viewer) Melihat dan mencantumkan versi layanan, deskripsi layanan, dan katalog layanan.	Global servicecatalogs.marketplace.global.gdc.goog.get servicecatalogs.marketplace.global.gdc.goog.list servicecatalogs.marketplace.global.gdc.goog.watch servicedescriptions.marketplace.global.gdc.goog.get servicedescriptions.marketplace.global.gdc.goog.list servicedescriptions.marketplace.global.gdc.goog.watch serviceversions.marketplace.global.gdc.goog.get serviceversions.marketplace.global.gdc.goog.list serviceversions.marketplace.global.gdc.goog.watch Zonal catalogbundles.marketplaceview.gdc.goog.get catalogbundles.marketplaceview.gdc.goog.list catalogbundles.marketplaceview.gdc.goog.watch servicedescriptions.marketplace.gdc.goog.get servicedescriptions.marketplace.gdc.goog.list servicedescriptions.marketplace.gdc.goog.watch serviceinstances.marketplace.gdc.goog.get serviceinstances.marketplace.gdc.goog.list serviceinstances.marketplace.gdc.goog.watch serviceversions.marketplace.gdc.goog.get serviceversions.marketplace.gdc.goog.list serviceversions.marketplace.gdc.goog.watch
Monitoring Project Alertmanager Editor (project-cortex-alertmanager-editor) Mengedit project Cortex Alertmanager dan aturan.	Zonal ${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.DELETE ${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.GET ${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.POST loggingrules.logging.gdc.goog.create loggingrules.logging.gdc.goog.delete loggingrules.logging.gdc.goog.get loggingrules.logging.gdc.goog.list loggingrules.logging.gdc.goog.patch loggingrules.logging.gdc.goog.update loggingrules.monitoring.gdc.goog.create loggingrules.monitoring.gdc.goog.delete loggingrules.monitoring.gdc.goog.get loggingrules.monitoring.gdc.goog.list loggingrules.monitoring.gdc.goog.patch loggingrules.monitoring.gdc.goog.update monitoringrules.monitoring.gdc.goog.create monitoringrules.monitoring.gdc.goog.delete monitoringrules.monitoring.gdc.goog.get monitoringrules.monitoring.gdc.goog.list monitoringrules.monitoring.gdc.goog.patch monitoringrules.monitoring.gdc.goog.update
Monitoring Project Alertmanager Viewer (project-cortex-alertmanager-viewer) Melihat project Cortex Alertmanager.	Zonal ${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.GET ${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.POST loggingrules.logging.gdc.goog.get loggingrules.logging.gdc.goog.list loggingrules.monitoring.gdc.goog.get loggingrules.monitoring.gdc.goog.list monitoringrules.monitoring.gdc.goog.get monitoringrules.monitoring.gdc.goog.list
Monitoring Project Prometheus Viewer (project-cortex-prometheus-viewer) Mengelola project Cortex Prometheus dan Metrik.	Zonal ${.ProjectNamespace}-cortex-system/cortex-metrics.istio.resourcemanager.gdc.goog.GET ${.ProjectNamespace}-cortex-system/cortex-metrics.istio.resourcemanager.gdc.goog.POST ${.ProjectNamespace}-cortex-system/cortex-prometheus.istio.resourcemanager.gdc.goog.GET ${.ProjectNamespace}-cortex-system/cortex-prometheus.istio.resourcemanager.gdc.goog.POST
MonitoringRule Editor (monitoringrule-editor) Mengelola aturan pemantauan.	Zonal monitoringrules.monitoring.gdc.goog.delete monitoringrules.monitoring.gdc.goog.get monitoringrules.monitoring.gdc.goog.list monitoringrules.monitoring.gdc.goog.patch monitoringrules.monitoring.gdc.goog.update monitoringrules.monitoring.gdc.goog.watch
MonitoringRule Viewer (monitoringrule-viewer) Melihat aturan pemantauan.	Zonal monitoringrules.monitoring.gdc.goog.get monitoringrules.monitoring.gdc.goog.list monitoringrules.monitoring.gdc.goog.watch
MonitoringTarget Editor (monitoringtarget-editor) Mengedit target pemantauan.	Zonal monitoringtargets.monitoring.gdc.goog.delete monitoringtargets.monitoring.gdc.goog.get monitoringtargets.monitoring.gdc.goog.list monitoringtargets.monitoring.gdc.goog.patch monitoringtargets.monitoring.gdc.goog.update monitoringtargets.monitoring.gdc.goog.watch
MonitoringTarget Viewer (monitoringtarget-viewer) Melihat target pemantauan tampilan.	Zonal monitoringtargets.monitoring.gdc.goog.get monitoringtargets.monitoring.gdc.goog.list monitoringtargets.monitoring.gdc.goog.watch
NAT Viewer (nat-viewer) Membaca deployment di cluster pengguna.	Cluster Kubernetes deployments.apps.get deployments.apps.list
Namespace Admin (namespace-admin) Mengelola semua resource project.	Cluster Kubernetes *.*.create *.*.delete *.*.get *.*.list *.*.patch *.*.update *.*.watch
Namespace Viewer (namespace-viewer) Melihat semua resource project.	Cluster Kubernetes *.*.get *.*.list *.*.watch
ObservabilityPipeline Editor (observabilitypipeline-editor) Mengedit pipeline observasi.	Zonal observabilitypipelines.observability.gdc.goog.delete observabilitypipelines.observability.gdc.goog.get observabilitypipelines.observability.gdc.goog.list observabilitypipelines.observability.gdc.goog.patch observabilitypipelines.observability.gdc.goog.update observabilitypipelines.observability.gdc.goog.watch
ObservabilityPipeline Viewer (observabilitypipeline-viewer) Melihat pipeline kemampuan observasi.	Zonal observabilitypipelines.observability.gdc.goog.get observabilitypipelines.observability.gdc.goog.list observabilitypipelines.observability.gdc.goog.watch
Project Grafana Viewer (project-grafana-viewer) Melihat instance Grafana project.	Zonal ${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.DELETE ${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.GET ${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.HEAD ${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.OPTIONS ${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.PATCH ${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.POST ${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.PUT
Project Network Policy Admin (project-networkpolicy-admin) Buat dan kelola Kebijakan Jaringan Project.	Global projectnetworkpolicies.networking.global.gdc.goog.create projectnetworkpolicies.networking.global.gdc.goog.delete projectnetworkpolicies.networking.global.gdc.goog.get projectnetworkpolicies.networking.global.gdc.goog.list projectnetworkpolicies.networking.global.gdc.goog.patch projectnetworkpolicies.networking.global.gdc.goog.update projectnetworkpolicies.networking.global.gdc.goog.watch projectnetworkpolicyreplicas.networking.global.gdc.goog.create projectnetworkpolicyreplicas.networking.global.gdc.goog.delete projectnetworkpolicyreplicas.networking.global.gdc.goog.get projectnetworkpolicyreplicas.networking.global.gdc.goog.list projectnetworkpolicyreplicas.networking.global.gdc.goog.patch projectnetworkpolicyreplicas.networking.global.gdc.goog.update projectnetworkpolicyreplicas.networking.global.gdc.goog.watch Zonal projectnetworkpolicies.networking.gdc.goog.create projectnetworkpolicies.networking.gdc.goog.delete projectnetworkpolicies.networking.gdc.goog.get projectnetworkpolicies.networking.gdc.goog.list projectnetworkpolicies.networking.gdc.goog.patch projectnetworkpolicies.networking.gdc.goog.update projectnetworkpolicies.networking.gdc.goog.watch
Project Network Policy Viewer (project-networkpolicy-viewer) Lihat Kebijakan Jaringan Project.	Global projectnetworkpolicies.networking.global.gdc.goog.get projectnetworkpolicies.networking.global.gdc.goog.list projectnetworkpolicies.networking.global.gdc.goog.watch projectnetworkpolicyreplicas.networking.global.gdc.goog.get projectnetworkpolicyreplicas.networking.global.gdc.goog.list projectnetworkpolicyreplicas.networking.global.gdc.goog.watch Zonal projectnetworkpolicies.networking.gdc.goog.get projectnetworkpolicies.networking.gdc.goog.list projectnetworkpolicies.networking.gdc.goog.watch
Project Quota Administrator (project-quota-admin) Mengelola Resource Kuota Tingkat Project Global untuk Organisasi.	Global quotavalues.quotamanagement.global.gdc.goog.create quotavalues.quotamanagement.global.gdc.goog.delete quotavalues.quotamanagement.global.gdc.goog.get quotavalues.quotamanagement.global.gdc.goog.list quotavalues.quotamanagement.global.gdc.goog.patch quotavalues.quotamanagement.global.gdc.goog.update quotavalues.quotamanagement.global.gdc.goog.watch
Project Quota Viewer (project-quota-viewer) Melihat Resource Kuota Tingkat Project Global untuk Organisasi.	Global quotavalues.quotamanagement.global.gdc.goog.get quotavalues.quotamanagement.global.gdc.goog.list quotavalues.quotamanagement.global.gdc.goog.watch
Project Viewer (project-viewer) Melihat resource dan izin project.	Zonal *.visibility.resourcemanager.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list clusterinfos.resourcemanager.private.gdc.goog.watch customresourcedefinitions.apiextensions.k8s.io.get customresourcedefinitions.apiextensions.k8s.io.list customresourcedefinitions.apiextensions.k8s.io.watch projectrolebindings.resourcemanager.gdc.goog.get projectrolebindings.resourcemanager.gdc.goog.list projectrolebindings.resourcemanager.gdc.goog.watch projectroles.resourcemanager.gdc.goog.get projectroles.resourcemanager.gdc.goog.list projectroles.resourcemanager.gdc.goog.watch rolebindings.rbac.authorization.k8s.io.get rolebindings.rbac.authorization.k8s.io.list rolebindings.rbac.authorization.k8s.io.watch roles.rbac.authorization.k8s.io.get roles.rbac.authorization.k8s.io.list roles.rbac.authorization.k8s.io.watch
SIEM Export Org Creator (siemexport-org-creator) Membuat dan melihat resource ekspor SIEM.	Zonal secrets.create secrets.get secrets.list secrets.watch siemorgforwarders.logging.gdc.goog.create siemorgforwarders.logging.gdc.goog.get siemorgforwarders.logging.gdc.goog.list siemorgforwarders.logging.gdc.goog.watch
Editor Org Ekspor SIEM (siemexport-org-editor) Mengelola resource ekspor SIEM.	Zonal secrets.delete secrets.get secrets.list secrets.patch secrets.update secrets.watch siemorgforwarders.logging.gdc.goog.delete siemorgforwarders.logging.gdc.goog.get siemorgforwarders.logging.gdc.goog.list siemorgforwarders.logging.gdc.goog.patch siemorgforwarders.logging.gdc.goog.update siemorgforwarders.logging.gdc.goog.watch
SIEM Export Org Viewer (siemexport-org-viewer) Melihat resource ekspor SIEM.	Zonal secrets.get secrets.list secrets.watch siemorgforwarders.logging.gdc.goog.get siemorgforwarders.logging.gdc.goog.list siemorgforwarders.logging.gdc.goog.watch
Secret Admin (secret-admin) Mengelola secret Kubernetes di namespace project.	Global secrets.create secrets.delete secrets.get secrets.list secrets.patch secrets.update Zonal secrets.create secrets.delete secrets.get secrets.list secrets.patch secrets.update secrets.watch
Secret Viewer (secret-viewer) Melihat secret Kubernetes di namespace project.	Global secrets.get secrets.list secrets.watch Zonal secrets.get secrets.list secrets.watch
Standard Cluster Admin (standard-cluster-admin) Mengelola pembuatan dan pembaruan untuk Cluster Standar	Zonal *.visibility.resourcemanager.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list clusterinfos.resourcemanager.private.gdc.goog.watch clusters.cluster.gdc.goog.create clusters.cluster.gdc.goog.delete clusters.cluster.gdc.goog.get clusters.cluster.gdc.goog.list clusters.cluster.gdc.goog.patch clusters.cluster.gdc.goog.update clusters.cluster.gdc.goog.watch projectbindings.resourcemanager.gdc.goog.create projectbindings.resourcemanager.gdc.goog.delete projectbindings.resourcemanager.gdc.goog.get projectbindings.resourcemanager.gdc.goog.list projectbindings.resourcemanager.gdc.goog.watch projects.resourcemanager.gdc.goog.get projects.resourcemanager.gdc.goog.list projects.resourcemanager.gdc.goog.watch userclusterupgraderequests.cluster.gdc.goog.create userclusterupgraderequests.cluster.gdc.goog.delete userclusterupgraderequests.cluster.gdc.goog.get userclusterupgraderequests.cluster.gdc.goog.list userclusterupgraderequests.cluster.gdc.goog.patch userclusterupgraderequests.cluster.gdc.goog.update userclusterupgraderequests.cluster.gdc.goog.watch userclusterupgrades.upgrade.private.gdc.goog.create userclusterupgrades.upgrade.private.gdc.goog.delete userclusterupgrades.upgrade.private.gdc.goog.get userclusterupgrades.upgrade.private.gdc.goog.list userclusterupgrades.upgrade.private.gdc.goog.patch userclusterupgrades.upgrade.private.gdc.goog.update userclusterupgrades.upgrade.private.gdc.goog.watch
Standard Cluster Viewer (standard-cluster-viewer) Melihat pembuatan dan update untuk Cluster Standar	Zonal *.visibility.resourcemanager.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list clusterinfos.resourcemanager.private.gdc.goog.watch clusters.cluster.gdc.goog.get clusters.cluster.gdc.goog.list clusters.cluster.gdc.goog.watch projectbindings.resourcemanager.gdc.goog.get projectbindings.resourcemanager.gdc.goog.list projectbindings.resourcemanager.gdc.goog.watch projects.resourcemanager.gdc.goog.get projects.resourcemanager.gdc.goog.list projects.resourcemanager.gdc.goog.watch userclusterupgraderequests.cluster.gdc.goog.get userclusterupgraderequests.cluster.gdc.goog.list userclusterupgraderequests.cluster.gdc.goog.watch userclusterupgrades.upgrade.private.gdc.goog.get userclusterupgrades.upgrade.private.gdc.goog.list userclusterupgrades.upgrade.private.gdc.goog.watch
Subnet Project Admin (subnet-project-admin) Membuat dan mengelola subnet dalam project.	Global subnets.ipam.global.gdc.goog.create subnets.ipam.global.gdc.goog.delete subnets.ipam.global.gdc.goog.get subnets.ipam.global.gdc.goog.list subnets.ipam.global.gdc.goog.patch subnets.ipam.global.gdc.goog.update subnets.ipam.global.gdc.goog.watch Zonal subnets.ipam.gdc.goog.create subnets.ipam.gdc.goog.customized-allocate subnets.ipam.gdc.goog.delete subnets.ipam.gdc.goog.get subnets.ipam.gdc.goog.list subnets.ipam.gdc.goog.patch subnets.ipam.gdc.goog.update subnets.ipam.gdc.goog.watch
Subnet Project Operator (subnet-project-operator) Membuat dan mengelola subnet dalam project.	Zonal subnets.ipam.gdc.goog.create subnets.ipam.gdc.goog.delete subnets.ipam.gdc.goog.get subnets.ipam.gdc.goog.list subnets.ipam.gdc.goog.patch subnets.ipam.gdc.goog.update subnets.ipam.gdc.goog.watch
Subnet Project Viewer (subnet-project-viewer) Melihat subnet dalam project.	Global subnets.ipam.global.gdc.goog.get subnets.ipam.global.gdc.goog.list subnets.ipam.global.gdc.goog.watch Zonal subnets.ipam.gdc.goog.get subnets.ipam.gdc.goog.list subnets.ipam.gdc.goog.watch
User Cluster Backup Admin (usercluster-backup-admin) Administrator pencadangan cluster pengguna standar dalam cakupan Project.	Zonal backupplans.backup.gdc.goog.create backupplans.backup.gdc.goog.delete backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backupplans.backup.gdc.goog.patch backupplans.backup.gdc.goog.update backupplans.backup.gdc.goog.watch backups.backup.gdc.goog.create backups.backup.gdc.goog.delete backups.backup.gdc.goog.get backups.backup.gdc.goog.list backups.backup.gdc.goog.patch backups.backup.gdc.goog.update backups.backup.gdc.goog.watch deletebackuprequests.backup.gdc.goog.create deletebackuprequests.backup.gdc.goog.delete deletebackuprequests.backup.gdc.goog.get deletebackuprequests.backup.gdc.goog.list deletebackuprequests.backup.gdc.goog.patch deletebackuprequests.backup.gdc.goog.update deletebackuprequests.backup.gdc.goog.watch manualbackuprequests.backup.gdc.goog.create manualbackuprequests.backup.gdc.goog.delete manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.patch manualbackuprequests.backup.gdc.goog.update manualbackuprequests.backup.gdc.goog.watch manualrestorerequests.backup.gdc.goog.create manualrestorerequests.backup.gdc.goog.delete manualrestorerequests.backup.gdc.goog.get manualrestorerequests.backup.gdc.goog.list manualrestorerequests.backup.gdc.goog.patch manualrestorerequests.backup.gdc.goog.update manualrestorerequests.backup.gdc.goog.watch restoreplans.backup.gdc.goog.create restoreplans.backup.gdc.goog.delete restoreplans.backup.gdc.goog.get restoreplans.backup.gdc.goog.list restoreplans.backup.gdc.goog.patch restoreplans.backup.gdc.goog.update restoreplans.backup.gdc.goog.watch restores.backup.gdc.goog.create restores.backup.gdc.goog.delete restores.backup.gdc.goog.get restores.backup.gdc.goog.list restores.backup.gdc.goog.patch restores.backup.gdc.goog.update restores.backup.gdc.goog.watch volumebackups.backup.gdc.goog.get volumebackups.backup.gdc.goog.list volumebackups.backup.gdc.goog.watch volumerestores.backup.gdc.goog.get volumerestores.backup.gdc.goog.list volumerestores.backup.gdc.goog.watch
User Cluster Backup Viewer (usercluster-backup-viewer) Penampil cadangan cluster pengguna standar dalam cakupan Project.	Zonal backupplans.backup.gdc.goog.get backupplans.backup.gdc.goog.list backupplans.backup.gdc.goog.watch backups.backup.gdc.goog.get backups.backup.gdc.goog.list backups.backup.gdc.goog.watch deletebackuprequests.backup.gdc.goog.get deletebackuprequests.backup.gdc.goog.list deletebackuprequests.backup.gdc.goog.watch manualbackuprequests.backup.gdc.goog.get manualbackuprequests.backup.gdc.goog.list manualbackuprequests.backup.gdc.goog.watch manualrestorerequests.backup.gdc.goog.get manualrestorerequests.backup.gdc.goog.list manualrestorerequests.backup.gdc.goog.watch restoreplans.backup.gdc.goog.get restoreplans.backup.gdc.goog.list restoreplans.backup.gdc.goog.watch restores.backup.gdc.goog.get restores.backup.gdc.goog.list restores.backup.gdc.goog.watch volumebackups.backup.gdc.goog.get volumebackups.backup.gdc.goog.list volumebackups.backup.gdc.goog.watch volumerestores.backup.gdc.goog.get volumerestores.backup.gdc.goog.list volumerestores.backup.gdc.goog.watch
VAISEARCH Admin (vaisearch-admin) Mengelola semua resource VAISEARCH dalam project.	Zonal answers.discoveryengine.gdc.goog.get collections.discoveryengine.gdc.goog.create collections.discoveryengine.gdc.goog.delete collections.discoveryengine.gdc.goog.get collections.discoveryengine.gdc.goog.list collections.discoveryengine.gdc.goog.update dataconnectorruns.discoveryengine.gdc.goog.list dataconnectorruns.discoveryengine.gdc.goog.start dataconnectors.discoveryengine.gdc.goog.get dataconnectors.discoveryengine.gdc.goog.setup dataconnectors.discoveryengine.gdc.goog.update dataconnectorsources.discoveryengine.gdc.goog.get dataconnectorsources.discoveryengine.gdc.goog.list datastores.discoveryengine.gdc.goog.create datastores.discoveryengine.gdc.goog.delete datastores.discoveryengine.gdc.goog.get datastores.discoveryengine.gdc.goog.list datastores.discoveryengine.gdc.goog.update documents.discoveryengine.gdc.goog.create documents.discoveryengine.gdc.goog.delete documents.discoveryengine.gdc.goog.get documents.discoveryengine.gdc.goog.import documents.discoveryengine.gdc.goog.list documents.discoveryengine.gdc.goog.update engines.discoveryengine.gdc.goog.create engines.discoveryengine.gdc.goog.delete engines.discoveryengine.gdc.goog.get engines.discoveryengine.gdc.goog.list engines.discoveryengine.gdc.goog.search engines.discoveryengine.gdc.goog.update files.discoveryengine.gdc.goog.create files.discoveryengine.gdc.goog.delete files.discoveryengine.gdc.goog.get files.discoveryengine.gdc.goog.list identitymappingstores.discoveryengine.gdc.goog.create identitymappingstores.discoveryengine.gdc.goog.delete identitymappingstores.discoveryengine.gdc.goog.get identitymappingstores.discoveryengine.gdc.goog.import identitymappingstores.discoveryengine.gdc.goog.list identitymappingstores.discoveryengine.gdc.goog.listidentitymappings identitymappingstores.discoveryengine.gdc.goog.purge operations.discoveryengine.gdc.goog.get operations.discoveryengine.gdc.goog.list sessions.discoveryengine.gdc.goog.answer sessions.discoveryengine.gdc.goog.create sessions.discoveryengine.gdc.goog.delete sessions.discoveryengine.gdc.goog.get sessions.discoveryengine.gdc.goog.list sessions.discoveryengine.gdc.goog.update
VAISEARCH Console UI Admin (vaisearch-admin-ui) Mengelola resource VAISEARCH melalui UI konsol.	Zonal collections.discoveryengine.gdc.goog.list dataconnectorruns.discoveryengine.gdc.goog.list dataconnectors.discoveryengine.gdc.goog.get dataconnectorsources.discoveryengine.gdc.goog.get dataconnectorsources.discoveryengine.gdc.goog.list datastores.discoveryengine.gdc.goog.create datastores.discoveryengine.gdc.goog.delete datastores.discoveryengine.gdc.goog.get datastores.discoveryengine.gdc.goog.list datastores.discoveryengine.gdc.goog.patch datastores.discoveryengine.gdc.goog.update datastores.discoveryengine.gdc.goog.watch documents.discoveryengine.gdc.goog.import engines.discoveryengine.gdc.goog.create engines.discoveryengine.gdc.goog.delete engines.discoveryengine.gdc.goog.get engines.discoveryengine.gdc.goog.list engines.discoveryengine.gdc.goog.patch engines.discoveryengine.gdc.goog.update engines.discoveryengine.gdc.goog.watch files.discoveryengine.gdc.goog.create files.discoveryengine.gdc.goog.delete files.discoveryengine.gdc.goog.get files.discoveryengine.gdc.goog.list operations.discoveryengine.gdc.goog.get
Developer VAISEARCH (vaisearch-developer) Mengelola semua resource VAISEARCH dalam project.	Zonal answers.discoveryengine.gdc.goog.get collections.discoveryengine.gdc.goog.create collections.discoveryengine.gdc.goog.delete collections.discoveryengine.gdc.goog.get collections.discoveryengine.gdc.goog.list collections.discoveryengine.gdc.goog.update dataconnectorruns.discoveryengine.gdc.goog.list dataconnectorruns.discoveryengine.gdc.goog.start dataconnectors.discoveryengine.gdc.goog.get dataconnectors.discoveryengine.gdc.goog.setup dataconnectors.discoveryengine.gdc.goog.update dataconnectorsources.discoveryengine.gdc.goog.get dataconnectorsources.discoveryengine.gdc.goog.list datastores.discoveryengine.gdc.goog.create datastores.discoveryengine.gdc.goog.delete datastores.discoveryengine.gdc.goog.get datastores.discoveryengine.gdc.goog.list datastores.discoveryengine.gdc.goog.update documents.discoveryengine.gdc.goog.create documents.discoveryengine.gdc.goog.delete documents.discoveryengine.gdc.goog.get documents.discoveryengine.gdc.goog.import documents.discoveryengine.gdc.goog.list documents.discoveryengine.gdc.goog.update engines.discoveryengine.gdc.goog.create engines.discoveryengine.gdc.goog.delete engines.discoveryengine.gdc.goog.get engines.discoveryengine.gdc.goog.list engines.discoveryengine.gdc.goog.search engines.discoveryengine.gdc.goog.update files.discoveryengine.gdc.goog.create files.discoveryengine.gdc.goog.delete files.discoveryengine.gdc.goog.get files.discoveryengine.gdc.goog.list identitymappingstores.discoveryengine.gdc.goog.create identitymappingstores.discoveryengine.gdc.goog.delete identitymappingstores.discoveryengine.gdc.goog.get identitymappingstores.discoveryengine.gdc.goog.import identitymappingstores.discoveryengine.gdc.goog.list identitymappingstores.discoveryengine.gdc.goog.listidentitymappings identitymappingstores.discoveryengine.gdc.goog.purge operations.discoveryengine.gdc.goog.get operations.discoveryengine.gdc.goog.list sessions.discoveryengine.gdc.goog.answer sessions.discoveryengine.gdc.goog.create sessions.discoveryengine.gdc.goog.delete sessions.discoveryengine.gdc.goog.get sessions.discoveryengine.gdc.goog.list sessions.discoveryengine.gdc.goog.update
Pengguna VAISEARCH (vaisearch-user) Berinteraksi dengan UI chat VAISEARCH.	Zonal answers.discoveryengine.gdc.goog.get engines.discoveryengine.gdc.goog.search files.discoveryengine.gdc.goog.create files.discoveryengine.gdc.goog.delete files.discoveryengine.gdc.goog.get files.discoveryengine.gdc.goog.list sessions.discoveryengine.gdc.goog.answer
VAISEARCH Viewer (vaisearch-viewer) Melihat semua resource VAISEARCH dalam project.	Zonal answers.discoveryengine.gdc.goog.get collections.discoveryengine.gdc.goog.get collections.discoveryengine.gdc.goog.list dataconnectorruns.discoveryengine.gdc.goog.list dataconnectors.discoveryengine.gdc.goog.get dataconnectorsources.discoveryengine.gdc.goog.get dataconnectorsources.discoveryengine.gdc.goog.list datastores.discoveryengine.gdc.goog.get datastores.discoveryengine.gdc.goog.list documents.discoveryengine.gdc.goog.get documents.discoveryengine.gdc.goog.list engines.discoveryengine.gdc.goog.get engines.discoveryengine.gdc.goog.list engines.discoveryengine.gdc.goog.search files.discoveryengine.gdc.goog.get files.discoveryengine.gdc.goog.list identitymappingstores.discoveryengine.gdc.goog.get identitymappingstores.discoveryengine.gdc.goog.list identitymappingstores.discoveryengine.gdc.goog.listidentitymappings operations.discoveryengine.gdc.goog.get operations.discoveryengine.gdc.goog.list sessions.discoveryengine.gdc.goog.answer sessions.discoveryengine.gdc.goog.get sessions.discoveryengine.gdc.goog.list
Vertex AI Gemini Flash Developer (ai-gemini-flash-developer) Melakukan permintaan prediksi dan penyelesaian chat di endpoint model Gemini Flash.	Zonal endpoints.gemini-flash.gdc.goog.chat-completions endpoints.gemini-flash.gdc.goog.predict
Vertex AI Multimodal Embedding Developer (ai-multimodal-embedding-developer) Melakukan permintaan prediksi pada endpoint model Embedding Multimodal.	Zonal endpoints.multimodal-embedding.gdc.goog.predict
Vertex AI OCR Developer (ai-ocr-developer) Mengakses layanan OCR.	Zonal annotators.vision.gdc.goog.async-batch-annotate-files annotators.vision.gdc.goog.async-batch-annotate-images annotators.vision.gdc.goog.batch-annotate-files annotators.vision.gdc.goog.batch-annotate-images annotators.vision.gdc.goog.create annotators.vision.gdc.goog.delete annotators.vision.gdc.goog.get annotators.vision.gdc.goog.list annotators.vision.gdc.goog.patch annotators.vision.gdc.goog.update annotators.vision.gdc.goog.watch
Vertex AI Prediction Admin (vertex-ai-prediction-admin) Mengelola resource terkait Prediksi Online.	Cluster Kubernetes deployedmodels.prediction.aiplatform.gdc.goog.create deployedmodels.prediction.aiplatform.gdc.goog.delete deployedmodels.prediction.aiplatform.gdc.goog.deletecollection deployedmodels.prediction.aiplatform.gdc.goog.get deployedmodels.prediction.aiplatform.gdc.goog.list deployedmodels.prediction.aiplatform.gdc.goog.patch deployedmodels.prediction.aiplatform.gdc.goog.update deployedmodels.prediction.aiplatform.gdc.goog.watch endpoints.aiplatform.gdc.goog.create endpoints.aiplatform.gdc.goog.delete endpoints.aiplatform.gdc.goog.deletecollection endpoints.aiplatform.gdc.goog.get endpoints.aiplatform.gdc.goog.list endpoints.aiplatform.gdc.goog.patch endpoints.aiplatform.gdc.goog.update endpoints.aiplatform.gdc.goog.watch resourcepools.prediction.aiplatform.gdc.goog.create resourcepools.prediction.aiplatform.gdc.goog.delete resourcepools.prediction.aiplatform.gdc.goog.deletecollection resourcepools.prediction.aiplatform.gdc.goog.get resourcepools.prediction.aiplatform.gdc.goog.list resourcepools.prediction.aiplatform.gdc.goog.patch resourcepools.prediction.aiplatform.gdc.goog.update resourcepools.prediction.aiplatform.gdc.goog.watch
Vertex AI Prediction User (vertex-ai-prediction-user) Melakukan permintaan prediksi pada endpoint AI Platform.	Zonal endpoints.aiplatform.googleapis.com.predict
Vertex AI Speech Chirp Developer (ai-speech-chirp-developer) Mengakses layanan Speech Chirp.	Zonal recognizers.speech.gdc.goog.create recognizers.speech.gdc.goog.delete recognizers.speech.gdc.goog.get recognizers.speech.gdc.goog.list recognizers.speech.gdc.goog.patch recognizers.speech.gdc.goog.recognize recognizers.speech.gdc.goog.streaming-recognize recognizers.speech.gdc.goog.update recognizers.speech.gdc.goog.watch
Vertex AI Speech Developer (ai-speech-developer) Mengakses layanan Speech.	Zonal recognizers.speech.gdc.goog.create recognizers.speech.gdc.goog.delete recognizers.speech.gdc.goog.get recognizers.speech.gdc.goog.list recognizers.speech.gdc.goog.patch recognizers.speech.gdc.goog.recognize recognizers.speech.gdc.goog.streaming-recognize recognizers.speech.gdc.goog.update recognizers.speech.gdc.goog.watch
Vertex AI Text Embedding Developer (ai-text-embedding-developer) Melakukan permintaan prediksi pada endpoint model Text Embedding.	Zonal endpoints.text-embedding-005.gdc.goog.predict endpoints.text-embedding.gdc.goog.predict
Vertex AI Text Embedding Multilingual Developer (ai-text-embedding-multilingual-developer) Melakukan permintaan prediksi di endpoint model Text Embedding Multilingual.	Zonal endpoints.text-embedding-multilingual.gdc.goog.predict
Vertex AI Translation Developer (ai-translation-developer) Mengakses layanan Terjemahan.	Zonal operations.translation.gdc.goog.batch-translate-document operations.translation.gdc.goog.create operations.translation.gdc.goog.create-glossary operations.translation.gdc.goog.delete operations.translation.gdc.goog.delete-glossary operations.translation.gdc.goog.detect-language operations.translation.gdc.goog.get operations.translation.gdc.goog.get-glossary operations.translation.gdc.goog.get-supported-languages operations.translation.gdc.goog.list operations.translation.gdc.goog.list-glossaries operations.translation.gdc.goog.patch operations.translation.gdc.goog.translate-document operations.translation.gdc.goog.translate-text operations.translation.gdc.goog.update operations.translation.gdc.goog.watch translators.translation.gdc.goog.batch-translate-document translators.translation.gdc.goog.create translators.translation.gdc.goog.create-glossary translators.translation.gdc.goog.delete translators.translation.gdc.goog.delete-glossary translators.translation.gdc.goog.detect-language translators.translation.gdc.goog.get translators.translation.gdc.goog.get-glossary translators.translation.gdc.goog.get-supported-languages translators.translation.gdc.goog.list translators.translation.gdc.goog.list-glossaries translators.translation.gdc.goog.patch translators.translation.gdc.goog.translate-document translators.translation.gdc.goog.translate-text translators.translation.gdc.goog.update translators.translation.gdc.goog.watch
Virtual Machine Image Project Admin (project-vm-image-admin) Mengelola image VM di namespace project.	Global virtualmachineimages.virtualmachine.global.gdc.goog.get virtualmachineimages.virtualmachine.global.gdc.goog.list virtualmachineimages.virtualmachine.global.gdc.goog.watch Zonal buckets.object.gdc.goog.create buckets.object.gdc.goog.delete buckets.object.gdc.goog.get buckets.object.gdc.goog.list buckets.object.gdc.goog.patch buckets.object.gdc.goog.read-object buckets.object.gdc.goog.update buckets.object.gdc.goog.watch buckets.object.gdc.goog.write-object virtualmachineimage.virtualmachineview.gdc.goog.get virtualmachineimage.virtualmachineview.gdc.goog.list virtualmachineimage.virtualmachineview.gdc.goog.watch virtualmachineimageimports.virtualmachine.gdc.goog.create virtualmachineimageimports.virtualmachine.gdc.goog.delete virtualmachineimageimports.virtualmachine.gdc.goog.get virtualmachineimageimports.virtualmachine.gdc.goog.list virtualmachineimageimports.virtualmachine.gdc.goog.patch virtualmachineimageimports.virtualmachine.gdc.goog.update virtualmachineimageimports.virtualmachine.gdc.goog.watch virtualmachineimages.virtualmachine.gdc.goog.get virtualmachineimages.virtualmachine.gdc.goog.list virtualmachineimages.virtualmachine.gdc.goog.watch
Virtual Machine Image Project Viewer (project-vm-image-viewer) Melihat image VM di namespace project.	Global virtualmachineimages.virtualmachine.global.gdc.goog.get virtualmachineimages.virtualmachine.global.gdc.goog.list virtualmachineimages.virtualmachine.global.gdc.goog.watch Zonal virtualmachineimage.virtualmachineview.gdc.goog.get virtualmachineimage.virtualmachineview.gdc.goog.list virtualmachineimage.virtualmachineview.gdc.goog.watch virtualmachineimages.virtualmachine.gdc.goog.get virtualmachineimages.virtualmachine.gdc.goog.list virtualmachineimages.virtualmachine.gdc.goog.watch
Virtual Machine Project Admin (project-vm-admin) Mengelola VM di namespace project.	Global virtualmachineimages.virtualmachine.global.gdc.goog.get virtualmachineimages.virtualmachine.global.gdc.goog.list virtualmachineimages.virtualmachine.global.gdc.goog.watch virtualmachinetemplates.virtualmachine.global.gdc.goog.create virtualmachinetemplates.virtualmachine.global.gdc.goog.delete virtualmachinetemplates.virtualmachine.global.gdc.goog.get virtualmachinetemplates.virtualmachine.global.gdc.goog.list virtualmachinetemplates.virtualmachine.global.gdc.goog.watch volumereplicationrelationships.storage.global.gdc.goog.create volumereplicationrelationships.storage.global.gdc.goog.delete volumereplicationrelationships.storage.global.gdc.goog.get volumereplicationrelationships.storage.global.gdc.goog.list volumereplicationrelationships.storage.global.gdc.goog.patch volumereplicationrelationships.storage.global.gdc.goog.update volumereplicationrelationships.storage.global.gdc.goog.watch Zonal projectnetworkpolicies.networking.gdc.goog.get projectnetworkpolicies.networking.gdc.goog.list secrets.get secrets.list virtualmachineaccessrequests.virtualmachine.gdc.goog.create virtualmachineaccessrequests.virtualmachine.gdc.goog.delete virtualmachineaccessrequests.virtualmachine.gdc.goog.get virtualmachineaccessrequests.virtualmachine.gdc.goog.list virtualmachineaccessrequests.virtualmachine.gdc.goog.patch virtualmachineaccessrequests.virtualmachine.gdc.goog.update virtualmachineaccessrequests.virtualmachine.gdc.goog.watch virtualmachinebackupplans.virtualmachine.gdc.goog.delete virtualmachinebackupplans.virtualmachine.gdc.goog.get virtualmachinebackupplans.virtualmachine.gdc.goog.list virtualmachinebackupplans.virtualmachine.gdc.goog.patch virtualmachinebackupplans.virtualmachine.gdc.goog.update virtualmachinebackupplans.virtualmachine.gdc.goog.watch virtualmachinebackupplantemplates.virtualmachine.gdc.goog.create virtualmachinebackupplantemplates.virtualmachine.gdc.goog.delete virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list virtualmachinebackupplantemplates.virtualmachine.gdc.goog.patch virtualmachinebackupplantemplates.virtualmachine.gdc.goog.update virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch virtualmachinebackuprequests.virtualmachine.gdc.goog.create virtualmachinebackuprequests.virtualmachine.gdc.goog.delete virtualmachinebackuprequests.virtualmachine.gdc.goog.get virtualmachinebackuprequests.virtualmachine.gdc.goog.list virtualmachinebackuprequests.virtualmachine.gdc.goog.watch virtualmachinebackups.virtualmachine.gdc.goog.get virtualmachinebackups.virtualmachine.gdc.goog.list virtualmachinebackups.virtualmachine.gdc.goog.watch virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.create virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.delete virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch virtualmachinedisks.virtualmachine.gdc.goog.create virtualmachinedisks.virtualmachine.gdc.goog.delete virtualmachinedisks.virtualmachine.gdc.goog.get virtualmachinedisks.virtualmachine.gdc.goog.list virtualmachinedisks.virtualmachine.gdc.goog.patch virtualmachinedisks.virtualmachine.gdc.goog.update virtualmachinedisks.virtualmachine.gdc.goog.watch virtualmachineexternalaccesses.virtualmachine.gdc.goog.create virtualmachineexternalaccesses.virtualmachine.gdc.goog.delete virtualmachineexternalaccesses.virtualmachine.gdc.goog.get virtualmachineexternalaccesses.virtualmachine.gdc.goog.list virtualmachineexternalaccesses.virtualmachine.gdc.goog.patch virtualmachineexternalaccesses.virtualmachine.gdc.goog.update virtualmachineexternalaccesses.virtualmachine.gdc.goog.watch virtualmachineimages.virtualmachine.gdc.goog.get virtualmachineimages.virtualmachine.gdc.goog.list virtualmachineimages.virtualmachine.gdc.goog.watch virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.create virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.delete virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.get virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.list virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.patch virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.update virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.watch virtualmachinerestorerequests.virtualmachine.gdc.goog.create virtualmachinerestorerequests.virtualmachine.gdc.goog.delete virtualmachinerestorerequests.virtualmachine.gdc.goog.get virtualmachinerestorerequests.virtualmachine.gdc.goog.list virtualmachinerestorerequests.virtualmachine.gdc.goog.watch virtualmachinerestores.virtualmachine.gdc.goog.delete virtualmachinerestores.virtualmachine.gdc.goog.get virtualmachinerestores.virtualmachine.gdc.goog.list virtualmachinerestores.virtualmachine.gdc.goog.patch virtualmachinerestores.virtualmachine.gdc.goog.update virtualmachinerestores.virtualmachine.gdc.goog.watch virtualmachines.virtualmachine.gdc.goog.console virtualmachines.virtualmachine.gdc.goog.create virtualmachines.virtualmachine.gdc.goog.delete virtualmachines.virtualmachine.gdc.goog.get virtualmachines.virtualmachine.gdc.goog.getmetadata virtualmachines.virtualmachine.gdc.goog.list virtualmachines.virtualmachine.gdc.goog.patch virtualmachines.virtualmachine.gdc.goog.setmetadata virtualmachines.virtualmachine.gdc.goog.update virtualmachines.virtualmachine.gdc.goog.watch virtualmachines/restart.virtualmachineoperations.gdc.goog.update
Virtual Machine Project Viewer (project-vm-viewer) Melihat VM di namespace project.	Global virtualmachineimages.virtualmachine.global.gdc.goog.get virtualmachineimages.virtualmachine.global.gdc.goog.list virtualmachineimages.virtualmachine.global.gdc.goog.watch volumereplicationrelationships.storage.global.gdc.goog.get volumereplicationrelationships.storage.global.gdc.goog.list volumereplicationrelationships.storage.global.gdc.goog.watch Zonal projectnetworkpolicies.networking.gdc.goog.get projectnetworkpolicies.networking.gdc.goog.list secrets.get secrets.list virtualmachineaccessrequests.virtualmachine.gdc.goog.get virtualmachineaccessrequests.virtualmachine.gdc.goog.list virtualmachineaccessrequests.virtualmachine.gdc.goog.watch virtualmachinebackupplans.virtualmachine.gdc.goog.get virtualmachinebackupplans.virtualmachine.gdc.goog.list virtualmachinebackupplans.virtualmachine.gdc.goog.watch virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch virtualmachinebackuprequests.virtualmachine.gdc.goog.get virtualmachinebackuprequests.virtualmachine.gdc.goog.list virtualmachinebackuprequests.virtualmachine.gdc.goog.watch virtualmachinebackups.virtualmachine.gdc.goog.get virtualmachinebackups.virtualmachine.gdc.goog.list virtualmachinebackups.virtualmachine.gdc.goog.watch virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch virtualmachinedisks.virtualmachine.gdc.goog.get virtualmachinedisks.virtualmachine.gdc.goog.list virtualmachinedisks.virtualmachine.gdc.goog.watch virtualmachineexternalaccesses.virtualmachine.gdc.goog.get virtualmachineexternalaccesses.virtualmachine.gdc.goog.list virtualmachineexternalaccesses.virtualmachine.gdc.goog.watch virtualmachineimages.virtualmachine.gdc.goog.get virtualmachineimages.virtualmachine.gdc.goog.list virtualmachineimages.virtualmachine.gdc.goog.watch virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.get virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.list virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.watch virtualmachinerestorerequests.virtualmachine.gdc.goog.get virtualmachinerestorerequests.virtualmachine.gdc.goog.list virtualmachinerestorerequests.virtualmachine.gdc.goog.watch virtualmachinerestores.virtualmachine.gdc.goog.get virtualmachinerestores.virtualmachine.gdc.goog.list virtualmachinerestores.virtualmachine.gdc.goog.watch virtualmachines.virtualmachine.gdc.goog.get virtualmachines.virtualmachine.gdc.goog.getmetadata virtualmachines.virtualmachine.gdc.goog.list virtualmachines.virtualmachine.gdc.goog.watch
Pengguna Pencadangan Virtual Machine (vmbackup-user) Memberikan akses pembuatan ke pencadangan dan pemulihan VM, serta akses lihat ke rencana pencadangan VM.	Zonal virtualmachinebackupplans.virtualmachine.gdc.goog.get virtualmachinebackupplans.virtualmachine.gdc.goog.list virtualmachinebackupplans.virtualmachine.gdc.goog.watch virtualmachinebackuprequest.virtualmachine.gdc.goog.create virtualmachinebackuprequest.virtualmachine.gdc.goog.delete virtualmachinebackuprequest.virtualmachine.gdc.goog.get virtualmachinebackuprequest.virtualmachine.gdc.goog.list virtualmachinebackuprequest.virtualmachine.gdc.goog.patch virtualmachinebackuprequest.virtualmachine.gdc.goog.update virtualmachinebackuprequest.virtualmachine.gdc.goog.watch virtualmachinebackups.virtualmachine.gdc.goog.get virtualmachinebackups.virtualmachine.gdc.goog.list virtualmachinebackups.virtualmachine.gdc.goog.watch virtualmachinerestorerequest.virtualmachine.gdc.goog.create virtualmachinerestorerequest.virtualmachine.gdc.goog.delete virtualmachinerestorerequest.virtualmachine.gdc.goog.get virtualmachinerestorerequest.virtualmachine.gdc.goog.list virtualmachinerestorerequest.virtualmachine.gdc.goog.patch virtualmachinerestorerequest.virtualmachine.gdc.goog.update virtualmachinerestorerequest.virtualmachine.gdc.goog.watch virtualmachinerestores.virtualmachine.gdc.goog.get virtualmachinerestores.virtualmachine.gdc.goog.list virtualmachinerestores.virtualmachine.gdc.goog.watch
Virtual Machines Backup Viewer (vmbackup-viewer) Memberikan akses lihat ke cadangan VM, pemulihan VM, rencana pencadangan VM, dan rencana pemulihan VM.	Zonal virtualmachinebackupplans.virtualmachine.gdc.goog.get virtualmachinebackupplans.virtualmachine.gdc.goog.list virtualmachinebackupplans.virtualmachine.gdc.goog.watch virtualmachinebackuprequest.virtualmachine.gdc.goog.get virtualmachinebackuprequest.virtualmachine.gdc.goog.list virtualmachinebackuprequest.virtualmachine.gdc.goog.watch virtualmachinebackups.virtualmachine.gdc.goog.get virtualmachinebackups.virtualmachine.gdc.goog.list virtualmachinebackups.virtualmachine.gdc.goog.watch virtualmachinerestorerequest.virtualmachine.gdc.goog.get virtualmachinerestorerequest.virtualmachine.gdc.goog.list virtualmachinerestorerequest.virtualmachine.gdc.goog.watch virtualmachinerestores.virtualmachine.gdc.goog.get virtualmachinerestores.virtualmachine.gdc.goog.list virtualmachinerestores.virtualmachine.gdc.goog.watch
Workbench Notebooks Admin (workbench-notebooks-admin) Akses untuk membuat, membaca, dan menghapus Notebook Workbench. Akses baca ke ClusterInfos	Zonal clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list notebook/notebook-root.istio.resourcemanager.gdc.goog.CONNECT notebook/notebook-root.istio.resourcemanager.gdc.goog.DELETE notebook/notebook-root.istio.resourcemanager.gdc.goog.GET notebook/notebook-root.istio.resourcemanager.gdc.goog.HEAD notebook/notebook-root.istio.resourcemanager.gdc.goog.OPTIONS notebook/notebook-root.istio.resourcemanager.gdc.goog.PATCH notebook/notebook-root.istio.resourcemanager.gdc.goog.POST notebook/notebook-root.istio.resourcemanager.gdc.goog.PUT notebook/notebook-root.istio.resourcemanager.gdc.goog.TRACE notebooks.aiplatform.gdc.goog.create notebooks.aiplatform.gdc.goog.delete notebooks.aiplatform.gdc.goog.deletecollection notebooks.aiplatform.gdc.goog.get notebooks.aiplatform.gdc.goog.list notebooks.aiplatform.gdc.goog.patch notebooks.aiplatform.gdc.goog.update notebooks.aiplatform.gdc.goog.watch notebooks/status.aiplatform.gdc.goog.get notebooks/status.aiplatform.gdc.goog.list
Workbench Notebooks Viewer (workbench-notebooks-viewer) Akses baca ke Notebook Workbench	Zonal clusterinfos.resourcemanager.private.gdc.goog.get clusterinfos.resourcemanager.private.gdc.goog.list notebook/notebook-root.istio.resourcemanager.gdc.goog.CONNECT notebook/notebook-root.istio.resourcemanager.gdc.goog.DELETE notebook/notebook-root.istio.resourcemanager.gdc.goog.GET notebook/notebook-root.istio.resourcemanager.gdc.goog.HEAD notebook/notebook-root.istio.resourcemanager.gdc.goog.OPTIONS notebook/notebook-root.istio.resourcemanager.gdc.goog.PATCH notebook/notebook-root.istio.resourcemanager.gdc.goog.POST notebook/notebook-root.istio.resourcemanager.gdc.goog.PUT notebook/notebook-root.istio.resourcemanager.gdc.goog.TRACE notebooks.aiplatform.gdc.goog.get notebooks.aiplatform.gdc.goog.list notebooks/status.aiplatform.gdc.goog.get notebooks/status.aiplatform.gdc.goog.list
Workload Viewer (workload-viewer) Melihat pod dan deployment dalam project.	Cluster Kubernetes deployments.apps.get deployments.apps.list deployments.apps.watch pods.get pods.list pods.watch