2026 年 9 月 30 日当周即将发生的权限变更

为了让您能够更规范地控制和使用新功能及现有功能，我们将为下表列出的预定义角色添加新权限。这些变更将于 2026 年 9 月 30 日生效。

注意： 这些变更原定于 2026 年 3 月 29 日当周实施，但已推迟至 2026 年 9 月 30 日当周。

服务	详细信息
Gemini Enterprise Agent Platform	以下权限将添加到 Vertex AI Viewer 角色 (roles/aiplatform.viewer) 中： aiplatform.endpoints.explain aiplatform.endpoints.getIamPolicy aiplatform.entityTypes.getIamPolicy aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.streamingReadFeatureValues aiplatform.featureGroups.getIamPolicy aiplatform.featureOnlineStores.getIamPolicy aiplatform.featureViews.getIamPolicy aiplatform.featurestores.batchReadFeatureValues aiplatform.featurestores.getIamPolicy aiplatform.featurestores.readFeatures aiplatform.humanInTheLoops.queryAnnotationStats aiplatform.locations.evaluateInstances aiplatform.migratableResources.search aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.getIamPolicy
Apigee Connect	以下权限将添加到 Apigee Connect Admin 角色 (roles/apigeeconnect.Admin) 中： apigeeconnect.endpoints.connect
App Hub	以下权限将添加到 App Hub Editor 角色 (roles/apphub.editor) 中： apphub.applications.getIamPolicy apphub.serviceProjectAttachments.create apphub.serviceProjectAttachments.delete apphub.serviceProjectAttachments.get apphub.serviceProjectAttachments.list
App Hub	以下权限将添加到 App Hub Viewer 角色 (roles/apphub.viewer) 中： apphub.applications.getIamPolicy apphub.serviceProjectAttachments.get apphub.serviceProjectAttachments.list
Artifact Registry	以下权限将添加到 Artifact Registry Administrator 角色 (roles/artifactregistry.admin) 中： artifactregistry.repositories.createOnPush
裸金属解决方案	以下权限将添加到裸金属解决方案 Admin 角色 (roles/baremetalsolution.admin) 中： baremetalsolution.procurements.create
裸金属解决方案	以下权限将添加到裸金属解决方案 Editor 角色 (roles/baremetalsolution.editor) 中： baremetalsolution.procurements.create
批量	以下权限将添加到 Batch Administrator 角色 (roles/batch.admin) 中： batch.states.report
BigLake	以下权限将添加到 BigLake Editor 角色 (roles/biglake.editor) 中： biglake.databases.create biglake.databases.delete biglake.databases.get biglake.databases.list biglake.databases.update biglake.locks.check biglake.locks.create biglake.locks.delete biglake.locks.list biglake.tables.lock
BigQuery Migration API	以下权限将添加到 MigrationWorkflow Editor 角色 (roles/bigquerymigration.editor) 中： bigquerymigration.translation.translate
Bigtable	以下权限将添加到 Bigtable Viewer 角色 (roles/bigtable.viewer) 中： bigtable.authorizedViews.getIamPolicy bigtable.authorizedViews.listEffectiveTags bigtable.authorizedViews.listTagBindings bigtable.backups.getIamPolicy bigtable.instances.getIamPolicy bigtable.instances.ping bigtable.logicalViews.getIamPolicy bigtable.materializedViews.getIamPolicy bigtable.schemaBundles.getIamPolicy bigtable.tables.getIamPolicy
Certificate Manager	以下权限将添加到 Certificate Manager Editor 角色 (roles/certificatemanager.editor) 中： certificatemanager.certissuanceconfigs.delete certificatemanager.certmapentries.delete certificatemanager.certmaps.delete certificatemanager.certs.delete certificatemanager.dnsauthorizations.delete certificatemanager.operations.cancel certificatemanager.operations.delete certificatemanager.trustconfigs.delete
Google Security Operations	注意：此角色的权限变更已推迟到 2026 年 11 月 9 日。 以下权限将添加到 Chronicle API Admin 角色 (roles/chronicle.admin)： chronicle.federationGroups.create chronicle.federationGroups.delete chronicle.federationGroups.get chronicle.federationGroups.list chronicle.federationGroups.update
Google Security Operations	注意：此角色的权限变更已推迟到 2026 年 11 月 9 日。 以下权限将添加到 Chronicle API Editor 角色 (roles/chronicle.editor) 中： chronicle.connectors.get chronicle.enrichmentControls.delete chronicle.errorNotificationConfigs.create chronicle.errorNotificationConfigs.delete chronicle.errorNotificationConfigs.update chronicle.federationGroups.get chronicle.federationGroups.list chronicle.legacyCaseFederationPlatforms.get chronicle.moduleSettingsProperties.get chronicle.rules.delete chronicle.shareConfigs.get chronicle.systemNotifications.get chronicle.tenants.list
Google Security Operations	注意：此角色的权限变更已推迟到 2026 年 11 月 9 日。 以下权限将添加到 Chronicle API Viewer 角色 (roles/chronicle.viewer)： chronicle.caseWallRecords.get chronicle.customLists.get chronicle.emailTemplates.get chronicle.entitiesBlocklists.get chronicle.federationGroups.get chronicle.federationGroups.list chronicle.integrations.get chronicle.legacyCaseFederationPlatforms.get chronicle.moduleSettingsProperties.get chronicle.notificationSettings.get chronicle.remoteAgents.get chronicle.shareConfigs.get chronicle.systemNotifications.get chronicle.tasks.get chronicle.uniqueEntities.get chronicle.userLocalizations.get chronicle.userNotifications.get chronicle.workdeskContacts.get chronicle.workdeskLinks.get chronicle.workdeskNotes.get
Cloud Asset Inventory	以下权限将添加到 Cloud Asset Viewer 角色 (roles/cloudasset.viewer) 中： cloudasset.savedqueries.get cloudasset.savedqueries.list
Talent Solution	以下权限将添加到 Cloud Talent Solution Admin 角色 (roles/cloudjobdiscovery.admin) 中： cloudjobdiscovery.companies.create cloudjobdiscovery.companies.delete cloudjobdiscovery.companies.get cloudjobdiscovery.companies.list cloudjobdiscovery.companies.update cloudjobdiscovery.events.create cloudjobdiscovery.jobs.create cloudjobdiscovery.jobs.delete cloudjobdiscovery.jobs.get cloudjobdiscovery.jobs.search cloudjobdiscovery.jobs.update cloudjobdiscovery.profiles.create cloudjobdiscovery.profiles.delete cloudjobdiscovery.profiles.get cloudjobdiscovery.profiles.search cloudjobdiscovery.profiles.update cloudjobdiscovery.tenants.create cloudjobdiscovery.tenants.delete cloudjobdiscovery.tenants.get cloudjobdiscovery.tenants.update
Cloud Key Management Service	以下权限将添加到 Cloud KMS Admin 角色 (roles/cloudkms.admin) 中： cloudkms.locations.generateRandomBytes cloudkms.protectedResources.search
Cloud Key Management Service	以下权限将添加到 Cloud KMS Viewer 角色 (roles/cloudkms.viewer) 中： cloudkms.cryptoKeys.getIamPolicy cloudkms.ekmConfigs.getIamPolicy cloudkms.ekmConnections.getIamPolicy cloudkms.ekmConnections.verifyConnectivity cloudkms.importJobs.getIamPolicy cloudkms.keyRings.getIamPolicy cloudkms.keyRings.listEffectiveTags cloudkms.keyRings.listTagBindings cloudkms.locations.generateRandomBytes cloudkms.projects.showEffectiveAutokeyConfig cloudkms.projects.showEffectiveKajEnrollmentConfig cloudkms.projects.showEffectiveKajPolicyConfig cloudkms.protectedResources.search
Cloud SQL	以下权限将添加到 Cloud SQL Editor 角色 (roles/cloudsql.editor) 中： cloudsql.instances.create cloudsql.instances.createBackupDrBackup cloudsql.instances.demoteMaster cloudsql.instances.promoteReplica cloudsql.instances.startReplica cloudsql.instances.stopReplica cloudsql.instances.updateBackupDrConfig cloudsql.sslCerts.create cloudsql.users.delete
Google Cloud 支持	以下权限将添加到 Support Account Administrator 角色 (roles/cloudsupport.admin) 中： cloudsupport.techCases.create cloudsupport.techCases.escalate cloudsupport.techCases.get cloudsupport.techCases.list cloudsupport.techCases.update
Google Cloud 支持	以下权限将添加到 Support Account Viewer 角色 (roles/cloudsupport.viewer) 中： cloudsupport.accounts.getIamPolicy cloudsupport.operations.get cloudsupport.techCases.get cloudsupport.techCases.list
连接器	以下权限将添加到 Connector Admin 角色 (roles/connectors.admin) 中： connectors.connections.listenEvent
连接器	以下权限将添加到 Connector Viewer 角色 (roles/connectors.viewer) 中： connectors.actions.list connectors.entities.get connectors.entities.list connectors.entityTypes.list
Google Cloud Contact Center as a Service	以下权限将添加到 Contact Center AI 平台 Admin 角色 (roles/contactcenteraiplatform.admin) 中： contactcenteraiplatform.locations.generateShifts
Google Cloud Contact Center as a Service	以下权限将添加到 Contact Center AI 平台 Viewer 角色 (roles/contactcenteraiplatform.viewer) 中： contactcenteraiplatform.contactCenters.queryQuota
客户体验分析洞见	以下权限将添加到 Contact Center AI Insights Editor 角色 (roles/contactcenterinsights.editor) 中： contactcenterinsights.authorizedViews.getIamPolicy
客户体验分析洞见	以下权限将添加到 Contact Center AI Insights Viewer 角色 (roles/contactcenterinsights.viewer) 中： contactcenterinsights.authorizedViews.getIamPolicy
Content Warehouse	以下权限将添加到 Content Warehouse Admin 角色 (roles/contentwarehouse.admin) 中： contentwarehouse.links.create contentwarehouse.links.delete contentwarehouse.links.get contentwarehouse.links.update
Database Insights	以下权限将添加到 Database Insights Viewer 角色 (roles/databaseinsights.viewer) 中： databaseinsights.aggregatedEvents.query databaseinsights.clusterEvents.query databaseinsights.instanceEvents.query
Data Catalog	以下权限将添加到 Data Catalog Viewer 角色 (roles/datacatalog.viewer) 中： datacatalog.categories.getIamPolicy datacatalog.taxonomies.getIamPolicy
Dataflow	以下权限将添加到 Dataflow Admin 角色 (roles/dataflow.admin) 中： dataflow.shuffle.read dataflow.shuffle.write dataflow.streamingWorkItems.ImportState dataflow.streamingWorkItems.commitWork dataflow.streamingWorkItems.getData dataflow.streamingWorkItems.getWork dataflow.streamingWorkItems.getWorkerMetadata dataflow.workItems.lease dataflow.workItems.sendMessage dataflow.workItems.update
Dataform	以下权限将添加到 Dataform Editor 角色 (roles/dataform.editor) 中： dataform.commentThreads.create dataform.commentThreads.delete dataform.commentThreads.update dataform.comments.create dataform.comments.delete dataform.comments.update dataform.config.update dataform.folders.addContents dataform.folders.create dataform.folders.delete dataform.folders.move dataform.folders.update dataform.operations.cancel dataform.operations.delete dataform.releaseConfigs.create dataform.releaseConfigs.delete dataform.releaseConfigs.update dataform.repositories.commit dataform.repositories.create dataform.repositories.delete dataform.repositories.move dataform.repositories.scheduleRelease dataform.repositories.scheduleWorkflow dataform.repositories.update dataform.teamFolders.create dataform.teamFolders.delete dataform.teamFolders.update dataform.workflowConfigs.create dataform.workflowConfigs.delete dataform.workflowConfigs.update
Data Lineage API	以下权限将添加到 Data Lineage Editor 角色 (roles/datalineage.editor) 中： datalineage.processes.delete datalineage.runs.delete
Data Lineage API	以下权限将添加到 Data Lineage Viewer 角色 (roles/datalineage.viewer) 中： datalineage.operations.get
Managed Service for Apache Spark	以下权限将添加到 Dataproc Administrator 角色 (roles/dataproc.admin) 中： dataproc.agents.create dataproc.agents.delete dataproc.agents.get dataproc.agents.list dataproc.agents.update dataproc.tasks.lease dataproc.tasks.listInvalidatedLeases dataproc.tasks.reportStatus
Managed Service for Apache Spark	以下权限将添加到 Dataproc Editor 角色 (roles/dataproc.editor) 中： dataproc.agents.create dataproc.agents.delete dataproc.agents.get dataproc.agents.list dataproc.agents.update dataproc.autoscalingPolicies.getIamPolicy dataproc.clusters.getIamPolicy dataproc.jobs.getIamPolicy dataproc.operations.getIamPolicy dataproc.tasks.lease dataproc.tasks.listInvalidatedLeases dataproc.tasks.reportStatus dataproc.workflowTemplates.getIamPolicy
Managed Service for Apache Spark	以下权限将添加到 Dataproc Viewer 角色 (roles/dataproc.viewer) 中： dataproc.agents.get dataproc.agents.list dataproc.autoscalingPolicies.getIamPolicy dataproc.autoscalingPolicies.use dataproc.clusters.getIamPolicy dataproc.jobs.getIamPolicy dataproc.operations.getIamPolicy dataproc.tasks.listInvalidatedLeases dataproc.workflowTemplates.getIamPolicy
Firestore	以下权限将添加到 Cloud Datastore Viewer 角色 (roles/datastore.viewer) 中： datastore.backupSchedules.get datastore.backupSchedules.list datastore.backups.get datastore.backups.list datastore.databases.listEffectiveTags datastore.databases.listTagBindings datastore.keyVisualizerScans.get datastore.keyVisualizerScans.list datastore.operations.get datastore.operations.list datastore.userCreds.get datastore.userCreds.list
Discovery Engine	以下权限将添加到 Discovery Engine Admin 角色 (roles/discoveryengine.admin) 中： discoveryengine.accounts.create discoveryengine.audioOverviews.create discoveryengine.audioOverviews.delete discoveryengine.audioOverviews.get discoveryengine.audioOverviews.getIceConfig discoveryengine.audioOverviews.sendSdpOffer discoveryengine.notebooks.create discoveryengine.notebooks.generateGuide discoveryengine.notebooks.get discoveryengine.notebooks.getAnalytics discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.interactSources discoveryengine.notebooks.list discoveryengine.notebooks.removeSelf discoveryengine.notebooks.setIamPolicy discoveryengine.notebooks.update discoveryengine.notes.create discoveryengine.notes.delete discoveryengine.notes.get discoveryengine.notes.update discoveryengine.podcasts.create discoveryengine.sources.checkFreshness discoveryengine.sources.create discoveryengine.sources.delete discoveryengine.sources.generateDocumentGuide discoveryengine.sources.get discoveryengine.sources.refresh discoveryengine.sources.update
Discovery Engine	以下权限将添加到 Discovery Engine Editor 角色 (roles/discoveryengine.editor) 中： discoveryengine.accounts.create discoveryengine.alertPolicies.create discoveryengine.alertPolicies.update discoveryengine.assistants.create discoveryengine.assistants.delete discoveryengine.assistants.update discoveryengine.completionConfigs.update discoveryengine.controls.create discoveryengine.controls.delete discoveryengine.controls.update discoveryengine.dataConnectors.startConnectorRun discoveryengine.dataConnectors.update discoveryengine.dataStores.create discoveryengine.dataStores.delete discoveryengine.dataStores.enrollSolutions discoveryengine.dataStores.update discoveryengine.documentProcessingConfigs.update discoveryengine.documents.purge discoveryengine.engines.create discoveryengine.engines.delete discoveryengine.engines.getIamPolicy discoveryengine.engines.update discoveryengine.evaluations.create discoveryengine.licenseConfigs.create discoveryengine.licenseConfigs.update discoveryengine.locations.estimateDataSize discoveryengine.locations.exchangeAuthCredentials discoveryengine.locations.getConnectorSource discoveryengine.locations.listConnectorSources discoveryengine.locations.setUpDataConnector discoveryengine.notebooks.create discoveryengine.podcasts.create discoveryengine.projects.provision discoveryengine.projects.reportConsentChange discoveryengine.schemas.create discoveryengine.schemas.delete discoveryengine.schemas.update discoveryengine.servingConfigs.create discoveryengine.servingConfigs.delete discoveryengine.servingConfigs.update discoveryengine.siteSearchEngines.batchVerifyTargetSites discoveryengine.siteSearchEngines.disableAdvancedSiteSearch discoveryengine.siteSearchEngines.enableAdvancedSiteSearch discoveryengine.siteSearchEngines.fetchDomainVerificationStatus discoveryengine.siteSearchEngines.recrawlUris discoveryengine.sitemaps.create discoveryengine.sitemaps.delete discoveryengine.sitemaps.fetch discoveryengine.suggestionDenyListEntries.import discoveryengine.suggestionDenyListEntries.purge discoveryengine.targetSites.batchCreate discoveryengine.targetSites.create discoveryengine.targetSites.delete discoveryengine.targetSites.update discoveryengine.userEvents.purge discoveryengine.userStores.batchUpdateUserLicenses discoveryengine.userStores.listUserLicenses
Discovery Engine	以下权限将添加到 Discovery Engine Viewer 角色 (roles/discoveryengine.viewer) 中： discoveryengine.engines.getIamPolicy discoveryengine.locations.getConnectorSource discoveryengine.locations.listConnectorSources discoveryengine.notebooks.list discoveryengine.siteSearchEngines.fetchDomainVerificationStatus discoveryengine.sitemaps.fetch
Cloud DNS	以下权限将添加到 DNS Administrator 角色 (roles/dns.admin) 中： dns.managedZones.setIamPolicy
Firebase 安全规则	以下权限将添加到 Firebase Rules Viewer 角色 (roles/firebaserules.viewer) 中： firebaserules.releases.getExecutable firebaserules.rulesets.test
GKE Hub	以下权限将添加到 Fleet Admin（以前称为 GKE Hub Admin）角色 (roles/gkehub.admin) 中： gkehub.endpoints.connect
GKE Hub	以下权限将添加到 Fleet Viewer（以前称为 GKE Hub Viewer）角色 (roles/gkehub.viewer) 中： gkehub.scopes.getIamPolicy
Identity-Aware Proxy	以下权限将添加到 IAP Policy Admin 角色 (roles/iap.admin) 中： iap.projects.getSettings iap.projects.updateSettings iap.tunnelDestGroups.create iap.tunnelDestGroups.delete iap.tunnelDestGroups.get iap.tunnelDestGroups.list iap.tunnelDestGroups.remediate iap.tunnelDestGroups.update iap.tunnelinstances.remediate iap.web.getSettings iap.web.updateSettings iap.webServiceVersions.getSettings iap.webServiceVersions.remediate iap.webServiceVersions.updateSettings iap.webServices.getSettings iap.webServices.updateSettings iap.webTypes.getSettings iap.webTypes.updateSettings
Cloud License Manager	以下权限将添加到 Cloud License Manager Viewer 角色 (roles/licensemanager.viewer) 中： licensemanager.configurations.aggregateUsage licensemanager.configurations.queryLicenseUsage
Cloud Logging	以下权限将添加到日志查看器角色 (roles/logging.viewer) 中： logging.buckets.listEffectiveTags logging.buckets.listTagBindings logging.notificationRules.get logging.notificationRules.list logging.settings.get logging.views.getIamPolicy
Microsoft Active Directory 托管服务	以下权限将添加到 Google Cloud Managed Identities Viewer 角色 (roles/managedidentities.viewer) 中： managedidentities.domains.checkMigrationPermission managedidentities.domains.validateTrust
Dataproc Metastore	以下权限将添加到 Dataproc Metastore Admin 角色 (roles/metastore.admin) 中： metastore.databases.create metastore.databases.delete metastore.databases.get metastore.databases.getIamPolicy metastore.databases.list metastore.databases.setIamPolicy metastore.databases.update metastore.services.mutateMetadata metastore.services.queryMetadata metastore.services.use metastore.tables.create metastore.tables.delete metastore.tables.get metastore.tables.getIamPolicy metastore.tables.list metastore.tables.setIamPolicy metastore.tables.update
Dataproc Metastore	以下权限将添加到 Dataproc Metastore Editor 角色 (roles/metastore.editor) 中： metastore.backups.getIamPolicy metastore.databases.create metastore.databases.delete metastore.databases.get metastore.databases.getIamPolicy metastore.databases.list metastore.databases.update metastore.federations.getIamPolicy metastore.federations.use metastore.services.use metastore.tables.create metastore.tables.delete metastore.tables.get metastore.tables.getIamPolicy metastore.tables.list metastore.tables.update
AI Platform	以下权限将添加到 AI Platform Viewer 角色 (roles/ml.viewer) 中： ml.jobs.getIamPolicy ml.models.getIamPolicy
Model Armor	以下权限将添加到 Model Armor Admin 角色 (roles/modelarmor.admin) 中： modelarmor.callouts.invoke modelarmor.floorSettings.get modelarmor.floorSettings.update
Model Armor	以下权限将添加到 Model Armor Viewer 角色 (roles/modelarmor.viewer) 中： modelarmor.floorSettings.get
Oracle Database@Google Cloud	以下权限将添加到 Oracle Database@Google Cloud viewer 角色 (roles/oracledatabase.viewer) 中： oracledatabase.dbSystemInitialStorageSizes.list oracledatabase.dbVersions.list oracledatabase.systemVersions.list
Pub/Sub	以下权限将添加到 Pub/Sub Editor 角色 (roles/pubsub.editor) 中： pubsub.schemas.getIamPolicy
Pub/Sub	以下权限将添加到 Pub/Sub Viewer 角色 (roles/pubsub.viewer) 中： pubsub.schemas.getIamPolicy
Pub/Sub Lite	以下权限将添加到 Pub/Sub Lite Viewer 角色 (roles/pubsublite.viewer) 中： pubsublite.locations.openKafkaStream
Google Cloud Fraud Defense	以下权限将添加到 reCAPTCHA Enterprise Admin 角色 (roles/recaptchaenterprise.admin) 中： recaptchaenterprise.assessments.annotate recaptchaenterprise.assessments.create recaptchaenterprise.relatedaccountgroupmemberships.list recaptchaenterprise.relatedaccountgroups.list
Google Cloud Fraud Defense	以下权限将添加到 reCAPTCHA Enterprise Viewer 角色 (roles/recaptchaenterprise.viewer) 中： recaptchaenterprise.relatedaccountgroupmemberships.list recaptchaenterprise.relatedaccountgroups.list
Recommender	以下权限将添加到 Recommender Viewer 角色 (roles/recommender.viewer) 中： recommender.costRecommendations.listAll recommender.costRecommendations.summarizeAll
Memorystore for Redis	以下权限将添加到 Cloud Memorystore Redis Editor 角色 (roles/redis.editor) 中： redis.backupCollections.create redis.backupCollections.delete redis.backups.create redis.backups.delete redis.backups.export redis.clusters.connect redis.clusters.create redis.clusters.delete redis.clusters.rescheduleMaintenance redis.instances.create redis.instances.delete redis.instances.export redis.instances.import redis.instances.listEffectiveTags redis.instances.listTagBindings redis.instances.rescheduleMaintenance redis.instances.updateAuth redis.instances.upgrade
Route Optimization	以下权限将添加到 Route Optimization Viewer 角色 (roles/routeoptimization.viewer) 中： routeoptimization.locations.use
Security Center Management API	以下权限将添加到 Security Center Management Viewer 角色 (roles/securitycentermanagement.viewer) 中： securitycentermanagement.securityCommandCenter.checkEligibility
Security Posture API	以下权限将添加到安全状况 Viewer 角色 (roles/securityposture.viewer) 中： securityposture.locations.get securityposture.locations.list securityposture.operations.list securityposture.reports.get securityposture.reports.list
Spanner	以下权限将添加到 Cloud Spanner Viewer 角色 (roles/spanner.viewer) 中： spanner.backupOperations.get spanner.backupOperations.list spanner.backupSchedules.get spanner.backupSchedules.getIamPolicy spanner.backupSchedules.list spanner.backups.get spanner.backups.getIamPolicy spanner.backups.list spanner.databaseOperations.get spanner.databaseOperations.list spanner.databaseRoles.list spanner.databases.beginReadOnlyTransaction spanner.databases.getDdl spanner.databases.getIamPolicy spanner.databases.useDataBoost spanner.instanceConfigOperations.get spanner.instanceConfigOperations.list spanner.instanceOperations.get spanner.instanceOperations.list spanner.instancePartitionOperations.get spanner.instancePartitionOperations.list spanner.instances.getIamPolicy
Speaker ID	以下权限将添加到 Speaker ID Editor 角色 (roles/speakerid.editor) 中： speakerid.settings.get
Speaker ID	以下权限将添加到 Speaker ID Viewer 角色 (roles/speakerid.viewer) 中： speakerid.settings.get
Speech-to-Text	以下权限将添加到 Cloud Speech Editor 角色 (roles/speech.editor) 中： speech.config.get
Visual Inspection AI	以下权限将添加到 Visual Inspection AI Solution Editor 角色 (roles/visualinspection.editor) 中： visualinspection.locations.reportUsageMetrics

更新日志

日期	更改
2026 年 2 月 13 日	compute.disks.createSnapshot 权限不会添加到 Compute Viewer 角色 (roles/compute.viewer) 中。
2026 年 3 月 2 日	redis.backups.export 权限不会添加到 Cloud Memorystore Redis Viewer 角色 (roles/redis.viewer)。
2026 年 3 月 2 日	以下权限不会添加到 Cloud KMS Admin 角色 (roles/cloudkms.admin) 中： cloudkms.cryptoKeyVersions.manageRawAesCbcKeys cloudkms.cryptoKeyVersions.manageRawAesCtrKeys cloudkms.cryptoKeyVersions.manageRawPKCS1Keys cloudkms.cryptoKeyVersions.useToDecapsulate cloudkms.cryptoKeyVersions.useToDecrypt cloudkms.cryptoKeyVersions.useToEncrypt cloudkms.cryptoKeyVersions.useToSign cloudkms.cryptoKeyVersions.useToVerify cloudkms.cryptoKeyVersions.viewPublicKey
2026 年 3 月 23 日	权限变更的日期已从 2026 年 3 月 29 日推迟到 2026 年 9 月 30 日。
2026 年 5 月 5 日	cloudsql.instances.createBackupDrBackup 权限不会添加到 Cloud SQL Viewer 角色 (roles/cloudsql.viewer) 中。
2026 年 5 月 5 日	aiplatform.endpoints.predict 权限不会添加到 Vertex AI Viewer 角色 (roles/aiplatform.viewer) 中。
2026 年 5 月 5 日	以下权限不会添加到 AI Platform Viewer 角色 (roles/ml.viewer) 中： ml.models.predict ml.versions.predict
2026 年 5 月 5 日	以下权限不会添加到 Cloud Translation API Viewer 角色 (roles/cloudtranslate.viewer) 中： cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.customModels.predict cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.predict cloudtranslate.languageDetectionModels.predict
2026 年 5 月 5 日	以下权限不会添加到 Compute Viewer 角色 (roles/compute.viewer) 中： compute.disks.useReadOnly compute.healthChecks.useReadOnly compute.httpHealthChecks.useReadOnly compute.httpsHealthChecks.useReadOnly compute.images.useReadOnly compute.instanceTemplates.useReadOnly compute.instances.useReadOnly compute.instantSnapshots.useReadOnly compute.machineImages.useReadOnly compute.regionHealthChecks.useReadOnly compute.resourcePolicies.useReadOnly compute.snapshots.useReadOnly
2026 年 5 月 5 日	以下权限不会添加到 Pub/Sub Viewer 角色 (roles/pubsub.viewer) 中： pubsub.schemas.attach pubsub.snapshots.seek
2026 年 5 月 5 日	以下权限不会添加到 Discovery Engine Viewer 角色 (roles/discoveryengine.viewer) 中： discoveryengine.locations.exchangeAuthCredentials discoveryengine.sessions.search
2026 年 5 月 5 日	gkehub.gateway.generateCredentials 权限不会添加到以下角色： Fleet Admin（以前称为 GKE Hub Admin）(roles/gkehub.admin) Fleet Editor（以前称为 GKE Hub Editor）(roles/gkehub.editor) Fleet Viewer（以前称为 GKE Hub Viewer）(roles/gkehub.viewer)
2026 年 5 月 5 日	chronicle.instances.permitFederationAccess 权限不会添加到以下角色： Chronicle API Admin (roles/chronicle.admin) Chronicle API Editor (roles/chronicle.editor) Chronicle API Viewer (roles/chronicle.viewer)
2026 年 5 月 5 日	dataplex.entries.getData 权限不会添加到以下角色： Dataplex Editor (roles/dataplex.editor) Dataplex Viewer (roles/dataplex.viewer)
2026 年 5 月 27 日	cloudfunctions.functions.sourceCodeGet 权限不会添加到 Cloud Functions Viewer 角色 (roles/cloudfunctions.viewer) 中。
2026 年 5 月 27 日	logging.logEntries.download 权限不会添加到 Logs Viewer 角色 (roles/logging.viewer)。
2026 年 5 月 27 日	以下权限不会添加到 Storage Admin 角色 (roles/storage.admin) 中： storage.hmacKeys.create storage.hmacKeys.delete storage.hmacKeys.get storage.hmacKeys.list storage.hmacKeys.update
2026 年 6 月 8 日	aiplatform.entityTypes.exportFeatureValues 权限不会添加到 Vertex AI Viewer 角色 (roles/aiplatform.viewer) 中。
2026 年 6 月 8 日	chronicle.contentPacks.export 权限不会添加到 Chronicle API Viewer 角色 (roles/chronicle.viewer) 中。
2026 年 6 月 8 日	cloudtranslate.datasets.export 权限不会添加到 Cloud Translation API Viewer 角色 (roles/cloudtranslate.viewer) 中。
2026 年 6 月 8 日	dataplex.entryGroups.export 权限不会添加到 Dataplex Viewer 角色 (roles/dataplex.viewer) 中。
2026 年 6 月 8 日	logging.buckets.copyLogEntries 权限不会添加到 日志查看器 角色 (roles/logging.viewer)。
2026 年 6 月 30 日	以下权限不会添加到 BigTable Viewer 角色 (roles/bigtable.viewer) 中： bigtable.tables.readRows bigtable.instances.executeQuery
2026 年 6 月 30 日	以下权限不会添加到 Dataplex Viewer 角色 (roles/dataplex.viewer) 中： dataplex.assets.readData dataplex.datascans.getData
2026 年 6 月 30 日	spanner.databases.read 权限不会添加到 Cloud Spanner Viewer 角色 (roles/spanner.viewer)。
2026 年 6 月 30 日	vpcaccess.connectors.use 权限不会添加到 无服务器 VPC 访问通道 角色 (roles/vpcaccess.viewer) 中。
2026 年 7 月 15 日	以下权限不会添加到 Bigtable Viewer 角色 (roles/bigtable.viewer) 中： bigtable.authorizedViews.readRows bigtable.backups.read bigtable.logicalViews.readRows bigtable.materializedViews.readRows
2026 年 6 月 15 日	以下权限不会添加到 Cloud Spanner Viewer 角色 (roles/spanner.viewer) 中： spanner.databases.partitionQuery spanner.databases.partitionRead spanner.databases.select
2026 年 8 月 27 日	aiplatform.memories.retrieve 权限不会添加到 Vertex AI Viewer 角色 (roles/aiplatform.viewer) 中。
2026 年 8 月 27 日	bigtable.tables.sampleRowKeys 权限不会添加到 Bigtable Viewer 角色 (roles/bigtable.viewer) 中。
2026 年 8 月 27 日	以下权限不会添加到 Pub/Sub Lite Viewer 角色 (roles/pubsublite.viewer) 中： pubsublite.subscriptions.subscribe pubsublite.topics.computeHeadCursor pubsublite.topics.computeMessageStats pubsublite.topics.computeTimeCursor pubsublite.topics.subscribe
2026 年 8 月 27 日	以下权限不会添加到 Retail Viewer 角色 (roles/retail.viewer) 中： retail.models.pause retail.models.resume retail.models.tune
2026 年 8 月 27 日	以下权限不会添加到 Cloud Spanner Viewer 角色 (roles/spanner.viewer) 中： spanner.sessions.create spanner.sessions.delete spanner.sessions.get spanner.sessions.list
2026 年 9 月 1 日	以下权限不会添加到 Bigtable Viewer 角色 (roles/bigtable.viewer) 中： bigtable.authorizedViews.sampleRowKeys bigtable.keyvisualizer.get bigtable.keyvisualizer.list bigtable.materializedViews.sampleRowKeys
2026 年 9 月 1 日	以下权限不会添加到 Cloud KMS Admin 角色 (roles/cloudkms.admin) 中： cloudkms.singleTenantHsmInstanceProposals.approve cloudkms.singleTenantHsmInstanceProposals.create cloudkms.singleTenantHsmInstanceProposals.execute
2026 年 9 月 1 日	以下权限不会添加到 IAP Policy Admin 角色 (roles/iap.admin) 中： iap.tunnelDestGroups.accessViaIAP iap.tunnelInstances.accessViaIAP
2026 年 9 月 1 日	以下权限不会添加到 Logs Viewer 角色 (roles/logging.viewer) 中： logging.views.listLogs logging.views.listResourceKeys logging.views.listResourceValues
2026 年 9 月 17 日	以下权限不会添加到 Backup and DR Admin 角色 (roles/backupdr.admin) 中： backupdr.resourceBackupConfigs.get backupdr.resourceBackupConfigs.list
2026 年 9 月 17 日	以下权限不会添加到 Backup and DR Viewer 角色 (roles/backupdr.viewer) 中： backupdr.resourceBackupConfigs.get backupdr.resourceBackupConfigs.list
2026 年 9 月 17 日	以下权限不会添加到 Chronicle API Admin 角色 (roles/chronicle.admin) 中： chronicle.instances.delete chronicle.instances.soarThreatManager chronicle.instances.soarVulnerabilityManager chronicle.instances.undelete
2026 年 9 月 17 日	以下权限不会添加到 Cloud SQL Editor 角色 (roles/cloudsql.editor) 中： cloudsql.backupRuns.delete cloudsql.databases.delete cloudsql.instances.clone cloudsql.instances.delete cloudsql.instances.executeSql cloudsql.instances.import cloudsql.instances.login cloudsql.instances.resetSslConfig cloudsql.instances.restoreBackup cloudsql.sslCerts.delete cloudsql.users.update
2026 年 9 月 17 日	cloudsql.schemas.view 权限不会添加到 Cloud SQL Viewer 角色 (roles/cloudsql.viewer) 中。
2026 年 9 月 17 日	以下权限不会添加到 Discovery Engine Editor 角色 (roles/discoveryengine.editor) 中： discoveryengine.aclConfigs.update discoveryengine.audioOverviews.create discoveryengine.audioOverviews.delete discoveryengine.audioOverviews.get discoveryengine.audioOverviews.getIceConfig discoveryengine.audioOverviews.sendSdpOffer discoveryengine.cmekConfigs.update discoveryengine.collections.delete
2026 年 9 月 17 日	以下权限不会添加到 Discovery Engine Viewer 角色 (roles/discoveryengine.viewer) 中： discoveryengine.audioOverviews.get discoveryengine.audioOverviews.getIceConfig discoveryengine.audioOverviews.sendSdpOffer discoveryengine.licenseConfigs.get discoveryengine.licenseConfigs.list discoveryengine.locations.estimateDataSize discoveryengine.notebooks.generateGuide discoveryengine.notebooks.get discoveryengine.notebooks.getAnalytics discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.interactSources discoveryengine.notes.get discoveryengine.sources.checkFreshness discoveryengine.sources.generateDocumentGuide discoveryengine.sources.get discoveryengine.userStores.listUserLicenses
2026 年 9 月 17 日	以下权限不会添加到 Fleet Admin（以前称为 GKE Hub Admin）角色 (roles/gkehub.admin) 中： gkehub.gateway.delete gkehub.gateway.get gkehub.gateway.patch gkehub.gateway.post gkehub.gateway.put gkehub.gateway.stream
2026 年 9 月 17 日	以下权限不会添加到 Fleet Editor（以前称为 GKE Hub Editor）角色 (roles/gkehub.editor) 中： gkehub.gateway.delete gkehub.gateway.get gkehub.gateway.patch gkehub.gateway.post gkehub.gateway.put gkehub.gateway.stream
2026 年 9 月 17 日	gkehub.gateway.get 权限不会添加到 Fleet Viewer（以前称为 GKE Hub Viewer）角色 (roles/gkehub.viewer) 中。
2026 年 9 月 17 日	以下权限不会添加到 Cloud Memorystore Memcached Editor 角色 (roles/memcache.editor) 中： memcache.instances.applySoftwareUpdate memcache.instances.create memcache.instances.delete memcache.instances.rescheduleMaintenance memcache.instances.upgrade
2026 年 9 月 17 日	以下权限不会添加到 Cloud Memorystore Memcached Viewer 角色 (roles/memcache.viewer) 中： memcache.instances.listEffectiveTags memcache.instances.listTagBindings
2026 年 9 月 17 日	以下权限不会添加到 Retail Editor 角色 (roles/retail.editor) 中： retail.attributesConfigs.batchRemoveCatalogAttributes retail.attributesConfigs.removeCatalogAttribute retail.products.purge retail.products.setSponsorship retail.userEvents.purge retail.userEvents.rejoin
2026 年 9 月 24 日	以下权限不会添加到 Analytics Hub Admin 角色 (roles/analyticshub.admin) 中： analyticshub.dataExchanges.subscribe analyticshub.listings.subscribe
2026 年 9 月 24 日	以下权限不会添加到 Analytics Hub Viewer 角色 (roles/analyticshub.viewer) 中： analyticshub.subscriptions.get analyticshub.subscriptions.list
2026 年 9 月 24 日	cloudsql.users.create 权限不会添加到 Cloud SQL Editor 角色 (roles/cloudsql.editor) 中。
2026 年 9 月 24 日	以下权限不会添加到 Kubernetes Engine Cluster Viewer 角色 (roles/container.clusterViewer) 中： container.clusters.listEffectiveTags container.clusters.listTagBindings container.pods.getLogs container.selfSubjectAccessReviews.create container.selfSubjectRulesReviews.create container.volumeSnapshots.getStatus
2026 年 9 月 24 日	以下权限不会添加到 Dataplex Administrator 角色 (roles/dataplex.admin) 中： dataplex.aspectTypes.create dataplex.aspectTypes.delete dataplex.aspectTypes.get dataplex.aspectTypes.getIamPolicy dataplex.aspectTypes.list dataplex.aspectTypes.setIamPolicy dataplex.aspectTypes.update dataplex.aspectTypes.use dataplex.assets.ownData dataplex.assets.readData dataplex.assets.writeData dataplex.encryptionConfig.create dataplex.encryptionConfig.delete dataplex.encryptionConfig.get dataplex.encryptionConfig.list dataplex.encryptionConfig.update dataplex.entries.create dataplex.entries.delete dataplex.entries.get dataplex.entries.getData dataplex.entries.list dataplex.entries.update dataplex.entryGroups.create dataplex.entryGroups.delete dataplex.entryGroups.get dataplex.entryGroups.getIamPolicy dataplex.entryGroups.list dataplex.entryGroups.setIamPolicy dataplex.entryGroups.update dataplex.entryGroups.useContactsAspect dataplex.entryGroups.useDataProfileAspect dataplex.entryGroups.useDataQualityScorecardAspect dataplex.entryGroups.useDescriptionsAspect dataplex.entryGroups.useGenericAspect dataplex.entryGroups.useGenericEntry dataplex.entryGroups.useOverviewAspect dataplex.entryGroups.useQueriesAspect dataplex.entryGroups.useRefreshCadenceAspect dataplex.entryGroups.useSchemaAspect dataplex.entryGroups.useStorageAspect dataplex.entryTypes.create dataplex.entryTypes.delete dataplex.entryTypes.get dataplex.entryTypes.getIamPolicy dataplex.entryTypes.list dataplex.entryTypes.setIamPolicy dataplex.entryTypes.update dataplex.entryTypes.use dataplex.projects.search
2026 年 9 月 24 日	以下权限不会添加到 Dataplex Editor 角色 (roles/dataplex.editor) 中： dataplex.aspectTypes.create dataplex.aspectTypes.delete dataplex.aspectTypes.get dataplex.aspectTypes.getIamPolicy dataplex.aspectTypes.list dataplex.aspectTypes.update dataplex.aspectTypes.use dataplex.assets.readData dataplex.assets.writeData dataplex.content.create dataplex.content.update dataplex.datascans.getData dataplex.encryptionConfig.create dataplex.encryptionConfig.delete dataplex.encryptionConfig.get dataplex.encryptionConfig.list dataplex.encryptionConfig.update dataplex.entities.create dataplex.entities.delete dataplex.entities.get dataplex.entities.list dataplex.entities.update dataplex.entries.create dataplex.entries.delete dataplex.entries.get dataplex.entries.link dataplex.entries.list dataplex.entries.update dataplex.entryGroups.create dataplex.entryGroups.delete dataplex.entryGroups.export dataplex.entryGroups.get dataplex.entryGroups.getIamPolicy dataplex.entryGroups.import dataplex.entryGroups.list dataplex.entryGroups.update dataplex.entryGroups.useContactsAspect dataplex.entryGroups.useDataProfileAspect dataplex.entryGroups.useDataQualityScorecardAspect dataplex.entryGroups.useDefinitionEntryLink dataplex.entryGroups.useDescriptionsAspect dataplex.entryGroups.useGenericAspect dataplex.entryGroups.useGenericEntry dataplex.entryGroups.useOverviewAspect dataplex.entryGroups.useQueriesAspect dataplex.entryGroups.useRefreshCadenceAspect dataplex.entryGroups.useRelatedEntryLink dataplex.entryGroups.useSchemaAspect dataplex.entryGroups.useStorageAspect dataplex.entryGroups.useSynonymEntryLink dataplex.entryLinks.create dataplex.entryLinks.delete dataplex.entryLinks.get dataplex.entryLinks.reference dataplex.entryTypes.create dataplex.entryTypes.delete dataplex.entryTypes.get dataplex.entryTypes.getIamPolicy dataplex.entryTypes.list dataplex.entryTypes.update dataplex.entryTypes.use dataplex.environments.execute dataplex.glossaries.create dataplex.glossaries.delete dataplex.glossaries.get dataplex.glossaries.getIamPolicy dataplex.glossaries.import dataplex.glossaries.list dataplex.glossaries.update dataplex.glossaryCategories.create dataplex.glossaryCategories.delete dataplex.glossaryCategories.get dataplex.glossaryCategories.list dataplex.glossaryCategories.update dataplex.glossaryTerms.create dataplex.glossaryTerms.delete dataplex.glossaryTerms.get dataplex.glossaryTerms.list dataplex.glossaryTerms.update dataplex.glossaryTerms.use dataplex.locations.get dataplex.locations.list dataplex.metadataJobs.cancel dataplex.metadataJobs.create dataplex.metadataJobs.get dataplex.metadataJobs.list dataplex.partitions.create dataplex.partitions.delete dataplex.partitions.get dataplex.partitions.list dataplex.partitions.update dataplex.projects.search
2026 年 9 月 24 日	以下权限不会添加到 Dataplex Viewer 角色 (roles/dataplex.viewer) 中： dataplex.aspectTypes.get dataplex.aspectTypes.getIamPolicy dataplex.aspectTypes.list dataplex.encryptionConfig.get dataplex.encryptionConfig.list dataplex.entities.get dataplex.entities.list dataplex.entries.get dataplex.entries.list dataplex.entryGroups.get dataplex.entryGroups.getIamPolicy dataplex.entryGroups.list dataplex.entryLinks.get dataplex.entryTypes.get dataplex.entryTypes.getIamPolicy dataplex.entryTypes.list dataplex.glossaries.get dataplex.glossaries.getIamPolicy dataplex.glossaries.list dataplex.glossaryCategories.get dataplex.glossaryCategories.list dataplex.glossaryTerms.get dataplex.glossaryTerms.list dataplex.locations.get dataplex.locations.list dataplex.metadataJobs.get dataplex.metadataJobs.list dataplex.partitions.get dataplex.partitions.list dataplex.projects.search
2026 年 9 月 24 日	以下权限不会添加到 Discovery Engine Editor 角色 (roles/discoveryengine.editor) 中： discoveryengine.notebooks.generateGuide discoveryengine.notebooks.get discoveryengine.notebooks.getAnalytics discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.interactSources discoveryengine.notebooks.list discoveryengine.notebooks.removeSelf discoveryengine.notebooks.update discoveryengine.notes.create discoveryengine.notes.delete discoveryengine.notes.get discoveryengine.notes.update discoveryengine.sources.checkFreshness discoveryengine.sources.create discoveryengine.sources.delete discoveryengine.sources.generateDocumentGuide discoveryengine.sources.get discoveryengine.sources.refresh discoveryengine.sources.update
2026 年 9 月 24 日	redis.instances.getAuthString 权限不会添加到 Cloud Memorystore Redis Editor 角色 (roles/redis.editor) 中。
2026 年 9 月 24 日	以下权限不会添加到 Retail Viewer 角色 (roles/retail.viewer) 中： retail.merchantControls.creatorGet retail.merchantControls.creatorList
2026 年 9 月 25 日	以下权限不会添加到 Billing Account Administrator 角色 (roles/billing.admin) 中： billing.costRecommendations.listScoped billing.resourceCosts.get billing.resourcebudgets.read billing.resourcebudgets.write
2026 年 9 月 25 日	以下权限不会添加到 Billing Account Viewer 角色 (roles/billing.viewer) 中： billing.costRecommendations.listScoped billing.resourceCosts.get billing.resourcebudgets.read
2026 年 9 月 25 日	以下权限不会添加到 Data Lineage Editor 角色 (roles/datalineage.editor) 中： datalineage.configs.get datalineage.configs.update
2026 年 9 月 25 日	以下权限不会添加到 Data Lineage Viewer 角色 (roles/datalineage.viewer) 中： datalineage.configs.get datalineage.configs.update
2026 年 9 月 25 日	以下角色的权限变更已推迟至 2026 年 10 月 21 日： Chronicle API Admin (roles/chronicle.admin) Chronicle API Editor (roles/chronicle.editor) Chronicle API Viewer (roles/chronicle.viewer)
2026 年 10 月 26 日	以下权限不会添加到 Chronicle API Editor 角色 (roles/chronicle.editor) 中： chronicle.calculatedFieldDefinitions.update chronicle.collectors.create chronicle.collectors.delete chronicle.collectors.update chronicle.connectors.delete chronicle.connectors.update chronicle.customFields.update chronicle.entitiesBlocklists.delete chronicle.entitiesBlocklists.update chronicle.formDynamicParameters.update chronicle.forwarders.create chronicle.forwarders.delete chronicle.forwarders.update chronicle.instances.verifyNonce chronicle.integrationActions.delete chronicle.integrations.delete chronicle.jobs.delete chronicle.legacyCaseFederationPlatforms.delete chronicle.legacyCaseFederationPlatforms.update chronicle.logProcessingPipelines.associateStreams chronicle.logProcessingPipelines.create chronicle.logProcessingPipelines.delete chronicle.logProcessingPipelines.dissociateStreams chronicle.logProcessingPipelines.update chronicle.shareConfigs.update chronicle.systemNotifications.update chronicle.tenants.create chronicle.tenants.update
2026 年 10 月 26 日	以下权限不会添加到 Chronicle API Viewer 角色 (roles/chronicle.viewer) 中： chronicle.connectorInstanceLogs.get chronicle.connectorInstances.get chronicle.connectorRevisions.get chronicle.connectors.get chronicle.instances.verifyNonce chronicle.integrationActionRevisions.get chronicle.integrationInstances.get chronicle.integrationLogicalOperatorRevisions.get chronicle.integrationLogicalOperators.get chronicle.jobInstanceLogs.get chronicle.jobInstances.get chronicle.jobRevisions.get chronicle.jobs.get chronicle.legacyPlaybooks.get chronicle.managerRevisions.get chronicle.managers.get chronicle.tenants.list chronicle.transformerDefinitions.get chronicle.transformerDefinitions.list chronicle.transformerRevisions.get
2026 年 10 月 26 日	以下角色的权限变更原定于 2026 年 10 月 21 日生效，但现已推迟至 2026 年 11 月 9 日： Chronicle API Admin (roles/chronicle.admin) Chronicle API Editor (roles/chronicle.editor) Chronicle API Viewer (roles/chronicle.viewer)