即將於 2026 年 9 月 30 日當週進行的權限變更

為了提供更標準化的控制項，以及新舊功能的存取權，我們將在下表列出的預先定義角色中新增權限。這些異動將於 2026 年 9 月 30 日生效。

注意： 這些異動原定於 2026 年 3 月 29 日當週生效，但已延至 2026 年 9 月 30 日當週。

服務	詳細資料
Gemini Enterprise Agent Platform	下列權限將新增至 Vertex AI 檢視者角色 (roles/aiplatform.viewer)： aiplatform.endpoints.explain aiplatform.endpoints.getIamPolicy aiplatform.entityTypes.getIamPolicy aiplatform.entityTypes.readFeatureValues aiplatform.entityTypes.streamingReadFeatureValues aiplatform.featureGroups.getIamPolicy aiplatform.featureOnlineStores.getIamPolicy aiplatform.featureViews.getIamPolicy aiplatform.featurestores.batchReadFeatureValues aiplatform.featurestores.getIamPolicy aiplatform.featurestores.readFeatures aiplatform.humanInTheLoops.queryAnnotationStats aiplatform.locations.evaluateInstances aiplatform.migratableResources.search aiplatform.notebookRuntimeTemplates.apply aiplatform.notebookRuntimeTemplates.getIamPolicy
Apigee Connect	下列權限會新增至 Apigee Connect 管理員角色 (roles/apigeeconnect.Admin)： apigeeconnect.endpoints.connect
App Hub	下列權限將新增至 App Hub 編輯者角色 (roles/apphub.editor)： apphub.applications.getIamPolicy apphub.serviceProjectAttachments.create apphub.serviceProjectAttachments.delete apphub.serviceProjectAttachments.get apphub.serviceProjectAttachments.list
App Hub	下列權限會新增至 App Hub 檢視者角色 (roles/apphub.viewer)： apphub.applications.getIamPolicy apphub.serviceProjectAttachments.get apphub.serviceProjectAttachments.list
Artifact Registry	下列權限將新增至 Artifact Registry 管理員角色 (roles/artifactregistry.admin)： artifactregistry.repositories.createOnPush
Bare Metal 解決方案	下列權限將新增至 Bare Metal 解決方案管理員角色 (roles/baremetalsolution.admin)： baremetalsolution.procurements.create
Bare Metal 解決方案	下列權限會新增至 Bare Metal 解決方案編輯者角色 (roles/baremetalsolution.editor)： baremetalsolution.procurements.create
批次	下列權限會新增至 Batch 管理員角色 (roles/batch.admin)： batch.states.report
BigLake	下列權限將新增至 BigLake 編輯者角色 (roles/biglake.editor)： biglake.databases.create biglake.databases.delete biglake.databases.get biglake.databases.list biglake.databases.update biglake.locks.check biglake.locks.create biglake.locks.delete biglake.locks.list biglake.tables.lock
BigQuery Migration API	下列權限將新增至 MigrationWorkflow 編輯者角色 (roles/bigquerymigration.editor)： bigquerymigration.translation.translate
Bigtable	下列權限將新增至 Bigtable 檢視者角色 (roles/bigtable.viewer)： bigtable.authorizedViews.getIamPolicy bigtable.authorizedViews.listEffectiveTags bigtable.authorizedViews.listTagBindings bigtable.backups.getIamPolicy bigtable.instances.getIamPolicy bigtable.instances.ping bigtable.logicalViews.getIamPolicy bigtable.materializedViews.getIamPolicy bigtable.schemaBundles.getIamPolicy bigtable.tables.getIamPolicy
Certificate Manager	Certificate Manager 編輯者角色 (roles/certificatemanager.editor) 將新增下列權限： certificatemanager.certissuanceconfigs.delete certificatemanager.certmapentries.delete certificatemanager.certmaps.delete certificatemanager.certs.delete certificatemanager.dnsauthorizations.delete certificatemanager.operations.cancel certificatemanager.operations.delete certificatemanager.trustconfigs.delete
Google Security Operations	注意：這個角色的權限變更已延至 2026 年 11 月 9 日。 下列權限將新增至 Chronicle API 管理員角色 (roles/chronicle.admin)： chronicle.federationGroups.create chronicle.federationGroups.delete chronicle.federationGroups.get chronicle.federationGroups.list chronicle.federationGroups.update
Google Security Operations	注意：這個角色的權限變更已延至 2026 年 11 月 9 日。 下列權限將新增至 Chronicle API 編輯者角色 (roles/chronicle.editor)： chronicle.connectors.get chronicle.enrichmentControls.delete chronicle.errorNotificationConfigs.create chronicle.errorNotificationConfigs.delete chronicle.errorNotificationConfigs.update chronicle.federationGroups.get chronicle.federationGroups.list chronicle.legacyCaseFederationPlatforms.get chronicle.moduleSettingsProperties.get chronicle.rules.delete chronicle.shareConfigs.get chronicle.systemNotifications.get chronicle.tenants.list
Google Security Operations	注意：這個角色的權限變更已延至 2026 年 11 月 9 日。 下列權限將新增至 Chronicle API 檢視者角色 (roles/chronicle.viewer)： chronicle.caseWallRecords.get chronicle.customLists.get chronicle.emailTemplates.get chronicle.entitiesBlocklists.get chronicle.federationGroups.get chronicle.federationGroups.list chronicle.integrations.get chronicle.legacyCaseFederationPlatforms.get chronicle.moduleSettingsProperties.get chronicle.notificationSettings.get chronicle.remoteAgents.get chronicle.shareConfigs.get chronicle.systemNotifications.get chronicle.tasks.get chronicle.uniqueEntities.get chronicle.userLocalizations.get chronicle.userNotifications.get chronicle.workdeskContacts.get chronicle.workdeskLinks.get chronicle.workdeskNotes.get
Cloud Asset Inventory	下列權限將新增至 Cloud Asset 檢視者角色 (roles/cloudasset.viewer)： cloudasset.savedqueries.get cloudasset.savedqueries.list
Talent Solution	下列權限將新增至 Cloud Talent Solution 管理員角色 (roles/cloudjobdiscovery.admin)： cloudjobdiscovery.companies.create cloudjobdiscovery.companies.delete cloudjobdiscovery.companies.get cloudjobdiscovery.companies.list cloudjobdiscovery.companies.update cloudjobdiscovery.events.create cloudjobdiscovery.jobs.create cloudjobdiscovery.jobs.delete cloudjobdiscovery.jobs.get cloudjobdiscovery.jobs.search cloudjobdiscovery.jobs.update cloudjobdiscovery.profiles.create cloudjobdiscovery.profiles.delete cloudjobdiscovery.profiles.get cloudjobdiscovery.profiles.search cloudjobdiscovery.profiles.update cloudjobdiscovery.tenants.create cloudjobdiscovery.tenants.delete cloudjobdiscovery.tenants.get cloudjobdiscovery.tenants.update
Cloud Key Management Service	下列權限會新增至 Cloud KMS 管理員角色 (roles/cloudkms.admin)： cloudkms.locations.generateRandomBytes cloudkms.protectedResources.search
Cloud Key Management Service	下列權限將新增至 Cloud KMS 檢視者角色 (roles/cloudkms.viewer)： cloudkms.cryptoKeys.getIamPolicy cloudkms.ekmConfigs.getIamPolicy cloudkms.ekmConnections.getIamPolicy cloudkms.ekmConnections.verifyConnectivity cloudkms.importJobs.getIamPolicy cloudkms.keyRings.getIamPolicy cloudkms.keyRings.listEffectiveTags cloudkms.keyRings.listTagBindings cloudkms.locations.generateRandomBytes cloudkms.projects.showEffectiveAutokeyConfig cloudkms.projects.showEffectiveKajEnrollmentConfig cloudkms.projects.showEffectiveKajPolicyConfig cloudkms.protectedResources.search
Cloud SQL	下列權限將新增至 Cloud SQL 編輯者角色 (roles/cloudsql.editor)： cloudsql.instances.create cloudsql.instances.createBackupDrBackup cloudsql.instances.demoteMaster cloudsql.instances.promoteReplica cloudsql.instances.startReplica cloudsql.instances.stopReplica cloudsql.instances.updateBackupDrConfig cloudsql.sslCerts.create cloudsql.users.delete
Google Cloud 支援	下列權限會新增至支援帳戶管理員角色 (roles/cloudsupport.admin)： cloudsupport.techCases.create cloudsupport.techCases.escalate cloudsupport.techCases.get cloudsupport.techCases.list cloudsupport.techCases.update
Google Cloud 支援	下列權限將新增至支援帳戶檢視者角色 (roles/cloudsupport.viewer)： cloudsupport.accounts.getIamPolicy cloudsupport.operations.get cloudsupport.techCases.get cloudsupport.techCases.list
連接器	下列權限將新增至連接器管理員角色 (roles/connectors.admin)： connectors.connections.listenEvent
連接器	下列權限會新增至連接器檢視者角色 (roles/connectors.viewer)： connectors.actions.list connectors.entities.get connectors.entities.list connectors.entityTypes.list
Google Cloud Contact Center as a Service	下列權限將新增至 Contact Center AI 平台管理員角色 (roles/contactcenteraiplatform.admin)： contactcenteraiplatform.locations.generateShifts
Google Cloud Contact Center as a Service	下列權限將新增至 Contact Center AI 平台檢視者角色 (roles/contactcenteraiplatform.viewer)： contactcenteraiplatform.contactCenters.queryQuota
Customer Experience Insights	下列權限將新增至 Contact Center AI Insights 編輯者角色 (roles/contactcenterinsights.editor)： contactcenterinsights.authorizedViews.getIamPolicy
Customer Experience Insights	下列權限將新增至 Contact Center AI Insights 檢視者角色 (roles/contactcenterinsights.viewer)： contactcenterinsights.authorizedViews.getIamPolicy
Content Warehouse	下列權限將新增至內容倉儲管理員角色 (roles/contentwarehouse.admin)： contentwarehouse.links.create contentwarehouse.links.delete contentwarehouse.links.get contentwarehouse.links.update
資料庫洞察	下列權限將新增至資料庫洞察檢視者角色 (roles/databaseinsights.viewer)： databaseinsights.aggregatedEvents.query databaseinsights.clusterEvents.query databaseinsights.instanceEvents.query
Data Catalog	下列權限將新增至 Data Catalog 檢視者角色 (roles/datacatalog.viewer)： datacatalog.categories.getIamPolicy datacatalog.taxonomies.getIamPolicy
Dataflow	下列權限將新增至 Dataflow 管理員角色 (roles/dataflow.admin)： dataflow.shuffle.read dataflow.shuffle.write dataflow.streamingWorkItems.ImportState dataflow.streamingWorkItems.commitWork dataflow.streamingWorkItems.getData dataflow.streamingWorkItems.getWork dataflow.streamingWorkItems.getWorkerMetadata dataflow.workItems.lease dataflow.workItems.sendMessage dataflow.workItems.update
Dataform	下列權限將新增至 Dataform 編輯者角色 (roles/dataform.editor)： dataform.commentThreads.create dataform.commentThreads.delete dataform.commentThreads.update dataform.comments.create dataform.comments.delete dataform.comments.update dataform.config.update dataform.folders.addContents dataform.folders.create dataform.folders.delete dataform.folders.move dataform.folders.update dataform.operations.cancel dataform.operations.delete dataform.releaseConfigs.create dataform.releaseConfigs.delete dataform.releaseConfigs.update dataform.repositories.commit dataform.repositories.create dataform.repositories.delete dataform.repositories.move dataform.repositories.scheduleRelease dataform.repositories.scheduleWorkflow dataform.repositories.update dataform.teamFolders.create dataform.teamFolders.delete dataform.teamFolders.update dataform.workflowConfigs.create dataform.workflowConfigs.delete dataform.workflowConfigs.update
Data Lineage API	資料歷程編輯者角色 (roles/datalineage.editor) 將新增下列權限： datalineage.processes.delete datalineage.runs.delete
Data Lineage API	下列權限將新增至資料歷程檢視者角色 (roles/datalineage.viewer)： datalineage.operations.get
Managed Service for Apache Spark	下列權限將新增至 Dataproc 管理員角色 (roles/dataproc.admin)： dataproc.agents.create dataproc.agents.delete dataproc.agents.get dataproc.agents.list dataproc.agents.update dataproc.tasks.lease dataproc.tasks.listInvalidatedLeases dataproc.tasks.reportStatus
Managed Service for Apache Spark	下列權限會新增至 Dataproc 編輯者角色 (roles/dataproc.editor)： dataproc.agents.create dataproc.agents.delete dataproc.agents.get dataproc.agents.list dataproc.agents.update dataproc.autoscalingPolicies.getIamPolicy dataproc.clusters.getIamPolicy dataproc.jobs.getIamPolicy dataproc.operations.getIamPolicy dataproc.tasks.lease dataproc.tasks.listInvalidatedLeases dataproc.tasks.reportStatus dataproc.workflowTemplates.getIamPolicy
Managed Service for Apache Spark	下列權限將新增至 Dataproc 檢視者角色 (roles/dataproc.viewer)： dataproc.agents.get dataproc.agents.list dataproc.autoscalingPolicies.getIamPolicy dataproc.autoscalingPolicies.use dataproc.clusters.getIamPolicy dataproc.jobs.getIamPolicy dataproc.operations.getIamPolicy dataproc.tasks.listInvalidatedLeases dataproc.workflowTemplates.getIamPolicy
Firestore	下列權限將新增至 Cloud Datastore 檢視者角色 (roles/datastore.viewer)： datastore.backupSchedules.get datastore.backupSchedules.list datastore.backups.get datastore.backups.list datastore.databases.listEffectiveTags datastore.databases.listTagBindings datastore.keyVisualizerScans.get datastore.keyVisualizerScans.list datastore.operations.get datastore.operations.list datastore.userCreds.get datastore.userCreds.list
Discovery Engine	下列權限將新增至 Discovery Engine 管理員角色 (roles/discoveryengine.admin)： discoveryengine.accounts.create discoveryengine.audioOverviews.create discoveryengine.audioOverviews.delete discoveryengine.audioOverviews.get discoveryengine.audioOverviews.getIceConfig discoveryengine.audioOverviews.sendSdpOffer discoveryengine.notebooks.create discoveryengine.notebooks.generateGuide discoveryengine.notebooks.get discoveryengine.notebooks.getAnalytics discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.interactSources discoveryengine.notebooks.list discoveryengine.notebooks.removeSelf discoveryengine.notebooks.setIamPolicy discoveryengine.notebooks.update discoveryengine.notes.create discoveryengine.notes.delete discoveryengine.notes.get discoveryengine.notes.update discoveryengine.podcasts.create discoveryengine.sources.checkFreshness discoveryengine.sources.create discoveryengine.sources.delete discoveryengine.sources.generateDocumentGuide discoveryengine.sources.get discoveryengine.sources.refresh discoveryengine.sources.update
Discovery Engine	下列權限將新增至 Discovery Engine 編輯者角色 (roles/discoveryengine.editor)： discoveryengine.accounts.create discoveryengine.alertPolicies.create discoveryengine.alertPolicies.update discoveryengine.assistants.create discoveryengine.assistants.delete discoveryengine.assistants.update discoveryengine.completionConfigs.update discoveryengine.controls.create discoveryengine.controls.delete discoveryengine.controls.update discoveryengine.dataConnectors.startConnectorRun discoveryengine.dataConnectors.update discoveryengine.dataStores.create discoveryengine.dataStores.delete discoveryengine.dataStores.enrollSolutions discoveryengine.dataStores.update discoveryengine.documentProcessingConfigs.update discoveryengine.documents.purge discoveryengine.engines.create discoveryengine.engines.delete discoveryengine.engines.getIamPolicy discoveryengine.engines.update discoveryengine.evaluations.create discoveryengine.licenseConfigs.create discoveryengine.licenseConfigs.update discoveryengine.locations.estimateDataSize discoveryengine.locations.exchangeAuthCredentials discoveryengine.locations.getConnectorSource discoveryengine.locations.listConnectorSources discoveryengine.locations.setUpDataConnector discoveryengine.notebooks.create discoveryengine.podcasts.create discoveryengine.projects.provision discoveryengine.projects.reportConsentChange discoveryengine.schemas.create discoveryengine.schemas.delete discoveryengine.schemas.update discoveryengine.servingConfigs.create discoveryengine.servingConfigs.delete discoveryengine.servingConfigs.update discoveryengine.siteSearchEngines.batchVerifyTargetSites discoveryengine.siteSearchEngines.disableAdvancedSiteSearch discoveryengine.siteSearchEngines.enableAdvancedSiteSearch discoveryengine.siteSearchEngines.fetchDomainVerificationStatus discoveryengine.siteSearchEngines.recrawlUris discoveryengine.sitemaps.create discoveryengine.sitemaps.delete discoveryengine.sitemaps.fetch discoveryengine.suggestionDenyListEntries.import discoveryengine.suggestionDenyListEntries.purge discoveryengine.targetSites.batchCreate discoveryengine.targetSites.create discoveryengine.targetSites.delete discoveryengine.targetSites.update discoveryengine.userEvents.purge discoveryengine.userStores.batchUpdateUserLicenses discoveryengine.userStores.listUserLicenses
Discovery Engine	下列權限會新增至 Discovery Engine 檢視者角色 (roles/discoveryengine.viewer)： discoveryengine.engines.getIamPolicy discoveryengine.locations.getConnectorSource discoveryengine.locations.listConnectorSources discoveryengine.notebooks.list discoveryengine.siteSearchEngines.fetchDomainVerificationStatus discoveryengine.sitemaps.fetch
Cloud DNS	下列權限會新增至 DNS 管理員角色 (roles/dns.admin)： dns.managedZones.setIamPolicy
Firebase 安全性規則	下列權限將新增至 Firebase 規則檢視者角色 (roles/firebaserules.viewer)： firebaserules.releases.getExecutable firebaserules.rulesets.test
GKE Hub	下列權限將新增至機群管理員 (原稱 GKE Hub 管理員) 角色 (roles/gkehub.admin)： gkehub.endpoints.connect
GKE Hub	下列權限將新增至機群檢視者 (原稱 GKE Hub 檢視者) 角色 (roles/gkehub.viewer)： gkehub.scopes.getIamPolicy
Identity-Aware Proxy	下列權限將新增至 IAP 政策管理員角色 (roles/iap.admin)： iap.projects.getSettings iap.projects.updateSettings iap.tunnelDestGroups.create iap.tunnelDestGroups.delete iap.tunnelDestGroups.get iap.tunnelDestGroups.list iap.tunnelDestGroups.remediate iap.tunnelDestGroups.update iap.tunnelinstances.remediate iap.web.getSettings iap.web.updateSettings iap.webServiceVersions.getSettings iap.webServiceVersions.remediate iap.webServiceVersions.updateSettings iap.webServices.getSettings iap.webServices.updateSettings iap.webTypes.getSettings iap.webTypes.updateSettings
Cloud License Manager	下列權限將新增至 Cloud License Manager 檢視者角色 (roles/licensemanager.viewer)： licensemanager.configurations.aggregateUsage licensemanager.configurations.queryLicenseUsage
Cloud Logging	下列權限會新增至記錄檢視者角色 (roles/logging.viewer)： logging.buckets.listEffectiveTags logging.buckets.listTagBindings logging.notificationRules.get logging.notificationRules.list logging.settings.get logging.views.getIamPolicy
Managed Service for Microsoft Active Directory	下列權限會新增至 Google Cloud Managed Identities 檢視者角色 (roles/managedidentities.viewer)： managedidentities.domains.checkMigrationPermission managedidentities.domains.validateTrust
Dataproc Metastore	下列權限將新增至 Dataproc Metastore 管理員角色 (roles/metastore.admin)： metastore.databases.create metastore.databases.delete metastore.databases.get metastore.databases.getIamPolicy metastore.databases.list metastore.databases.setIamPolicy metastore.databases.update metastore.services.mutateMetadata metastore.services.queryMetadata metastore.services.use metastore.tables.create metastore.tables.delete metastore.tables.get metastore.tables.getIamPolicy metastore.tables.list metastore.tables.setIamPolicy metastore.tables.update
Dataproc Metastore	下列權限將新增至 Dataproc Metastore 編輯者角色 (roles/metastore.editor)： metastore.backups.getIamPolicy metastore.databases.create metastore.databases.delete metastore.databases.get metastore.databases.getIamPolicy metastore.databases.list metastore.databases.update metastore.federations.getIamPolicy metastore.federations.use metastore.services.use metastore.tables.create metastore.tables.delete metastore.tables.get metastore.tables.getIamPolicy metastore.tables.list metastore.tables.update
AI 平台	下列權限將新增至 AI 平台檢視者角色 (roles/ml.viewer)： ml.jobs.getIamPolicy ml.models.getIamPolicy
Model Armor	Model Armor 管理員角色 (roles/modelarmor.admin) 將新增下列權限： modelarmor.callouts.invoke modelarmor.floorSettings.get modelarmor.floorSettings.update
Model Armor	Model Armor 檢視者角色 (roles/modelarmor.viewer) 將新增下列權限： modelarmor.floorSettings.get
Oracle Database@Google Cloud	下列權限將新增至 Oracle Database@Google Cloud 檢視者角色 (roles/oracledatabase.viewer)： oracledatabase.dbSystemInitialStorageSizes.list oracledatabase.dbVersions.list oracledatabase.systemVersions.list
Pub/Sub	下列權限將新增至 Pub/Sub 編輯者角色 (roles/pubsub.editor)： pubsub.schemas.getIamPolicy
Pub/Sub	下列權限會新增至 Pub/Sub 檢視者角色 (roles/pubsub.viewer)： pubsub.schemas.getIamPolicy
Pub/Sub Lite	下列權限會新增至 Pub/Sub Lite 檢視者角色 (roles/pubsublite.viewer)： pubsublite.locations.openKafkaStream
Google Cloud Fraud Defense	下列權限將新增至 reCAPTCHA Enterprise 管理員角色 (roles/recaptchaenterprise.admin)： recaptchaenterprise.assessments.annotate recaptchaenterprise.assessments.create recaptchaenterprise.relatedaccountgroupmemberships.list recaptchaenterprise.relatedaccountgroups.list
Google Cloud Fraud Defense	下列權限將新增至 reCAPTCHA Enterprise 檢視者角色 (roles/recaptchaenterprise.viewer)： recaptchaenterprise.relatedaccountgroupmemberships.list recaptchaenterprise.relatedaccountgroups.list
建議工具	下列權限將新增至建議工具檢視者角色 (roles/recommender.viewer)： recommender.costRecommendations.listAll recommender.costRecommendations.summarizeAll
Memorystore for Redis	下列權限將新增至 Cloud Memorystore Redis 編輯者角色 (roles/redis.editor)： redis.backupCollections.create redis.backupCollections.delete redis.backups.create redis.backups.delete redis.backups.export redis.clusters.connect redis.clusters.create redis.clusters.delete redis.clusters.rescheduleMaintenance redis.instances.create redis.instances.delete redis.instances.export redis.instances.import redis.instances.listEffectiveTags redis.instances.listTagBindings redis.instances.rescheduleMaintenance redis.instances.updateAuth redis.instances.upgrade
Route Optimization	下列權限會新增至 Route Optimization 檢視者角色 (roles/routeoptimization.viewer)： routeoptimization.locations.use
Security Center Management API	下列權限將新增至 Security Center Management 檢視者角色 (roles/securitycentermanagement.viewer)： securitycentermanagement.securityCommandCenter.checkEligibility
Security Posture API	下列權限將新增至資安態勢檢視者角色 (roles/securityposture.viewer)： securityposture.locations.get securityposture.locations.list securityposture.operations.list securityposture.reports.get securityposture.reports.list
Spanner	Cloud Spanner 檢視者角色 (roles/spanner.viewer) 將新增下列權限： spanner.backupOperations.get spanner.backupOperations.list spanner.backupSchedules.get spanner.backupSchedules.getIamPolicy spanner.backupSchedules.list spanner.backups.get spanner.backups.getIamPolicy spanner.backups.list spanner.databaseOperations.get spanner.databaseOperations.list spanner.databaseRoles.list spanner.databases.beginReadOnlyTransaction spanner.databases.getDdl spanner.databases.getIamPolicy spanner.databases.useDataBoost spanner.instanceConfigOperations.get spanner.instanceConfigOperations.list spanner.instanceOperations.get spanner.instanceOperations.list spanner.instancePartitionOperations.get spanner.instancePartitionOperations.list spanner.instances.getIamPolicy
Speaker ID	Speaker ID 編輯者角色 (roles/speakerid.editor) 將新增下列權限： speakerid.settings.get
Speaker ID	下列權限將新增至 Speaker ID 檢視者角色 (roles/speakerid.viewer)： speakerid.settings.get
Speech-to-Text	下列權限將新增至 Cloud Speech 編輯者角色 (roles/speech.editor)： speech.config.get
目視檢測 AI	下列權限將新增至 目視檢測 AI 解決方案編輯者角色 (roles/visualinspection.editor)： visualinspection.locations.reportUsageMetrics

變更記錄

日期	變更
2026 年 2 月 13 日	compute.disks.createSnapshot 權限不會新增至 Compute 檢視者角色 (roles/compute.viewer)。
2026 年 3 月 2 日	redis.backups.export 權限不會新增至 Cloud Memorystore Redis 檢視者角色 (roles/redis.viewer)。
2026 年 3 月 2 日	下列權限不會新增至 Cloud KMS 管理員角色 (roles/cloudkms.admin)： cloudkms.cryptoKeyVersions.manageRawAesCbcKeys cloudkms.cryptoKeyVersions.manageRawAesCtrKeys cloudkms.cryptoKeyVersions.manageRawPKCS1Keys cloudkms.cryptoKeyVersions.useToDecapsulate cloudkms.cryptoKeyVersions.useToDecrypt cloudkms.cryptoKeyVersions.useToEncrypt cloudkms.cryptoKeyVersions.useToSign cloudkms.cryptoKeyVersions.useToVerify cloudkms.cryptoKeyVersions.viewPublicKey
March 23, 2026	權限異動日期已從 2026 年 3 月 29 日延後至 2026 年 9 月 30 日。
2026 年 5 月 5 日	系統不會將 cloudsql.instances.createBackupDrBackup 權限新增至 Cloud SQL 檢視者角色 (roles/cloudsql.viewer)。
2026 年 5 月 5 日	aiplatform.endpoints.predict 權限不會新增至 Vertex AI 檢視者角色 (roles/aiplatform.viewer)。
2026 年 5 月 5 日	下列權限不會新增至 AI 平台檢視者角色 (roles/ml.viewer)： ml.models.predict ml.versions.predict
2026 年 5 月 5 日	下列權限不會新增至 Cloud Translation API 檢視者角色 (roles/cloudtranslate.viewer)： cloudtranslate.adaptiveMtDatasets.predict cloudtranslate.customModels.predict cloudtranslate.generalModels.batchDocPredict cloudtranslate.generalModels.batchPredict cloudtranslate.generalModels.docPredict cloudtranslate.generalModels.predict cloudtranslate.glossaries.batchDocPredict cloudtranslate.glossaries.batchPredict cloudtranslate.glossaries.docPredict cloudtranslate.glossaries.predict cloudtranslate.languageDetectionModels.predict
2026 年 5 月 5 日	下列權限不會新增至 Compute 檢視者角色 (roles/compute.viewer)： compute.disks.useReadOnly compute.healthChecks.useReadOnly compute.httpHealthChecks.useReadOnly compute.httpsHealthChecks.useReadOnly compute.images.useReadOnly compute.instanceTemplates.useReadOnly compute.instances.useReadOnly compute.instantSnapshots.useReadOnly compute.machineImages.useReadOnly compute.regionHealthChecks.useReadOnly compute.resourcePolicies.useReadOnly compute.snapshots.useReadOnly
2026 年 5 月 5 日	下列權限不會新增至 Pub/Sub 檢視者角色 (roles/pubsub.viewer)： pubsub.schemas.attach pubsub.snapshots.seek
2026 年 5 月 5 日	下列權限不會新增至 Discovery Engine 檢視者角色 (roles/discoveryengine.viewer)： discoveryengine.locations.exchangeAuthCredentials discoveryengine.sessions.search
2026 年 5 月 5 日	gkehub.gateway.generateCredentials 權限不會新增至下列角色： 機群管理員 (原稱 GKE Hub 管理員) (roles/gkehub.admin) 機群編輯者 (原稱 GKE Hub 編輯者) (roles/gkehub.editor) 機群檢視者 (原稱 GKE Hub 檢視者) (roles/gkehub.viewer)
2026 年 5 月 5 日	chronicle.instances.permitFederationAccess 權限不會新增至下列角色： Chronicle API 管理員 (roles/chronicle.admin) Chronicle API 編輯者 (roles/chronicle.editor) Chronicle API 檢視者 (roles/chronicle.viewer)
2026 年 5 月 5 日	dataplex.entries.getData 權限不會新增至下列角色： Dataplex 編輯者 (roles/dataplex.editor) Dataplex 檢視者 (roles/dataplex.viewer)
2026 年 5 月 27 日	cloudfunctions.functions.sourceCodeGet 權限不會新增至 Cloud Functions 檢視者角色 (roles/cloudfunctions.viewer)。
2026 年 5 月 27 日	logging.logEntries.download 權限不會新增至記錄檢視器角色 (roles/logging.viewer)。
2026 年 5 月 27 日	下列權限不會新增至 Storage 管理員角色 (roles/storage.admin)： storage.hmacKeys.create storage.hmacKeys.delete storage.hmacKeys.get storage.hmacKeys.list storage.hmacKeys.update
2026 年 6 月 8 日	系統不會將 aiplatform.entityTypes.exportFeatureValues 權限新增至 Vertex AI 檢視者角色 (roles/aiplatform.viewer)。
2026 年 6 月 8 日	chronicle.contentPacks.export 權限不會新增至 Chronicle API 檢視者角色 (roles/chronicle.viewer)。
2026 年 6 月 8 日	cloudtranslate.datasets.export 權限不會新增至 Cloud Translation API 檢視者角色 (roles/cloudtranslate.viewer)。
2026 年 6 月 8 日	dataplex.entryGroups.export 權限不會新增至 Dataplex 檢視者角色 (roles/dataplex.viewer)。
2026 年 6 月 8 日	系統不會將 logging.buckets.copyLogEntries 權限新增至記錄檢視器角色 (roles/logging.viewer)。
2026 年 6 月 30 日	下列權限不會新增至 Bigtable 檢視者角色 (roles/bigtable.viewer)： bigtable.tables.readRows bigtable.instances.executeQuery
2026 年 6 月 30 日	下列權限不會新增至 Dataplex 檢視者角色 (roles/dataplex.viewer)： dataplex.assets.readData dataplex.datascans.getData
2026 年 6 月 30 日	spanner.databases.read 權限不會新增至 Cloud Spanner 檢視者角色 (roles/spanner.viewer)。
2026 年 6 月 30 日	vpcaccess.connectors.use 權限不會新增至無伺服器 VPC 存取角色 (roles/vpcaccess.viewer)。
2026 年 7 月 15 日	下列權限不會新增至 Bigtable 檢視者角色 (roles/bigtable.viewer)： bigtable.authorizedViews.readRows bigtable.backups.read bigtable.logicalViews.readRows bigtable.materializedViews.readRows
2026 年 6 月 15 日	下列權限不會新增至 Cloud Spanner 檢視者角色 (roles/spanner.viewer)： spanner.databases.partitionQuery spanner.databases.partitionRead spanner.databases.select
2026 年 8 月 27 日	aiplatform.memories.retrieve 權限不會新增至 Vertex AI 檢視者角色 (roles/aiplatform.viewer)。
2026 年 8 月 27 日	bigtable.tables.sampleRowKeys 權限不會新增至 Bigtable 檢視者角色 (roles/bigtable.viewer)。
2026 年 8 月 27 日	下列權限不會新增至 Pub/Sub Lite 檢視者角色 (roles/pubsublite.viewer)： pubsublite.subscriptions.subscribe pubsublite.topics.computeHeadCursor pubsublite.topics.computeMessageStats pubsublite.topics.computeTimeCursor pubsublite.topics.subscribe
2026 年 8 月 27 日	下列權限不會新增至 Retail 檢視者角色 (roles/retail.viewer)： retail.models.pause retail.models.resume retail.models.tune
2026 年 8 月 27 日	下列權限不會新增至 Cloud Spanner 檢視者角色 (roles/spanner.viewer)： spanner.sessions.create spanner.sessions.delete spanner.sessions.get spanner.sessions.list
2026 年 9 月 1 日	下列權限不會新增至 Bigtable 檢視者角色 (roles/bigtable.viewer)： bigtable.authorizedViews.sampleRowKeys bigtable.keyvisualizer.get bigtable.keyvisualizer.list bigtable.materializedViews.sampleRowKeys
2026 年 9 月 1 日	下列權限不會新增至 Cloud KMS 管理員角色 (roles/cloudkms.admin)： cloudkms.singleTenantHsmInstanceProposals.approve cloudkms.singleTenantHsmInstanceProposals.create cloudkms.singleTenantHsmInstanceProposals.execute
2026 年 9 月 1 日	下列權限不會新增至 IAP 政策管理員角色 (roles/iap.admin)： iap.tunnelDestGroups.accessViaIAP iap.tunnelInstances.accessViaIAP
2026 年 9 月 1 日	下列權限不會新增至記錄檢視者角色 (roles/logging.viewer)： logging.views.listLogs logging.views.listResourceKeys logging.views.listResourceValues
2026 年 9 月 17 日	下列權限不會新增至備份和災難復原管理員角色 (roles/backupdr.admin)： backupdr.resourceBackupConfigs.get backupdr.resourceBackupConfigs.list
2026 年 9 月 17 日	下列權限不會新增至備份和災難復原檢視者角色 (roles/backupdr.viewer)： backupdr.resourceBackupConfigs.get backupdr.resourceBackupConfigs.list
2026 年 9 月 17 日	下列權限不會新增至 Chronicle API 管理員角色 (roles/chronicle.admin)： chronicle.instances.delete chronicle.instances.soarThreatManager chronicle.instances.soarVulnerabilityManager chronicle.instances.undelete
2026 年 9 月 17 日	下列權限不會新增至 Cloud SQL 編輯者角色 (roles/cloudsql.editor)： cloudsql.backupRuns.delete cloudsql.databases.delete cloudsql.instances.clone cloudsql.instances.delete cloudsql.instances.executeSql cloudsql.instances.import cloudsql.instances.login cloudsql.instances.resetSslConfig cloudsql.instances.restoreBackup cloudsql.sslCerts.delete cloudsql.users.update
2026 年 9 月 17 日	cloudsql.schemas.view 權限不會新增至 Cloud SQL 檢視者角色 (roles/cloudsql.viewer)。
2026 年 9 月 17 日	下列權限不會新增至 Discovery Engine 編輯者角色 (roles/discoveryengine.editor)： discoveryengine.aclConfigs.update discoveryengine.audioOverviews.create discoveryengine.audioOverviews.delete discoveryengine.audioOverviews.get discoveryengine.audioOverviews.getIceConfig discoveryengine.audioOverviews.sendSdpOffer discoveryengine.cmekConfigs.update discoveryengine.collections.delete
2026 年 9 月 17 日	下列權限不會新增至 Discovery Engine 檢視者角色 (roles/discoveryengine.viewer)： discoveryengine.audioOverviews.get discoveryengine.audioOverviews.getIceConfig discoveryengine.audioOverviews.sendSdpOffer discoveryengine.licenseConfigs.get discoveryengine.licenseConfigs.list discoveryengine.locations.estimateDataSize discoveryengine.notebooks.generateGuide discoveryengine.notebooks.get discoveryengine.notebooks.getAnalytics discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.interactSources discoveryengine.notes.get discoveryengine.sources.checkFreshness discoveryengine.sources.generateDocumentGuide discoveryengine.sources.get discoveryengine.userStores.listUserLicenses
2026 年 9 月 17 日	下列權限不會新增至機群管理員 (原稱 GKE Hub 管理員) 角色 (roles/gkehub.admin)： gkehub.gateway.delete gkehub.gateway.get gkehub.gateway.patch gkehub.gateway.post gkehub.gateway.put gkehub.gateway.stream
2026 年 9 月 17 日	下列權限不會新增至機群編輯者 (原稱 GKE Hub 編輯者) 角色 (roles/gkehub.editor)： gkehub.gateway.delete gkehub.gateway.get gkehub.gateway.patch gkehub.gateway.post gkehub.gateway.put gkehub.gateway.stream
2026 年 9 月 17 日	gkehub.gateway.get 權限不會新增至機群檢視者 (原稱 GKE Hub 檢視者) 角色 (roles/gkehub.viewer)。
2026 年 9 月 17 日	下列權限不會新增至 Cloud Memorystore Memcached 編輯者角色 (roles/memcache.editor)： memcache.instances.applySoftwareUpdate memcache.instances.create memcache.instances.delete memcache.instances.rescheduleMaintenance memcache.instances.upgrade
2026 年 9 月 17 日	下列權限不會新增至 Cloud Memorystore Memcached 檢視者角色 (roles/memcache.viewer)： memcache.instances.listEffectiveTags memcache.instances.listTagBindings
2026 年 9 月 17 日	下列權限不會新增至 Retail 編輯者角色 (roles/retail.editor)： retail.attributesConfigs.batchRemoveCatalogAttributes retail.attributesConfigs.removeCatalogAttribute retail.products.purge retail.products.setSponsorship retail.userEvents.purge retail.userEvents.rejoin
2026 年 9 月 24 日	下列權限不會新增至 Analytics Hub 管理員角色 (roles/analyticshub.admin)： analyticshub.dataExchanges.subscribe analyticshub.listings.subscribe
2026 年 9 月 24 日	下列權限不會新增至 Analytics Hub 檢視者角色 (roles/analyticshub.viewer)： analyticshub.subscriptions.get analyticshub.subscriptions.list
2026 年 9 月 24 日	cloudsql.users.create 權限不會新增至 Cloud SQL 編輯者角色 (roles/cloudsql.editor)。
2026 年 9 月 24 日	下列權限不會新增至 Kubernetes Engine 叢集檢視者角色 (roles/container.clusterViewer)： container.clusters.listEffectiveTags container.clusters.listTagBindings container.pods.getLogs container.selfSubjectAccessReviews.create container.selfSubjectRulesReviews.create container.volumeSnapshots.getStatus
2026 年 9 月 24 日	下列權限不會新增至 Dataplex 管理員角色 (roles/dataplex.admin)： dataplex.aspectTypes.create dataplex.aspectTypes.delete dataplex.aspectTypes.get dataplex.aspectTypes.getIamPolicy dataplex.aspectTypes.list dataplex.aspectTypes.setIamPolicy dataplex.aspectTypes.update dataplex.aspectTypes.use dataplex.assets.ownData dataplex.assets.readData dataplex.assets.writeData dataplex.encryptionConfig.create dataplex.encryptionConfig.delete dataplex.encryptionConfig.get dataplex.encryptionConfig.list dataplex.encryptionConfig.update dataplex.entries.create dataplex.entries.delete dataplex.entries.get dataplex.entries.getData dataplex.entries.list dataplex.entries.update dataplex.entryGroups.create dataplex.entryGroups.delete dataplex.entryGroups.get dataplex.entryGroups.getIamPolicy dataplex.entryGroups.list dataplex.entryGroups.setIamPolicy dataplex.entryGroups.update dataplex.entryGroups.useContactsAspect dataplex.entryGroups.useDataProfileAspect dataplex.entryGroups.useDataQualityScorecardAspect dataplex.entryGroups.useDescriptionsAspect dataplex.entryGroups.useGenericAspect dataplex.entryGroups.useGenericEntry dataplex.entryGroups.useOverviewAspect dataplex.entryGroups.useQueriesAspect dataplex.entryGroups.useRefreshCadenceAspect dataplex.entryGroups.useSchemaAspect dataplex.entryGroups.useStorageAspect dataplex.entryTypes.create dataplex.entryTypes.delete dataplex.entryTypes.get dataplex.entryTypes.getIamPolicy dataplex.entryTypes.list dataplex.entryTypes.setIamPolicy dataplex.entryTypes.update dataplex.entryTypes.use dataplex.projects.search
2026 年 9 月 24 日	下列權限不會新增至 Dataplex 編輯者角色 (roles/dataplex.editor)： dataplex.aspectTypes.create dataplex.aspectTypes.delete dataplex.aspectTypes.get dataplex.aspectTypes.getIamPolicy dataplex.aspectTypes.list dataplex.aspectTypes.update dataplex.aspectTypes.use dataplex.assets.readData dataplex.assets.writeData dataplex.content.create dataplex.content.update dataplex.datascans.getData dataplex.encryptionConfig.create dataplex.encryptionConfig.delete dataplex.encryptionConfig.get dataplex.encryptionConfig.list dataplex.encryptionConfig.update dataplex.entities.create dataplex.entities.delete dataplex.entities.get dataplex.entities.list dataplex.entities.update dataplex.entries.create dataplex.entries.delete dataplex.entries.get dataplex.entries.link dataplex.entries.list dataplex.entries.update dataplex.entryGroups.create dataplex.entryGroups.delete dataplex.entryGroups.export dataplex.entryGroups.get dataplex.entryGroups.getIamPolicy dataplex.entryGroups.import dataplex.entryGroups.list dataplex.entryGroups.update dataplex.entryGroups.useContactsAspect dataplex.entryGroups.useDataProfileAspect dataplex.entryGroups.useDataQualityScorecardAspect dataplex.entryGroups.useDefinitionEntryLink dataplex.entryGroups.useDescriptionsAspect dataplex.entryGroups.useGenericAspect dataplex.entryGroups.useGenericEntry dataplex.entryGroups.useOverviewAspect dataplex.entryGroups.useQueriesAspect dataplex.entryGroups.useRefreshCadenceAspect dataplex.entryGroups.useRelatedEntryLink dataplex.entryGroups.useSchemaAspect dataplex.entryGroups.useStorageAspect dataplex.entryGroups.useSynonymEntryLink dataplex.entryLinks.create dataplex.entryLinks.delete dataplex.entryLinks.get dataplex.entryLinks.reference dataplex.entryTypes.create dataplex.entryTypes.delete dataplex.entryTypes.get dataplex.entryTypes.getIamPolicy dataplex.entryTypes.list dataplex.entryTypes.update dataplex.entryTypes.use dataplex.environments.execute dataplex.glossaries.create dataplex.glossaries.delete dataplex.glossaries.get dataplex.glossaries.getIamPolicy dataplex.glossaries.import dataplex.glossaries.list dataplex.glossaries.update dataplex.glossaryCategories.create dataplex.glossaryCategories.delete dataplex.glossaryCategories.get dataplex.glossaryCategories.list dataplex.glossaryCategories.update dataplex.glossaryTerms.create dataplex.glossaryTerms.delete dataplex.glossaryTerms.get dataplex.glossaryTerms.list dataplex.glossaryTerms.update dataplex.glossaryTerms.use dataplex.locations.get dataplex.locations.list dataplex.metadataJobs.cancel dataplex.metadataJobs.create dataplex.metadataJobs.get dataplex.metadataJobs.list dataplex.partitions.create dataplex.partitions.delete dataplex.partitions.get dataplex.partitions.list dataplex.partitions.update dataplex.projects.search
2026 年 9 月 24 日	下列權限不會新增至 Dataplex 檢視者角色 (roles/dataplex.viewer)： dataplex.aspectTypes.get dataplex.aspectTypes.getIamPolicy dataplex.aspectTypes.list dataplex.encryptionConfig.get dataplex.encryptionConfig.list dataplex.entities.get dataplex.entities.list dataplex.entries.get dataplex.entries.list dataplex.entryGroups.get dataplex.entryGroups.getIamPolicy dataplex.entryGroups.list dataplex.entryLinks.get dataplex.entryTypes.get dataplex.entryTypes.getIamPolicy dataplex.entryTypes.list dataplex.glossaries.get dataplex.glossaries.getIamPolicy dataplex.glossaries.list dataplex.glossaryCategories.get dataplex.glossaryCategories.list dataplex.glossaryTerms.get dataplex.glossaryTerms.list dataplex.locations.get dataplex.locations.list dataplex.metadataJobs.get dataplex.metadataJobs.list dataplex.partitions.get dataplex.partitions.list dataplex.projects.search
2026 年 9 月 24 日	下列權限不會新增至 Discovery Engine 編輯者角色 (roles/discoveryengine.editor)： discoveryengine.notebooks.generateGuide discoveryengine.notebooks.get discoveryengine.notebooks.getAnalytics discoveryengine.notebooks.getIamPolicy discoveryengine.notebooks.interactSources discoveryengine.notebooks.list discoveryengine.notebooks.removeSelf discoveryengine.notebooks.update discoveryengine.notes.create discoveryengine.notes.delete discoveryengine.notes.get discoveryengine.notes.update discoveryengine.sources.checkFreshness discoveryengine.sources.create discoveryengine.sources.delete discoveryengine.sources.generateDocumentGuide discoveryengine.sources.get discoveryengine.sources.refresh discoveryengine.sources.update
2026 年 9 月 24 日	系統不會將 redis.instances.getAuthString 權限新增至 Cloud Memorystore Redis 編輯者角色 (roles/redis.editor)。
2026 年 9 月 24 日	下列權限不會新增至 Retail 檢視者角色 (roles/retail.viewer)： retail.merchantControls.creatorGet retail.merchantControls.creatorList
2026 年 9 月 25 日	下列權限不會新增至帳單帳戶管理員角色 (roles/billing.admin)： billing.costRecommendations.listScoped billing.resourceCosts.get billing.resourcebudgets.read billing.resourcebudgets.write
2026 年 9 月 25 日	下列權限不會新增至帳單帳戶檢視者角色 (roles/billing.viewer)： billing.costRecommendations.listScoped billing.resourceCosts.get billing.resourcebudgets.read
2026 年 9 月 25 日	下列權限不會新增至資料歷程編輯者角色 (roles/datalineage.editor)： datalineage.configs.get datalineage.configs.update
2026 年 9 月 25 日	下列權限不會新增至資料歷程檢視者角色 (roles/datalineage.viewer)： datalineage.configs.get datalineage.configs.update
2026 年 9 月 25 日	下列角色的權限變更已延至 2026 年 10 月 21 日： Chronicle API 管理員 (roles/chronicle.admin) Chronicle API 編輯者 (roles/chronicle.editor) Chronicle API 檢視者 (roles/chronicle.viewer)
2026 年 10 月 26 日	下列權限不會新增至 Chronicle API 編輯者角色 (roles/chronicle.editor)： chronicle.calculatedFieldDefinitions.update chronicle.collectors.create chronicle.collectors.delete chronicle.collectors.update chronicle.connectors.delete chronicle.connectors.update chronicle.customFields.update chronicle.entitiesBlocklists.delete chronicle.entitiesBlocklists.update chronicle.formDynamicParameters.update chronicle.forwarders.create chronicle.forwarders.delete chronicle.forwarders.update chronicle.instances.verifyNonce chronicle.integrationActions.delete chronicle.integrations.delete chronicle.jobs.delete chronicle.legacyCaseFederationPlatforms.delete chronicle.legacyCaseFederationPlatforms.update chronicle.logProcessingPipelines.associateStreams chronicle.logProcessingPipelines.create chronicle.logProcessingPipelines.delete chronicle.logProcessingPipelines.dissociateStreams chronicle.logProcessingPipelines.update chronicle.shareConfigs.update chronicle.systemNotifications.update chronicle.tenants.create chronicle.tenants.update
2026 年 10 月 26 日	下列權限不會新增至 Chronicle API 檢視者角色 (roles/chronicle.viewer)： chronicle.connectorInstanceLogs.get chronicle.connectorInstances.get chronicle.connectorRevisions.get chronicle.connectors.get chronicle.instances.verifyNonce chronicle.integrationActionRevisions.get chronicle.integrationInstances.get chronicle.integrationLogicalOperatorRevisions.get chronicle.integrationLogicalOperators.get chronicle.jobInstanceLogs.get chronicle.jobInstances.get chronicle.jobRevisions.get chronicle.jobs.get chronicle.legacyPlaybooks.get chronicle.managerRevisions.get chronicle.managers.get chronicle.tenants.list chronicle.transformerDefinitions.get chronicle.transformerDefinitions.list chronicle.transformerRevisions.get
2026 年 10 月 26 日	下列角色的權限變更原定於 2026 年 10 月 21 日生效，但已延後至 2026 年 11 月 9 日： Chronicle API 管理員 (roles/chronicle.admin) Chronicle API 編輯者 (roles/chronicle.editor) Chronicle API 檢視者 (roles/chronicle.viewer)