Control de acceso con la IAM

Cyber Insurance Hub utiliza Identity and Access Management (IAM) para administrar el acceso a los recursos del modelo. Para otorgar acceso a un recurso de un modelo, asigna una o más funciones de IAM a un usuario, un grupo o una cuenta de servicio. Los permisos de Cyber Insurance Hub se incorporan a las funciones de IAM.

Para obtener más información sobre los roles de IAM, consulta el Índice de roles y permisos de IAM.

Agente de servicio de Cyber Insurance Hub

Cuando te inscribes en Cyber Insurance Hub, se crea un agente de servicio para ti con el formato de organizations-ORGANIZATION_ID@gcp-sa-riskmanager.iam.gserviceaccount.com. Este agente de servicio requiere el rol riskmanager.serviceAgent a nivel de la organización. Este rol permite que el agente de servicio de Cyber Insurance Hub recupere los datos necesarios de otros Google Cloud servicios para generar informes de Cyber Insurance Hub. Para obtener una lista completa de los permisos incluidos en este rol, consulta el rol Agente de servicio de Administrador de riesgos.

Para obtener los permisos que necesitas para otorgar el rol Agente de servicio de Risk Manager, pídele a tu administrador que te otorgue el rol de IAM Administrador de la organización (roles/resourcemanager.organizationAdmin) en tu organización. Para obtener más información sobre cómo otorgar roles, consulta Administra el acceso a proyectos, carpetas y organizaciones.

Este rol predefinido contiene los permisos necesarios para otorgar el rol Agente de servicio de Risk Manager. Para ver los permisos exactos que son necesarios, expande la sección Permisos requeridos:

Permisos necesarios

Se requieren los siguientes permisos para otorgar el rol Agente de servicio de Risk Manager:

  • resourcemanager.organizations.getIamPolicy
  • resourcemanager.organizations.setIamPolicy

También puedes obtener estos permisos con roles personalizados o otros roles predefinidos.

Puedes otorgar el rol Agente de servicio de Risk Manager al agente de servicio cuando configuras Cyber Insurance Hub por primera vez. También puedes otorgar el rol Agente de servicio de Risk Manager a un agente de servicio ejecutando el siguiente comando de la CLI:

    gcloud organizations add-iam-policy-binding ORGANIZATION_ID \
      --member="serviceAccount:organizations-ORGANIZATION_ID@gcp-sa-riskmanager.iam.gserviceaccount.com" \
      --role="roles/riskmanager.serviceAgent"

Reemplaza ORGANIZATION_ID por el ID numérico de tu organización.

Roles de Cyber Insurance Hub

Cyber Insurance Hub proporciona roles predefinidos que otorgan varios permisos a recursos específicos de Cyber Insurance Hub.

En la siguiente tabla, se enumeran los roles predefinidos para Cyber Insurance Hub, su descripción y los permisos que incluyen. Otorga estos roles a nivel de la organización.

Role Permissions

(roles/riskmanager.admin)

Grants all Risk Manager permissions

resourcemanager.projects.get

resourcemanager.projects.list

riskmanager.*

  • riskmanager.controlScoreBreakdowns.get
  • riskmanager.controlScoreBreakdowns.list
  • riskmanager.operations.delete
  • riskmanager.operations.get
  • riskmanager.operations.list
  • riskmanager.policies.get
  • riskmanager.policies.list
  • riskmanager.reports.create
  • riskmanager.reports.delete
  • riskmanager.reports.get
  • riskmanager.reports.list
  • riskmanager.reports.review
  • riskmanager.reports.share
  • riskmanager.serviceAccount.create
  • riskmanager.settings.get
  • riskmanager.settings.update

(roles/riskmanager.editor)

Access to edit Risk Manager resources

resourcemanager.projects.get

resourcemanager.projects.list

riskmanager.controlScoreBreakdowns.*

  • riskmanager.controlScoreBreakdowns.get
  • riskmanager.controlScoreBreakdowns.list

riskmanager.operations.*

  • riskmanager.operations.delete
  • riskmanager.operations.get
  • riskmanager.operations.list

riskmanager.policies.*

  • riskmanager.policies.get
  • riskmanager.policies.list

riskmanager.reports.create

riskmanager.reports.delete

riskmanager.reports.get

riskmanager.reports.list

riskmanager.serviceAccount.create

riskmanager.settings.*

  • riskmanager.settings.get
  • riskmanager.settings.update

(roles/riskmanager.viewer)

Access to view Risk Manager resources

resourcemanager.projects.get

resourcemanager.projects.list

riskmanager.controlScoreBreakdowns.*

  • riskmanager.controlScoreBreakdowns.get
  • riskmanager.controlScoreBreakdowns.list

riskmanager.operations.get

riskmanager.operations.list

riskmanager.policies.*

  • riskmanager.policies.get
  • riskmanager.policies.list

riskmanager.reports.get

riskmanager.reports.list

riskmanager.settings.get

(roles/riskmanager.reviewer)

Access to review Risk Manager reports

resourcemanager.projects.get

resourcemanager.projects.list

riskmanager.controlScoreBreakdowns.*

  • riskmanager.controlScoreBreakdowns.get
  • riskmanager.controlScoreBreakdowns.list

riskmanager.operations.get

riskmanager.operations.list

riskmanager.reports.get

riskmanager.reports.list

riskmanager.reports.review

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

(roles/riskmanager.serviceAgent)

Service agent that grants Risk Manager service access to fetch findings for generating Reports

cloudasset.assets.*

  • cloudasset.assets.analyzeIamPolicy
  • cloudasset.assets.analyzeMove
  • cloudasset.assets.analyzeOrgPolicy
  • cloudasset.assets.exportAccessLevel
  • cloudasset.assets.exportAccessPolicy
  • cloudasset.assets.exportAiplatformBatchPredictionJobs
  • cloudasset.assets.exportAiplatformCustomJobs
  • cloudasset.assets.exportAiplatformDataLabelingJobs
  • cloudasset.assets.exportAiplatformDatasets
  • cloudasset.assets.exportAiplatformEndpoints
  • cloudasset.assets.exportAiplatformHyperparameterTuningJobs
  • cloudasset.assets.exportAiplatformMetadataStores
  • cloudasset.assets.exportAiplatformModelDeploymentMonitoringJobs
  • cloudasset.assets.exportAiplatformModels
  • cloudasset.assets.exportAiplatformPipelineJobs
  • cloudasset.assets.exportAiplatformSpecialistPools
  • cloudasset.assets.exportAiplatformTrainingPipelines
  • cloudasset.assets.exportAllAccessPolicy
  • cloudasset.assets.exportAnthosConnectedCluster
  • cloudasset.assets.exportAnthosedgeCluster
  • cloudasset.assets.exportApigatewayApi
  • cloudasset.assets.exportApigatewayApiConfig
  • cloudasset.assets.exportApigatewayGateway
  • cloudasset.assets.exportApikeysKeys
  • cloudasset.assets.exportAppengineApplications
  • cloudasset.assets.exportAppengineServices
  • cloudasset.assets.exportAppengineVersions
  • cloudasset.assets.exportArtifactregistryDockerImages
  • cloudasset.assets.exportArtifactregistryRepositories
  • cloudasset.assets.exportAssuredWorkloadsWorkloads
  • cloudasset.assets.exportBeyondCorpApiGateways
  • cloudasset.assets.exportBeyondCorpAppConnections
  • cloudasset.assets.exportBeyondCorpAppConnectors
  • cloudasset.assets.exportBeyondCorpAppGateways
  • cloudasset.assets.exportBeyondCorpClientConnectorServices
  • cloudasset.assets.exportBeyondCorpClientGateways
  • cloudasset.assets.exportBigqueryDatasets
  • cloudasset.assets.exportBigqueryModels
  • cloudasset.assets.exportBigqueryTables
  • cloudasset.assets.exportBigtableAppProfile
  • cloudasset.assets.exportBigtableBackup
  • cloudasset.assets.exportBigtableCluster
  • cloudasset.assets.exportBigtableInstance
  • cloudasset.assets.exportBigtableTable
  • cloudasset.assets.exportCloudAssetFeeds
  • cloudasset.assets.exportCloudDeployDeliveryPipelines
  • cloudasset.assets.exportCloudDeployReleases
  • cloudasset.assets.exportCloudDeployRollouts
  • cloudasset.assets.exportCloudDeployTargets
  • cloudasset.assets.exportCloudDocumentAIEvaluation
  • cloudasset.assets.exportCloudDocumentAIHumanReviewConfig
  • cloudasset.assets.exportCloudDocumentAILabelerPool
  • cloudasset.assets.exportCloudDocumentAIProcessor
  • cloudasset.assets.exportCloudDocumentAIProcessorVersion
  • cloudasset.assets.exportCloudbillingBillingAccounts
  • cloudasset.assets.exportCloudbillingProjectBillingInfos
  • cloudasset.assets.exportCloudfunctionsFunctions
  • cloudasset.assets.exportCloudfunctionsGen2Functions
  • cloudasset.assets.exportCloudkmsCryptoKeyVersions
  • cloudasset.assets.exportCloudkmsCryptoKeys
  • cloudasset.assets.exportCloudkmsEkmConnections
  • cloudasset.assets.exportCloudkmsImportJobs
  • cloudasset.assets.exportCloudkmsKeyRings
  • cloudasset.assets.exportCloudmemcacheInstances
  • cloudasset.assets.exportCloudresourcemanagerFolders
  • cloudasset.assets.exportCloudresourcemanagerOrganizations
  • cloudasset.assets.exportCloudresourcemanagerProjects
  • cloudasset.assets.exportCloudresourcemanagerTagBindings
  • cloudasset.assets.exportCloudresourcemanagerTagKeys
  • cloudasset.assets.exportCloudresourcemanagerTagValues
  • cloudasset.assets.exportComposerEnvironments
  • cloudasset.assets.exportComputeAddress
  • cloudasset.assets.exportComputeAutoscalers
  • cloudasset.assets.exportComputeBackendBuckets
  • cloudasset.assets.exportComputeBackendServices
  • cloudasset.assets.exportComputeCommitments
  • cloudasset.assets.exportComputeDisks
  • cloudasset.assets.exportComputeExternalVpnGateways
  • cloudasset.assets.exportComputeFirewallPolicies
  • cloudasset.assets.exportComputeFirewalls
  • cloudasset.assets.exportComputeForwardingRules
  • cloudasset.assets.exportComputeGlobalAddress
  • cloudasset.assets.exportComputeGlobalForwardingRules
  • cloudasset.assets.exportComputeHealthChecks
  • cloudasset.assets.exportComputeHttpHealthChecks
  • cloudasset.assets.exportComputeHttpsHealthChecks
  • cloudasset.assets.exportComputeImages
  • cloudasset.assets.exportComputeInstanceGroupManagers
  • cloudasset.assets.exportComputeInstanceGroups
  • cloudasset.assets.exportComputeInstanceTemplates
  • cloudasset.assets.exportComputeInstances
  • cloudasset.assets.exportComputeInterconnect
  • cloudasset.assets.exportComputeInterconnectAttachment
  • cloudasset.assets.exportComputeLicenses
  • cloudasset.assets.exportComputeNetworkEndpointGroups
  • cloudasset.assets.exportComputeNetworks
  • cloudasset.assets.exportComputeNodeGroups
  • cloudasset.assets.exportComputeNodeTemplates
  • cloudasset.assets.exportComputePacketMirrorings
  • cloudasset.assets.exportComputeProjects
  • cloudasset.assets.exportComputeRegionAutoscaler
  • cloudasset.assets.exportComputeRegionBackendServices
  • cloudasset.assets.exportComputeRegionDisk
  • cloudasset.assets.exportComputeRegionInstanceGroup
  • cloudasset.assets.exportComputeRegionInstanceGroupManager
  • cloudasset.assets.exportComputeReservations
  • cloudasset.assets.exportComputeResourcePolicies
  • cloudasset.assets.exportComputeRouters
  • cloudasset.assets.exportComputeRoutes
  • cloudasset.assets.exportComputeSecurityPolicy
  • cloudasset.assets.exportComputeServiceAttachments
  • cloudasset.assets.exportComputeSnapshots
  • cloudasset.assets.exportComputeSslCertificates
  • cloudasset.assets.exportComputeSslPolicies
  • cloudasset.assets.exportComputeSubnetworks
  • cloudasset.assets.exportComputeTargetHttpProxies
  • cloudasset.assets.exportComputeTargetHttpsProxies
  • cloudasset.assets.exportComputeTargetInstances
  • cloudasset.assets.exportComputeTargetPools
  • cloudasset.assets.exportComputeTargetSslProxies
  • cloudasset.assets.exportComputeTargetTcpProxies
  • cloudasset.assets.exportComputeTargetVpnGateways
  • cloudasset.assets.exportComputeUrlMaps
  • cloudasset.assets.exportComputeVpnGateways
  • cloudasset.assets.exportComputeVpnTunnels
  • cloudasset.assets.exportConnectorsConnections
  • cloudasset.assets.exportConnectorsConnectorVersions
  • cloudasset.assets.exportConnectorsConnectors
  • cloudasset.assets.exportConnectorsProviders
  • cloudasset.assets.exportConnectorsRuntimeConfigs
  • cloudasset.assets.exportContainerAppsDeployment
  • cloudasset.assets.exportContainerAppsReplicaSets
  • cloudasset.assets.exportContainerBatchJobs
  • cloudasset.assets.exportContainerClusterrole
  • cloudasset.assets.exportContainerClusterrolebinding
  • cloudasset.assets.exportContainerClusters
  • cloudasset.assets.exportContainerExtensionsIngresses
  • cloudasset.assets.exportContainerJobs
  • cloudasset.assets.exportContainerNamespace
  • cloudasset.assets.exportContainerNetworkingIngresses
  • cloudasset.assets.exportContainerNetworkingNetworkPolicies
  • cloudasset.assets.exportContainerNode
  • cloudasset.assets.exportContainerNodepool
  • cloudasset.assets.exportContainerPod
  • cloudasset.assets.exportContainerReplicaSets
  • cloudasset.assets.exportContainerRole
  • cloudasset.assets.exportContainerRolebinding
  • cloudasset.assets.exportContainerServices
  • cloudasset.assets.exportContainerregistryImage
  • cloudasset.assets.exportDataMigrationConnectionProfiles
  • cloudasset.assets.exportDataMigrationMigrationJobs
  • cloudasset.assets.exportDataflowJobs
  • cloudasset.assets.exportDatafusionInstance
  • cloudasset.assets.exportDataplexAssets
  • cloudasset.assets.exportDataplexLakes
  • cloudasset.assets.exportDataplexTasks
  • cloudasset.assets.exportDataplexZones
  • cloudasset.assets.exportDataprocAutoscalingPolicies
  • cloudasset.assets.exportDataprocBatches
  • cloudasset.assets.exportDataprocClusters
  • cloudasset.assets.exportDataprocJobs
  • cloudasset.assets.exportDataprocSessions
  • cloudasset.assets.exportDataprocWorkflowTemplates
  • cloudasset.assets.exportDatastreamConnectionProfile
  • cloudasset.assets.exportDatastreamPrivateConnection
  • cloudasset.assets.exportDatastreamStream
  • cloudasset.assets.exportDialogflowAgents
  • cloudasset.assets.exportDialogflowConversationProfiles
  • cloudasset.assets.exportDialogflowKnowledgeBases
  • cloudasset.assets.exportDialogflowLocationSettings
  • cloudasset.assets.exportDlpDeidentifyTemplates
  • cloudasset.assets.exportDlpDlpJobs
  • cloudasset.assets.exportDlpInspectTemplates
  • cloudasset.assets.exportDlpJobTriggers
  • cloudasset.assets.exportDlpStoredInfoTypes
  • cloudasset.assets.exportDnsManagedZones
  • cloudasset.assets.exportDnsPolicies
  • cloudasset.assets.exportDomainsRegistrations
  • cloudasset.assets.exportEventarcTriggers
  • cloudasset.assets.exportFileBackups
  • cloudasset.assets.exportFileInstances
  • cloudasset.assets.exportFirebaseAppInfos
  • cloudasset.assets.exportFirebaseProjects
  • cloudasset.assets.exportFirestoreDatabases
  • cloudasset.assets.exportGKEHubFeatures
  • cloudasset.assets.exportGKEHubMemberships
  • cloudasset.assets.exportGameservicesGameServerClusters
  • cloudasset.assets.exportGameservicesGameServerConfigs
  • cloudasset.assets.exportGameservicesGameServerDeployments
  • cloudasset.assets.exportGameservicesRealms
  • cloudasset.assets.exportGkeBackupBackupPlans
  • cloudasset.assets.exportGkeBackupBackups
  • cloudasset.assets.exportGkeBackupRestorePlans
  • cloudasset.assets.exportGkeBackupRestores
  • cloudasset.assets.exportGkeBackupVolumeBackups
  • cloudasset.assets.exportGkeBackupVolumeRestores
  • cloudasset.assets.exportHealthcareConsentStores
  • cloudasset.assets.exportHealthcareDatasets
  • cloudasset.assets.exportHealthcareDicomStores
  • cloudasset.assets.exportHealthcareFhirStores
  • cloudasset.assets.exportHealthcareHl7V2Stores
  • cloudasset.assets.exportIamPolicy
  • cloudasset.assets.exportIamRoles
  • cloudasset.assets.exportIamServiceAccountKeys
  • cloudasset.assets.exportIamServiceAccounts
  • cloudasset.assets.exportIapTunnel
  • cloudasset.assets.exportIapTunnelInstances
  • cloudasset.assets.exportIapTunnelZones
  • cloudasset.assets.exportIapWeb
  • cloudasset.assets.exportIapWebServiceVersion
  • cloudasset.assets.exportIapWebServices
  • cloudasset.assets.exportIapWebType
  • cloudasset.assets.exportIdsEndpoints
  • cloudasset.assets.exportIntegrationsAuthConfigs
  • cloudasset.assets.exportIntegrationsCertificates
  • cloudasset.assets.exportIntegrationsExecutions
  • cloudasset.assets.exportIntegrationsIntegrationVersions
  • cloudasset.assets.exportIntegrationsIntegrations
  • cloudasset.assets.exportIntegrationsSfdcChannels
  • cloudasset.assets.exportIntegrationsSfdcInstances
  • cloudasset.assets.exportIntegrationsSuspensions
  • cloudasset.assets.exportLoggingLogMetrics
  • cloudasset.assets.exportLoggingLogSinks
  • cloudasset.assets.exportManagedidentitiesDomain
  • cloudasset.assets.exportMetastoreBackups
  • cloudasset.assets.exportMetastoreMetadataImports
  • cloudasset.assets.exportMetastoreServices
  • cloudasset.assets.exportMonitoringAlertPolicies
  • cloudasset.assets.exportNetworkConnectivityHubs
  • cloudasset.assets.exportNetworkConnectivitySpokes
  • cloudasset.assets.exportNetworkManagementConnectivityTests
  • cloudasset.assets.exportNetworkServicesEndpointPolicies
  • cloudasset.assets.exportNetworkServicesGateways
  • cloudasset.assets.exportNetworkServicesGrpcRoutes
  • cloudasset.assets.exportNetworkServicesHttpRoutes
  • cloudasset.assets.exportNetworkServicesMeshes
  • cloudasset.assets.exportNetworkServicesServiceBindings
  • cloudasset.assets.exportNetworkServicesTcpRoutes
  • cloudasset.assets.exportNetworkServicesTlsRoutes
  • cloudasset.assets.exportOSConfigOSPolicyAssignmentReports
  • cloudasset.assets.exportOSConfigOSPolicyAssignments
  • cloudasset.assets.exportOSConfigVulnerabilityReports
  • cloudasset.assets.exportOSInventories
  • cloudasset.assets.exportOrgPolicy
  • cloudasset.assets.exportPatchDeployments
  • cloudasset.assets.exportPubsubSnapshots
  • cloudasset.assets.exportPubsubSubscriptions
  • cloudasset.assets.exportPubsubTopics
  • cloudasset.assets.exportRedisInstances
  • cloudasset.assets.exportResource
  • cloudasset.assets.exportSecretManagerSecretVersions
  • cloudasset.assets.exportSecretManagerSecrets
  • cloudasset.assets.exportServiceDirectoryNamespaces
  • cloudasset.assets.exportServicePerimeter
  • cloudasset.assets.exportServiceconsumermanagementConsumerProperty
  • cloudasset.assets.exportServiceconsumermanagementConsumerQuotaLimits
  • cloudasset.assets.exportServiceconsumermanagementConsumers
  • cloudasset.assets.exportServiceconsumermanagementProducerOverrides
  • cloudasset.assets.exportServiceconsumermanagementTenancyUnits
  • cloudasset.assets.exportServiceconsumermanagementVisibility
  • cloudasset.assets.exportServicemanagementServices
  • cloudasset.assets.exportServiceusageAdminOverrides
  • cloudasset.assets.exportServiceusageConsumerOverrides
  • cloudasset.assets.exportServiceusageServices
  • cloudasset.assets.exportSpannerBackups
  • cloudasset.assets.exportSpannerDatabases
  • cloudasset.assets.exportSpannerInstances
  • cloudasset.assets.exportSpeakerIdPhrases
  • cloudasset.assets.exportSpeakerIdSettings
  • cloudasset.assets.exportSpeakerIdSpeakers
  • cloudasset.assets.exportSpeechCustomClasses
  • cloudasset.assets.exportSpeechPhraseSets
  • cloudasset.assets.exportSqladminBackupRuns
  • cloudasset.assets.exportSqladminInstances
  • cloudasset.assets.exportStorageBuckets
  • cloudasset.assets.exportTpuNodes
  • cloudasset.assets.exportVpcaccessConnector
  • cloudasset.assets.listAccessLevel
  • cloudasset.assets.listAccessPolicy
  • cloudasset.assets.listAiplatformBatchPredictionJobs
  • cloudasset.assets.listAiplatformCustomJobs
  • cloudasset.assets.listAiplatformDataLabelingJobs
  • cloudasset.assets.listAiplatformDatasets
  • cloudasset.assets.listAiplatformEndpoints
  • cloudasset.assets.listAiplatformHyperparameterTuningJobs
  • cloudasset.assets.listAiplatformMetadataStores
  • cloudasset.assets.listAiplatformModelDeploymentMonitoringJobs
  • cloudasset.assets.listAiplatformModels
  • cloudasset.assets.listAiplatformPipelineJobs
  • cloudasset.assets.listAiplatformSpecialistPools
  • cloudasset.assets.listAiplatformTrainingPipelines
  • cloudasset.assets.listAllAccessPolicy
  • cloudasset.assets.listAnthosConnectedCluster
  • cloudasset.assets.listAnthosedgeCluster
  • cloudasset.assets.listApigatewayApi
  • cloudasset.assets.listApigatewayApiConfig
  • cloudasset.assets.listApigatewayGateway
  • cloudasset.assets.listApikeysKeys
  • cloudasset.assets.listAppengineApplications
  • cloudasset.assets.listAppengineServices
  • cloudasset.assets.listAppengineVersions
  • cloudasset.assets.listArtifactregistryDockerImages
  • cloudasset.assets.listArtifactregistryRepositories
  • cloudasset.assets.listAssuredWorkloadsWorkloads
  • cloudasset.assets.listBeyondCorpApiGateways
  • cloudasset.assets.listBeyondCorpAppConnections
  • cloudasset.assets.listBeyondCorpAppConnectors
  • cloudasset.assets.listBeyondCorpAppGateways
  • cloudasset.assets.listBeyondCorpClientConnectorServices
  • cloudasset.assets.listBeyondCorpClientGateways
  • cloudasset.assets.listBigqueryDatasets
  • cloudasset.assets.listBigqueryModels
  • cloudasset.assets.listBigqueryTables
  • cloudasset.assets.listBigtableAppProfile
  • cloudasset.assets.listBigtableBackup
  • cloudasset.assets.listBigtableCluster
  • cloudasset.assets.listBigtableInstance
  • cloudasset.assets.listBigtableTable
  • cloudasset.assets.listCloudAssetFeeds
  • cloudasset.assets.listCloudDeployDeliveryPipelines
  • cloudasset.assets.listCloudDeployReleases
  • cloudasset.assets.listCloudDeployRollouts
  • cloudasset.assets.listCloudDeployTargets
  • cloudasset.assets.listCloudDocumentAIEvaluation
  • cloudasset.assets.listCloudDocumentAIHumanReviewConfig
  • cloudasset.assets.listCloudDocumentAILabelerPool
  • cloudasset.assets.listCloudDocumentAIProcessor
  • cloudasset.assets.listCloudDocumentAIProcessorVersion
  • cloudasset.assets.listCloudbillingBillingAccounts
  • cloudasset.assets.listCloudbillingProjectBillingInfos
  • cloudasset.assets.listCloudfunctionsFunctions
  • cloudasset.assets.listCloudfunctionsGen2Functions
  • cloudasset.assets.listCloudkmsCryptoKeyVersions
  • cloudasset.assets.listCloudkmsCryptoKeys
  • cloudasset.assets.listCloudkmsEkmConnections
  • cloudasset.assets.listCloudkmsImportJobs
  • cloudasset.assets.listCloudkmsKeyRings
  • cloudasset.assets.listCloudmemcacheInstances
  • cloudasset.assets.listCloudresourcemanagerFolders
  • cloudasset.assets.listCloudresourcemanagerOrganizations
  • cloudasset.assets.listCloudresourcemanagerProjects
  • cloudasset.assets.listCloudresourcemanagerTagBindings
  • cloudasset.assets.listCloudresourcemanagerTagKeys
  • cloudasset.assets.listCloudresourcemanagerTagValues
  • cloudasset.assets.listComposerEnvironments
  • cloudasset.assets.listComputeAddress
  • cloudasset.assets.listComputeAutoscalers
  • cloudasset.assets.listComputeBackendBuckets
  • cloudasset.assets.listComputeBackendServices
  • cloudasset.assets.listComputeCommitments
  • cloudasset.assets.listComputeDisks
  • cloudasset.assets.listComputeExternalVpnGateways
  • cloudasset.assets.listComputeFirewallPolicies
  • cloudasset.assets.listComputeFirewalls
  • cloudasset.assets.listComputeForwardingRules
  • cloudasset.assets.listComputeGlobalAddress
  • cloudasset.assets.listComputeGlobalForwardingRules
  • cloudasset.assets.listComputeHealthChecks
  • cloudasset.assets.listComputeHttpHealthChecks
  • cloudasset.assets.listComputeHttpsHealthChecks
  • cloudasset.assets.listComputeImages
  • cloudasset.assets.listComputeInstanceGroupManagers
  • cloudasset.assets.listComputeInstanceGroups
  • cloudasset.assets.listComputeInstanceTemplates
  • cloudasset.assets.listComputeInstances
  • cloudasset.assets.listComputeInterconnect
  • cloudasset.assets.listComputeInterconnectAttachment
  • cloudasset.assets.listComputeLicenses
  • cloudasset.assets.listComputeNetworkEndpointGroups
  • cloudasset.assets.listComputeNetworks
  • cloudasset.assets.listComputeNodeGroups
  • cloudasset.assets.listComputeNodeTemplates
  • cloudasset.assets.listComputePacketMirrorings
  • cloudasset.assets.listComputeProjects
  • cloudasset.assets.listComputeRegionAutoscaler
  • cloudasset.assets.listComputeRegionBackendServices
  • cloudasset.assets.listComputeRegionDisk
  • cloudasset.assets.listComputeRegionInstanceGroup
  • cloudasset.assets.listComputeRegionInstanceGroupManager
  • cloudasset.assets.listComputeReservations
  • cloudasset.assets.listComputeResourcePolicies
  • cloudasset.assets.listComputeRouters
  • cloudasset.assets.listComputeRoutes
  • cloudasset.assets.listComputeSecurityPolicy
  • cloudasset.assets.listComputeServiceAttachments
  • cloudasset.assets.listComputeSnapshots
  • cloudasset.assets.listComputeSslCertificates
  • cloudasset.assets.listComputeSslPolicies
  • cloudasset.assets.listComputeSubnetworks
  • cloudasset.assets.listComputeTargetHttpProxies
  • cloudasset.assets.listComputeTargetHttpsProxies
  • cloudasset.assets.listComputeTargetInstances
  • cloudasset.assets.listComputeTargetPools
  • cloudasset.assets.listComputeTargetSslProxies
  • cloudasset.assets.listComputeTargetTcpProxies
  • cloudasset.assets.listComputeTargetVpnGateways
  • cloudasset.assets.listComputeUrlMaps
  • cloudasset.assets.listComputeVpnGateways
  • cloudasset.assets.listComputeVpnTunnels
  • cloudasset.assets.listConnectorsConnections
  • cloudasset.assets.listConnectorsConnectorVersions
  • cloudasset.assets.listConnectorsConnectors
  • cloudasset.assets.listConnectorsProviders
  • cloudasset.assets.listConnectorsRuntimeConfigs
  • cloudasset.assets.listContainerAppsDeployment
  • cloudasset.assets.listContainerAppsReplicaSets
  • cloudasset.assets.listContainerBatchJobs
  • cloudasset.assets.listContainerClusterrole
  • cloudasset.assets.listContainerClusterrolebinding
  • cloudasset.assets.listContainerClusters
  • cloudasset.assets.listContainerExtensionsIngresses
  • cloudasset.assets.listContainerJobs
  • cloudasset.assets.listContainerNamespace
  • cloudasset.assets.listContainerNetworkingIngresses
  • cloudasset.assets.listContainerNetworkingNetworkPolicies
  • cloudasset.assets.listContainerNode
  • cloudasset.assets.listContainerNodepool
  • cloudasset.assets.listContainerPod
  • cloudasset.assets.listContainerReplicaSets
  • cloudasset.assets.listContainerRole
  • cloudasset.assets.listContainerRolebinding
  • cloudasset.assets.listContainerServices
  • cloudasset.assets.listContainerregistryImage
  • cloudasset.assets.listDataMigrationConnectionProfiles
  • cloudasset.assets.listDataMigrationMigrationJobs
  • cloudasset.assets.listDataflowJobs
  • cloudasset.assets.listDatafusionInstance
  • cloudasset.assets.listDataplexAssets
  • cloudasset.assets.listDataplexLakes
  • cloudasset.assets.listDataplexTasks
  • cloudasset.assets.listDataplexZones
  • cloudasset.assets.listDataprocAutoscalingPolicies
  • cloudasset.assets.listDataprocBatches
  • cloudasset.assets.listDataprocClusters
  • cloudasset.assets.listDataprocJobs
  • cloudasset.assets.listDataprocSessions
  • cloudasset.assets.listDataprocWorkflowTemplates
  • cloudasset.assets.listDatastreamConnectionProfile
  • cloudasset.assets.listDatastreamPrivateConnection
  • cloudasset.assets.listDatastreamStream
  • cloudasset.assets.listDialogflowAgents
  • cloudasset.assets.listDialogflowConversationProfiles
  • cloudasset.assets.listDialogflowKnowledgeBases
  • cloudasset.assets.listDialogflowLocationSettings
  • cloudasset.assets.listDlpDeidentifyTemplates
  • cloudasset.assets.listDlpDlpJobs
  • cloudasset.assets.listDlpInspectTemplates
  • cloudasset.assets.listDlpJobTriggers
  • cloudasset.assets.listDlpStoredInfoTypes
  • cloudasset.assets.listDnsManagedZones
  • cloudasset.assets.listDnsPolicies
  • cloudasset.assets.listDomainsRegistrations
  • cloudasset.assets.listEventarcTriggers
  • cloudasset.assets.listFileBackups
  • cloudasset.assets.listFileInstances
  • cloudasset.assets.listFirebaseAppInfos
  • cloudasset.assets.listFirebaseProjects
  • cloudasset.assets.listFirestoreDatabases
  • cloudasset.assets.listGKEHubFeatures
  • cloudasset.assets.listGKEHubMemberships
  • cloudasset.assets.listGameservicesGameServerClusters
  • cloudasset.assets.listGameservicesGameServerConfigs
  • cloudasset.assets.listGameservicesGameServerDeployments
  • cloudasset.assets.listGameservicesRealms
  • cloudasset.assets.listGkeBackupBackupPlans
  • cloudasset.assets.listGkeBackupBackups
  • cloudasset.assets.listGkeBackupRestorePlans
  • cloudasset.assets.listGkeBackupRestores
  • cloudasset.assets.listGkeBackupVolumeBackups
  • cloudasset.assets.listGkeBackupVolumeRestores
  • cloudasset.assets.listHealthcareConsentStores
  • cloudasset.assets.listHealthcareDatasets
  • cloudasset.assets.listHealthcareDicomStores
  • cloudasset.assets.listHealthcareFhirStores
  • cloudasset.assets.listHealthcareHl7V2Stores
  • cloudasset.assets.listIamPolicy
  • cloudasset.assets.listIamRoles
  • cloudasset.assets.listIamServiceAccountKeys
  • cloudasset.assets.listIamServiceAccounts
  • cloudasset.assets.listIapTunnel
  • cloudasset.assets.listIapTunnelInstances
  • cloudasset.assets.listIapTunnelZones
  • cloudasset.assets.listIapWeb
  • cloudasset.assets.listIapWebServiceVersion
  • cloudasset.assets.listIapWebServices
  • cloudasset.assets.listIapWebType
  • cloudasset.assets.listIdsEndpoints
  • cloudasset.assets.listIntegrationsAuthConfigs
  • cloudasset.assets.listIntegrationsCertificates
  • cloudasset.assets.listIntegrationsExecutions
  • cloudasset.assets.listIntegrationsIntegrationVersions
  • cloudasset.assets.listIntegrationsIntegrations
  • cloudasset.assets.listIntegrationsSfdcChannels
  • cloudasset.assets.listIntegrationsSfdcInstances
  • cloudasset.assets.listIntegrationsSuspensions
  • cloudasset.assets.listLoggingLogMetrics
  • cloudasset.assets.listLoggingLogSinks
  • cloudasset.assets.listManagedidentitiesDomain
  • cloudasset.assets.listMetastoreBackups
  • cloudasset.assets.listMetastoreMetadataImports
  • cloudasset.assets.listMetastoreServices
  • cloudasset.assets.listMonitoringAlertPolicies
  • cloudasset.assets.listNetworkConnectivityHubs
  • cloudasset.assets.listNetworkConnectivitySpokes
  • cloudasset.assets.listNetworkManagementConnectivityTests
  • cloudasset.assets.listNetworkServicesEndpointPolicies
  • cloudasset.assets.listNetworkServicesGateways
  • cloudasset.assets.listNetworkServicesGrpcRoutes
  • cloudasset.assets.listNetworkServicesHttpRoutes
  • cloudasset.assets.listNetworkServicesMeshes
  • cloudasset.assets.listNetworkServicesServiceBindings
  • cloudasset.assets.listNetworkServicesTcpRoutes
  • cloudasset.assets.listNetworkServicesTlsRoutes
  • cloudasset.assets.listOSConfigOSPolicyAssignmentReports
  • cloudasset.assets.listOSConfigOSPolicyAssignments
  • cloudasset.assets.listOSConfigVulnerabilityReports
  • cloudasset.assets.listOSInventories
  • cloudasset.assets.listOrgPolicy
  • cloudasset.assets.listPatchDeployments
  • cloudasset.assets.listPubsubSnapshots
  • cloudasset.assets.listPubsubSubscriptions
  • cloudasset.assets.listPubsubTopics
  • cloudasset.assets.listRedisInstances
  • cloudasset.assets.listResource
  • cloudasset.assets.listRunDomainMapping
  • cloudasset.assets.listRunRevision
  • cloudasset.assets.listRunService
  • cloudasset.assets.listSecretManagerSecretVersions
  • cloudasset.assets.listSecretManagerSecrets
  • cloudasset.assets.listServiceDirectoryNamespaces
  • cloudasset.assets.listServicePerimeter
  • cloudasset.assets.listServiceconsumermanagementConsumerProperty
  • cloudasset.assets.listServiceconsumermanagementConsumerQuotaLimits
  • cloudasset.assets.listServiceconsumermanagementConsumers
  • cloudasset.assets.listServiceconsumermanagementProducerOverrides
  • cloudasset.assets.listServiceconsumermanagementTenancyUnits
  • cloudasset.assets.listServiceconsumermanagementVisibility
  • cloudasset.assets.listServicemanagementServices
  • cloudasset.assets.listServiceusageAdminOverrides
  • cloudasset.assets.listServiceusageConsumerOverrides
  • cloudasset.assets.listServiceusageServices
  • cloudasset.assets.listSpannerBackups
  • cloudasset.assets.listSpannerDatabases
  • cloudasset.assets.listSpannerInstances
  • cloudasset.assets.listSpeakerIdPhrases
  • cloudasset.assets.listSpeakerIdSettings
  • cloudasset.assets.listSpeakerIdSpeakers
  • cloudasset.assets.listSpeechCustomClasses
  • cloudasset.assets.listSpeechPhraseSets
  • cloudasset.assets.listSqladminBackupRuns
  • cloudasset.assets.listSqladminInstances
  • cloudasset.assets.listStorageBuckets
  • cloudasset.assets.listTpuNodes
  • cloudasset.assets.listVpcaccessConnector
  • cloudasset.assets.queryAccessPolicy
  • cloudasset.assets.queryIamPolicy
  • cloudasset.assets.queryOSInventories
  • cloudasset.assets.queryResource
  • cloudasset.assets.searchAllIamPolicies
  • cloudasset.assets.searchAllResources
  • cloudasset.assets.searchEnrichmentResourceOwners

cloudasset.othercloudconnections.get

cloudasset.othercloudconnections.list

cloudasset.othercloudconnections.verify

recommender.cloudAssetInsights.get

recommender.cloudAssetInsights.list

recommender.locations.*

  • recommender.locations.get
  • recommender.locations.list

resourcemanager.folders.get

resourcemanager.folders.list

resourcemanager.organizations.get

resourcemanager.projects.get

resourcemanager.projects.list

securitycenter.assets.group

securitycenter.assets.list

securitycenter.assets.listAssetPropertyNames

securitycenter.bigQueryExports.get

securitycenter.bigQueryExports.list

securitycenter.complianceReports.aggregate

securitycenter.compliancesnapshots.list

securitycenter.containerthreatdetectionsettings.calculate

securitycenter.containerthreatdetectionsettings.get

securitycenter.effectivesecurityhealthanalyticscustommodules.*

  • securitycenter.effectivesecurityhealthanalyticscustommodules.get
  • securitycenter.effectivesecurityhealthanalyticscustommodules.list

securitycenter.eventthreatdetectionsettings.calculate

securitycenter.eventthreatdetectionsettings.get

securitycenter.findingexplanations.get

securitycenter.findings.group

securitycenter.findings.list

securitycenter.findings.listFindingPropertyNames

securitycenter.graphs.*

  • securitycenter.graphs.get
  • securitycenter.graphs.query

securitycenter.integratedvulnerabilityscannersettings.calculate

securitycenter.integratedvulnerabilityscannersettings.get

securitycenter.issues.get

securitycenter.issues.group

securitycenter.issues.list

securitycenter.issues.listFilterValues

securitycenter.muteconfigs.get

securitycenter.muteconfigs.list

securitycenter.notificationconfig.get

securitycenter.notificationconfig.list

securitycenter.organizationsettings.get

securitycenter.rapidvulnerabilitydetectionsettings.calculate

securitycenter.rapidvulnerabilitydetectionsettings.get

securitycenter.securitycentersettings.get

securitycenter.securityhealthanalyticscustommodules.get

securitycenter.securityhealthanalyticscustommodules.list

securitycenter.securityhealthanalyticssettings.calculate

securitycenter.securityhealthanalyticssettings.get

securitycenter.sources.get

securitycenter.sources.list

securitycenter.subscription.get

securitycenter.userinterfacemetadata.get

securitycenter.virtualmachinethreatdetectionsettings.calculate

securitycenter.virtualmachinethreatdetectionsettings.get

securitycenter.vulnerabilitysnapshots.list

securitycenter.websecurityscannersettings.calculate

securitycenter.websecurityscannersettings.get

securitycentermanagement.billingMetadata.get

securitycentermanagement.effectiveEventThreatDetectionCustomModules.*

  • securitycentermanagement.effectiveEventThreatDetectionCustomModules.get
  • securitycentermanagement.effectiveEventThreatDetectionCustomModules.list

securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.*

  • securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.get
  • securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.get

securitycentermanagement.eventThreatDetectionCustomModules.list

securitycentermanagement.eventThreatDetectionCustomModules.validate

securitycentermanagement.locations.*

  • securitycentermanagement.locations.get
  • securitycentermanagement.locations.list

securitycentermanagement.operations.get

securitycentermanagement.operations.list

securitycentermanagement.securityCenter.get

securitycentermanagement.securityCenterServices.get

securitycentermanagement.securityCenterServices.list

securitycentermanagement.securityCommandCenter.checkActivationOperation

securitycentermanagement.securityCommandCenter.checkOnboardingStatus

securitycentermanagement.securityCommandCenter.get

securitycentermanagement.securityHealthAnalyticsCustomModules.get

securitycentermanagement.securityHealthAnalyticsCustomModules.list

securitycentermanagement.securityHealthAnalyticsCustomModules.simulate

securitycentermanagement.securityHealthAnalyticsCustomModules.test

Roles personalizados de Cyber Insurance Hub

Además de los roles predefinidos, Cyber Insurance Hub admite la capacidad de crear roles de IAM personalizados. Puedes crear un rol de IAM personalizado y asignarle uno o más permisos. Luego, puedes otorgar la nueva función a tus colaboradores. Usa roles personalizados para crear un modelo de control de acceso que se asigne directamente a tus necesidades, junto con los roles predefinidos disponibles que ofrece Google.

En este documento, no se describe cómo crear un rol personalizado. Para obtener información detallada sobre los roles personalizados y las instrucciones paso a paso para crear un rol personalizado, consulta Crea y administra roles personalizados en la documentación de IAM.