構件防護角色和權限

構件防護機制會使用 Identity and Access Management (IAM) 角色和權限，管理資源的存取權。您可以將 IAM 角色授予使用者、群組或服務帳戶。如要瞭解如何授予角色，請參閱「管理專案、資料夾和機構的存取權」。

構件防護角色

以下是構件防護可用的 IAM 角色。

角色 權限
構件掃描防護管理員
(roles/artifactscanguard.admin)

具備構件防護資源的完整存取權。建立政策、評估及以視覺化方式呈現政策成效。		 artifactscanguard.artifactEvaluations.create
artifactscanguard.artifactEvaluations.get
artifactscanguard.artifactPoliciesEvaluations.create
artifactscanguard.artifactPoliciesEvaluations.get
artifactscanguard.connectors.create
artifactscanguard.connectors.delete
artifactscanguard.connectors.get
artifactscanguard.connectors.list
artifactscanguard.connectors.update
artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.delete
artifactscanguard.operations.get
artifactscanguard.operations.list
artifactscanguard.policies.create
artifactscanguard.policies.delete
artifactscanguard.policies.get
artifactscanguard.policies.list
artifactscanguard.policies.update
artifactscanguard.reports.listConnectorEvaluations
artifactscanguard.reports.listPolicyEvaluationSummaries
monitoring.timeSeries.create
orgpolicy.policy.get
resourcemanager.organizations.get
resourcemanager.projects.get
resourcemanager.projects.list
storage.folders.create
storage.folders.delete
storage.folders.get
storage.folders.list
storage.folders.rename
storage.managedFolders.create
storage.managedFolders.delete
storage.managedFolders.get
storage.managedFolders.list
storage.multipartUploads.abort
storage.multipartUploads.create
storage.multipartUploads.list
storage.multipartUploads.listParts
storage.objects.create
storage.objects.createContext
storage.objects.delete
storage.objects.deleteContext
storage.objects.get
storage.objects.list
storage.objects.move
storage.objects.restore
storage.objects.update
storage.objects.updateContext
構件掃描防護評估作業管理員
(roles/artifactscanguard.policyEvaluator)

具備構件評估作業資源的完整存取權。		 artifactscanguard.artifactEvaluations.create
artifactscanguard.artifactEvaluations.get
artifactscanguard.artifactPoliciesEvaluations.create
artifactscanguard.artifactPoliciesEvaluations.get
artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.get
monitoring.timeSeries.create
orgpolicy.policy.get
resourcemanager.organizations.get
resourcemanager.projects.get
resourcemanager.projects.list
storage.folders.create
storage.folders.delete
storage.folders.get
storage.folders.list
storage.folders.rename
storage.managedFolders.create
storage.managedFolders.delete
storage.managedFolders.get
storage.managedFolders.list
storage.multipartUploads.abort
storage.multipartUploads.create
storage.multipartUploads.list
storage.multipartUploads.listParts
storage.objects.create
storage.objects.createContext
storage.objects.delete
storage.objects.deleteContext
storage.objects.get
storage.objects.list
storage.objects.move
storage.objects.restore
storage.objects.update
storage.objects.updateContext
構件掃描防護連接器管理員
(roles/artifactscanguard.connectorAdmin)

具備連接器資源的完整存取權。		 artifactscanguard.connectors.create
artifactscanguard.connectors.delete
artifactscanguard.connectors.get
artifactscanguard.connectors.list
artifactscanguard.connectors.update
artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.get
resourcemanager.organizations.get
resourcemanager.projects.get
構件掃描防護政策管理員
(roles/artifactscanguard.policyAdmin)

具備政策資源的完整存取權。建立政策並以視覺化方式呈現政策成效。		 artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.get
artifactscanguard.policies.create
artifactscanguard.policies.delete
artifactscanguard.policies.get
artifactscanguard.policies.list
artifactscanguard.policies.update
resourcemanager.organizations.get
resourcemanager.projects.get
構件掃描防護政策評估作業管理員
(roles/artifactscanguard.policyEvaluationAdmin)

具備政策評估作業資源的完整存取權。		 artifactscanguard.artifactPoliciesEvaluations.create
artifactscanguard.artifactPoliciesEvaluations.get
artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.get
monitoring.timeSeries.create
orgpolicy.policy.get
resourcemanager.organizations.get
resourcemanager.projects.get
resourcemanager.projects.list
storage.folders.create
storage.folders.delete
storage.folders.get
storage.folders.list
storage.folders.rename
storage.managedFolders.create
storage.managedFolders.delete
storage.managedFolders.get
storage.managedFolders.list
storage.multipartUploads.abort
storage.multipartUploads.create
storage.multipartUploads.list
storage.multipartUploads.listParts
storage.objects.create
storage.objects.createContext
storage.objects.delete
storage.objects.deleteContext
storage.objects.get
storage.objects.list
storage.objects.move
storage.objects.restore
storage.objects.update
storage.objects.updateContext
構件掃描防護報表管理員
(roles/artifactscanguard.reportAdmin)

具備報表資源的完整存取權。		 artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.get
artifactscanguard.reports.listConnectorEvaluations
artifactscanguard.reports.listPolicyEvaluationSummaries
resourcemanager.organizations.get
resourcemanager.projects.get
構件掃描防護檢視者
(roles/artifactscanguard.viewer)

具備構件防護資源的唯讀存取權。		 artifactscanguard.artifactPoliciesEvaluations.get
artifactscanguard.connectors.get
artifactscanguard.connectors.list
artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.get
artifactscanguard.policies.get
artifactscanguard.policies.list
artifactscanguard.reports.listConnectorEvaluations
artifactscanguard.reports.listPolicyEvaluationSummaries
resourcemanager.organizations.get
resourcemanager.projects.get
構件掃描防護連接器檢視者
(roles/artifactscanguard.connectorViewer)

具備連接器資源的唯讀存取權。		 artifactscanguard.connectors.get
artifactscanguard.connectors.list
artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.get
resourcemanager.organizations.get
resourcemanager.projects.get
構件掃描防護政策檢視者
(roles/artifactscanguard.policyViewer)

具備政策資源的唯讀存取權。		 artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.get
artifactscanguard.policies.get
artifactscanguard.policies.list
resourcemanager.organizations.get
resourcemanager.projects.get
構件掃描防護政策評估作業檢視者
(roles/artifactscanguard.policyEvaluationViewer)

具備政策評估資源的唯讀存取權。		 artifactscanguard.artifactPoliciesEvaluations.get
artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.get
resourcemanager.organizations.get
resourcemanager.projects.get
構件掃描防護報表檢視者
(roles/artifactscanguard.reportViewer)

具備報表資源的唯讀存取權。		 artifactscanguard.locations.get
artifactscanguard.locations.list
artifactscanguard.operations.get
artifactscanguard.reports.listConnectorEvaluations
artifactscanguard.reports.listPolicyEvaluationSummaries
resourcemanager.organizations.get
resourcemanager.projects.get