Controle de acesso com o IAM

Com o Identity and Access Management (IAM), é possível conceder acesso a recursos específicos. Para dar acesso a um recurso, conceda um papel específico a um usuário, o que dá a ele determinadas permissões.

Nesta página, listamos todos os papéis do IAM do Workload Manager e as permissões concedidas por eles.

Papéis do Gerenciador de cargas de trabalho

Role	Permissions
Workload Manager Admin ^Beta (roles/workloadmanager.admin) Full access to Workload Manager all resources.	compute.acceleratorTypes.list compute.diskTypes.list compute.machineTypes.list compute.networks.list compute.projects.get compute.regions.list compute.subnetworks.list compute.zones.list dns.managedZones.list iam.serviceAccounts.list monitoring.timeSeries.list orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.quotas.get serviceusage.services.get serviceusage.values.test storage.buckets.list storage.objects.list workloadmanager.* workloadmanager.actuations.create workloadmanager.actuations.delete workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.create workloadmanager.deployments.delete workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list workloadmanager.evaluations.create workloadmanager.evaluations.delete workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.evaluations.run workloadmanager.evaluations.update workloadmanager.executions.delete workloadmanager.executions.get workloadmanager.executions.list workloadmanager.insights.delete workloadmanager.insights.export workloadmanager.insights.listSapSystems workloadmanager.insights.write workloadmanager.locations.get workloadmanager.locations.list workloadmanager.operations.cancel workloadmanager.operations.delete workloadmanager.operations.get workloadmanager.operations.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Deployment Admin ^Beta (roles/workloadmanager.deploymentAdmin) Full access to Workload Manager deployment resources.	compute.acceleratorTypes.list compute.diskTypes.list compute.machineTypes.list compute.networks.list compute.projects.get compute.regions.list compute.subnetworks.list compute.zones.list dns.managedZones.list iam.serviceAccounts.list monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list serviceusage.consumerpolicy.analyze serviceusage.consumerpolicy.get serviceusage.effectivepolicy.get serviceusage.groups.* serviceusage.groups.list serviceusage.groups.listExpandedMembers serviceusage.groups.listMembers serviceusage.quotas.get serviceusage.services.get serviceusage.values.test storage.buckets.list storage.objects.list workloadmanager.actuations.* workloadmanager.actuations.create workloadmanager.actuations.delete workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.* workloadmanager.deployments.create workloadmanager.deployments.delete workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.locations.* workloadmanager.locations.get workloadmanager.locations.list workloadmanager.operations.* workloadmanager.operations.cancel workloadmanager.operations.delete workloadmanager.operations.get workloadmanager.operations.list
Workload Manager Deployment Viewer ^Beta (roles/workloadmanager.deploymentViewer) Read-only access to Workload Manager deployment resources.	resourcemanager.projects.get resourcemanager.projects.list workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.get workloadmanager.deployments.list
Workload Manager Evaluation Admin ^Beta (roles/workloadmanager.evaluationAdmin) Full access to Workload Manager evaluation resources.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.evaluations.* workloadmanager.evaluations.create workloadmanager.evaluations.delete workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.evaluations.run workloadmanager.evaluations.update workloadmanager.executions.* workloadmanager.executions.delete workloadmanager.executions.get workloadmanager.executions.list workloadmanager.locations.* workloadmanager.locations.get workloadmanager.locations.list workloadmanager.operations.* workloadmanager.operations.cancel workloadmanager.operations.delete workloadmanager.operations.get workloadmanager.operations.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Evaluation Viewer ^Beta (roles/workloadmanager.evaluationViewer) Read-only access to Workload Manager evaluation resources.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.executions.get workloadmanager.executions.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Insights Writer ^Beta (roles/workloadmanager.insightWriter) The role used to write data to WLM data warehouse.	workloadmanager.insights.delete workloadmanager.insights.write
Workload Manager Service Agent (roles/workloadmanager.serviceAgent) Gives Workload Manager Service Agent access to CAI export functions and Cloud Monitoring. Warning: Do not grant service agent roles to any principals except service agents.	cloudasset.assets.exportAccessPolicy cloudasset.assets.exportIamPolicy cloudasset.assets.exportOSInventories cloudasset.assets.exportOrgPolicy cloudasset.assets.exportResource cloudasset.assets.listAccessPolicy cloudasset.assets.listIamPolicy cloudasset.assets.listOSInventories cloudasset.assets.listOrgPolicy cloudasset.assets.listResource cloudasset.assets.searchAllResources config.deployments.create config.deployments.delete config.deployments.get config.deployments.list config.deployments.update config.locations.* config.locations.get config.locations.list config.operations.* config.operations.cancel config.operations.delete config.operations.get config.operations.list config.resources.list config.revisions.get config.revisions.list monitoring.metricDescriptors.get monitoring.metricDescriptors.list monitoring.monitoredResourceDescriptors.* monitoring.monitoredResourceDescriptors.get monitoring.monitoredResourceDescriptors.list monitoring.timeSeries.list serviceusage.services.use workloadmanager.insights.export workloadmanager.insights.listSapSystems
Workload Manager Viewer ^Beta (roles/workloadmanager.viewer) Read-only access to Workload Manager all resources.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.discoveredprofiles.* workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.executions.get workloadmanager.executions.list workloadmanager.results.list workloadmanager.rules.list
Workload Manager Worker ^Beta (roles/workloadmanager.worker) The role used by Workload Manager application runners to read and update workloads.	orgpolicy.policy.get resourcemanager.projects.get resourcemanager.projects.list workloadmanager.actuations.* workloadmanager.actuations.create workloadmanager.actuations.delete workloadmanager.actuations.get workloadmanager.actuations.list workloadmanager.deployments.* workloadmanager.deployments.create workloadmanager.deployments.delete workloadmanager.deployments.get workloadmanager.deployments.list workloadmanager.discoveredprofiles.* workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list workloadmanager.evaluations.* workloadmanager.evaluations.create workloadmanager.evaluations.delete workloadmanager.evaluations.get workloadmanager.evaluations.list workloadmanager.evaluations.run workloadmanager.evaluations.update workloadmanager.executions.* workloadmanager.executions.delete workloadmanager.executions.get workloadmanager.executions.list workloadmanager.insights.write workloadmanager.results.list workloadmanager.rules.list
Workload Manager Workload Viewer ^Beta (roles/workloadmanager.workloadViewer) The role used to view the workload related data.	resourcemanager.projects.get resourcemanager.projects.list workloadmanager.discoveredprofiles.* workloadmanager.discoveredprofiles.get workloadmanager.discoveredprofiles.getHealth workloadmanager.discoveredprofiles.list

Permissões do Workload Manager

Permissão	Incluído em papéis
workloadmanager.actuations.create	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.actuations.delete	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.actuations.get	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Leitor de implantação do Workload Manager (roles/workloadmanager.deploymentViewer) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.actuations.list	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Administrador de segurança (roles/iam.securityAdmin) Auditor de segurança (roles/iam.securityAuditor) Revisor de segurança (roles/iam.securityReviewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Leitor de implantação do Workload Manager (roles/workloadmanager.deploymentViewer) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.deployments.create	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.deployments.delete	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.deployments.get	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Leitor de implantação do Workload Manager (roles/workloadmanager.deploymentViewer) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.deployments.list	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Administrador de segurança (roles/iam.securityAdmin) Auditor de segurança (roles/iam.securityAuditor) Revisor de segurança (roles/iam.securityReviewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Leitor de implantação do Workload Manager (roles/workloadmanager.deploymentViewer) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.discoveredprofiles.get	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer)
workloadmanager.discoveredprofiles.getHealth	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer)
workloadmanager.discoveredprofiles.list	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Administrador de segurança (roles/iam.securityAdmin) Auditor de segurança (roles/iam.securityAuditor) Revisor de segurança (roles/iam.securityReviewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker) Workload Manager Workload Viewer (roles/workloadmanager.workloadViewer)
workloadmanager.evaluations.create	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.evaluations.delete	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.evaluations.get	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Leitor de avaliação do Workload Manager (roles/workloadmanager.evaluationViewer) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.evaluations.list	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Administrador de segurança (roles/iam.securityAdmin) Auditor de segurança (roles/iam.securityAuditor) Revisor de segurança (roles/iam.securityReviewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Leitor de avaliação do Workload Manager (roles/workloadmanager.evaluationViewer) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.evaluations.run	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.evaluations.update	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.executions.delete	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.executions.get	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Leitor de avaliação do Workload Manager (roles/workloadmanager.evaluationViewer) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.executions.list	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Administrador de segurança (roles/iam.securityAdmin) Auditor de segurança (roles/iam.securityAuditor) Revisor de segurança (roles/iam.securityReviewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Leitor de avaliação do Workload Manager (roles/workloadmanager.evaluationViewer) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.insights.delete	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Gravador de insights do Workload Manager (roles/workloadmanager.insightWriter)
workloadmanager.insights.export	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Papéis de agente de serviço Aviso:não conceda papéis de agente de serviço a principais, exceto a agentes de serviço. Agente de serviço do Workload Manager (roles/workloadmanager.serviceAgent)
workloadmanager.insights.listSapSystems	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Papéis de agente de serviço Aviso:não conceda papéis de agente de serviço a principais, exceto a agentes de serviço. Agente de serviço do Workload Manager (roles/workloadmanager.serviceAgent)
workloadmanager.insights.write	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Gravador de insights do Workload Manager (roles/workloadmanager.insightWriter) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.locations.get	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin)
workloadmanager.locations.list	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Administrador de segurança (roles/iam.securityAdmin) Auditor de segurança (roles/iam.securityAuditor) Revisor de segurança (roles/iam.securityReviewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.cancel	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.delete	Proprietário (roles/owner) Editor (roles/editor) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.get	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin)
workloadmanager.operations.list	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Administrador de segurança (roles/iam.securityAdmin) Auditor de segurança (roles/iam.securityAuditor) Revisor de segurança (roles/iam.securityReviewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de implantação do Workload Manager (roles/workloadmanager.deploymentAdmin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin)
workloadmanager.results.list	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Administrador de segurança (roles/iam.securityAdmin) Auditor de segurança (roles/iam.securityAuditor) Revisor de segurança (roles/iam.securityReviewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Leitor de avaliação do Workload Manager (roles/workloadmanager.evaluationViewer) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker)
workloadmanager.rules.list	Proprietário (roles/owner) Editor (roles/editor) Leitor (roles/viewer) Administrador de segurança (roles/iam.securityAdmin) Auditor de segurança (roles/iam.securityAuditor) Revisor de segurança (roles/iam.securityReviewer) Usuário de suporte (roles/iam.supportUser) Administrador do Workload Manager (roles/workloadmanager.admin) Administrador de avaliação do Workload Manager (roles/workloadmanager.evaluationAdmin) Leitor de avaliação do Workload Manager (roles/workloadmanager.evaluationViewer) Workload Manager Viewer (roles/workloadmanager.viewer) Worker do Workload Manager (roles/workloadmanager.worker)

A seguir

• Saiba mais sobre o Workload Manager