預先定義的角色權限

本參考資料詳細說明 Google Distributed Cloud (GDC) 實體隔離環境中可用的預先定義角色和權限。平台管理員群組 (例如 IT 管理員) 和應用程式運算子群組 (例如 DevOps 團隊) 的對象,在管理部署中的資源存取權時,請參考本文資訊。詳情請參閱「Google Cloud Deploy 的目標對象說明文件」。

關於預先定義的角色表

一個主體可以繫結至全域 API 伺服器中的多個角色。權限只能增加,沒有拒絕規則。

角色表依角色授予層級分類:

每個表格都會顯示下列角色詳細資料:

  • 角色名稱和說明:列出使用者介面 (UI) 中顯示的預先定義角色名稱、對應的 Kubernetes 自訂資源名稱,以及角色說明。

    您可能會看到不同角色使用相同的 UI 顯示名稱。這些角色各不相同,每個角色都有專屬的 Kubernetes 自訂資源名稱和權限集。當角色提供相關功能,或不同層級的服務存取權時,就會發生這種情況。

  • 權限:列出角色授予的特定 API 作業。範圍標籤會指出可執行這些作業的位置,這取決於哪個 API 伺服器管理目標資源:

    • 全域:由全域 API 伺服器管理的資源。
    • 區域:由區域管理 API 伺服器在特定區域內管理的資源。
    • Kubernetes 叢集:由 Kubernetes API 伺服器管理的 Kubernetes 叢集內資源。

    如要進一步瞭解如何在這些範圍內管理資源,請參閱全域和區域資源,以及 GDC 中的 Kubernetes 叢集

列出的所有角色都具有 IAMRole 角色類型,這是定義一組權限的 Kubernetes 自訂資源。如要將這些權限授予使用者或群組,請建立 IAMRoleBinding 資源,將使用者連結至 IAMRole。如要瞭解如何設定角色繫結,請參閱「授予及撤銷存取權」一文。

IAMRoleIAMRoleBinding 資源都是在全域 API 伺服器中管理。也就是說,這些是全域資源,繫結會套用至 GDC 機構內的所有可用區。雖然角色是在全域定義,但授予的權限會在特定環境 (例如專案) 中行使。舉例來說,「專案層級角色」會授予專案內資源的權限。這類資源可能是在全球、可用區或 Kubernetes 叢集範圍內管理。

機構層級角色和權限

下列角色會授予整個機構。

角色名稱和說明 權限
稽核記錄平台儲存空間值區檢視者
(audit-logs-platform-bucket-viewer)

查看稽核記錄平台 bucket。

Zonal
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
secrets.get
secrets.list
secrets.watch
稽核記錄平台還原值區建立者
(audit-logs-platform-restore-bucket-creator)

建立及管理稽核記錄平台還原值區。

Zonal
buckets.object.gdc.goog.create
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
secrets.get
secrets.list
secrets.watch
備份存放區管理員
(backup-repo-admin)

授予備份存放區的建立、查看、更新及刪除存取權。

Zonal
backuprepositories.backup.gdc.goog.create
backuprepositories.backup.gdc.goog.delete
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.patch
backuprepositories.backup.gdc.goog.update
backuprepositories.backup.gdc.goog.watch
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
備份存放區管理員
(backup-repo-viewer)

授予備份存放區的查看和列出存取權。

Zonal
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
帳單帳戶機構管理員
(organization-billing-account-admin)

管理機構的帳單帳戶。

全球
billingaccounts.billing.global.gdc.goog.bind
billingaccounts.billing.global.gdc.goog.create
billingaccounts.billing.global.gdc.goog.get
billingaccounts.billing.global.gdc.goog.list
billingaccounts.billing.global.gdc.goog.patch
billingaccounts.billing.global.gdc.goog.update
billingaccounts.billing.global.gdc.goog.watch

Zonal
billingaccountreplicas.billing.global.gdc.goog.create
billingaccountreplicas.billing.global.gdc.goog.get
billingaccountreplicas.billing.global.gdc.goog.list
billingaccountreplicas.billing.global.gdc.goog.patch
billingaccountreplicas.billing.global.gdc.goog.update
billingaccountreplicas.billing.global.gdc.goog.watch
帳單帳戶機構使用者
(organization-billing-account-user)

查看及繫結機構的帳單帳戶。

全球
billingaccounts.billing.global.gdc.goog.bind
billingaccounts.billing.global.gdc.goog.get
billingaccounts.billing.global.gdc.goog.list
billingaccounts.billing.global.gdc.goog.watch
帳單機構管理員
(organization-billing-manager)

管理平台命名空間或任何專案命名空間中的 BillingAccountBinding。

全球
billingaccountbindings.billing.global.gdc.goog.create
billingaccountbindings.billing.global.gdc.goog.get
billingaccountbindings.billing.global.gdc.goog.list
billingaccountbindings.billing.global.gdc.goog.patch
billingaccountbindings.billing.global.gdc.goog.update
billingaccountbindings.billing.global.gdc.goog.watch

Zonal
billingaccountbindingreplicas.billing.global.gdc.goog.create
billingaccountbindingreplicas.billing.global.gdc.goog.get
billingaccountbindingreplicas.billing.global.gdc.goog.list
billingaccountbindingreplicas.billing.global.gdc.goog.patch
billingaccountbindingreplicas.billing.global.gdc.goog.update
billingaccountbindingreplicas.billing.global.gdc.goog.watch
帳單檢視者
(billing-viewer)

查看機構的帳單月結單和 SKU 說明。

Zonal
skudescriptions.billing.gdc.goog.get
skudescriptions.billing.gdc.goog.list
skudescriptions.billing.gdc.goog.watch
Bucket 管理員
(bucket-admin)

管理 Bucket CR;透過 S3 API 管理對應後端 bucket 中的物件。

全球
bucketlocations.object.global.gdc.goog.get
bucketlocations.object.global.gdc.goog.list
buckets.object.global.gdc.goog.create
buckets.object.global.gdc.goog.delete
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.patch
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.update
buckets.object.global.gdc.goog.watch
buckets.object.global.gdc.goog.write-object

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
bucketinfos.object.gdc.goog.patch
bucketinfos.object.gdc.goog.update
bucketinfos.object.gdc.goog.watch
buckets.object.gdc.goog.create
buckets.object.gdc.goog.delete
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.patch
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.update
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
Bucket 物件管理員
(bucket-object-admin)

讀取 Bucket CR;透過 S3 API 讀取對應後端 bucket 的中繼資料,並管理這些 bucket 中的物件。

全球
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.watch
buckets.object.global.gdc.goog.write-object

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
bucketinfos.object.gdc.goog.patch
bucketinfos.object.gdc.goog.update
bucketinfos.object.gdc.goog.watch
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
值區物件檢視者
(bucket-object-viewer)

讀取 Bucket CR;透過 S3 API 讀取對應後端 Bucket 的中繼資料,以及這些 Bucket 中的物件。

全球
bucketlocations.object.global.gdc.goog.get
bucketlocations.object.global.gdc.goog.list
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.watch

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
叢集備份管理員
(clusterbackup-admin)

管理叢集備份方案、叢集備份、叢集還原方案和叢集還原作業。

Zonal
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.create
clusterbackupplans.backup.gdc.goog.delete
clusterbackupplans.backup.gdc.goog.get
clusterbackupplans.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.patch
clusterbackupplans.backup.gdc.goog.update
clusterbackupplans.backup.gdc.goog.watch
clusterbackups.backup.gdc.goog.create
clusterbackups.backup.gdc.goog.delete
clusterbackups.backup.gdc.goog.get
clusterbackups.backup.gdc.goog.list
clusterbackups.backup.gdc.goog.patch
clusterbackups.backup.gdc.goog.update
clusterbackups.backup.gdc.goog.watch
clusterrestoreplans.backup.gdc.goog.create
clusterrestoreplans.backup.gdc.goog.delete
clusterrestoreplans.backup.gdc.goog.get
clusterrestoreplans.backup.gdc.goog.list
clusterrestoreplans.backup.gdc.goog.patch
clusterrestoreplans.backup.gdc.goog.update
clusterrestoreplans.backup.gdc.goog.watch
clusterrestores.backup.gdc.goog.create
clusterrestores.backup.gdc.goog.delete
clusterrestores.backup.gdc.goog.get
clusterrestores.backup.gdc.goog.list
clusterrestores.backup.gdc.goog.patch
clusterrestores.backup.gdc.goog.update
clusterrestores.backup.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
ConfigMap 編輯器
(observabilitypipeline-configmap-editor)

編輯平台命名空間中的設定地圖。

Zonal
configmaps.create
configmaps.get
configmaps.list
configmaps.patch
configmaps.update
configmaps.watch
ConfigMap 檢視器
(observabilitypipeline-configmap-viewer)

查看平台命名空間中的檢視畫面設定對應。

Zonal
configmaps.get
configmaps.list
configmaps.watch
自訂角色機構管理員
(custom-role-org-admin)

管理機構中的自訂角色。

全球
clusterroles.rbac.authorization.k8s.io.get
customroles.iam.global.gdc.goog.create
customroles.iam.global.gdc.goog.delete
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.patch
customroles.iam.global.gdc.goog.update
customroles.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.list
roles.rbac.authorization.k8s.io.get

Zonal
clusterroles.rbac.authorization.k8s.io.get
customroles.iam.gdc.goog.create
customroles.iam.gdc.goog.delete
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.patch
customroles.iam.gdc.goog.update
customroles.iam.gdc.goog.watch
organizationroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
roles.rbac.authorization.k8s.io.get
自訂角色機構檢視者
(custom-role-org-viewer)

查看機構中的自訂角色。

全球
clusterroles.rbac.authorization.k8s.io.get
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.list
roles.rbac.authorization.k8s.io.get

Zonal
clusterroles.rbac.authorization.k8s.io.get
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.watch
organizationroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
roles.rbac.authorization.k8s.io.get
DR 備份管理員
(dr-backup-admin)

啟用備份相關資源的管理功能。

Zonal
backupplans.backup.gdc.goog.create
backupplans.backup.gdc.goog.delete
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.patch
backuprepositories.backup.gdc.goog.create
backuprepositories.backup.gdc.goog.delete
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.patch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.create
manualbackuprequests.backup.gdc.goog.delete
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.patch
DR Backup Viewer
(dr-backup-viewer)

啟用備份相關資源的管理功能。

Zonal
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
DR 系統管理員
(dr-system-admin)

M 可管理 infra-cp 叢集中的物件儲存空間相關資源。

Zonal
buckets.object.gdc.goog.create
buckets.object.gdc.goog.delete
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.patch
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.update
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.patch
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.patch
roles.rbac.authorization.k8s.io.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
serviceaccounts.create
serviceaccounts.delete
serviceaccounts.get
serviceaccounts.list
serviceaccounts.patch
serviceaccounts.update
serviceaccounts.watch
DR 系統檢視者
(dr-system-viewer)

M 可管理 infra-cp 叢集中的物件儲存空間相關資源。

Zonal
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch
secrets.get
secrets.list
secrets.watch
serviceaccounts.get
serviceaccounts.list
serviceaccounts.watch
資料庫機構管理員
(organization-db-admin)

管理機構資料庫資源。

Zonal
backupplans.alloydbomni.dbadmin.gdc.goog.create
backupplans.alloydbomni.dbadmin.gdc.goog.delete
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.patch
backupplans.alloydbomni.dbadmin.gdc.goog.update
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.create
backupplans.oracle.dbadmin.gdc.goog.delete
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.patch
backupplans.oracle.dbadmin.gdc.goog.update
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.create
backupplans.postgresql.dbadmin.gdc.goog.delete
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.patch
backupplans.postgresql.dbadmin.gdc.goog.update
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.create
dbclusters.alloydbomni.dbadmin.gdc.goog.delete
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.patch
dbclusters.alloydbomni.dbadmin.gdc.goog.update
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.create
dbclusters.oracle.dbadmin.gdc.goog.delete
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.patch
dbclusters.oracle.dbadmin.gdc.goog.update
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.create
dbclusters.postgresql.dbadmin.gdc.goog.delete
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.patch
dbclusters.postgresql.dbadmin.gdc.goog.update
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.create
exports.alloydbomni.dbadmin.gdc.goog.delete
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.create
exports.oracle.dbadmin.gdc.goog.delete
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.create
exports.postgresql.dbadmin.gdc.goog.delete
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.create
externalservers.alloydbomni.dbadmin.gdc.goog.delete
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.patch
externalservers.alloydbomni.dbadmin.gdc.goog.update
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.create
externalservers.postgresql.dbadmin.gdc.goog.delete
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.patch
externalservers.postgresql.dbadmin.gdc.goog.update
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.create
failovers.fleet.dbadmin.gdc.goog.delete
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.create
imports.alloydbomni.dbadmin.gdc.goog.delete
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.create
imports.oracle.dbadmin.gdc.goog.delete
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.create
imports.postgresql.dbadmin.gdc.goog.delete
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
maintenancepolicies.fleet.dbadmin.gdc.goog.patch
maintenancepolicies.fleet.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.create
migrations.alloydbomni.dbadmin.gdc.goog.delete
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.patch
migrations.alloydbomni.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.create
migrations.postgresql.dbadmin.gdc.goog.delete
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.patch
migrations.postgresql.dbadmin.gdc.goog.update
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.create
replications.postgresql.dbadmin.gdc.goog.delete
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.patch
replications.postgresql.dbadmin.gdc.goog.update
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.create
restores.alloydbomni.dbadmin.gdc.goog.delete
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.create
restores.oracle.dbadmin.gdc.goog.delete
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.create
restores.postgresql.dbadmin.gdc.goog.delete
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.get
softwarelibraries.fleet.dbadmin.gdc.goog.patch
softwarelibraries.fleet.dbadmin.gdc.goog.update
資料庫機構檢視者
(organization-db-viewer)

可查看機構資料庫資源。

Zonal
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.get
Flow Log 管理員
(flowlog-admin)

建立及管理 Flow Logs。

Zonal
flowlogs.networking.gdc.goog.create
flowlogs.networking.gdc.goog.delete
flowlogs.networking.gdc.goog.get
flowlogs.networking.gdc.goog.list
flowlogs.networking.gdc.goog.patch
flowlogs.networking.gdc.goog.update
flowlogs.networking.gdc.goog.watch
flowlogs/status.networking.gdc.goog.create
flowlogs/status.networking.gdc.goog.delete
flowlogs/status.networking.gdc.goog.get
flowlogs/status.networking.gdc.goog.list
flowlogs/status.networking.gdc.goog.patch
flowlogs/status.networking.gdc.goog.update
flowlogs/status.networking.gdc.goog.watch
流量記錄檢視器
(flowlog-viewer)

讀取流量記錄設定。

Zonal
flowlogs.networking.gdc.goog.get
flowlogs.networking.gdc.goog.list
flowlogs.networking.gdc.goog.watch
flowlogs/status.networking.gdc.goog.get
flowlogs/status.networking.gdc.goog.list
flowlogs/status.networking.gdc.goog.watch
HSM CTMKey 編輯器
(ctmkey-editor)

讀取及刪除 CTM 金鑰。

Zonal
ctmkeys.hsm.gdc.goog.delete
ctmkeys.hsm.gdc.goog.get
ctmkeys.hsm.gdc.goog.list
ctmkeys.hsm.gdc.goog.watch
HSM CTMKey 檢視器
(ctmkey-viewer)

讀取 CTM 金鑰。

Zonal
ctmkeys.hsm.gdc.goog.get
ctmkeys.hsm.gdc.goog.list
ctmkeys.hsm.gdc.goog.watch
IAM 機構管理員
(organization-iam-admin)

管理機構權限。

全球
clusterrolebindings.rbac.authorization.k8s.io.create
clusterrolebindings.rbac.authorization.k8s.io.delete
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterrolebindings.rbac.authorization.k8s.io.patch
clusterrolebindings.rbac.authorization.k8s.io.update
clusterrolebindings.rbac.authorization.k8s.io.watch
clusterroles.rbac.authorization.k8s.io.create
clusterroles.rbac.authorization.k8s.io.delete
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.patch
clusterroles.rbac.authorization.k8s.io.update
clusterroles.rbac.authorization.k8s.io.watch
customroles.iam.global.gdc.goog.create
customroles.iam.global.gdc.goog.delete
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.patch
customroles.iam.global.gdc.goog.update
customroles.iam.global.gdc.goog.watch
iamrolebindings.iam.global.gdc.goog.create
iamrolebindings.iam.global.gdc.goog.delete
iamrolebindings.iam.global.gdc.goog.get
iamrolebindings.iam.global.gdc.goog.list
iamrolebindings.iam.global.gdc.goog.patch
iamrolebindings.iam.global.gdc.goog.update
iamrolebindings.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.create
iamroles.iam.global.gdc.goog.delete
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
iamroles.iam.global.gdc.goog.patch
iamroles.iam.global.gdc.goog.update
iamroles.iam.global.gdc.goog.watch
identityproviderconfigs.iam.global.gdc.goog.create
identityproviderconfigs.iam.global.gdc.goog.delete
identityproviderconfigs.iam.global.gdc.goog.get
identityproviderconfigs.iam.global.gdc.goog.list
identityproviderconfigs.iam.global.gdc.goog.patch
identityproviderconfigs.iam.global.gdc.goog.update
identityproviderconfigs.iam.global.gdc.goog.watch
projectserviceaccounts.resourcemanager.global.gdc.goog.create
projectserviceaccounts.resourcemanager.global.gdc.goog.delete
projectserviceaccounts.resourcemanager.global.gdc.goog.get
projectserviceaccounts.resourcemanager.global.gdc.goog.list
projectserviceaccounts.resourcemanager.global.gdc.goog.patch
projectserviceaccounts.resourcemanager.global.gdc.goog.update
rolebindings.rbac.authorization.k8s.io.create
rolebindings.rbac.authorization.k8s.io.delete
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.patch
rolebindings.rbac.authorization.k8s.io.update
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.create
roles.rbac.authorization.k8s.io.delete
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.patch
roles.rbac.authorization.k8s.io.update
roles.rbac.authorization.k8s.io.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterrolebindings.rbac.authorization.k8s.io.create
clusterrolebindings.rbac.authorization.k8s.io.delete
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterrolebindings.rbac.authorization.k8s.io.patch
clusterrolebindings.rbac.authorization.k8s.io.update
clusterrolebindings.rbac.authorization.k8s.io.watch
clusterroles.rbac.authorization.k8s.io.create
clusterroles.rbac.authorization.k8s.io.delete
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.patch
clusterroles.rbac.authorization.k8s.io.update
clusterroles.rbac.authorization.k8s.io.watch
customroles.iam.gdc.goog.create
customroles.iam.gdc.goog.delete
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.patch
customroles.iam.gdc.goog.update
customroles.iam.gdc.goog.watch
identityproviderconfigs.iam.gdc.goog.create
identityproviderconfigs.iam.gdc.goog.delete
identityproviderconfigs.iam.gdc.goog.get
identityproviderconfigs.iam.gdc.goog.list
identityproviderconfigs.iam.gdc.goog.patch
identityproviderconfigs.iam.gdc.goog.update
identityproviderconfigs.iam.gdc.goog.watch
organizationrolebindings.resourcemanager.gdc.goog.create
organizationrolebindings.resourcemanager.gdc.goog.delete
organizationrolebindings.resourcemanager.gdc.goog.get
organizationrolebindings.resourcemanager.gdc.goog.list
organizationrolebindings.resourcemanager.gdc.goog.patch
organizationrolebindings.resourcemanager.gdc.goog.update
organizationrolebindings.resourcemanager.gdc.goog.watch
organizationroles.resourcemanager.gdc.goog.create
organizationroles.resourcemanager.gdc.goog.delete
organizationroles.resourcemanager.gdc.goog.get
organizationroles.resourcemanager.gdc.goog.list
organizationroles.resourcemanager.gdc.goog.patch
organizationroles.resourcemanager.gdc.goog.update
organizationroles.resourcemanager.gdc.goog.watch
projectrolebindings.resourcemanager.gdc.goog.create
projectrolebindings.resourcemanager.gdc.goog.delete
projectrolebindings.resourcemanager.gdc.goog.get
projectrolebindings.resourcemanager.gdc.goog.list
projectrolebindings.resourcemanager.gdc.goog.patch
projectrolebindings.resourcemanager.gdc.goog.update
projectrolebindings.resourcemanager.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.create
projectroles.resourcemanager.gdc.goog.delete
projectroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.list
projectroles.resourcemanager.gdc.goog.patch
projectroles.resourcemanager.gdc.goog.update
projectroles.resourcemanager.gdc.goog.watch
projectserviceaccounts.resourcemanager.gdc.goog.create
projectserviceaccounts.resourcemanager.gdc.goog.delete
projectserviceaccounts.resourcemanager.gdc.goog.get
projectserviceaccounts.resourcemanager.gdc.goog.list
projectserviceaccounts.resourcemanager.gdc.goog.patch
projectserviceaccounts.resourcemanager.gdc.goog.update
projectserviceaccounts.resourcemanager.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.create
rolebindings.rbac.authorization.k8s.io.delete
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.patch
rolebindings.rbac.authorization.k8s.io.update
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.create
roles.rbac.authorization.k8s.io.delete
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.patch
roles.rbac.authorization.k8s.io.update
roles.rbac.authorization.k8s.io.watch
IAM 組織檢視者
(organization-iam-viewer)

查看機構權限。

全球
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterrolebindings.rbac.authorization.k8s.io.watch
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.watch
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.watch
iamrolebindings.iam.global.gdc.goog.get
iamrolebindings.iam.global.gdc.goog.list
iamrolebindings.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
iamroles.iam.global.gdc.goog.watch
projectserviceaccounts.resourcemanager.global.gdc.goog.get
projectserviceaccounts.resourcemanager.global.gdc.goog.list
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterrolebindings.rbac.authorization.k8s.io.watch
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.watch
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.watch
organizationrolebindings.resourcemanager.gdc.goog.get
organizationrolebindings.resourcemanager.gdc.goog.list
organizationrolebindings.resourcemanager.gdc.goog.watch
organizationroles.resourcemanager.gdc.goog.get
organizationroles.resourcemanager.gdc.goog.list
organizationroles.resourcemanager.gdc.goog.watch
projectrolebindings.resourcemanager.gdc.goog.get
projectrolebindings.resourcemanager.gdc.goog.list
projectrolebindings.resourcemanager.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.list
projectroles.resourcemanager.gdc.goog.watch
projectserviceaccounts.resourcemanager.gdc.goog.get
projectserviceaccounts.resourcemanager.gdc.goog.list
projectserviceaccounts.resourcemanager.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch
身分提供者聯盟管理員
(idp-federation-admin)

管理識別資訊提供者設定。

全球
identityproviderconfigs.iam.global.gdc.goog.create
identityproviderconfigs.iam.global.gdc.goog.delete
identityproviderconfigs.iam.global.gdc.goog.get
identityproviderconfigs.iam.global.gdc.goog.list
identityproviderconfigs.iam.global.gdc.goog.patch
identityproviderconfigs.iam.global.gdc.goog.update
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update

Zonal
identityproviderconfigs.iam.gdc.goog.create
identityproviderconfigs.iam.gdc.goog.delete
identityproviderconfigs.iam.gdc.goog.get
identityproviderconfigs.iam.gdc.goog.list
identityproviderconfigs.iam.gdc.goog.patch
identityproviderconfigs.iam.gdc.goog.update
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
身分識別提供者聯盟檢視者
(idp-federation-viewer)

查看識別資訊提供者設定。

全球
identityproviderconfigs.iam.global.gdc.goog.get
identityproviderconfigs.iam.global.gdc.goog.list
secrets.get
secrets.list

Zonal
identityproviderconfigs.iam.gdc.goog.get
identityproviderconfigs.iam.gdc.goog.list
secrets.get
secrets.list
互連網路管理員
(interconnect-admin-mp)

建立及管理 InterconnectAttachment 和 AttachmentGroup 資源。

Zonal
attachmentgroups.system.private.gdc.goog.create
attachmentgroups.system.private.gdc.goog.delete
attachmentgroups.system.private.gdc.goog.get
attachmentgroups.system.private.gdc.goog.list
attachmentgroups.system.private.gdc.goog.patch
attachmentgroups.system.private.gdc.goog.update
attachmentgroups.system.private.gdc.goog.watch
interconnectattachments.system.private.gdc.goog.create
interconnectattachments.system.private.gdc.goog.delete
interconnectattachments.system.private.gdc.goog.get
interconnectattachments.system.private.gdc.goog.list
interconnectattachments.system.private.gdc.goog.patch
interconnectattachments.system.private.gdc.goog.update
interconnectattachments.system.private.gdc.goog.watch
互連網路檢視者
(interconnect-viewer-mp)

查看 InterconnectAttachment 和 AttachmentGroup 資源。

Zonal
attachmentgroups.system.private.gdc.goog.get
attachmentgroups.system.private.gdc.goog.list
attachmentgroups.system.private.gdc.goog.watch
interconnectattachments.system.private.gdc.goog.get
interconnectattachments.system.private.gdc.goog.list
interconnectattachments.system.private.gdc.goog.watch
KMS 輪替作業管理員
(kms-rotationjob-admin)

管理機構的 RotationJob 資源。

Zonal
rotationjobs.kms.gdc.goog.create
rotationjobs.kms.gdc.goog.delete
rotationjobs.kms.gdc.goog.get
rotationjobs.kms.gdc.goog.list
rotationjobs.kms.gdc.goog.patch
rotationjobs.kms.gdc.goog.update
rotationjobs.kms.gdc.goog.watch
KMS 輪替作業監控器
(kms-rotationjob-monitor)

讀取機構中的 KMS 輪替作業。

Zonal
rotationjobs.kms.gdc.goog.get
rotationjobs.kms.gdc.goog.list
rotationjobs.kms.gdc.goog.watch
記錄查詢者
(log-query-api-querier-pa)

存取 Log Query API,查詢 platform-obs 專案中的 PA 記錄。

Zonal
labels.goog.gdc.logging.v1.get
labels.goog.gdc.logging.v1.list
labelvalues.goog.gdc.logging.v1.get
labelvalues.goog.gdc.logging.v1.list
listlabelsrequests.goog.gdc.logging.v1.get
listlabelsrequests.goog.gdc.logging.v1.list
listlabelsresponses.goog.gdc.logging.v1.get
listlabelsresponses.goog.gdc.logging.v1.list
listlabelvaluesrequests.goog.gdc.logging.v1.get
listlabelvaluesrequests.goog.gdc.logging.v1.list
listlabelvaluesresponses.goog.gdc.logging.v1.get
listlabelvaluesresponses.goog.gdc.logging.v1.list
listlogsfilters.goog.gdc.logging.v1.get
listlogsfilters.goog.gdc.logging.v1.list
listlogsrequests.goog.gdc.logging.v1.get
listlogsrequests.goog.gdc.logging.v1.list
listlogsresponses.goog.gdc.logging.v1.get
listlogsresponses.goog.gdc.logging.v1.list
logs.goog.gdc.logging.v1.get
logs.goog.gdc.logging.v1.list
記錄規則建立者
(loggingrule-pa-creator)

建立及查看記錄規則。

Zonal
loggingrules.logging.gdc.goog.create
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.watch
記錄規則編輯器
(loggingrule-pa-editor)

編輯記錄規則。

Zonal
loggingrules.logging.gdc.goog.delete
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.patch
loggingrules.logging.gdc.goog.update
loggingrules.logging.gdc.goog.watch
記錄規則檢視器
(loggingrule-pa-viewer)

查看記錄規則。

Zonal
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.watch
記錄目標建立者
(loggingtarget-pa-creator)

建立及查看記錄目標。

Zonal
loggingtargets.logging.gdc.goog.create
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.watch
記錄目標編輯者
(loggingtarget-pa-editor)

編輯記錄目標。

Zonal
loggingtargets.logging.gdc.goog.delete
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.patch
loggingtargets.logging.gdc.goog.update
loggingtargets.logging.gdc.goog.watch
記錄目標檢視器
(loggingtarget-pa-viewer)

查看記錄目標。

Zonal
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.watch
ManagedKeycloak 管理員
(managedkeycloak-admin)

可讀取及寫入 managedkeycloak 資源。

全球
managedkeycloaks.keycloak.global.gdc.goog.create
managedkeycloaks.keycloak.global.gdc.goog.delete
managedkeycloaks.keycloak.global.gdc.goog.get
managedkeycloaks.keycloak.global.gdc.goog.list
managedkeycloaks.keycloak.global.gdc.goog.patch
managedkeycloaks.keycloak.global.gdc.goog.update
realmviews.keycloakview.global.gdc.goog.get
realmviews.keycloakview.global.gdc.goog.list
ManagedKeycloak Viewer
(managedkeycloak-viewer)

可查看 managedkeycloak 資源。

全球
managedkeycloaks.keycloak.global.gdc.goog.get
managedkeycloaks.keycloak.global.gdc.goog.list
realmviews.keycloakview.global.gdc.goog.get
realmviews.keycloakview.global.gdc.goog.list
Marketplace Artifact Uploader
(marketplace-artifact-uploader)

查看 Marketplace 中的 Harbor 執行個體;查看及建立 Harbor 專案。

Zonal
harborinstanceprojects.artifactregistry.gdc.goog.create
harborinstanceprojects.artifactregistry.gdc.goog.get
harborinstanceprojects.artifactregistry.gdc.goog.list
harborinstanceprojects.artifactregistry.gdc.goog.watch
harborinstances.artifactregistry.gdc.goog.get
harborinstances.artifactregistry.gdc.goog.list
harborinstances.artifactregistry.gdc.goog.watch
Marketplace 構件檢視者
(marketplace-artifact-viewer)

查看市集 Harbor 執行個體;查看 Harbor 專案。

Zonal
harborinstanceprojects.artifactregistry.gdc.goog.get
harborinstanceprojects.artifactregistry.gdc.goog.list
harborinstanceprojects.artifactregistry.gdc.goog.watch
harborinstances.artifactregistry.gdc.goog.get
harborinstances.artifactregistry.gdc.goog.list
harborinstances.artifactregistry.gdc.goog.watch
Marketplace 目錄發布者
(marketplace-catalog-publisher)

查看、列出、建立、更新及刪除服務目錄繫結。

全球
projects.resourcemanager.global.gdc.goog.get
projects.resourcemanager.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.watch
servicecatalogbindings.marketplace.global.gdc.goog.create
servicecatalogbindings.marketplace.global.gdc.goog.delete
servicecatalogbindings.marketplace.global.gdc.goog.get
servicecatalogbindings.marketplace.global.gdc.goog.list
servicecatalogbindings.marketplace.global.gdc.goog.patch
servicecatalogbindings.marketplace.global.gdc.goog.update
servicecatalogbindings.marketplace.global.gdc.goog.watch
Monitoring 資訊主頁建立者
(dashboard-pa-creator)

建立及查看資訊主頁。

Zonal
dashboards.observability.gdc.goog.create
dashboards.observability.gdc.goog.get
dashboards.observability.gdc.goog.list
dashboards.observability.gdc.goog.watch
Monitoring 資訊主頁編輯者
(dashboard-pa-editor)

編輯資訊主頁。

Zonal
dashboards.observability.gdc.goog.delete
dashboards.observability.gdc.goog.get
dashboards.observability.gdc.goog.list
dashboards.observability.gdc.goog.patch
dashboards.observability.gdc.goog.update
dashboards.observability.gdc.goog.watch
Monitoring 資訊主頁檢視者
(dashboard-pa-viewer)

查看資訊主頁。

Zonal
dashboards.observability.gdc.goog.get
dashboards.observability.gdc.goog.list
dashboards.observability.gdc.goog.watch
監控規則建立者
(monitoringrule-pa-creator)

建立及查看監控規則。

Zonal
monitoringrules.monitoring.gdc.goog.create
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.watch
監控規則編輯器
(monitoringrule-pa-editor)

編輯監控規則。

Zonal
monitoringrules.monitoring.gdc.goog.delete
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.patch
monitoringrules.monitoring.gdc.goog.update
monitoringrules.monitoring.gdc.goog.watch
監控規則檢視者
(monitoringrule-pa-viewer)

查看監控規則。

Zonal
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.watch
監控目標建立者
(monitoringtarget-pa-creator)

建立及查看監控目標。

Zonal
monitoringtargets.monitoring.gdc.goog.create
monitoringtargets.monitoring.gdc.goog.get
monitoringtargets.monitoring.gdc.goog.list
monitoringtargets.monitoring.gdc.goog.watch
監控目標編輯者
(monitoringtarget-pa-editor)

編輯監控目標。

Zonal
monitoringtargets.monitoring.gdc.goog.delete
monitoringtargets.monitoring.gdc.goog.get
monitoringtargets.monitoring.gdc.goog.list
monitoringtargets.monitoring.gdc.goog.patch
monitoringtargets.monitoring.gdc.goog.update
monitoringtargets.monitoring.gdc.goog.watch
監控目標檢視者
(monitoringtarget-pa-viewer)

查看監控目標。

Zonal
monitoringtargets.monitoring.gdc.goog.get
monitoringtargets.monitoring.gdc.goog.list
monitoringtargets.monitoring.gdc.goog.watch
Observability Pipeline Creator
(observabilitypipeline-pa-creator)

建立及查看可觀測性管道。

Zonal
observabilitypipelines.observability.gdc.goog.create
observabilitypipelines.observability.gdc.goog.get
observabilitypipelines.observability.gdc.goog.list
observabilitypipelines.observability.gdc.goog.watch
可觀測性管道編輯器
(observabilitypipeline-pa-editor)

編輯可觀測性管道。

Zonal
observabilitypipelines.observability.gdc.goog.delete
observabilitypipelines.observability.gdc.goog.get
observabilitypipelines.observability.gdc.goog.list
observabilitypipelines.observability.gdc.goog.patch
observabilitypipelines.observability.gdc.goog.update
observabilitypipelines.observability.gdc.goog.watch
可觀測性管道檢視器
(observabilitypipeline-pa-viewer)

查看可觀測性管道。

Zonal
observabilitypipelines.observability.gdc.goog.get
observabilitypipelines.observability.gdc.goog.list
observabilitypipelines.observability.gdc.goog.watch
可運作的元件生命週期管理員偵錯工具
(mp-oclcm-debugger)

管理管理平面中的 OCLCM 資源,以進行偵錯。

Zonal
componentoverrides.lcm.private.gdc.goog.create
componentoverrides.lcm.private.gdc.goog.get
componentoverrides.lcm.private.gdc.goog.list
componentoverrides.lcm.private.gdc.goog.patch
componentoverrides.lcm.private.gdc.goog.update
componentrollouts.lcm.private.gdc.goog.get
componentrollouts.lcm.private.gdc.goog.list
componentrollouts.lcm.private.gdc.goog.patch
componentrollouts.lcm.private.gdc.goog.update
components.lcm.private.gdc.goog.create
components.lcm.private.gdc.goog.get
components.lcm.private.gdc.goog.list
subcomponentoverrides.lcm.private.gdc.goog.create
subcomponentoverrides.lcm.private.gdc.goog.get
subcomponentoverrides.lcm.private.gdc.goog.list
subcomponentoverrides.lcm.private.gdc.goog.patch
subcomponentoverrides.lcm.private.gdc.goog.update
subcomponents.lcm.private.gdc.goog.get
subcomponents.lcm.private.gdc.goog.list
subcomponents.lcm.private.gdc.goog.patch
subcomponents.lcm.private.gdc.goog.update
可操作元件生命週期管理員檢視者
(mp-oclcm-viewer)

在管理平面中查看 OCLCM 資源。

Zonal
componentoverrides.lcm.private.gdc.goog.get
componentoverrides.lcm.private.gdc.goog.list
componentrollouts.lcm.private.gdc.goog.get
componentrollouts.lcm.private.gdc.goog.list
components.lcm.private.gdc.goog.get
components.lcm.private.gdc.goog.list
subcomponentoverrides.lcm.private.gdc.goog.get
subcomponentoverrides.lcm.private.gdc.goog.list
subcomponents.lcm.private.gdc.goog.get
subcomponents.lcm.private.gdc.goog.list
機構備份管理員
(organization-backup-admin)

管理機構備份、還原和備份存放區。

Zonal
backupplans.backup.gdc.goog.create
backupplans.backup.gdc.goog.delete
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backuprepositories.backup.gdc.goog.create
backuprepositories.backup.gdc.goog.delete
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
backuprepositorymanagers.backup.gdc.goog.create
backuprepositorymanagers.backup.gdc.goog.delete
backuprepositorymanagers.backup.gdc.goog.get
backuprepositorymanagers.backup.gdc.goog.list
backuprepositorymanagers.backup.gdc.goog.patch
backuprepositorymanagers.backup.gdc.goog.update
backuprepositorymanagers.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
deletebackuprequests.backup.gdc.goog.create
deletebackuprequests.backup.gdc.goog.delete
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.create
manualbackuprequests.backup.gdc.goog.delete
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
secrets.create
virtualmachinebackupplans.virtualmachine.gdc.goog.create
virtualmachinebackupplans.virtualmachine.gdc.goog.delete
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.patch
virtualmachinebackupplans.virtualmachine.gdc.goog.update
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.create
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.delete
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch
virtualmachinebackuprequests.virtualmachine.gdc.goog.create
virtualmachinebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinebackuprequests.virtualmachine.gdc.goog.get
virtualmachinebackuprequests.virtualmachine.gdc.goog.list
virtualmachinebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.delete
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.patch
virtualmachinebackups.virtualmachine.gdc.goog.update
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.create
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinerestorerequests.virtualmachine.gdc.goog.create
virtualmachinerestorerequests.virtualmachine.gdc.goog.delete
virtualmachinerestorerequests.virtualmachine.gdc.goog.get
virtualmachinerestorerequests.virtualmachine.gdc.goog.list
virtualmachinerestorerequests.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.delete
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.patch
virtualmachinerestores.virtualmachine.gdc.goog.update
virtualmachinerestores.virtualmachine.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
機構備份檢視者
(organization-backup-viewer)

查看機構備份、還原和備份存放區。

Zonal
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch
virtualmachinebackuprequests.virtualmachine.gdc.goog.get
virtualmachinebackuprequests.virtualmachine.gdc.goog.list
virtualmachinebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinerestorerequests.virtualmachine.gdc.goog.get
virtualmachinerestorerequests.virtualmachine.gdc.goog.list
virtualmachinerestorerequests.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
機構叢集備份管理員
(organization-cluster-backup-admin)

管理機構叢集備份和還原作業。

Zonal
clusterbackupplans.backup.gdc.goog.create
clusterbackupplans.backup.gdc.goog.delete
clusterbackupplans.backup.gdc.goog.get
clusterbackupplans.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.patch
clusterbackupplans.backup.gdc.goog.update
clusterbackupplans.backup.gdc.goog.watch
clusterbackuprepositories.backup.gdc.goog.create
clusterbackuprepositories.backup.gdc.goog.delete
clusterbackuprepositories.backup.gdc.goog.get
clusterbackuprepositories.backup.gdc.goog.list
clusterbackuprepositories.backup.gdc.goog.patch
clusterbackuprepositories.backup.gdc.goog.update
clusterbackuprepositories.backup.gdc.goog.watch
clusterbackups.backup.gdc.goog.delete
clusterbackups.backup.gdc.goog.get
clusterbackups.backup.gdc.goog.list
clusterbackups.backup.gdc.goog.watch
clusterrestoreplans.backup.gdc.goog.create
clusterrestoreplans.backup.gdc.goog.delete
clusterrestoreplans.backup.gdc.goog.get
clusterrestoreplans.backup.gdc.goog.list
clusterrestoreplans.backup.gdc.goog.patch
clusterrestoreplans.backup.gdc.goog.update
clusterrestoreplans.backup.gdc.goog.watch
clusterrestores.backup.gdc.goog.create
clusterrestores.backup.gdc.goog.delete
clusterrestores.backup.gdc.goog.get
clusterrestores.backup.gdc.goog.list
clusterrestores.backup.gdc.goog.watch
clustervolumebackups.backup.gdc.goog.get
clustervolumebackups.backup.gdc.goog.list
clustervolumebackups.backup.gdc.goog.watch
clustervolumerestores.backup.gdc.goog.get
clustervolumerestores.backup.gdc.goog.list
clustervolumerestores.backup.gdc.goog.watch
deleteclusterbackuprequests.backup.gdc.goog.create
deleteclusterbackuprequests.backup.gdc.goog.delete
deleteclusterbackuprequests.backup.gdc.goog.get
deleteclusterbackuprequests.backup.gdc.goog.list
deleteclusterbackuprequests.backup.gdc.goog.watch
manualclusterbackuprequests.backup.gdc.goog.create
manualclusterbackuprequests.backup.gdc.goog.delete
manualclusterbackuprequests.backup.gdc.goog.get
manualclusterbackuprequests.backup.gdc.goog.list
manualclusterbackuprequests.backup.gdc.goog.watch
manualclusterrestorerequests.backup.gdc.goog.create
manualclusterrestorerequests.backup.gdc.goog.delete
manualclusterrestorerequests.backup.gdc.goog.get
manualclusterrestorerequests.backup.gdc.goog.list
manualclusterrestorerequests.backup.gdc.goog.watch
secrets.create
機構叢集備份檢視者
(organization-cluster-backup-viewer)

查看組織叢集備份和還原作業。

Zonal
clusterbackupplans.backup.gdc.goog.get
clusterbackupplans.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.watch
clusterbackuprepositories.backup.gdc.goog.get
clusterbackuprepositories.backup.gdc.goog.list
clusterbackuprepositories.backup.gdc.goog.watch
clusterbackups.backup.gdc.goog.get
clusterbackups.backup.gdc.goog.list
clusterbackups.backup.gdc.goog.watch
clusterrestoreplans.backup.gdc.goog.get
clusterrestoreplans.backup.gdc.goog.list
clusterrestoreplans.backup.gdc.goog.watch
clusterrestores.backup.gdc.goog.get
clusterrestores.backup.gdc.goog.list
clusterrestores.backup.gdc.goog.watch
clustervolumebackups.backup.gdc.goog.get
clustervolumebackups.backup.gdc.goog.list
clustervolumebackups.backup.gdc.goog.watch
clustervolumerestores.backup.gdc.goog.get
clustervolumerestores.backup.gdc.goog.list
clustervolumerestores.backup.gdc.goog.watch
deleteclusterbackuprequests.backup.gdc.goog.get
deleteclusterbackuprequests.backup.gdc.goog.list
deleteclusterbackuprequests.backup.gdc.goog.watch
manualclusterbackuprequests.backup.gdc.goog.get
manualclusterbackuprequests.backup.gdc.goog.list
manualclusterbackuprequests.backup.gdc.goog.watch
manualclusterrestorerequests.backup.gdc.goog.get
manualclusterrestorerequests.backup.gdc.goog.list
manualclusterrestorerequests.backup.gdc.goog.watch
機構 Grafana 檢視者
(organization-grafana-viewer)

查看機構的 Grafana 執行個體。

Zonal
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.DELETE
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.GET
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.HEAD
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.OPTIONS
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.PATCH
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.POST
platform-obs-org-grafana-system/grafana.istio.resourcemanager.gdc.goog.PUT
機構網路政策管理員
(org-network-policy-admin)

建立及管理機構網路政策。

Zonal
organizationnetworkpolicies.networking.gdc.goog.create
organizationnetworkpolicies.networking.gdc.goog.delete
organizationnetworkpolicies.networking.gdc.goog.get
organizationnetworkpolicies.networking.gdc.goog.list
organizationnetworkpolicies.networking.gdc.goog.patch
organizationnetworkpolicies.networking.gdc.goog.update
organizationnetworkpolicies.networking.gdc.goog.watch
機構組織網路政策檢視者
(org-network-policy-viewer)

查看機構網路政策。

Zonal
organizationnetworkpolicies.networking.gdc.goog.get
organizationnetworkpolicies.networking.gdc.goog.list
organizationnetworkpolicies.networking.gdc.goog.watch
機構配額管理員
(organization-quota-admin)

管理機構的全球配額資源。

全球
quotavalues.quotamanagement.global.gdc.goog.create
quotavalues.quotamanagement.global.gdc.goog.delete
quotavalues.quotamanagement.global.gdc.goog.get
quotavalues.quotamanagement.global.gdc.goog.list
quotavalues.quotamanagement.global.gdc.goog.patch
quotavalues.quotamanagement.global.gdc.goog.update
quotavalues.quotamanagement.global.gdc.goog.watch
機構配額檢視者
(organization-quota-viewer)

查看機構的全球配額資源。

全球
quotavalues.quotamanagement.global.gdc.goog.get
quotavalues.quotamanagement.global.gdc.goog.list
quotavalues.quotamanagement.global.gdc.goog.watch
PKI 基礎架構管理員
(infra-pki-admin)

建立及管理 CertificateIssuer 和 CertificateAuthority。

Zonal
certificateauthorities.pki.security.gdc.goog.create
certificateauthorities.pki.security.gdc.goog.delete
certificateauthorities.pki.security.gdc.goog.get
certificateauthorities.pki.security.gdc.goog.list
certificateauthorities.pki.security.gdc.goog.patch
certificateauthorities.pki.security.gdc.goog.update
certificateauthorities.pki.security.gdc.goog.watch
certificateissuers.pki.security.gdc.goog.create
certificateissuers.pki.security.gdc.goog.delete
certificateissuers.pki.security.gdc.goog.get
certificateissuers.pki.security.gdc.goog.list
certificateissuers.pki.security.gdc.goog.patch
certificateissuers.pki.security.gdc.goog.update
certificateissuers.pki.security.gdc.goog.watch
secrets.get
secrets.list
PKI Infra Viewer
(infra-pki-viewer)

查看 CertificateIssuers 和 CertificateAuthorities。

Zonal
certificateauthorities.pki.security.gdc.goog.get
certificateauthorities.pki.security.gdc.goog.list
certificateauthorities.pki.security.gdc.goog.watch
certificateissuers.pki.security.gdc.goog.get
certificateissuers.pki.security.gdc.goog.list
certificateissuers.pki.security.gdc.goog.watch
secrets.get
secrets.list
專案建立者
(project-creator)

建立及查看專案。

全球
projects.resourcemanager.global.gdc.goog.create
projects.resourcemanager.global.gdc.goog.get
projects.resourcemanager.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
namespaces.create
namespaces.get
namespaces.list
namespaces.watch
projectbindings.resourcemanager.gdc.goog.create
projects.resourcemanager.gdc.goog.create
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.watch
專案編輯者
(project-editor)

管理專案和查看區域。

全球
projects.resourcemanager.global.gdc.goog.delete
projects.resourcemanager.global.gdc.goog.get
projects.resourcemanager.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.patch
projects.resourcemanager.global.gdc.goog.update
projects.resourcemanager.global.gdc.goog.watch
zones.location.mz.global.private.gdc.goog.get
zones.location.mz.global.private.gdc.goog.list
zones.location.mz.global.private.gdc.goog.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
namespaces.delete
namespaces.get
namespaces.list
namespaces.watch
projectbindings.resourcemanager.gdc.goog.delete
projectbindings.resourcemanager.gdc.goog.get
projectbindings.resourcemanager.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.patch
projectbindings.resourcemanager.gdc.goog.update
projects.resourcemanager.gdc.goog.delete
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.patch
projects.resourcemanager.gdc.goog.update
projects.resourcemanager.gdc.goog.watch
專案配額仲裁者
(project-quota-adjudicator)

裁決機構的全球專案層級配額資源。

全球
quotavalues.quotamanagement.global.gdc.goog.create
quotavalues.quotamanagement.global.gdc.goog.delete
quotavalues.quotamanagement.global.gdc.goog.get
quotavalues.quotamanagement.global.gdc.goog.list
quotavalues.quotamanagement.global.gdc.goog.patch
quotavalues.quotamanagement.global.gdc.goog.update
quotavalues.quotamanagement.global.gdc.goog.watch
依屬性限制政策管理員
(gdchrestrictbyattributes-policy-admin)

授予「依屬性限制」政策的建立、讀取、更新及刪除存取權。

全球
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.create
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.delete
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.patch
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.update

Zonal
gdchrestrictbyattributes.constraints.gatekeeper.sh.create
gdchrestrictbyattributes.constraints.gatekeeper.sh.delete
gdchrestrictbyattributes.constraints.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.gatekeeper.sh.list
gdchrestrictbyattributes.constraints.gatekeeper.sh.patch
gdchrestrictbyattributes.constraints.gatekeeper.sh.update
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.create
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.delete
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.patch
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.update
依屬性限制政策檢視者
(gdchrestrictbyattributes-policy-viewer)

授予「依屬性限制」政策的檢視權限。

全球
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list

Zonal
gdchrestrictbyattributes.constraints.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.gatekeeper.sh.list
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.get
gdchrestrictbyattributes.constraints.global.gatekeeper.sh.list
受限服務政策管理員
(gdchrestrictedservice-policy-admin)

可建立、讀取、更新及刪除受限服務政策。

全球
gdchrestrictedservice.constraints.global.gatekeeper.sh.create
gdchrestrictedservice.constraints.global.gatekeeper.sh.delete
gdchrestrictedservice.constraints.global.gatekeeper.sh.get
gdchrestrictedservice.constraints.global.gatekeeper.sh.list
gdchrestrictedservice.constraints.global.gatekeeper.sh.patch
gdchrestrictedservice.constraints.global.gatekeeper.sh.update

Zonal
gdchrestrictedservice.constraints.gatekeeper.sh.create
gdchrestrictedservice.constraints.gatekeeper.sh.delete
gdchrestrictedservice.constraints.gatekeeper.sh.get
gdchrestrictedservice.constraints.gatekeeper.sh.list
gdchrestrictedservice.constraints.gatekeeper.sh.patch
gdchrestrictedservice.constraints.gatekeeper.sh.update
gdchrestrictedservice.constraints.global.gatekeeper.sh.create
gdchrestrictedservice.constraints.global.gatekeeper.sh.delete
gdchrestrictedservice.constraints.global.gatekeeper.sh.get
gdchrestrictedservice.constraints.global.gatekeeper.sh.list
gdchrestrictedservice.constraints.global.gatekeeper.sh.patch
gdchrestrictedservice.constraints.global.gatekeeper.sh.update
受限服務政策檢視者
(gdchrestrictedservice-policy-viewer)

具備受限服務政策的檢視權限。

全球
gdchrestrictedservice.constraints.global.gatekeeper.sh.get
gdchrestrictedservice.constraints.global.gatekeeper.sh.list

Zonal
gdchrestrictedservice.constraints.gatekeeper.sh.get
gdchrestrictedservice.constraints.gatekeeper.sh.list
gdchrestrictedservice.constraints.global.gatekeeper.sh.get
gdchrestrictedservice.constraints.global.gatekeeper.sh.list
工作階段機構管理員
(org-session-admin)

撤銷使用者工作階段。

Zonal
iam-admin-session-manager-backend/iam-admin-session-manager-backend.istio.resourcemanager.gdc.goog.GET
iam-admin-session-manager-backend/iam-admin-session-manager-backend.istio.resourcemanager.gdc.goog.POST
工作階段機構檢視器
(org-session-viewer)

撤銷使用者工作階段。

Zonal
iam-admin-session-manager-backend/iam-admin-session-manager-backend.istio.resourcemanager.gdc.goog.GET
子網路機構管理員
(subnet-org-admin)

在機構中建立及管理子網路。

全球
subnets.ipam.global.gdc.goog.create
subnets.ipam.global.gdc.goog.delete
subnets.ipam.global.gdc.goog.get
subnets.ipam.global.gdc.goog.list
subnets.ipam.global.gdc.goog.manage
subnets.ipam.global.gdc.goog.patch
subnets.ipam.global.gdc.goog.update
subnets.ipam.global.gdc.goog.watch

Zonal
subnets.ipam.gdc.goog.create
subnets.ipam.gdc.goog.delete
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
subnets.ipam.gdc.goog.manage
subnets.ipam.gdc.goog.patch
subnets.ipam.gdc.goog.update
subnets.ipam.gdc.goog.use
subnets.ipam.gdc.goog.watch
子網路機構檢視器
(subnet-org-viewer)

查看機構中的子網路。

全球
subnets.ipam.global.gdc.goog.get
subnets.ipam.global.gdc.goog.list
subnets.ipam.global.gdc.goog.watch

Zonal
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
subnets.ipam.gdc.goog.watch
子網路平台檢視器
(subnet-platform-viewer)

查看子網路。

Zonal
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
系統叢集備份存放區管理員
(system-cluster-backup-repository-admin)

管理系統叢集中的備份存放區。

Kubernetes 叢集
backuprepositories.backup.gdc.goog.create
backuprepositories.backup.gdc.goog.delete
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
系統叢集 CRD 檢視者
(system-cluster-crd-viewer)

查看系統叢集中的自訂資源定義。

Kubernetes 叢集
customresourcedefinitions.apiextensions.k8s.io.get
customresourcedefinitions.apiextensions.k8s.io.list
代碼管理員
(tag-admin)

Zonal
roles.rbac.authorization.k8s.io.bind
tagkeys.resourcemanager.gdc.goog.bind-tag
tagkeys.resourcemanager.gdc.goog.create
tagkeys.resourcemanager.gdc.goog.delete
tagkeys.resourcemanager.gdc.goog.get
tagkeys.resourcemanager.gdc.goog.list
tagkeys.resourcemanager.gdc.goog.patch
tagkeys.resourcemanager.gdc.goog.update
tagvalues.resourcemanager.gdc.goog.bind-tag
tagvalues.resourcemanager.gdc.goog.create
tagvalues.resourcemanager.gdc.goog.delete
tagvalues.resourcemanager.gdc.goog.get
tagvalues.resourcemanager.gdc.goog.list
tagvalues.resourcemanager.gdc.goog.patch
tagvalues.resourcemanager.gdc.goog.update
Transfer Appliance 申請建立者
(transfer-appliance-request-creator)

建立及查看 Transfer Appliance 要求。

Zonal
transferappliancerequests.system.private.gdc.goog.create
transferappliancerequests.system.private.gdc.goog.get
transferappliancerequests.system.private.gdc.goog.list
transferappliancerequests.system.private.gdc.goog.watch
transferappliancerequests/status.system.private.gdc.goog.patch
Transfer Appliance 申請檢視器
(transfer-appliance-request-viewer)

查看 Transfer Appliance 申請。

Zonal
transferappliancerequests.system.private.gdc.goog.get
transferappliancerequests.system.private.gdc.goog.list
transferappliancerequests.system.private.gdc.goog.watch
信任儲存區管理員
(trust-store-admin)

建立及管理 custom-ca 密鑰。

Zonal
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
信任存放區檢視器
(trust-store-viewer)

查看特定信任儲存區密鑰。

Zonal
secrets.get
secrets.list
secrets.watch
可信映像檔政策管理員
(trusted-image-policy-admin)

管理可信映像檔政策。

全球
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.create
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.delete
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.get
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.list
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.patch
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.update
vmdisktrustedimagepolicy.constraints.global.gatekeeper.sh.watch
升級機構檢視者
(organization-upgrade-viewer)

查看機構升級資源。

Zonal
componentreleasemetadata.upgrade.private.gdc.goog.get
componentreleasemetadata.upgrade.private.gdc.goog.list
harborprojects.artifact.private.gdc.goog.get
harborprojects.artifact.private.gdc.goog.list
harborprojects.artifact.private.gdc.goog.watch
harborusercredentials.artifact.private.gdc.goog.get
maintenancewindows.upgrade.gdc.goog.get
maintenancewindows.upgrade.gdc.goog.list
maintenancewindows.upgrade.gdc.goog.watch
使用者叢集管理員
(user-cluster-admin)

管理使用者叢集生命週期和升級資源。

Zonal
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
clusters.baremetal.cluster.gke.io.get
clusters.baremetal.cluster.gke.io.list
clusters.baremetal.cluster.gke.io.watch
clusters.cluster.gdc.goog.create
clusters.cluster.gdc.goog.delete
clusters.cluster.gdc.goog.get
clusters.cluster.gdc.goog.list
clusters.cluster.gdc.goog.patch
clusters.cluster.gdc.goog.update
clusters.cluster.gdc.goog.watch
componentreleasemetadata.upgrade.private.gdc.goog.get
componentreleasemetadata.upgrade.private.gdc.goog.list
harborclusters.goharbor.io.get
inventorymachines.baremetal.cluster.gke.io.get
inventorymachines.baremetal.cluster.gke.io.list
machineclasses.baremetal.cluster.gke.io.get
machineclasses.baremetal.cluster.gke.io.list
machineclasses.baremetal.cluster.gke.io.watch
nodepoolclaims.baremetal.cluster.gke.io.get
nodepoolclaims.baremetal.cluster.gke.io.list
nodepoolclaims.baremetal.cluster.gke.io.watch
nodepools.baremetal.cluster.gke.io.get
nodepools.baremetal.cluster.gke.io.list
nodepools.baremetal.cluster.gke.io.watch
nodeupgrades.upgrade.private.gdc.goog.create
nodeupgrades.upgrade.private.gdc.goog.get
nodeupgrades.upgrade.private.gdc.goog.list
nodeupgrades.upgrade.private.gdc.goog.patch
nodeupgrades.upgrade.private.gdc.goog.update
projectbindings.resourcemanager.gdc.goog.create
projectbindings.resourcemanager.gdc.goog.delete
projectbindings.resourcemanager.gdc.goog.get
projectbindings.resourcemanager.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.watch
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.watch
projects.visibility.resourcemanager.gdc.goog.get
userclustermetadata.upgrade.private.gdc.goog.get
userclustermetadata.upgrade.private.gdc.goog.list
userclustermetadata.upgrade.private.gdc.goog.watch
userclusterupgraderequests.cluster.gdc.goog.create
userclusterupgraderequests.cluster.gdc.goog.delete
userclusterupgraderequests.cluster.gdc.goog.get
userclusterupgraderequests.cluster.gdc.goog.list
userclusterupgraderequests.cluster.gdc.goog.patch
userclusterupgraderequests.cluster.gdc.goog.update
userclusterupgraderequests.cluster.gdc.goog.watch
userclusterupgrades.upgrade.private.gdc.goog.create
userclusterupgrades.upgrade.private.gdc.goog.delete
userclusterupgrades.upgrade.private.gdc.goog.get
userclusterupgrades.upgrade.private.gdc.goog.list
userclusterupgrades.upgrade.private.gdc.goog.patch
userclusterupgrades.upgrade.private.gdc.goog.update
userclusterupgrades.upgrade.private.gdc.goog.watch
virtualmachinetypes.virtualmachine.gdc.goog.get
virtualmachinetypes.virtualmachine.gdc.goog.list
virtualmachinetypes.virtualmachine.gdc.goog.watch
使用者叢集備份管理員
(user-cluster-backup-admin)

管理使用者叢集備份、還原和受保護的應用程式。

Kubernetes 叢集
backupplans.backup.gdc.goog.create
backupplans.backup.gdc.goog.delete
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.patch
backupplans.backup.gdc.goog.update
backupplans.backup.gdc.goog.watch
backuprepositories.backup.gdc.goog.create
backuprepositories.backup.gdc.goog.delete
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.create
deletebackuprequests.backup.gdc.goog.delete
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
deployments.apps.create
deployments.apps.delete
deployments.apps.get
deployments.apps.list
deployments.apps.patch
deployments.apps.update
deployments.apps.watch
manualbackuprequests.backup.gdc.goog.create
manualbackuprequests.backup.gdc.goog.delete
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.create
manualrestorerequests.backup.gdc.goog.delete
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.watch
persistentvolumeclaims.create
persistentvolumeclaims.delete
persistentvolumeclaims.get
persistentvolumeclaims.list
persistentvolumeclaims.patch
persistentvolumeclaims.update
persistentvolumeclaims.watch
pods.create
pods.delete
pods.get
pods.list
pods.patch
pods.update
pods.watch
protectedapplications.gkebackup.gke.io.create
protectedapplications.gkebackup.gke.io.delete
protectedapplications.gkebackup.gke.io.get
protectedapplications.gkebackup.gke.io.list
protectedapplications.gkebackup.gke.io.patch
protectedapplications.gkebackup.gke.io.update
protectedapplications.gkebackup.gke.io.watch
restoreplans.backup.gdc.goog.create
restoreplans.backup.gdc.goog.delete
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.patch
restoreplans.backup.gdc.goog.update
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.create
restores.backup.gdc.goog.delete
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
services.create
services.delete
services.get
services.list
services.patch
services.update
services.watch
statefulsets.apps.create
statefulsets.apps.delete
statefulsets.apps.get
statefulsets.apps.list
statefulsets.apps.patch
statefulsets.apps.update
statefulsets.apps.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
使用者叢集備份檢視者
(user-cluster-backup-viewer)

查看使用者叢集備份、還原作業和受保護的應用程式。

Kubernetes 叢集
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
backuprepositories.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
deployments.apps.get
deployments.apps.list
deployments.apps.watch
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.watch
persistentvolumeclaims.get
persistentvolumeclaims.list
persistentvolumeclaims.watch
pods.get
pods.list
pods.watch
protectedapplications.gkebackup.gke.io.get
protectedapplications.gkebackup.gke.io.list
protectedapplications.gkebackup.gke.io.watch
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
services.get
services.list
services.watch
statefulsets.apps.get
statefulsets.apps.list
statefulsets.apps.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
使用者叢集 CRD 檢視者
(user-cluster-crd-viewer)

查看使用者叢集中的自訂資源定義。

Kubernetes 叢集
customresourcedefinitions.apiextensions.k8s.io.get
customresourcedefinitions.apiextensions.k8s.io.list
使用者叢集開發人員
(user-cluster-developer)

查看使用者叢集中的各種資源。

Kubernetes 叢集
*.constraints.gatekeeper.sh.get
*.constraints.gatekeeper.sh.list
*.templates.gatekeeper.sh/v1.get
*.templates.gatekeeper.sh/v1.list
apiservices.apiregistration.k8s.io.get
apiservices.apiregistration.k8s.io.list
backupjobs.gkebackup.gke.io.get
backupjobs.gkebackup.gke.io.list
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
certificatesigningrequests.certificates.k8s.io.get
certificatesigningrequests.certificates.k8s.io.list
ciliumclusterwidenetworkpolicies.cilium.io.get
ciliumclusterwidenetworkpolicies.cilium.io.list
ciliumegressgatewaypolicies.cilium.io.get
ciliumegressgatewaypolicies.cilium.io.list
ciliumegressnatpolicies.cilium.io.get
ciliumegressnatpolicies.cilium.io.list
ciliumexternalworkloads.cilium.io.get
ciliumexternalworkloads.cilium.io.list
ciliumidentities.cilium.io.get
ciliumidentities.cilium.io.list
ciliumnodes.cilium.io.get
ciliumnodes.cilium.io.list
clustercidrconfigs.networking.gke.io.get
clustercidrconfigs.networking.gke.io.list
clusterdns.networking.gke.io.get
clusterdns.networking.gke.io.list
clusterissuers.cert-manager.io.get
clusterissuers.cert-manager.io.list
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
csidrivers.storage.k8s.io.get
csidrivers.storage.k8s.io.list
csinodes.storage.k8s.io.get
csinodes.storage.k8s.io.list
customresourcedefinitions.apiextensions.k8s.io.get
customresourcedefinitions.apiextensions.k8s.io.list
egressnatpolicies.networking.gke.io.get
egressnatpolicies.networking.gke.io.list
events.get
events.list
events.watch
flatipmodes.networking.gke.io.get
flatipmodes.networking.gke.io.list
ingressclasses.networking.gke.io.get
ingressclasses.networking.gke.io.list
metricsserver.addons.gke.io.get
metricsserver.addons.gke.io.list
mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.get
mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.list
namespaces.get
namespaces.list
networkloggings.networking.gke.io.get
networkloggings.networking.gke.io.list
networks.networking.gke.io.get
networks.networking.gke.io.list
nodes.get
nodes.list
nodes.patch
nodes.update
objectbuckets.objectbucket.io.get
objectbuckets.objectbucket.io.list
persistentvolumes.get
persistentvolumes.list
pods.create
pods.delete
pods.get
pods.list
pods.metrics.k8s.io.get
pods.metrics.k8s.io.list
pods.patch
pods.update
pods.watch
pods/exec.create
pods/log.get
priorityclasses.scheduling.k8s.io.get
priorityclasses.scheduling.k8s.io.list
restorejobs.gkebackup.gke.io.get
restorejobs.gkebackup.gke.io.list
runtimeclasses.node.k8s.io.get
runtimeclasses.node.k8s.io.list
storageclasses.storage.k8s.io.get
storageclasses.storage.k8s.io.list
validatingwebhookconfigurations.admissionregistration.k8s.io/v1.get
validatingwebhookconfigurations.admissionregistration.k8s.io/v1.list
vmruntimes.virtualmachine.private.gdc.goog.get
vmruntimes.virtualmachine.private.gdc.goog.list
volumeattachments.storage.k8s.io.get
volumeattachments.storage.k8s.io.list
volumesnapshotclasses.snapshot.storage.k8s.io.get
volumesnapshotclasses.snapshot.storage.k8s.io.list
volumesnapshotcontents.snapshot.storage.k8s.io.get
volumesnapshotcontents.snapshot.storage.k8s.io.list
使用者叢集開發人員檢視者
(user-cluster-developer-viewer)

查看使用者叢集中的各種資源。

Kubernetes 叢集
*.constraints.gatekeeper.sh.get
*.constraints.gatekeeper.sh.list
*.templates.gatekeeper.sh/v1.get
*.templates.gatekeeper.sh/v1.list
apiservices.apiregistration.k8s.io.get
apiservices.apiregistration.k8s.io.list
backupjobs.gkebackup.gke.io.get
backupjobs.gkebackup.gke.io.list
backuprepositories.backup.gdc.goog.get
backuprepositories.backup.gdc.goog.list
certificatesigningrequests.certificates.k8s.io.get
certificatesigningrequests.certificates.k8s.io.list
ciliumclusterwidenetworkpolicies.cilium.io.get
ciliumclusterwidenetworkpolicies.cilium.io.list
ciliumegressgatewaypolicies.cilium.io.get
ciliumegressgatewaypolicies.cilium.io.list
ciliumegressnatpolicies.cilium.io.get
ciliumegressnatpolicies.cilium.io.list
ciliumexternalworkloads.cilium.io.get
ciliumexternalworkloads.cilium.io.list
ciliumidentities.cilium.io.get
ciliumidentities.cilium.io.list
ciliumnodes.cilium.io.get
ciliumnodes.cilium.io.list
clustercidrconfigs.networking.gke.io.get
clustercidrconfigs.networking.gke.io.list
clusterdns.networking.gke.io.get
clusterdns.networking.gke.io.list
clusterissuers.cert-manager.io.get
clusterissuers.cert-manager.io.list
clusterrolebindings.rbac.authorization.k8s.io.get
clusterrolebindings.rbac.authorization.k8s.io.list
clusterroles.rbac.authorization.k8s.io.get
clusterroles.rbac.authorization.k8s.io.list
csidrivers.storage.k8s.io.get
csidrivers.storage.k8s.io.list
csinodes.storage.k8s.io.get
csinodes.storage.k8s.io.list
customresourcedefinitions.apiextensions.k8s.io.get
customresourcedefinitions.apiextensions.k8s.io.list
egressnatpolicies.networking.gke.io.get
egressnatpolicies.networking.gke.io.list
events.get
events.list
events.watch
flatipmodes.networking.gke.io.get
flatipmodes.networking.gke.io.list
ingressclasses.networking.gke.io.get
ingressclasses.networking.gke.io.list
metricsserver.addons.gke.io.get
metricsserver.addons.gke.io.list
mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.get
mutatingwebhookconfigurations.admissionregistration.k8s.io/v1.list
namespaces.get
namespaces.list
networkloggings.networking.gke.io.get
networkloggings.networking.gke.io.list
networks.networking.gke.io.get
networks.networking.gke.io.list
nodes.get
nodes.list
objectbuckets.objectbucket.io.get
objectbuckets.objectbucket.io.list
persistentvolumes.get
persistentvolumes.list
pods.get
pods.list
pods.metrics.k8s.io.get
pods.metrics.k8s.io.list
pods.watch
pods/log.get
priorityclasses.scheduling.k8s.io.get
priorityclasses.scheduling.k8s.io.list
restorejobs.gkebackup.gke.io.get
restorejobs.gkebackup.gke.io.list
runtimeclasses.node.k8s.io.get
runtimeclasses.node.k8s.io.list
storageclasses.storage.k8s.io.get
storageclasses.storage.k8s.io.list
validatingwebhookconfigurations.admissionregistration.k8s.io/v1.get
validatingwebhookconfigurations.admissionregistration.k8s.io/v1.list
vmruntimes.virtualmachine.private.gdc.goog.get
vmruntimes.virtualmachine.private.gdc.goog.list
volumeattachments.storage.k8s.io.get
volumeattachments.storage.k8s.io.list
volumesnapshotclasses.snapshot.storage.k8s.io.get
volumesnapshotclasses.snapshot.storage.k8s.io.list
volumesnapshotcontents.snapshot.storage.k8s.io.get
volumesnapshotcontents.snapshot.storage.k8s.io.list
使用者叢集節點檢視者
(user-cluster-node-viewer)

查看使用者叢集中的節點。

Kubernetes 叢集
nodes.get
nodes.list
nodes.watch
使用者叢集檢視者
(user-cluster-viewer)

查看使用者叢集生命週期和升級資源。

Zonal
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
clusters.baremetal.cluster.gke.io.get
clusters.baremetal.cluster.gke.io.list
clusters.baremetal.cluster.gke.io.watch
clusters.cluster.gdc.goog.get
clusters.cluster.gdc.goog.list
clusters.cluster.gdc.goog.watch
componentreleasemetadata.upgrade.private.gdc.goog.get
componentreleasemetadata.upgrade.private.gdc.goog.list
harborclusters.goharbor.io.get
inventorymachines.baremetal.cluster.gke.io.get
inventorymachines.baremetal.cluster.gke.io.list
machineclasses.baremetal.cluster.gke.io.get
machineclasses.baremetal.cluster.gke.io.list
machineclasses.baremetal.cluster.gke.io.watch
nodepoolclaims.baremetal.cluster.gke.io.get
nodepoolclaims.baremetal.cluster.gke.io.list
nodepoolclaims.baremetal.cluster.gke.io.watch
nodepools.baremetal.cluster.gke.io.get
nodepools.baremetal.cluster.gke.io.list
nodepools.baremetal.cluster.gke.io.watch
nodeupgrades.upgrade.private.gdc.goog.get
nodeupgrades.upgrade.private.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.get
projectbindings.resourcemanager.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.watch
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.watch
projects.visibility.resourcemanager.gdc.goog.get
userclustermetadata.upgrade.private.gdc.goog.get
userclustermetadata.upgrade.private.gdc.goog.list
userclustermetadata.upgrade.private.gdc.goog.watch
userclusterupgraderequests.cluster.gdc.goog.get
userclusterupgraderequests.cluster.gdc.goog.list
userclusterupgraderequests.cluster.gdc.goog.watch
userclusterupgrades.upgrade.private.gdc.goog.get
userclusterupgrades.upgrade.private.gdc.goog.list
userclusterupgrades.upgrade.private.gdc.goog.watch
virtualmachinetypes.virtualmachine.gdc.goog.get
virtualmachinetypes.virtualmachine.gdc.goog.list
virtualmachinetypes.virtualmachine.gdc.goog.watch
VPN 管理員
(vpn-admin)

建立及管理 VPN 相關資源。

Zonal
peergateways.networking.gdc.goog.create
peergateways.networking.gdc.goog.delete
peergateways.networking.gdc.goog.get
peergateways.networking.gdc.goog.list
peergateways.networking.gdc.goog.patch
peergateways.networking.gdc.goog.update
peergateways.networking.gdc.goog.watch
peergateways/status.networking.gdc.goog.create
peergateways/status.networking.gdc.goog.delete
peergateways/status.networking.gdc.goog.get
peergateways/status.networking.gdc.goog.list
peergateways/status.networking.gdc.goog.patch
peergateways/status.networking.gdc.goog.update
peergateways/status.networking.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
vpnbgppeers.networking.gdc.goog.create
vpnbgppeers.networking.gdc.goog.delete
vpnbgppeers.networking.gdc.goog.get
vpnbgppeers.networking.gdc.goog.list
vpnbgppeers.networking.gdc.goog.patch
vpnbgppeers.networking.gdc.goog.update
vpnbgppeers.networking.gdc.goog.watch
vpnbgppeers/status.networking.gdc.goog.create
vpnbgppeers/status.networking.gdc.goog.delete
vpnbgppeers/status.networking.gdc.goog.get
vpnbgppeers/status.networking.gdc.goog.list
vpnbgppeers/status.networking.gdc.goog.patch
vpnbgppeers/status.networking.gdc.goog.update
vpnbgppeers/status.networking.gdc.goog.watch
vpngateways.networking.gdc.goog.create
vpngateways.networking.gdc.goog.delete
vpngateways.networking.gdc.goog.get
vpngateways.networking.gdc.goog.list
vpngateways.networking.gdc.goog.patch
vpngateways.networking.gdc.goog.update
vpngateways.networking.gdc.goog.watch
vpngateways/status.networking.gdc.goog.create
vpngateways/status.networking.gdc.goog.delete
vpngateways/status.networking.gdc.goog.get
vpngateways/status.networking.gdc.goog.list
vpngateways/status.networking.gdc.goog.patch
vpngateways/status.networking.gdc.goog.update
vpngateways/status.networking.gdc.goog.watch
vpntunnels.networking.gdc.goog.create
vpntunnels.networking.gdc.goog.delete
vpntunnels.networking.gdc.goog.get
vpntunnels.networking.gdc.goog.list
vpntunnels.networking.gdc.goog.patch
vpntunnels.networking.gdc.goog.update
vpntunnels.networking.gdc.goog.watch
vpntunnels/status.networking.gdc.goog.create
vpntunnels/status.networking.gdc.goog.delete
vpntunnels/status.networking.gdc.goog.get
vpntunnels/status.networking.gdc.goog.list
vpntunnels/status.networking.gdc.goog.patch
vpntunnels/status.networking.gdc.goog.update
vpntunnels/status.networking.gdc.goog.watch
VPN 檢視器
(vpn-viewer)

讀取 VPN 相關資源。

Zonal
peergateways.networking.gdc.goog.get
peergateways.networking.gdc.goog.list
peergateways.networking.gdc.goog.watch
peergateways/status.networking.gdc.goog.get
peergateways/status.networking.gdc.goog.list
peergateways/status.networking.gdc.goog.watch
secrets.get
secrets.list
secrets.watch
vpnbgppeers.networking.gdc.goog.get
vpnbgppeers.networking.gdc.goog.list
vpnbgppeers.networking.gdc.goog.watch
vpnbgppeers/status.networking.gdc.goog.get
vpnbgppeers/status.networking.gdc.goog.list
vpnbgppeers/status.networking.gdc.goog.watch
vpngateways.networking.gdc.goog.get
vpngateways.networking.gdc.goog.list
vpngateways.networking.gdc.goog.watch
vpngateways/status.networking.gdc.goog.get
vpngateways/status.networking.gdc.goog.list
vpngateways/status.networking.gdc.goog.watch
vpntunnels.networking.gdc.goog.get
vpntunnels.networking.gdc.goog.list
vpntunnels.networking.gdc.goog.watch
vpntunnels/status.networking.gdc.goog.get
vpntunnels/status.networking.gdc.goog.list
vpntunnels/status.networking.gdc.goog.watch
Vertex AI 平台管理員
(ai-platform-admin)

管理 AI Platform 使用者介面。

Zonal
aiplatform/ui.istio.resourcemanager.gdc.goog.create
aiplatform/ui.istio.resourcemanager.gdc.goog.delete
aiplatform/ui.istio.resourcemanager.gdc.goog.deletecollection
aiplatform/ui.istio.resourcemanager.gdc.goog.get
aiplatform/ui.istio.resourcemanager.gdc.goog.list
aiplatform/ui.istio.resourcemanager.gdc.goog.patch
aiplatform/ui.istio.resourcemanager.gdc.goog.update
aiplatform/ui.istio.resourcemanager.gdc.goog.watch
虛擬機器備份管理員
(vmbackup-admin)

授予 VM 備份方案、備份、還原和相關要求的建立、查看、更新及刪除權限。

Zonal
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.create
virtualmachinebackupplans.virtualmachine.gdc.goog.delete
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.patch
virtualmachinebackupplans.virtualmachine.gdc.goog.update
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.create
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.delete
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.patch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.update
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch
virtualmachinebackuprequests.virtualmachine.gdc.goog.create
virtualmachinebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinebackuprequests.virtualmachine.gdc.goog.get
virtualmachinebackuprequests.virtualmachine.gdc.goog.list
virtualmachinebackuprequests.virtualmachine.gdc.goog.patch
virtualmachinebackuprequests.virtualmachine.gdc.goog.update
virtualmachinebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.create
virtualmachinebackups.virtualmachine.gdc.goog.delete
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.patch
virtualmachinebackups.virtualmachine.gdc.goog.update
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.create
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.patch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.update
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinerestorerequests.virtualmachine.gdc.goog.create
virtualmachinerestorerequests.virtualmachine.gdc.goog.delete
virtualmachinerestorerequests.virtualmachine.gdc.goog.get
virtualmachinerestorerequests.virtualmachine.gdc.goog.list
virtualmachinerestorerequests.virtualmachine.gdc.goog.patch
virtualmachinerestorerequests.virtualmachine.gdc.goog.update
virtualmachinerestorerequests.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.create
virtualmachinerestores.virtualmachine.gdc.goog.delete
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.patch
virtualmachinerestores.virtualmachine.gdc.goog.update
virtualmachinerestores.virtualmachine.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
磁碟區複製全域管理員
(volume-replication-admin)

管理磁碟區複製關係。

全球
volumereplicationrelationships.storage.global.gdc.goog.create
volumereplicationrelationships.storage.global.gdc.goog.delete
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
volumefailovers.storage.gdc.goog.create
volumefailovers.storage.gdc.goog.delete
volumefailovers.storage.gdc.goog.get
volumefailovers.storage.gdc.goog.list
volumefailovers.storage.gdc.goog.watch
volumereplicationrelationshipreplicas.storage.global.gdc.goog.create
volumereplicationrelationshipreplicas.storage.global.gdc.goog.delete
volumereplicationrelationshipreplicas.storage.global.gdc.goog.get
volumereplicationrelationshipreplicas.storage.global.gdc.goog.list
volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
磁碟區複製全域管理員
(app-volume-replication-admin)

管理磁碟區複製關係。

全球
volumereplicationrelationships.storage.global.gdc.goog.create
volumereplicationrelationships.storage.global.gdc.goog.delete
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
volumefailovers.storage.gdc.goog.create
volumefailovers.storage.gdc.goog.delete
volumefailovers.storage.gdc.goog.get
volumefailovers.storage.gdc.goog.list
volumefailovers.storage.gdc.goog.watch
volumereplicationrelationshipreplicas.storage.global.gdc.goog.create
volumereplicationrelationshipreplicas.storage.global.gdc.goog.delete
volumereplicationrelationshipreplicas.storage.global.gdc.goog.get
volumereplicationrelationshipreplicas.storage.global.gdc.goog.list
volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
Volume Replication Global Viewer
(app-volume-replication-viewer)

查看磁碟區複製關係。

全球
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
volumefailovers.storage.gdc.goog.get
volumefailovers.storage.gdc.goog.list
volumefailovers.storage.gdc.goog.watch
volumereplicationrelationshipreplicas.storage.global.gdc.goog.get
volumereplicationrelationshipreplicas.storage.global.gdc.goog.list
volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
Volume Replication Global Viewer
(volume-replication-viewer)

查看磁碟區複製關係。

全球
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
volumefailovers.storage.gdc.goog.get
volumefailovers.storage.gdc.goog.list
volumefailovers.storage.gdc.goog.watch
volumereplicationrelationshipreplicas.storage.global.gdc.goog.get
volumereplicationrelationshipreplicas.storage.global.gdc.goog.list
volumereplicationrelationshipreplicas.storage.global.gdc.goog.watch
網頁 TLS 憑證管理員
(web-tls-cert-admin)

建立及管理 Web TLS 專用的 PKI 憑證和密鑰。

全球
certificates.pki.security.gdc.goog.create
certificates.pki.security.gdc.goog.delete
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.patch
certificates.pki.security.gdc.goog.update
certificates.pki.security.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch

Zonal
certificates.pki.security.gdc.goog.create
certificates.pki.security.gdc.goog.delete
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.patch
certificates.pki.security.gdc.goog.update
certificates.pki.security.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
網頁 TLS 憑證檢視器
(web-tls-cert-viewer)

查看 Web TLS 專用的 PKI 憑證和密鑰。

全球
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.watch
secrets.get
secrets.list
secrets.watch

Zonal
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.watch
secrets.get
secrets.list
secrets.watch

專案層級角色和權限

下列角色是在特定專案中授予。

角色名稱和說明 權限
AI Large Gemini Developer
(ai-large-gemini-developer)

授予存取專案中大型 Gemini 服務的權限。

Zonal
endpoints.large-gemini.gdc.goog.cancel-batch
endpoints.large-gemini.gdc.goog.cancel-upload
endpoints.large-gemini.gdc.goog.chat-completions
endpoints.large-gemini.gdc.goog.complete-upload
endpoints.large-gemini.gdc.goog.create-batch
endpoints.large-gemini.gdc.goog.create-cached-content
endpoints.large-gemini.gdc.goog.create-file
endpoints.large-gemini.gdc.goog.create-part
endpoints.large-gemini.gdc.goog.create-upload
endpoints.large-gemini.gdc.goog.delete-cached-content
endpoints.large-gemini.gdc.goog.delete-file
endpoints.large-gemini.gdc.goog.generate-content
endpoints.large-gemini.gdc.goog.get-batch
endpoints.large-gemini.gdc.goog.get-cached-content
endpoints.large-gemini.gdc.goog.get-file
endpoints.large-gemini.gdc.goog.list-available-models
endpoints.large-gemini.gdc.goog.list-batches
endpoints.large-gemini.gdc.goog.list-cached-contents
endpoints.large-gemini.gdc.goog.list-files
endpoints.large-gemini.gdc.goog.list-models
endpoints.large-gemini.gdc.goog.stream-generate-content
endpoints.large-gemini.gdc.goog.update-cached-content
AI Large Gemini 檢視者
(ai-large-gemini-viewer)

授予存取專案中大型 Gemini 服務的權限。

Zonal
endpoints.large-gemini.gdc.goog.get-batch
endpoints.large-gemini.gdc.goog.get-cached-content
endpoints.large-gemini.gdc.goog.get-file
endpoints.large-gemini.gdc.goog.list-available-models
endpoints.large-gemini.gdc.goog.list-batches
endpoints.large-gemini.gdc.goog.list-cached-contents
endpoints.large-gemini.gdc.goog.list-files
備份建立者
(backup-creator)

建立備份及還原。

Kubernetes 叢集
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.create
manualbackuprequests.backup.gdc.goog.delete
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.create
manualrestorerequests.backup.gdc.goog.delete
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.watch
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
備份檢視者
(backup-viewer)

查看備份和還原作業。

Kubernetes 叢集
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.watch
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
書店管理員
(bookstore-admin)

建立及查看書架。

Zonal
shelves.bookstore-grpc.googleapis.com.create
shelves.bookstore-grpc.googleapis.com.get
shelves.cloudresourcemanager.googleapis.com.create
shelves.cloudresourcemanager.googleapis.com.get
Bookstore Viewer
(bookstore-viewer)

查看 Bookstore 書架。

Zonal
shelves.bookstore-grpc.googleapis.com.get
shelves.cloudresourcemanager.googleapis.com.get
值區物件專案管理員
(project-bucket-object-admin)

讀取全域專案 Bucket CR;透過 S3 API 讀取對應後端 bucket 的中繼資料,並管理這些 bucket 中的物件

全球
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.watch
buckets.object.global.gdc.goog.write-object

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
值區物件專案檢視者
(project-bucket-object-viewer)

透過 S3 API 讀取全域專案 Bucket CR、對應後端 Bucket 的中繼資料,以及這些 Bucket 中的物件。

全球
bucketlocations.object.global.gdc.goog.get
bucketlocations.object.global.gdc.goog.list
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.watch

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.watch
Bucket 專案管理員
(project-bucket-admin)

管理全域專案 Bucket CR;透過 S3 API 讀取對應後端 bucket 的中繼資料,並管理這些 bucket 中的物件。

全球
bucketlocations.object.global.gdc.goog.get
bucketlocations.object.global.gdc.goog.list
buckets.object.global.gdc.goog.create
buckets.object.global.gdc.goog.delete
buckets.object.global.gdc.goog.get
buckets.object.global.gdc.goog.list
buckets.object.global.gdc.goog.patch
buckets.object.global.gdc.goog.read-object
buckets.object.global.gdc.goog.update
buckets.object.global.gdc.goog.watch
buckets.object.global.gdc.goog.write-object

Zonal
bucketinfos.object.gdc.goog.get
bucketinfos.object.gdc.goog.list
bucketinfos.object.gdc.goog.patch
bucketinfos.object.gdc.goog.update
bucketinfos.object.gdc.goog.watch
buckets.object.gdc.goog.create
buckets.object.gdc.goog.delete
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.patch
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.update
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
CA 服務憑證要求者
(certificate-authority-service-certificate-requester)

建立及查看憑證要求,並擷取已核發的憑證。

Zonal
certificaterequests.pki.security.gdc.goog.create
certificaterequests.pki.security.gdc.goog.get
certificaterequests.pki.security.gdc.goog.list
secrets.get
secrets.list
CA 服務作業管理員
(certificate-authority-service-operation-manager)

管理憑證授權單位及撤銷憑證。

Zonal
certificateauthorities.pki.security.gdc.goog.create
certificateauthorities.pki.security.gdc.goog.delete
certificateauthorities.pki.security.gdc.goog.get
certificateauthorities.pki.security.gdc.goog.list
certificateauthorities.pki.security.gdc.goog.patch
certificateauthorities.pki.security.gdc.goog.update
certificateauthorities.pki.security.gdc.goog.watch
certificaterequests.pki.security.gdc.goog.get
certificaterequests.pki.security.gdc.goog.list
certificaterequests.pki.security.gdc.goog.watch
revokecertificaterequests.pki.security.gdc.goog.create
revokecertificaterequests.pki.security.gdc.goog.delete
revokecertificaterequests.pki.security.gdc.goog.get
revokecertificaterequests.pki.security.gdc.goog.list
revokecertificaterequests.pki.security.gdc.goog.patch
revokecertificaterequests.pki.security.gdc.goog.update
revokecertificaterequests.pki.security.gdc.goog.watch
secrets.get
secrets.list
憑證授權單位服務管理員
(certificate-authority-service-admin)

建立及管理 CertificateAuthority、CertificateRequest 和 RevokeCertificateRequest。

Zonal
certificateauthorities.pki.security.gdc.goog.create
certificateauthorities.pki.security.gdc.goog.delete
certificateauthorities.pki.security.gdc.goog.get
certificateauthorities.pki.security.gdc.goog.list
certificateauthorities.pki.security.gdc.goog.patch
certificateauthorities.pki.security.gdc.goog.update
certificateauthorities.pki.security.gdc.goog.watch
certificaterequests.pki.security.gdc.goog.create
certificaterequests.pki.security.gdc.goog.delete
certificaterequests.pki.security.gdc.goog.get
certificaterequests.pki.security.gdc.goog.list
certificaterequests.pki.security.gdc.goog.patch
certificaterequests.pki.security.gdc.goog.update
certificaterequests.pki.security.gdc.goog.watch
revokecertificaterequests.pki.security.gdc.goog.create
revokecertificaterequests.pki.security.gdc.goog.delete
revokecertificaterequests.pki.security.gdc.goog.get
revokecertificaterequests.pki.security.gdc.goog.list
revokecertificaterequests.pki.security.gdc.goog.patch
revokecertificaterequests.pki.security.gdc.goog.update
revokecertificaterequests.pki.security.gdc.goog.watch
secrets.get
secrets.list
憑證授權單位服務檢視器
(certificate-authority-service-viewer)

檢視 CertificateAuthorities、CertificateRequests 和 RevokeCertificateRequests 的存取權。

Zonal
certificateauthorities.pki.security.gdc.goog.get
certificateauthorities.pki.security.gdc.goog.list
certificaterequests.pki.security.gdc.goog.get
certificaterequests.pki.security.gdc.goog.list
revokecertificaterequests.pki.security.gdc.goog.get
revokecertificaterequests.pki.security.gdc.goog.list
secrets.get
secrets.list
憑證服務管理員
(certificate-service-admin)

建立及管理憑證和 CertificateIssuers。

Zonal
certificateissuers.pki.security.gdc.goog.create
certificateissuers.pki.security.gdc.goog.delete
certificateissuers.pki.security.gdc.goog.get
certificateissuers.pki.security.gdc.goog.list
certificateissuers.pki.security.gdc.goog.patch
certificateissuers.pki.security.gdc.goog.update
certificateissuers.pki.security.gdc.goog.watch
certificates.pki.security.gdc.goog.create
certificates.pki.security.gdc.goog.delete
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.patch
certificates.pki.security.gdc.goog.update
certificates.pki.security.gdc.goog.watch
憑證服務檢視者
(certificate-service-viewer)

查看憑證和憑證核發機構。

Zonal
certificateissuers.pki.security.gdc.goog.get
certificateissuers.pki.security.gdc.goog.list
certificateissuers.pki.security.gdc.goog.watch
certificates.pki.security.gdc.goog.get
certificates.pki.security.gdc.goog.list
certificates.pki.security.gdc.goog.watch
Cloud NAT 開發人員
(cloud-nat-developer)

能夠在專案中建立、讀取、更新及刪除 Cloud NAT 資源。

Zonal
cloudnatgateways.networking.gdc.goog.create
cloudnatgateways.networking.gdc.goog.delete
cloudnatgateways.networking.gdc.goog.get
cloudnatgateways.networking.gdc.goog.list
cloudnatgateways.networking.gdc.goog.patch
cloudnatgateways.networking.gdc.goog.update
cloudnatgateways.networking.gdc.goog.watch
Cloud NAT 管理工具
(cloud-nat-manager)

能夠在專案中建立、讀取、更新及刪除 Cloud NAT 資源。

Zonal
cloudnatgateways.networking.gdc.goog.create
cloudnatgateways.networking.gdc.goog.delete
cloudnatgateways.networking.gdc.goog.get
cloudnatgateways.networking.gdc.goog.list
cloudnatgateways.networking.gdc.goog.patch
cloudnatgateways.networking.gdc.goog.update
cloudnatgateways.networking.gdc.goog.watch
Cloud NAT 檢視器
(cloud-nat-viewer)

能夠查看專案中的 Cloud NAT 資源/狀態

Zonal
cloudnatgateways.networking.gdc.goog.get
cloudnatgateways.networking.gdc.goog.list
cloudnatgateways.networking.gdc.goog.watch
叢集備份使用者
(clusterbackup-user)

授予叢集備份和還原方案的檢視權限,以及叢集備份和還原作業的完整存取權。

Zonal
clusterbackupplans.backup.gdc.goog.get
clusterbackupplans.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.watch
clusterbackups.backup.gdc.goog.get
clusterbackups.backup.gdc.goog.list
clusterbackups.backup.gdc.goog.watch
clusterrestoreplans.backup.gdc.goog.get
clusterrestoreplans.backup.gdc.goog.list
clusterrestoreplans.backup.gdc.goog.watch
clusterrestores.backup.gdc.goog.get
clusterrestores.backup.gdc.goog.list
clusterrestores.backup.gdc.goog.watch
manualclusterbackuprequest.backup.gdc.goog.create
manualclusterbackuprequest.backup.gdc.goog.delete
manualclusterbackuprequest.backup.gdc.goog.get
manualclusterbackuprequest.backup.gdc.goog.list
manualclusterbackuprequest.backup.gdc.goog.patch
manualclusterbackuprequest.backup.gdc.goog.update
manualclusterbackuprequest.backup.gdc.goog.watch
manualclusterrestorerequest.backup.gdc.goog.create
manualclusterrestorerequest.backup.gdc.goog.delete
manualclusterrestorerequest.backup.gdc.goog.get
manualclusterrestorerequest.backup.gdc.goog.list
manualclusterrestorerequest.backup.gdc.goog.patch
manualclusterrestorerequest.backup.gdc.goog.update
manualclusterrestorerequest.backup.gdc.goog.watch
叢集備份檢視者
(clusterbackup-viewer)

授予叢集備份、叢集還原、叢集備份方案和叢集還原方案的檢視權限。

Zonal
clusterbackupplans.backup.gdc.goog.get
clusterbackupplans.backup.gdc.goog.list
clusterbackupplans.backup.gdc.goog.watch
clusterbackups.backup.gdc.goog.get
clusterbackups.backup.gdc.goog.list
clusterbackups.backup.gdc.goog.watch
clusterrestoreplans.backup.gdc.goog.get
clusterrestoreplans.backup.gdc.goog.list
clusterrestoreplans.backup.gdc.goog.watch
clusterrestores.backup.gdc.goog.get
clusterrestores.backup.gdc.goog.list
clusterrestores.backup.gdc.goog.watch
manualclusterbackuprequest.backup.gdc.goog.get
manualclusterbackuprequest.backup.gdc.goog.list
manualclusterbackuprequest.backup.gdc.goog.watch
manualclusterrestorerequest.backup.gdc.goog.get
manualclusterrestorerequest.backup.gdc.goog.list
manualclusterrestorerequest.backup.gdc.goog.watch
自訂角色專案管理員
(custom-role-project-admin)

管理專案命名空間中的自訂角色。

全球
customroles.iam.global.gdc.goog.create
customroles.iam.global.gdc.goog.delete
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.patch
customroles.iam.global.gdc.goog.update
customroles.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
roles.rbac.authorization.k8s.io.get

Zonal
customroles.iam.gdc.goog.create
customroles.iam.gdc.goog.delete
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.patch
customroles.iam.gdc.goog.update
customroles.iam.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.get
roles.rbac.authorization.k8s.io.get
自訂角色專案檢視者
(custom-role-project-viewer)

查看專案命名空間中的自訂角色。

全球
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
roles.rbac.authorization.k8s.io.get

Zonal
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.get
roles.rbac.authorization.k8s.io.get
資訊主頁編輯器
(dashboard-editor)

編輯資訊主頁。

Zonal
configmaps.create
configmaps.delete
configmaps.get
configmaps.list
configmaps.patch
configmaps.update
configmaps.watch
dashboards.observability.gdc.goog.delete
dashboards.observability.gdc.goog.get
dashboards.observability.gdc.goog.list
dashboards.observability.gdc.goog.patch
dashboards.observability.gdc.goog.update
dashboards.observability.gdc.goog.watch
資訊主頁檢視器
(dashboard-viewer)

查看資訊主頁。

Zonal
dashboards.observability.gdc.goog.get
dashboards.observability.gdc.goog.list
dashboards.observability.gdc.goog.watch
資料庫專案管理員
(project-db-admin)

管理全域專案資料庫資源。

全球
backupplans.alloydbomni.dbadmin.gdc.goog.create
backupplans.alloydbomni.dbadmin.gdc.goog.delete
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.patch
backupplans.alloydbomni.dbadmin.gdc.goog.update
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.create
backupplans.oracle.dbadmin.gdc.goog.delete
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.patch
backupplans.oracle.dbadmin.gdc.goog.update
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.create
backupplans.postgresql.dbadmin.gdc.goog.delete
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.patch
backupplans.postgresql.dbadmin.gdc.goog.update
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.create
dbclusters.alloydbomni.dbadmin.gdc.goog.delete
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.patch
dbclusters.alloydbomni.dbadmin.gdc.goog.update
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.create
dbclusters.oracle.dbadmin.gdc.goog.delete
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.patch
dbclusters.oracle.dbadmin.gdc.goog.update
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.create
dbclusters.postgresql.dbadmin.gdc.goog.delete
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.patch
dbclusters.postgresql.dbadmin.gdc.goog.update
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.create
exports.alloydbomni.dbadmin.gdc.goog.delete
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.create
exports.oracle.dbadmin.gdc.goog.delete
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.create
exports.postgresql.dbadmin.gdc.goog.delete
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.create
externalservers.alloydbomni.dbadmin.gdc.goog.delete
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.patch
externalservers.alloydbomni.dbadmin.gdc.goog.update
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.create
externalservers.postgresql.dbadmin.gdc.goog.delete
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.patch
externalservers.postgresql.dbadmin.gdc.goog.update
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.create
failovers.fleet.dbadmin.gdc.goog.delete
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.create
imports.alloydbomni.dbadmin.gdc.goog.delete
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.create
imports.oracle.dbadmin.gdc.goog.delete
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.create
imports.postgresql.dbadmin.gdc.goog.delete
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.create
migrations.alloydbomni.dbadmin.gdc.goog.delete
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.patch
migrations.alloydbomni.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.create
migrations.postgresql.dbadmin.gdc.goog.delete
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.patch
migrations.postgresql.dbadmin.gdc.goog.update
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.create
replications.postgresql.dbadmin.gdc.goog.delete
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.patch
replications.postgresql.dbadmin.gdc.goog.update
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.create
restores.alloydbomni.dbadmin.gdc.goog.delete
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.create
restores.oracle.dbadmin.gdc.goog.delete
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.create
restores.postgresql.dbadmin.gdc.goog.delete
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.update

Zonal
backupplans.alloydbomni.dbadmin.gdc.goog.create
backupplans.alloydbomni.dbadmin.gdc.goog.delete
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.patch
backupplans.alloydbomni.dbadmin.gdc.goog.update
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.create
backupplans.oracle.dbadmin.gdc.goog.delete
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.patch
backupplans.oracle.dbadmin.gdc.goog.update
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.create
backupplans.postgresql.dbadmin.gdc.goog.delete
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.patch
backupplans.postgresql.dbadmin.gdc.goog.update
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.create
dbclusters.alloydbomni.dbadmin.gdc.goog.delete
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.patch
dbclusters.alloydbomni.dbadmin.gdc.goog.update
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.create
dbclusters.oracle.dbadmin.gdc.goog.delete
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.patch
dbclusters.oracle.dbadmin.gdc.goog.update
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.create
dbclusters.postgresql.dbadmin.gdc.goog.delete
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.patch
dbclusters.postgresql.dbadmin.gdc.goog.update
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.create
exports.alloydbomni.dbadmin.gdc.goog.delete
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.create
exports.oracle.dbadmin.gdc.goog.delete
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.create
exports.postgresql.dbadmin.gdc.goog.delete
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.create
externalservers.alloydbomni.dbadmin.gdc.goog.delete
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.patch
externalservers.alloydbomni.dbadmin.gdc.goog.update
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.create
externalservers.postgresql.dbadmin.gdc.goog.delete
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.patch
externalservers.postgresql.dbadmin.gdc.goog.update
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.create
failovers.fleet.dbadmin.gdc.goog.delete
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.create
imports.alloydbomni.dbadmin.gdc.goog.delete
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.create
imports.oracle.dbadmin.gdc.goog.delete
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.create
imports.postgresql.dbadmin.gdc.goog.delete
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.create
migrations.alloydbomni.dbadmin.gdc.goog.delete
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.patch
migrations.alloydbomni.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.create
migrations.postgresql.dbadmin.gdc.goog.delete
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.patch
migrations.postgresql.dbadmin.gdc.goog.update
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.create
replications.postgresql.dbadmin.gdc.goog.delete
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.patch
replications.postgresql.dbadmin.gdc.goog.update
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.create
restores.alloydbomni.dbadmin.gdc.goog.delete
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.create
restores.oracle.dbadmin.gdc.goog.delete
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.create
restores.postgresql.dbadmin.gdc.goog.delete
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.update
資料庫專案編輯者
(project-db-editor)

編輯全域專案資料庫資源。

全球
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.patch
dbclusters.alloydbomni.dbadmin.gdc.goog.update
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.patch
dbclusters.oracle.dbadmin.gdc.goog.update
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.patch
dbclusters.postgresql.dbadmin.gdc.goog.update
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.create
exports.alloydbomni.dbadmin.gdc.goog.delete
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.create
exports.oracle.dbadmin.gdc.goog.delete
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.create
exports.postgresql.dbadmin.gdc.goog.delete
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.create
externalservers.alloydbomni.dbadmin.gdc.goog.delete
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.patch
externalservers.alloydbomni.dbadmin.gdc.goog.update
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.create
externalservers.postgresql.dbadmin.gdc.goog.delete
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.patch
externalservers.postgresql.dbadmin.gdc.goog.update
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.create
failovers.fleet.dbadmin.gdc.goog.delete
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.create
imports.alloydbomni.dbadmin.gdc.goog.delete
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.create
imports.oracle.dbadmin.gdc.goog.delete
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.create
imports.postgresql.dbadmin.gdc.goog.delete
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.patch
migrations.alloydbomni.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.patch
migrations.postgresql.dbadmin.gdc.goog.update
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.patch
replications.postgresql.dbadmin.gdc.goog.update
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.update

Zonal
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.patch
dbclusters.alloydbomni.dbadmin.gdc.goog.update
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.patch
dbclusters.oracle.dbadmin.gdc.goog.update
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.patch
dbclusters.postgresql.dbadmin.gdc.goog.update
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.create
exports.alloydbomni.dbadmin.gdc.goog.delete
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.create
exports.oracle.dbadmin.gdc.goog.delete
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.create
exports.postgresql.dbadmin.gdc.goog.delete
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.create
externalservers.alloydbomni.dbadmin.gdc.goog.delete
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.patch
externalservers.alloydbomni.dbadmin.gdc.goog.update
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.create
externalservers.postgresql.dbadmin.gdc.goog.delete
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.patch
externalservers.postgresql.dbadmin.gdc.goog.update
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.create
failovers.fleet.dbadmin.gdc.goog.delete
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.create
imports.alloydbomni.dbadmin.gdc.goog.delete
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.create
imports.oracle.dbadmin.gdc.goog.delete
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.create
imports.postgresql.dbadmin.gdc.goog.delete
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.patch
migrations.alloydbomni.dbadmin.gdc.goog.update
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.patch
migrations.postgresql.dbadmin.gdc.goog.update
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.patch
replications.postgresql.dbadmin.gdc.goog.update
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.update
資料庫專案檢視者
(project-db-viewer)

查看全域專案資料庫資源。

全球
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.get
secrets.list

Zonal
backupplans.alloydbomni.dbadmin.gdc.goog.get
backupplans.alloydbomni.dbadmin.gdc.goog.list
backupplans.alloydbomni.dbadmin.gdc.goog.watch
backupplans.oracle.dbadmin.gdc.goog.get
backupplans.oracle.dbadmin.gdc.goog.list
backupplans.oracle.dbadmin.gdc.goog.watch
backupplans.postgresql.dbadmin.gdc.goog.get
backupplans.postgresql.dbadmin.gdc.goog.list
backupplans.postgresql.dbadmin.gdc.goog.watch
backups.alloydbomni.dbadmin.gdc.goog.get
backups.alloydbomni.dbadmin.gdc.goog.list
backups.alloydbomni.dbadmin.gdc.goog.watch
backups.oracle.dbadmin.gdc.goog.get
backups.oracle.dbadmin.gdc.goog.list
backups.oracle.dbadmin.gdc.goog.watch
backups.postgresql.dbadmin.gdc.goog.get
backups.postgresql.dbadmin.gdc.goog.list
backups.postgresql.dbadmin.gdc.goog.watch
configmaps.get
dbclusters.alloydbomni.dbadmin.gdc.goog.get
dbclusters.alloydbomni.dbadmin.gdc.goog.list
dbclusters.alloydbomni.dbadmin.gdc.goog.watch
dbclusters.oracle.dbadmin.gdc.goog.get
dbclusters.oracle.dbadmin.gdc.goog.list
dbclusters.oracle.dbadmin.gdc.goog.watch
dbclusters.postgresql.dbadmin.gdc.goog.get
dbclusters.postgresql.dbadmin.gdc.goog.list
dbclusters.postgresql.dbadmin.gdc.goog.watch
exports.alloydbomni.dbadmin.gdc.goog.get
exports.alloydbomni.dbadmin.gdc.goog.list
exports.alloydbomni.dbadmin.gdc.goog.watch
exports.oracle.dbadmin.gdc.goog.get
exports.oracle.dbadmin.gdc.goog.list
exports.oracle.dbadmin.gdc.goog.watch
exports.postgresql.dbadmin.gdc.goog.get
exports.postgresql.dbadmin.gdc.goog.list
exports.postgresql.dbadmin.gdc.goog.watch
externalservers.alloydbomni.dbadmin.gdc.goog.get
externalservers.alloydbomni.dbadmin.gdc.goog.list
externalservers.alloydbomni.dbadmin.gdc.goog.watch
externalservers.postgresql.dbadmin.gdc.goog.get
externalservers.postgresql.dbadmin.gdc.goog.list
externalservers.postgresql.dbadmin.gdc.goog.watch
failovers.fleet.dbadmin.gdc.goog.get
failovers.fleet.dbadmin.gdc.goog.list
failovers.fleet.dbadmin.gdc.goog.watch
imports.alloydbomni.dbadmin.gdc.goog.get
imports.alloydbomni.dbadmin.gdc.goog.list
imports.alloydbomni.dbadmin.gdc.goog.watch
imports.oracle.dbadmin.gdc.goog.get
imports.oracle.dbadmin.gdc.goog.list
imports.oracle.dbadmin.gdc.goog.watch
imports.postgresql.dbadmin.gdc.goog.get
imports.postgresql.dbadmin.gdc.goog.list
imports.postgresql.dbadmin.gdc.goog.watch
migrations.alloydbomni.dbadmin.gdc.goog.get
migrations.alloydbomni.dbadmin.gdc.goog.list
migrations.alloydbomni.dbadmin.gdc.goog.watch
migrations.postgresql.dbadmin.gdc.goog.get
migrations.postgresql.dbadmin.gdc.goog.list
migrations.postgresql.dbadmin.gdc.goog.watch
replications.postgresql.dbadmin.gdc.goog.get
replications.postgresql.dbadmin.gdc.goog.list
replications.postgresql.dbadmin.gdc.goog.watch
restores.alloydbomni.dbadmin.gdc.goog.get
restores.alloydbomni.dbadmin.gdc.goog.list
restores.alloydbomni.dbadmin.gdc.goog.watch
restores.oracle.dbadmin.gdc.goog.get
restores.oracle.dbadmin.gdc.goog.list
restores.oracle.dbadmin.gdc.goog.watch
restores.postgresql.dbadmin.gdc.goog.get
restores.postgresql.dbadmin.gdc.goog.list
restores.postgresql.dbadmin.gdc.goog.watch
secrets.get
secrets.list
外部負載平衡器檢視者
(external-load-balancer-viewer)

查看專案中的外部負載平衡器資源。

全球
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.watch
forwardingruleexternals.networking.global.gdc.goog.get
forwardingruleexternals.networking.global.gdc.goog.list
forwardingruleexternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.watch
forwardingruleexternals.networking.gdc.goog.get
forwardingruleexternals.networking.gdc.goog.list
forwardingruleexternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.watch
檔案共用專案管理員
(project-fileshare-admin)

管理檔案共用、exportgroupbindings 和匯出群組。

Zonal
exportgroupbindings.file.gdc.goog.create
exportgroupbindings.file.gdc.goog.delete
exportgroupbindings.file.gdc.goog.get
exportgroupbindings.file.gdc.goog.list
exportgroupbindings.file.gdc.goog.patch
exportgroupbindings.file.gdc.goog.update
exportgroupbindings.file.gdc.goog.watch
exportgroups.file.gdc.goog.create
exportgroups.file.gdc.goog.delete
exportgroups.file.gdc.goog.get
exportgroups.file.gdc.goog.list
exportgroups.file.gdc.goog.patch
exportgroups.file.gdc.goog.update
exportgroups.file.gdc.goog.watch
fileshares.file.gdc.goog.create
fileshares.file.gdc.goog.delete
fileshares.file.gdc.goog.get
fileshares.file.gdc.goog.list
fileshares.file.gdc.goog.patch
fileshares.file.gdc.goog.update
fileshares.file.gdc.goog.watch
檔案共用專案檢視者
(project-fileshare-viewer)

查看檔案共用、匯出群組繫結和匯出群組。

Zonal
exportgroupbindings.file.gdc.goog.get
exportgroupbindings.file.gdc.goog.list
exportgroupbindings.file.gdc.goog.watch
exportgroups.file.gdc.goog.get
exportgroups.file.gdc.goog.list
exportgroups.file.gdc.goog.watch
fileshares.file.gdc.goog.get
fileshares.file.gdc.goog.list
fileshares.file.gdc.goog.watch
全域外部負載平衡器管理員
(external-load-balancer-admin)

在全域專案中建立及管理全域外部負載平衡器資源。

全球
backendservicepolicies.networking.global.gdc.goog.create
backendservicepolicies.networking.global.gdc.goog.delete
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.patch
backendservicepolicies.networking.global.gdc.goog.update
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.create
backendservices.networking.global.gdc.goog.delete
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.patch
backendservices.networking.global.gdc.goog.update
backendservices.networking.global.gdc.goog.watch
forwardingruleexternals.networking.global.gdc.goog.create
forwardingruleexternals.networking.global.gdc.goog.delete
forwardingruleexternals.networking.global.gdc.goog.get
forwardingruleexternals.networking.global.gdc.goog.list
forwardingruleexternals.networking.global.gdc.goog.patch
forwardingruleexternals.networking.global.gdc.goog.update
forwardingruleexternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.create
healthchecks.networking.global.gdc.goog.delete
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.patch
healthchecks.networking.global.gdc.goog.update
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.create
backends.networking.gdc.goog.delete
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.patch
backends.networking.gdc.goog.update
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.create
backendservicepolicies.networking.gdc.goog.delete
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.patch
backendservicepolicies.networking.gdc.goog.update
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.create
backendservices.networking.gdc.goog.delete
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.patch
backendservices.networking.gdc.goog.update
backendservices.networking.gdc.goog.watch
forwardingruleexternals.networking.gdc.goog.create
forwardingruleexternals.networking.gdc.goog.delete
forwardingruleexternals.networking.gdc.goog.get
forwardingruleexternals.networking.gdc.goog.list
forwardingruleexternals.networking.gdc.goog.patch
forwardingruleexternals.networking.gdc.goog.update
forwardingruleexternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.create
healthchecks.networking.gdc.goog.delete
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.patch
healthchecks.networking.gdc.goog.update
healthchecks.networking.gdc.goog.watch
全域內部負載平衡器管理員
(internal-load-balancer-admin)

在全域專案中建立及管理全域內部負載平衡器資源。

全球
backendservicepolicies.networking.global.gdc.goog.create
backendservicepolicies.networking.global.gdc.goog.delete
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.patch
backendservicepolicies.networking.global.gdc.goog.update
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.create
backendservices.networking.global.gdc.goog.delete
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.patch
backendservices.networking.global.gdc.goog.update
backendservices.networking.global.gdc.goog.watch
forwardingruleinternals.networking.global.gdc.goog.create
forwardingruleinternals.networking.global.gdc.goog.delete
forwardingruleinternals.networking.global.gdc.goog.get
forwardingruleinternals.networking.global.gdc.goog.list
forwardingruleinternals.networking.global.gdc.goog.patch
forwardingruleinternals.networking.global.gdc.goog.update
forwardingruleinternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.create
healthchecks.networking.global.gdc.goog.delete
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.patch
healthchecks.networking.global.gdc.goog.update
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.create
backends.networking.gdc.goog.delete
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.patch
backends.networking.gdc.goog.update
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.create
backendservicepolicies.networking.gdc.goog.delete
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.patch
backendservicepolicies.networking.gdc.goog.update
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.create
backendservices.networking.gdc.goog.delete
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.patch
backendservices.networking.gdc.goog.update
backendservices.networking.gdc.goog.watch
forwardingruleinternals.networking.gdc.goog.create
forwardingruleinternals.networking.gdc.goog.delete
forwardingruleinternals.networking.gdc.goog.get
forwardingruleinternals.networking.gdc.goog.list
forwardingruleinternals.networking.gdc.goog.patch
forwardingruleinternals.networking.gdc.goog.update
forwardingruleinternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.create
healthchecks.networking.gdc.goog.delete
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.patch
healthchecks.networking.gdc.goog.update
healthchecks.networking.gdc.goog.watch
全域內部負載平衡器檢視器
(internal-load-balancer-viewer)

查看全域專案中的全域內部負載平衡器資源。

全球
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.watch
forwardingruleinternals.networking.global.gdc.goog.get
forwardingruleinternals.networking.global.gdc.goog.list
forwardingruleinternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.watch
forwardingruleinternals.networking.gdc.goog.get
forwardingruleinternals.networking.gdc.goog.list
forwardingruleinternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.watch
全域負載平衡器開發人員
(load-balancer-developer)

在全域專案中建立及管理全域負載平衡器健康狀態檢查和後端服務。

全球
backendservicepolicies.networking.global.gdc.goog.create
backendservicepolicies.networking.global.gdc.goog.delete
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.patch
backendservicepolicies.networking.global.gdc.goog.update
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.create
backendservices.networking.global.gdc.goog.delete
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.patch
backendservices.networking.global.gdc.goog.update
backendservices.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.create
healthchecks.networking.global.gdc.goog.delete
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.patch
healthchecks.networking.global.gdc.goog.update
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.create
backends.networking.gdc.goog.delete
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.patch
backends.networking.gdc.goog.update
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.create
backendservicepolicies.networking.gdc.goog.delete
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.patch
backendservicepolicies.networking.gdc.goog.update
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.create
backendservices.networking.gdc.goog.delete
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.patch
backendservices.networking.gdc.goog.update
backendservices.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.create
healthchecks.networking.gdc.goog.delete
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.patch
healthchecks.networking.gdc.goog.update
healthchecks.networking.gdc.goog.watch
Global MZAEADKey Deleter
(global-mzaeadkey-deleter)

刪除專案中的 MZAEADKeys。

全球
mzaeadkeys.kms.global.gdc.goog.delete
mzaeadkeys.kms.global.gdc.goog.get
mzaeadkeys.kms.global.gdc.goog.list
mzaeadkeys.kms.global.gdc.goog.watch
Harbor 執行個體管理員
(harbor-instance-admin)

管理 Harbor 執行個體、專案和備份。

Zonal
harborinstancebackupplans.artifactregistry.gdc.goog.create
harborinstancebackupplans.artifactregistry.gdc.goog.delete
harborinstancebackupplans.artifactregistry.gdc.goog.get
harborinstancebackupplans.artifactregistry.gdc.goog.list
harborinstancebackupplans.artifactregistry.gdc.goog.patch
harborinstancebackupplans.artifactregistry.gdc.goog.update
harborinstancebackupplans.artifactregistry.gdc.goog.watch
harborinstancebackuprepositories.artifactregistry.gdc.goog.create
harborinstancebackuprepositories.artifactregistry.gdc.goog.delete
harborinstancebackuprepositories.artifactregistry.gdc.goog.get
harborinstancebackuprepositories.artifactregistry.gdc.goog.list
harborinstancebackuprepositories.artifactregistry.gdc.goog.patch
harborinstancebackuprepositories.artifactregistry.gdc.goog.update
harborinstancebackuprepositories.artifactregistry.gdc.goog.watch
harborinstancebackups.artifactregistry.gdc.goog.create
harborinstancebackups.artifactregistry.gdc.goog.delete
harborinstancebackups.artifactregistry.gdc.goog.get
harborinstancebackups.artifactregistry.gdc.goog.list
harborinstancebackups.artifactregistry.gdc.goog.patch
harborinstancebackups.artifactregistry.gdc.goog.update
harborinstancebackups.artifactregistry.gdc.goog.watch
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.create
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.delete
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.get
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.list
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.patch
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.update
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.watch
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.create
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.delete
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.get
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.list
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.patch
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.update
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.watch
harborinstanceprojects.artifactregistry.gdc.goog.create
harborinstanceprojects.artifactregistry.gdc.goog.get
harborinstanceprojects.artifactregistry.gdc.goog.patch
harborinstanceprojects.artifactregistry.gdc.goog.update
harborinstanceprojects.artifactregistry.gdc.goog.watch
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.create
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.delete
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.get
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.list
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.patch
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.update
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.watch
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.create
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.delete
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.get
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.list
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.patch
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.update
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.watch
harborinstancerestores.artifactregistry.gdc.goog.create
harborinstancerestores.artifactregistry.gdc.goog.delete
harborinstancerestores.artifactregistry.gdc.goog.get
harborinstancerestores.artifactregistry.gdc.goog.list
harborinstancerestores.artifactregistry.gdc.goog.patch
harborinstancerestores.artifactregistry.gdc.goog.update
harborinstancerestores.artifactregistry.gdc.goog.watch
harborinstances.artifactregistry.gdc.goog.create
harborinstances.artifactregistry.gdc.goog.delete
harborinstances.artifactregistry.gdc.goog.get
harborinstances.artifactregistry.gdc.goog.list
harborinstances.artifactregistry.gdc.goog.patch
harborinstances.artifactregistry.gdc.goog.update
harborinstances.artifactregistry.gdc.goog.watch
Harbor 執行個體檢視者
(harbor-instance-viewer)

查看 Harbor 執行個體、專案和備份。

Zonal
harborinstancebackupplans.artifactregistry.gdc.goog.get
harborinstancebackupplans.artifactregistry.gdc.goog.list
harborinstancebackupplans.artifactregistry.gdc.goog.watch
harborinstancebackuprepositories.artifactregistry.gdc.goog.get
harborinstancebackuprepositories.artifactregistry.gdc.goog.list
harborinstancebackuprepositories.artifactregistry.gdc.goog.watch
harborinstancebackups.artifactregistry.gdc.goog.get
harborinstancebackups.artifactregistry.gdc.goog.list
harborinstancebackups.artifactregistry.gdc.goog.watch
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.get
harborinstancedatabasebackups.artifactregistry.private.gdc.goog.list
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.get
harborinstancedatabaserestores.artifactregistry.private.gdc.goog.list
harborinstanceprojects.artifactregistry.gdc.goog.get
harborinstanceprojects.artifactregistry.gdc.goog.watch
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.get
harborinstanceregistrybackups.artifactregistry.private.gdc.goog.list
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.get
harborinstanceregistryrestores.artifactregistry.private.gdc.goog.list
harborinstancerestores.artifactregistry.gdc.goog.get
harborinstancerestores.artifactregistry.gdc.goog.list
harborinstancerestores.artifactregistry.gdc.goog.watch
harborinstances.artifactregistry.gdc.goog.get
harborinstances.artifactregistry.gdc.goog.list
harborinstances.artifactregistry.gdc.goog.watch
Harbor 專案建立者
(harbor-project-creator)

建立及查看 Harbor 執行個體專案。

Zonal
harborinstanceprojects.artifactregistry.gdc.goog.create
harborinstanceprojects.artifactregistry.gdc.goog.get
harborinstanceprojects.artifactregistry.gdc.goog.watch
IAM 專案管理員
(project-iam-admin)

管理專案權限。

全球
customroles.iam.global.gdc.goog.create
customroles.iam.global.gdc.goog.delete
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.patch
customroles.iam.global.gdc.goog.update
customroles.iam.global.gdc.goog.watch
iamrolebindings.iam.global.gdc.goog.create
iamrolebindings.iam.global.gdc.goog.delete
iamrolebindings.iam.global.gdc.goog.get
iamrolebindings.iam.global.gdc.goog.list
iamrolebindings.iam.global.gdc.goog.patch
iamrolebindings.iam.global.gdc.goog.update
iamrolebindings.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.create
iamroles.iam.global.gdc.goog.delete
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
iamroles.iam.global.gdc.goog.patch
iamroles.iam.global.gdc.goog.update
iamroles.iam.global.gdc.goog.watch
projectserviceaccounts.resourcemanager.global.gdc.goog.create
projectserviceaccounts.resourcemanager.global.gdc.goog.delete
projectserviceaccounts.resourcemanager.global.gdc.goog.get
projectserviceaccounts.resourcemanager.global.gdc.goog.list
projectserviceaccounts.resourcemanager.global.gdc.goog.patch
projectserviceaccounts.resourcemanager.global.gdc.goog.update
rolebindings.rbac.authorization.k8s.io.create
rolebindings.rbac.authorization.k8s.io.delete
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.patch
rolebindings.rbac.authorization.k8s.io.update
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.create
roles.rbac.authorization.k8s.io.delete
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.patch
roles.rbac.authorization.k8s.io.update
roles.rbac.authorization.k8s.io.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
customroles.iam.gdc.goog.create
customroles.iam.gdc.goog.delete
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.patch
customroles.iam.gdc.goog.update
customroles.iam.gdc.goog.watch
projectrolebindings.resourcemanager.gdc.goog.create
projectrolebindings.resourcemanager.gdc.goog.delete
projectrolebindings.resourcemanager.gdc.goog.get
projectrolebindings.resourcemanager.gdc.goog.list
projectrolebindings.resourcemanager.gdc.goog.patch
projectrolebindings.resourcemanager.gdc.goog.update
projectrolebindings.resourcemanager.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.create
projectroles.resourcemanager.gdc.goog.delete
projectroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.list
projectroles.resourcemanager.gdc.goog.patch
projectroles.resourcemanager.gdc.goog.update
projectroles.resourcemanager.gdc.goog.watch
projectserviceaccounts.resourcemanager.gdc.goog.create
projectserviceaccounts.resourcemanager.gdc.goog.delete
projectserviceaccounts.resourcemanager.gdc.goog.get
projectserviceaccounts.resourcemanager.gdc.goog.list
projectserviceaccounts.resourcemanager.gdc.goog.patch
projectserviceaccounts.resourcemanager.gdc.goog.update
projectserviceaccounts.resourcemanager.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.create
rolebindings.rbac.authorization.k8s.io.delete
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.patch
rolebindings.rbac.authorization.k8s.io.update
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.create
roles.rbac.authorization.k8s.io.delete
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.patch
roles.rbac.authorization.k8s.io.update
roles.rbac.authorization.k8s.io.watch
standardclusterrolebindings.iam.gdc.goog.create
standardclusterrolebindings.iam.gdc.goog.delete
standardclusterrolebindings.iam.gdc.goog.get
standardclusterrolebindings.iam.gdc.goog.list
standardclusterrolebindings.iam.gdc.goog.patch
standardclusterrolebindings.iam.gdc.goog.update
standardclusterrolebindings.iam.gdc.goog.watch
standardclusterroles.iam.gdc.goog.create
standardclusterroles.iam.gdc.goog.delete
standardclusterroles.iam.gdc.goog.get
standardclusterroles.iam.gdc.goog.list
standardclusterroles.iam.gdc.goog.patch
standardclusterroles.iam.gdc.goog.update
standardclusterroles.iam.gdc.goog.watch
IAM 專案檢視者
(project-iam-viewer)

查看專案權限。

全球
customroles.iam.global.gdc.goog.get
customroles.iam.global.gdc.goog.list
customroles.iam.global.gdc.goog.watch
iamrolebindings.iam.global.gdc.goog.get
iamrolebindings.iam.global.gdc.goog.list
iamrolebindings.iam.global.gdc.goog.watch
iamroles.iam.global.gdc.goog.get
iamroles.iam.global.gdc.goog.list
iamroles.iam.global.gdc.goog.watch
projectserviceaccounts.resourcemanager.global.gdc.goog.get
projectserviceaccounts.resourcemanager.global.gdc.goog.list
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch

Zonal
*.visibility.resourcemanager.gdc.goog.get
customroles.iam.gdc.goog.get
customroles.iam.gdc.goog.list
customroles.iam.gdc.goog.watch
projectrolebindings.resourcemanager.gdc.goog.get
projectrolebindings.resourcemanager.gdc.goog.list
projectrolebindings.resourcemanager.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.list
projectroles.resourcemanager.gdc.goog.watch
projectserviceaccounts.resourcemanager.gdc.goog.get
projectserviceaccounts.resourcemanager.gdc.goog.list
projectserviceaccounts.resourcemanager.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch
standardclusterrolebindings.iam.gdc.goog.get
standardclusterrolebindings.iam.gdc.goog.list
standardclusterrolebindings.iam.gdc.goog.watch
standardclusterroles.iam.gdc.goog.get
standardclusterroles.iam.gdc.goog.list
standardclusterroles.iam.gdc.goog.watch
K8S 網路政策管理員
(k8s-networkpolicy-admin)

建立及管理 k8s 網路政策。

Kubernetes 叢集
networkpolicies.networking.k8s.io.create
networkpolicies.networking.k8s.io.delete
networkpolicies.networking.k8s.io.get
networkpolicies.networking.k8s.io.list
networkpolicies.networking.k8s.io.patch
networkpolicies.networking.k8s.io.update
networkpolicies.networking.k8s.io.watch
K8S 網路政策檢視者
(k8s-networkpolicy-viewer)

查看 k8s 網路政策。

Kubernetes 叢集
networkpolicies.networking.k8s.io.get
networkpolicies.networking.k8s.io.list
networkpolicies.networking.k8s.io.watch
KMS 管理員
(kms-admin)

管理專案中的 KMS 金鑰,並讀取 KeyImports 和 KeyExports。

Zonal
aeadkeys.kms.gdc.goog.create
aeadkeys.kms.gdc.goog.decrypt
aeadkeys.kms.gdc.goog.delete
aeadkeys.kms.gdc.goog.encrypt
aeadkeys.kms.gdc.goog.generatedatakey
aeadkeys.kms.gdc.goog.get
aeadkeys.kms.gdc.goog.list
aeadkeys.kms.gdc.goog.patch
aeadkeys.kms.gdc.goog.update
aeadkeys.kms.gdc.goog.watch
keyexports.kms.gdc.goog.get
keyexports.kms.gdc.goog.list
keyexports.kms.gdc.goog.watch
keyimports.kms.gdc.goog.get
keyimports.kms.gdc.goog.list
keyimports.kms.gdc.goog.watch
signingkeys.kms.gdc.goog.create
signingkeys.kms.gdc.goog.delete
signingkeys.kms.gdc.goog.get
signingkeys.kms.gdc.goog.list
signingkeys.kms.gdc.goog.patch
signingkeys.kms.gdc.goog.sign
signingkeys.kms.gdc.goog.update
signingkeys.kms.gdc.goog.watch
KMS Creator
(kms-creator)

在專案中建立及讀取 KMS 金鑰。

Zonal
aeadkeys.kms.gdc.goog.create
aeadkeys.kms.gdc.goog.get
aeadkeys.kms.gdc.goog.list
aeadkeys.kms.gdc.goog.watch
signingkeys.kms.gdc.goog.create
signingkeys.kms.gdc.goog.get
signingkeys.kms.gdc.goog.list
signingkeys.kms.gdc.goog.watch
KMS 開發人員
(kms-developer)

使用專案中的 KMS 金鑰執行加密編譯作業。

Zonal
aeadkeys.kms.gdc.goog.decrypt
aeadkeys.kms.gdc.goog.encrypt
aeadkeys.kms.gdc.goog.generatedatakey
aeadkeys.kms.gdc.goog.get
aeadkeys.kms.gdc.goog.list
aeadkeys.kms.gdc.goog.watch
signingkeys.kms.gdc.goog.get
signingkeys.kms.gdc.goog.list
signingkeys.kms.gdc.goog.sign
signingkeys.kms.gdc.goog.watch
KMS 金鑰匯出管理員
(kms-keyexport-admin)

從 KMS 匯出專案中的 KMS 金鑰 (以包裝金鑰的形式)。

Zonal
keyexports.kms.gdc.goog.create
keyexports.kms.gdc.goog.delete
keyexports.kms.gdc.goog.get
keyexports.kms.gdc.goog.list
keyexports.kms.gdc.goog.patch
keyexports.kms.gdc.goog.update
keyexports.kms.gdc.goog.watch
KMS 金鑰匯入管理員
(kms-keyimport-admin)

將 KMS 金鑰匯入 KMS,做為專案中的包裝金鑰。

Zonal
keyimports.kms.gdc.goog.create
keyimports.kms.gdc.goog.delete
keyimports.kms.gdc.goog.get
keyimports.kms.gdc.goog.list
keyimports.kms.gdc.goog.patch
keyimports.kms.gdc.goog.update
keyimports.kms.gdc.goog.watch
KMS 檢視器
(kms-viewer)

讀取專案中的 KMS 金鑰。

Zonal
aeadkeys.kms.gdc.goog.get
aeadkeys.kms.gdc.goog.list
aeadkeys.kms.gdc.goog.watch
keyexports.kms.gdc.goog.get
keyexports.kms.gdc.goog.list
keyexports.kms.gdc.goog.watch
keyimports.kms.gdc.goog.get
keyimports.kms.gdc.goog.list
keyimports.kms.gdc.goog.watch
signingkeys.kms.gdc.goog.get
signingkeys.kms.gdc.goog.list
signingkeys.kms.gdc.goog.watch
LibraryAgent 使用者
(libraryagent-user)

允許客戶使用 Libraryagent Demo 服務的 API

Zonal
shelves.cloudresourcemanager.googleapis.com.list
shelves.libraryagent.api.v1alpha1.get
負載平衡器管理員
(load-balancer-admin)

負載平衡器管理員

全球
backendservicepolicies.networking.global.gdc.goog.create
backendservicepolicies.networking.global.gdc.goog.delete
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.patch
backendservicepolicies.networking.global.gdc.goog.update
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.create
backendservices.networking.global.gdc.goog.delete
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.patch
backendservices.networking.global.gdc.goog.update
backendservices.networking.global.gdc.goog.watch
forwardingruleexternals.networking.global.gdc.goog.create
forwardingruleexternals.networking.global.gdc.goog.delete
forwardingruleexternals.networking.global.gdc.goog.get
forwardingruleexternals.networking.global.gdc.goog.list
forwardingruleexternals.networking.global.gdc.goog.patch
forwardingruleexternals.networking.global.gdc.goog.update
forwardingruleexternals.networking.global.gdc.goog.watch
forwardingruleinternals.networking.global.gdc.goog.create
forwardingruleinternals.networking.global.gdc.goog.delete
forwardingruleinternals.networking.global.gdc.goog.get
forwardingruleinternals.networking.global.gdc.goog.list
forwardingruleinternals.networking.global.gdc.goog.patch
forwardingruleinternals.networking.global.gdc.goog.update
forwardingruleinternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.create
healthchecks.networking.global.gdc.goog.delete
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.patch
healthchecks.networking.global.gdc.goog.update
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.create
backends.networking.gdc.goog.delete
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.patch
backends.networking.gdc.goog.update
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.create
backendservicepolicies.networking.gdc.goog.delete
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.patch
backendservicepolicies.networking.gdc.goog.update
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.create
backendservices.networking.gdc.goog.delete
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.patch
backendservices.networking.gdc.goog.update
backendservices.networking.gdc.goog.watch
forwardingruleexternals.networking.gdc.goog.create
forwardingruleexternals.networking.gdc.goog.delete
forwardingruleexternals.networking.gdc.goog.get
forwardingruleexternals.networking.gdc.goog.list
forwardingruleexternals.networking.gdc.goog.patch
forwardingruleexternals.networking.gdc.goog.update
forwardingruleexternals.networking.gdc.goog.watch
forwardingruleinternals.networking.gdc.goog.create
forwardingruleinternals.networking.gdc.goog.delete
forwardingruleinternals.networking.gdc.goog.get
forwardingruleinternals.networking.gdc.goog.list
forwardingruleinternals.networking.gdc.goog.patch
forwardingruleinternals.networking.gdc.goog.update
forwardingruleinternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.create
healthchecks.networking.gdc.goog.delete
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.patch
healthchecks.networking.gdc.goog.update
healthchecks.networking.gdc.goog.watch
負載平衡器檢視者
(load-balancer-viewer)

負載平衡器檢視者。

全球
backendservicepolicies.networking.global.gdc.goog.get
backendservicepolicies.networking.global.gdc.goog.list
backendservicepolicies.networking.global.gdc.goog.watch
backendservices.networking.global.gdc.goog.get
backendservices.networking.global.gdc.goog.list
backendservices.networking.global.gdc.goog.watch
forwardingruleexternals.networking.global.gdc.goog.get
forwardingruleexternals.networking.global.gdc.goog.list
forwardingruleexternals.networking.global.gdc.goog.watch
forwardingruleinternals.networking.global.gdc.goog.get
forwardingruleinternals.networking.global.gdc.goog.list
forwardingruleinternals.networking.global.gdc.goog.watch
healthchecks.networking.global.gdc.goog.get
healthchecks.networking.global.gdc.goog.list
healthchecks.networking.global.gdc.goog.watch

Zonal
backends.networking.gdc.goog.get
backends.networking.gdc.goog.list
backends.networking.gdc.goog.watch
backendservicepolicies.networking.gdc.goog.get
backendservicepolicies.networking.gdc.goog.list
backendservicepolicies.networking.gdc.goog.watch
backendservices.networking.gdc.goog.get
backendservices.networking.gdc.goog.list
backendservices.networking.gdc.goog.watch
forwardingruleexternals.networking.gdc.goog.get
forwardingruleexternals.networking.gdc.goog.list
forwardingruleexternals.networking.gdc.goog.watch
forwardingruleinternals.networking.gdc.goog.get
forwardingruleinternals.networking.gdc.goog.list
forwardingruleinternals.networking.gdc.goog.watch
healthchecks.networking.gdc.goog.get
healthchecks.networking.gdc.goog.list
healthchecks.networking.gdc.goog.watch
記錄查詢者
(log-query-api-querier)

存取 Log Query API,查詢 AO 專案中的記錄。

Zonal
labels.goog.gdc.logging.v1.get
labels.goog.gdc.logging.v1.list
labelvalues.goog.gdc.logging.v1.get
labelvalues.goog.gdc.logging.v1.list
listlabelsrequests.goog.gdc.logging.v1.get
listlabelsrequests.goog.gdc.logging.v1.list
listlabelsresponses.goog.gdc.logging.v1.get
listlabelsresponses.goog.gdc.logging.v1.list
listlabelvaluesrequests.goog.gdc.logging.v1.get
listlabelvaluesrequests.goog.gdc.logging.v1.list
listlabelvaluesresponses.goog.gdc.logging.v1.get
listlabelvaluesresponses.goog.gdc.logging.v1.list
listlogsfilters.goog.gdc.logging.v1.get
listlogsfilters.goog.gdc.logging.v1.list
listlogsrequests.goog.gdc.logging.v1.get
listlogsrequests.goog.gdc.logging.v1.list
listlogsresponses.goog.gdc.logging.v1.get
listlogsresponses.goog.gdc.logging.v1.list
logs.goog.gdc.logging.v1.get
logs.goog.gdc.logging.v1.list
記錄稽核記錄目標資源偵錯工具
(auditloggingtarget-monitor)

查看及更新稽核記錄目標。

Zonal
auditloggingtargets.logging.private.gdc.goog.get
auditloggingtargets.logging.private.gdc.goog.list
auditloggingtargets.logging.private.gdc.goog.update
dnsregistrations.network.private.gdc.goog.get
dnsregistrations.network.private.gdc.goog.list
記錄規則建立者
(loggingrule-creator)

建立及查看記錄規則。

Zonal
loggingrules.logging.gdc.goog.create
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.watch
記錄規則編輯器
(loggingrule-editor)

編輯記錄規則。

Zonal
loggingrules.logging.gdc.goog.delete
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.patch
loggingrules.logging.gdc.goog.update
loggingrules.logging.gdc.goog.watch
記錄規則檢視器
(loggingrule-viewer)

查看記錄規則。

Zonal
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.watch
記錄目標建立者
(loggingtarget-creator)

建立及查看記錄目標。

Zonal
loggingtargets.logging.gdc.goog.create
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.watch
記錄目標編輯者
(loggingtarget-editor)

編輯記錄目標。

Zonal
loggingtargets.logging.gdc.goog.delete
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.patch
loggingtargets.logging.gdc.goog.update
loggingtargets.logging.gdc.goog.watch
記錄目標檢視器
(loggingtarget-viewer)

查看記錄目標。

Zonal
loggingtargets.logging.gdc.goog.get
loggingtargets.logging.gdc.goog.list
loggingtargets.logging.gdc.goog.watch
維護政策繫結專案編輯者
(project-mpb-editor)

管理專案中的 MaintenancePolicyBinding 資源。

Zonal
maintenancepolicybindings.maintenance.goog.create
maintenancepolicybindings.maintenance.goog.delete
maintenancepolicybindings.maintenance.goog.get
maintenancepolicybindings.maintenance.goog.list
maintenancepolicybindings.maintenance.goog.patch
maintenancepolicybindings.maintenance.goog.update
maintenancepolicybindings.maintenance.goog.watch
維護政策繫結專案檢視者
(project-mpb-viewer)

讀取專案中的 MaintenancePolicyBinding 資源。

Zonal
maintenancepolicybindings.maintenance.goog.get
maintenancepolicybindings.maintenance.goog.list
maintenancepolicybindings.maintenance.goog.watch
維護政策專案管理員
(project-mp-admin)

管理專案中的維護政策和維護政策繫結資源。

Zonal
maintenancepolicies.maintenance.goog.create
maintenancepolicies.maintenance.goog.delete
maintenancepolicies.maintenance.goog.get
maintenancepolicies.maintenance.goog.list
maintenancepolicies.maintenance.goog.patch
maintenancepolicies.maintenance.goog.update
maintenancepolicies.maintenance.goog.watch
maintenancepolicybindings.maintenance.goog.create
maintenancepolicybindings.maintenance.goog.delete
maintenancepolicybindings.maintenance.goog.get
maintenancepolicybindings.maintenance.goog.list
maintenancepolicybindings.maintenance.goog.patch
maintenancepolicybindings.maintenance.goog.update
maintenancepolicybindings.maintenance.goog.watch
維護政策專案編輯者
(project-mp-editor)

管理專案中的 MaintenancePolicy 資源。

Zonal
maintenancepolicies.maintenance.goog.create
maintenancepolicies.maintenance.goog.delete
maintenancepolicies.maintenance.goog.get
maintenancepolicies.maintenance.goog.list
maintenancepolicies.maintenance.goog.patch
maintenancepolicies.maintenance.goog.update
maintenancepolicies.maintenance.goog.watch
維護政策專案檢視者
(project-mp-viewer)

讀取專案中的 MaintenancePolicy 和 Maintenance Policy Binding 資源。

Zonal
maintenancepolicies.maintenance.goog.get
maintenancepolicies.maintenance.goog.list
maintenancepolicies.maintenance.goog.watch
受管理 DNS 專案管理員
(managed-dns-project-admin)

管理 Global API 中專案內代管 DNS 區域和資源記錄集的所有層面。

全球
manageddnszones.networking.global.gdc.goog.create
manageddnszones.networking.global.gdc.goog.delete
manageddnszones.networking.global.gdc.goog.get
manageddnszones.networking.global.gdc.goog.list
manageddnszones.networking.global.gdc.goog.patch
manageddnszones.networking.global.gdc.goog.update
manageddnszones.networking.global.gdc.goog.watch
resourcerecordsets.networking.global.gdc.goog.create
resourcerecordsets.networking.global.gdc.goog.delete
resourcerecordsets.networking.global.gdc.goog.get
resourcerecordsets.networking.global.gdc.goog.list
resourcerecordsets.networking.global.gdc.goog.patch
resourcerecordsets.networking.global.gdc.goog.update
resourcerecordsets.networking.global.gdc.goog.watch
受管理 DNS 專案檢視者
(managed-dns-project-viewer)

在 Global API 中,查看專案內的代管 DNS 區域和資源記錄集。

全球
manageddnszones.networking.global.gdc.goog.get
manageddnszones.networking.global.gdc.goog.list
resourcerecordsets.networking.global.gdc.goog.get
resourcerecordsets.networking.global.gdc.goog.list
市集目錄編輯者
(marketplace-catalog-editor)

查看、列出、建立、更新及刪除服務目錄。

全球
servicecatalogs.marketplace.global.gdc.goog.create
servicecatalogs.marketplace.global.gdc.goog.delete
servicecatalogs.marketplace.global.gdc.goog.get
servicecatalogs.marketplace.global.gdc.goog.list
servicecatalogs.marketplace.global.gdc.goog.patch
servicecatalogs.marketplace.global.gdc.goog.update
servicecatalogs.marketplace.global.gdc.goog.watch
Marketplace 目錄檢視者
(marketplace-catalog-viewer)

查看服務目錄。

全球
projects.resourcemanager.global.gdc.goog.get
projects.resourcemanager.global.gdc.goog.list
projects.resourcemanager.global.gdc.goog.watch
servicecatalogbindings.marketplace.global.gdc.goog.get
servicecatalogbindings.marketplace.global.gdc.goog.list
servicecatalogbindings.marketplace.global.gdc.goog.watch
市集編輯者
(marketplace-editor)

建立、更新及刪除服務執行個體。

Zonal
serviceinstances.marketplace.gdc.goog.create
serviceinstances.marketplace.gdc.goog.delete
serviceinstances.marketplace.gdc.goog.get
serviceinstances.marketplace.gdc.goog.list
serviceinstances.marketplace.gdc.goog.patch
serviceinstances.marketplace.gdc.goog.update
serviceinstances.marketplace.gdc.goog.watch
Marketplace 服務消費者
(marketplace-service-consumer)

建立、更新及刪除服務執行個體。

Zonal
serviceinstances.marketplace.gdc.goog.create
serviceinstances.marketplace.gdc.goog.delete
serviceinstances.marketplace.gdc.goog.get
serviceinstances.marketplace.gdc.goog.list
serviceinstances.marketplace.gdc.goog.patch
serviceinstances.marketplace.gdc.goog.update
serviceinstances.marketplace.gdc.goog.watch
Marketplace 服務編輯者
(marketplace-service-editor)

查看、列出、建立、更新及刪除服務版本和服務說明。

全球
servicedescriptions.marketplace.global.gdc.goog.create
servicedescriptions.marketplace.global.gdc.goog.delete
servicedescriptions.marketplace.global.gdc.goog.get
servicedescriptions.marketplace.global.gdc.goog.list
servicedescriptions.marketplace.global.gdc.goog.patch
servicedescriptions.marketplace.global.gdc.goog.update
servicedescriptions.marketplace.global.gdc.goog.watch
serviceversions.marketplace.global.gdc.goog.create
serviceversions.marketplace.global.gdc.goog.delete
serviceversions.marketplace.global.gdc.goog.get
serviceversions.marketplace.global.gdc.goog.list
serviceversions.marketplace.global.gdc.goog.patch
serviceversions.marketplace.global.gdc.goog.update
serviceversions.marketplace.global.gdc.goog.watch

Zonal
servicedescriptions.marketplace.gdc.goog.create
servicedescriptions.marketplace.gdc.goog.delete
servicedescriptions.marketplace.gdc.goog.get
servicedescriptions.marketplace.gdc.goog.list
servicedescriptions.marketplace.gdc.goog.patch
servicedescriptions.marketplace.gdc.goog.update
servicedescriptions.marketplace.gdc.goog.watch
serviceversions.marketplace.gdc.goog.create
serviceversions.marketplace.gdc.goog.delete
serviceversions.marketplace.gdc.goog.get
serviceversions.marketplace.gdc.goog.list
serviceversions.marketplace.gdc.goog.patch
serviceversions.marketplace.gdc.goog.update
serviceversions.marketplace.gdc.goog.watch
Marketplace 服務檢視者
(marketplace-service-viewer)

查看及列出服務版本、服務說明和服務目錄。

全球
servicecatalogs.marketplace.global.gdc.goog.get
servicecatalogs.marketplace.global.gdc.goog.list
servicecatalogs.marketplace.global.gdc.goog.watch
servicedescriptions.marketplace.global.gdc.goog.get
servicedescriptions.marketplace.global.gdc.goog.list
servicedescriptions.marketplace.global.gdc.goog.watch
serviceversions.marketplace.global.gdc.goog.get
serviceversions.marketplace.global.gdc.goog.list
serviceversions.marketplace.global.gdc.goog.watch

Zonal
catalogbundles.marketplaceview.gdc.goog.get
catalogbundles.marketplaceview.gdc.goog.list
catalogbundles.marketplaceview.gdc.goog.watch
servicedescriptions.marketplace.gdc.goog.get
servicedescriptions.marketplace.gdc.goog.list
servicedescriptions.marketplace.gdc.goog.watch
serviceinstances.marketplace.gdc.goog.get
serviceinstances.marketplace.gdc.goog.list
serviceinstances.marketplace.gdc.goog.watch
serviceversions.marketplace.gdc.goog.get
serviceversions.marketplace.gdc.goog.list
serviceversions.marketplace.gdc.goog.watch
Monitoring Project Alertmanager 編輯者
(project-cortex-alertmanager-editor)

編輯專案 Cortex Alertmanager 和規則。

Zonal
${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.DELETE
${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.GET
${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.POST
loggingrules.logging.gdc.goog.create
loggingrules.logging.gdc.goog.delete
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.logging.gdc.goog.patch
loggingrules.logging.gdc.goog.update
loggingrules.monitoring.gdc.goog.create
loggingrules.monitoring.gdc.goog.delete
loggingrules.monitoring.gdc.goog.get
loggingrules.monitoring.gdc.goog.list
loggingrules.monitoring.gdc.goog.patch
loggingrules.monitoring.gdc.goog.update
monitoringrules.monitoring.gdc.goog.create
monitoringrules.monitoring.gdc.goog.delete
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.patch
monitoringrules.monitoring.gdc.goog.update
Monitoring Project Alertmanager 檢視者
(project-cortex-alertmanager-viewer)

查看專案 Cortex Alertmanager。

Zonal
${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.GET
${.ProjectNamespace}-cortex-system/cortex-alertmanager.istio.resourcemanager.gdc.goog.POST
loggingrules.logging.gdc.goog.get
loggingrules.logging.gdc.goog.list
loggingrules.monitoring.gdc.goog.get
loggingrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
Monitoring Project Prometheus 檢視者
(project-cortex-prometheus-viewer)

管理專案 Cortex Prometheus 和指標。

Zonal
${.ProjectNamespace}-cortex-system/cortex-metrics.istio.resourcemanager.gdc.goog.GET
${.ProjectNamespace}-cortex-system/cortex-metrics.istio.resourcemanager.gdc.goog.POST
${.ProjectNamespace}-cortex-system/cortex-prometheus.istio.resourcemanager.gdc.goog.GET
${.ProjectNamespace}-cortex-system/cortex-prometheus.istio.resourcemanager.gdc.goog.POST
MonitoringRule 編輯者
(monitoringrule-editor)

管理監控規則。

Zonal
monitoringrules.monitoring.gdc.goog.delete
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.patch
monitoringrules.monitoring.gdc.goog.update
monitoringrules.monitoring.gdc.goog.watch
MonitoringRule 檢視者
(monitoringrule-viewer)

查看監控規則。

Zonal
monitoringrules.monitoring.gdc.goog.get
monitoringrules.monitoring.gdc.goog.list
monitoringrules.monitoring.gdc.goog.watch
MonitoringTarget 編輯者
(monitoringtarget-editor)

編輯監控目標。

Zonal
monitoringtargets.monitoring.gdc.goog.delete
monitoringtargets.monitoring.gdc.goog.get
monitoringtargets.monitoring.gdc.goog.list
monitoringtargets.monitoring.gdc.goog.patch
monitoringtargets.monitoring.gdc.goog.update
monitoringtargets.monitoring.gdc.goog.watch
MonitoringTarget 檢視者
(monitoringtarget-viewer)

查看監控目標。

Zonal
monitoringtargets.monitoring.gdc.goog.get
monitoringtargets.monitoring.gdc.goog.list
monitoringtargets.monitoring.gdc.goog.watch
NAT 檢視器
(nat-viewer)

讀取使用者叢集中的部署作業。

Kubernetes 叢集
deployments.apps.get
deployments.apps.list
命名空間管理員
(namespace-admin)

管理所有專案資源。

Kubernetes 叢集
*.*.create
*.*.delete
*.*.get
*.*.list
*.*.patch
*.*.update
*.*.watch
命名空間檢視器
(namespace-viewer)

查看所有專案資源。

Kubernetes 叢集
*.*.get
*.*.list
*.*.watch
ObservabilityPipeline 編輯者
(observabilitypipeline-editor)

編輯可觀測性管道。

Zonal
observabilitypipelines.observability.gdc.goog.delete
observabilitypipelines.observability.gdc.goog.get
observabilitypipelines.observability.gdc.goog.list
observabilitypipelines.observability.gdc.goog.patch
observabilitypipelines.observability.gdc.goog.update
observabilitypipelines.observability.gdc.goog.watch
ObservabilityPipeline Viewer
(observabilitypipeline-viewer)

查看可觀測性管道。

Zonal
observabilitypipelines.observability.gdc.goog.get
observabilitypipelines.observability.gdc.goog.list
observabilitypipelines.observability.gdc.goog.watch
專案 Grafana 檢視者
(project-grafana-viewer)

查看專案 Grafana 執行個體。

Zonal
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.DELETE
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.GET
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.HEAD
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.OPTIONS
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.PATCH
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.POST
${.ProjectNamespace}-grafana-system/grafana.istio.resourcemanager.gdc.goog.PUT
專案網路政策管理員
(project-networkpolicy-admin)

建立及管理專案網路政策。

全球
projectnetworkpolicies.networking.global.gdc.goog.create
projectnetworkpolicies.networking.global.gdc.goog.delete
projectnetworkpolicies.networking.global.gdc.goog.get
projectnetworkpolicies.networking.global.gdc.goog.list
projectnetworkpolicies.networking.global.gdc.goog.patch
projectnetworkpolicies.networking.global.gdc.goog.update
projectnetworkpolicies.networking.global.gdc.goog.watch
projectnetworkpolicyreplicas.networking.global.gdc.goog.create
projectnetworkpolicyreplicas.networking.global.gdc.goog.delete
projectnetworkpolicyreplicas.networking.global.gdc.goog.get
projectnetworkpolicyreplicas.networking.global.gdc.goog.list
projectnetworkpolicyreplicas.networking.global.gdc.goog.patch
projectnetworkpolicyreplicas.networking.global.gdc.goog.update
projectnetworkpolicyreplicas.networking.global.gdc.goog.watch

Zonal
projectnetworkpolicies.networking.gdc.goog.create
projectnetworkpolicies.networking.gdc.goog.delete
projectnetworkpolicies.networking.gdc.goog.get
projectnetworkpolicies.networking.gdc.goog.list
projectnetworkpolicies.networking.gdc.goog.patch
projectnetworkpolicies.networking.gdc.goog.update
projectnetworkpolicies.networking.gdc.goog.watch
專案網路政策檢視者
(project-networkpolicy-viewer)

查看專案網路政策。

全球
projectnetworkpolicies.networking.global.gdc.goog.get
projectnetworkpolicies.networking.global.gdc.goog.list
projectnetworkpolicies.networking.global.gdc.goog.watch
projectnetworkpolicyreplicas.networking.global.gdc.goog.get
projectnetworkpolicyreplicas.networking.global.gdc.goog.list
projectnetworkpolicyreplicas.networking.global.gdc.goog.watch

Zonal
projectnetworkpolicies.networking.gdc.goog.get
projectnetworkpolicies.networking.gdc.goog.list
projectnetworkpolicies.networking.gdc.goog.watch
專案配額管理員
(project-quota-admin)

管理機構的全球專案層級配額資源。

全球
quotavalues.quotamanagement.global.gdc.goog.create
quotavalues.quotamanagement.global.gdc.goog.delete
quotavalues.quotamanagement.global.gdc.goog.get
quotavalues.quotamanagement.global.gdc.goog.list
quotavalues.quotamanagement.global.gdc.goog.patch
quotavalues.quotamanagement.global.gdc.goog.update
quotavalues.quotamanagement.global.gdc.goog.watch
專案配額檢視者
(project-quota-viewer)

查看機構的全球專案層級配額資源。

全球
quotavalues.quotamanagement.global.gdc.goog.get
quotavalues.quotamanagement.global.gdc.goog.list
quotavalues.quotamanagement.global.gdc.goog.watch
專案檢視者
(project-viewer)

查看專案資源和權限。

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
customresourcedefinitions.apiextensions.k8s.io.get
customresourcedefinitions.apiextensions.k8s.io.list
customresourcedefinitions.apiextensions.k8s.io.watch
projectrolebindings.resourcemanager.gdc.goog.get
projectrolebindings.resourcemanager.gdc.goog.list
projectrolebindings.resourcemanager.gdc.goog.watch
projectroles.resourcemanager.gdc.goog.get
projectroles.resourcemanager.gdc.goog.list
projectroles.resourcemanager.gdc.goog.watch
rolebindings.rbac.authorization.k8s.io.get
rolebindings.rbac.authorization.k8s.io.list
rolebindings.rbac.authorization.k8s.io.watch
roles.rbac.authorization.k8s.io.get
roles.rbac.authorization.k8s.io.list
roles.rbac.authorization.k8s.io.watch
SIEM 匯出機構建立者
(siemexport-org-creator)

建立及查看 SIEM 匯出資源。

Zonal
secrets.create
secrets.get
secrets.list
secrets.watch
siemorgforwarders.logging.gdc.goog.create
siemorgforwarders.logging.gdc.goog.get
siemorgforwarders.logging.gdc.goog.list
siemorgforwarders.logging.gdc.goog.watch
SIEM 匯出機構編輯者
(siemexport-org-editor)

管理 SIEM 匯出資源。

Zonal
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
siemorgforwarders.logging.gdc.goog.delete
siemorgforwarders.logging.gdc.goog.get
siemorgforwarders.logging.gdc.goog.list
siemorgforwarders.logging.gdc.goog.patch
siemorgforwarders.logging.gdc.goog.update
siemorgforwarders.logging.gdc.goog.watch
SIEM 匯出機構檢視者
(siemexport-org-viewer)

查看 SIEM 匯出資源。

Zonal
secrets.get
secrets.list
secrets.watch
siemorgforwarders.logging.gdc.goog.get
siemorgforwarders.logging.gdc.goog.list
siemorgforwarders.logging.gdc.goog.watch
密鑰管理員
(secret-admin)

管理專案命名空間中的 Kubernetes 密鑰。

全球
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update

Zonal
secrets.create
secrets.delete
secrets.get
secrets.list
secrets.patch
secrets.update
secrets.watch
密鑰檢視者
(secret-viewer)

查看專案命名空間中的 Kubernetes Secret。

全球
secrets.get
secrets.list
secrets.watch

Zonal
secrets.get
secrets.list
secrets.watch
標準叢集管理員
(standard-cluster-admin)

管理標準叢集的建立和更新作業

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
clusters.cluster.gdc.goog.create
clusters.cluster.gdc.goog.delete
clusters.cluster.gdc.goog.get
clusters.cluster.gdc.goog.list
clusters.cluster.gdc.goog.patch
clusters.cluster.gdc.goog.update
clusters.cluster.gdc.goog.watch
projectbindings.resourcemanager.gdc.goog.create
projectbindings.resourcemanager.gdc.goog.delete
projectbindings.resourcemanager.gdc.goog.get
projectbindings.resourcemanager.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.watch
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.watch
userclusterupgraderequests.cluster.gdc.goog.create
userclusterupgraderequests.cluster.gdc.goog.delete
userclusterupgraderequests.cluster.gdc.goog.get
userclusterupgraderequests.cluster.gdc.goog.list
userclusterupgraderequests.cluster.gdc.goog.patch
userclusterupgraderequests.cluster.gdc.goog.update
userclusterupgraderequests.cluster.gdc.goog.watch
userclusterupgrades.upgrade.private.gdc.goog.create
userclusterupgrades.upgrade.private.gdc.goog.delete
userclusterupgrades.upgrade.private.gdc.goog.get
userclusterupgrades.upgrade.private.gdc.goog.list
userclusterupgrades.upgrade.private.gdc.goog.patch
userclusterupgrades.upgrade.private.gdc.goog.update
userclusterupgrades.upgrade.private.gdc.goog.watch
標準叢集檢視器
(standard-cluster-viewer)

查看 Standard 叢集的建立和更新作業

Zonal
*.visibility.resourcemanager.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
clusterinfos.resourcemanager.private.gdc.goog.watch
clusters.cluster.gdc.goog.get
clusters.cluster.gdc.goog.list
clusters.cluster.gdc.goog.watch
projectbindings.resourcemanager.gdc.goog.get
projectbindings.resourcemanager.gdc.goog.list
projectbindings.resourcemanager.gdc.goog.watch
projects.resourcemanager.gdc.goog.get
projects.resourcemanager.gdc.goog.list
projects.resourcemanager.gdc.goog.watch
userclusterupgraderequests.cluster.gdc.goog.get
userclusterupgraderequests.cluster.gdc.goog.list
userclusterupgraderequests.cluster.gdc.goog.watch
userclusterupgrades.upgrade.private.gdc.goog.get
userclusterupgrades.upgrade.private.gdc.goog.list
userclusterupgrades.upgrade.private.gdc.goog.watch
子網路專案管理員
(subnet-project-admin)

在專案中建立及管理子網路。

全球
subnets.ipam.global.gdc.goog.create
subnets.ipam.global.gdc.goog.delete
subnets.ipam.global.gdc.goog.get
subnets.ipam.global.gdc.goog.list
subnets.ipam.global.gdc.goog.patch
subnets.ipam.global.gdc.goog.update
subnets.ipam.global.gdc.goog.watch

Zonal
subnets.ipam.gdc.goog.create
subnets.ipam.gdc.goog.customized-allocate
subnets.ipam.gdc.goog.delete
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
subnets.ipam.gdc.goog.patch
subnets.ipam.gdc.goog.update
subnets.ipam.gdc.goog.watch
子網路專案運算子
(subnet-project-operator)

在專案中建立及管理子網路。

Zonal
subnets.ipam.gdc.goog.create
subnets.ipam.gdc.goog.delete
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
subnets.ipam.gdc.goog.patch
subnets.ipam.gdc.goog.update
subnets.ipam.gdc.goog.watch
子網路專案檢視者
(subnet-project-viewer)

查看專案中的子網路。

全球
subnets.ipam.global.gdc.goog.get
subnets.ipam.global.gdc.goog.list
subnets.ipam.global.gdc.goog.watch

Zonal
subnets.ipam.gdc.goog.get
subnets.ipam.gdc.goog.list
subnets.ipam.gdc.goog.watch
使用者叢集備份管理員
(usercluster-backup-admin)

專案範圍內的標準使用者叢集備份管理員。

Zonal
backupplans.backup.gdc.goog.create
backupplans.backup.gdc.goog.delete
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.patch
backupplans.backup.gdc.goog.update
backupplans.backup.gdc.goog.watch
backups.backup.gdc.goog.create
backups.backup.gdc.goog.delete
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.patch
backups.backup.gdc.goog.update
backups.backup.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.create
deletebackuprequests.backup.gdc.goog.delete
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.patch
deletebackuprequests.backup.gdc.goog.update
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.create
manualbackuprequests.backup.gdc.goog.delete
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.patch
manualbackuprequests.backup.gdc.goog.update
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.create
manualrestorerequests.backup.gdc.goog.delete
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.patch
manualrestorerequests.backup.gdc.goog.update
manualrestorerequests.backup.gdc.goog.watch
restoreplans.backup.gdc.goog.create
restoreplans.backup.gdc.goog.delete
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.patch
restoreplans.backup.gdc.goog.update
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.create
restores.backup.gdc.goog.delete
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.patch
restores.backup.gdc.goog.update
restores.backup.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
使用者叢集備份檢視者
(usercluster-backup-viewer)

專案範圍內的標準使用者叢集備份檢視者。

Zonal
backupplans.backup.gdc.goog.get
backupplans.backup.gdc.goog.list
backupplans.backup.gdc.goog.watch
backups.backup.gdc.goog.get
backups.backup.gdc.goog.list
backups.backup.gdc.goog.watch
deletebackuprequests.backup.gdc.goog.get
deletebackuprequests.backup.gdc.goog.list
deletebackuprequests.backup.gdc.goog.watch
manualbackuprequests.backup.gdc.goog.get
manualbackuprequests.backup.gdc.goog.list
manualbackuprequests.backup.gdc.goog.watch
manualrestorerequests.backup.gdc.goog.get
manualrestorerequests.backup.gdc.goog.list
manualrestorerequests.backup.gdc.goog.watch
restoreplans.backup.gdc.goog.get
restoreplans.backup.gdc.goog.list
restoreplans.backup.gdc.goog.watch
restores.backup.gdc.goog.get
restores.backup.gdc.goog.list
restores.backup.gdc.goog.watch
volumebackups.backup.gdc.goog.get
volumebackups.backup.gdc.goog.list
volumebackups.backup.gdc.goog.watch
volumerestores.backup.gdc.goog.get
volumerestores.backup.gdc.goog.list
volumerestores.backup.gdc.goog.watch
VAISEARCH 管理員
(vaisearch-admin)

管理專案中的所有 VAISEARCH 資源。

Zonal
answers.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.create
collections.discoveryengine.gdc.goog.delete
collections.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.list
collections.discoveryengine.gdc.goog.update
dataconnectorruns.discoveryengine.gdc.goog.list
dataconnectorruns.discoveryengine.gdc.goog.start
dataconnectors.discoveryengine.gdc.goog.get
dataconnectors.discoveryengine.gdc.goog.setup
dataconnectors.discoveryengine.gdc.goog.update
dataconnectorsources.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.create
datastores.discoveryengine.gdc.goog.delete
datastores.discoveryengine.gdc.goog.get
datastores.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.update
documents.discoveryengine.gdc.goog.create
documents.discoveryengine.gdc.goog.delete
documents.discoveryengine.gdc.goog.get
documents.discoveryengine.gdc.goog.import
documents.discoveryengine.gdc.goog.list
documents.discoveryengine.gdc.goog.update
engines.discoveryengine.gdc.goog.create
engines.discoveryengine.gdc.goog.delete
engines.discoveryengine.gdc.goog.get
engines.discoveryengine.gdc.goog.list
engines.discoveryengine.gdc.goog.search
engines.discoveryengine.gdc.goog.update
files.discoveryengine.gdc.goog.create
files.discoveryengine.gdc.goog.delete
files.discoveryengine.gdc.goog.get
files.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.create
identitymappingstores.discoveryengine.gdc.goog.delete
identitymappingstores.discoveryengine.gdc.goog.get
identitymappingstores.discoveryengine.gdc.goog.import
identitymappingstores.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.listidentitymappings
identitymappingstores.discoveryengine.gdc.goog.purge
operations.discoveryengine.gdc.goog.get
operations.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.answer
sessions.discoveryengine.gdc.goog.create
sessions.discoveryengine.gdc.goog.delete
sessions.discoveryengine.gdc.goog.get
sessions.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.update
VAISEARCH 控制台 UI 管理員
(vaisearch-admin-ui)

透過控制台 UI 管理 VAISEARCH 資源。

Zonal
collections.discoveryengine.gdc.goog.list
dataconnectorruns.discoveryengine.gdc.goog.list
dataconnectors.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.create
datastores.discoveryengine.gdc.goog.delete
datastores.discoveryengine.gdc.goog.get
datastores.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.patch
datastores.discoveryengine.gdc.goog.update
datastores.discoveryengine.gdc.goog.watch
documents.discoveryengine.gdc.goog.import
engines.discoveryengine.gdc.goog.create
engines.discoveryengine.gdc.goog.delete
engines.discoveryengine.gdc.goog.get
engines.discoveryengine.gdc.goog.list
engines.discoveryengine.gdc.goog.patch
engines.discoveryengine.gdc.goog.update
engines.discoveryengine.gdc.goog.watch
files.discoveryengine.gdc.goog.create
files.discoveryengine.gdc.goog.delete
files.discoveryengine.gdc.goog.get
files.discoveryengine.gdc.goog.list
operations.discoveryengine.gdc.goog.get
VAISEARCH 開發人員
(vaisearch-developer)

管理專案中的所有 VAISEARCH 資源。

Zonal
answers.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.create
collections.discoveryengine.gdc.goog.delete
collections.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.list
collections.discoveryengine.gdc.goog.update
dataconnectorruns.discoveryengine.gdc.goog.list
dataconnectorruns.discoveryengine.gdc.goog.start
dataconnectors.discoveryengine.gdc.goog.get
dataconnectors.discoveryengine.gdc.goog.setup
dataconnectors.discoveryengine.gdc.goog.update
dataconnectorsources.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.create
datastores.discoveryengine.gdc.goog.delete
datastores.discoveryengine.gdc.goog.get
datastores.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.update
documents.discoveryengine.gdc.goog.create
documents.discoveryengine.gdc.goog.delete
documents.discoveryengine.gdc.goog.get
documents.discoveryengine.gdc.goog.import
documents.discoveryengine.gdc.goog.list
documents.discoveryengine.gdc.goog.update
engines.discoveryengine.gdc.goog.create
engines.discoveryengine.gdc.goog.delete
engines.discoveryengine.gdc.goog.get
engines.discoveryengine.gdc.goog.list
engines.discoveryengine.gdc.goog.search
engines.discoveryengine.gdc.goog.update
files.discoveryengine.gdc.goog.create
files.discoveryengine.gdc.goog.delete
files.discoveryengine.gdc.goog.get
files.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.create
identitymappingstores.discoveryengine.gdc.goog.delete
identitymappingstores.discoveryengine.gdc.goog.get
identitymappingstores.discoveryengine.gdc.goog.import
identitymappingstores.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.listidentitymappings
identitymappingstores.discoveryengine.gdc.goog.purge
operations.discoveryengine.gdc.goog.get
operations.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.answer
sessions.discoveryengine.gdc.goog.create
sessions.discoveryengine.gdc.goog.delete
sessions.discoveryengine.gdc.goog.get
sessions.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.update
VAISEARCH 使用者
(vaisearch-user)

與 VAISEARCH 聊天室 UI 互動。

Zonal
answers.discoveryengine.gdc.goog.get
engines.discoveryengine.gdc.goog.search
files.discoveryengine.gdc.goog.create
files.discoveryengine.gdc.goog.delete
files.discoveryengine.gdc.goog.get
files.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.answer
VAISEARCH 檢視者
(vaisearch-viewer)

查看專案中的所有 VAISEARCH 資源。

Zonal
answers.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.get
collections.discoveryengine.gdc.goog.list
dataconnectorruns.discoveryengine.gdc.goog.list
dataconnectors.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.get
dataconnectorsources.discoveryengine.gdc.goog.list
datastores.discoveryengine.gdc.goog.get
datastores.discoveryengine.gdc.goog.list
documents.discoveryengine.gdc.goog.get
documents.discoveryengine.gdc.goog.list
engines.discoveryengine.gdc.goog.get
engines.discoveryengine.gdc.goog.list
engines.discoveryengine.gdc.goog.search
files.discoveryengine.gdc.goog.get
files.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.get
identitymappingstores.discoveryengine.gdc.goog.list
identitymappingstores.discoveryengine.gdc.goog.listidentitymappings
operations.discoveryengine.gdc.goog.get
operations.discoveryengine.gdc.goog.list
sessions.discoveryengine.gdc.goog.answer
sessions.discoveryengine.gdc.goog.get
sessions.discoveryengine.gdc.goog.list
Vertex AI Gemini Flash 開發人員
(ai-gemini-flash-developer)

對 Gemini Flash 模型端點執行預測和即時通訊完成要求。

Zonal
endpoints.gemini-flash.gdc.goog.chat-completions
endpoints.gemini-flash.gdc.goog.predict
Vertex AI Multimodal Embedding 開發人員
(ai-multimodal-embedding-developer)

對多模態嵌入模型端點執行預測要求。

Zonal
endpoints.multimodal-embedding.gdc.goog.predict
Vertex AI OCR 開發人員
(ai-ocr-developer)

存取 OCR 服務。

Zonal
annotators.vision.gdc.goog.async-batch-annotate-files
annotators.vision.gdc.goog.async-batch-annotate-images
annotators.vision.gdc.goog.batch-annotate-files
annotators.vision.gdc.goog.batch-annotate-images
annotators.vision.gdc.goog.create
annotators.vision.gdc.goog.delete
annotators.vision.gdc.goog.get
annotators.vision.gdc.goog.list
annotators.vision.gdc.goog.patch
annotators.vision.gdc.goog.update
annotators.vision.gdc.goog.watch
Vertex AI Prediction Admin
(vertex-ai-prediction-admin)

管理線上預測相關資源。

Kubernetes 叢集
deployedmodels.prediction.aiplatform.gdc.goog.create
deployedmodels.prediction.aiplatform.gdc.goog.delete
deployedmodels.prediction.aiplatform.gdc.goog.deletecollection
deployedmodels.prediction.aiplatform.gdc.goog.get
deployedmodels.prediction.aiplatform.gdc.goog.list
deployedmodels.prediction.aiplatform.gdc.goog.patch
deployedmodels.prediction.aiplatform.gdc.goog.update
deployedmodels.prediction.aiplatform.gdc.goog.watch
endpoints.aiplatform.gdc.goog.create
endpoints.aiplatform.gdc.goog.delete
endpoints.aiplatform.gdc.goog.deletecollection
endpoints.aiplatform.gdc.goog.get
endpoints.aiplatform.gdc.goog.list
endpoints.aiplatform.gdc.goog.patch
endpoints.aiplatform.gdc.goog.update
endpoints.aiplatform.gdc.goog.watch
resourcepools.prediction.aiplatform.gdc.goog.create
resourcepools.prediction.aiplatform.gdc.goog.delete
resourcepools.prediction.aiplatform.gdc.goog.deletecollection
resourcepools.prediction.aiplatform.gdc.goog.get
resourcepools.prediction.aiplatform.gdc.goog.list
resourcepools.prediction.aiplatform.gdc.goog.patch
resourcepools.prediction.aiplatform.gdc.goog.update
resourcepools.prediction.aiplatform.gdc.goog.watch
Vertex AI Prediction User
(vertex-ai-prediction-user)

在 AI Platform 端點上執行預測要求。

Zonal
endpoints.aiplatform.googleapis.com.predict
Vertex AI Speech Chirp 開發人員
(ai-speech-chirp-developer)

存取 Speech Chirp 服務。

Zonal
recognizers.speech.gdc.goog.create
recognizers.speech.gdc.goog.delete
recognizers.speech.gdc.goog.get
recognizers.speech.gdc.goog.list
recognizers.speech.gdc.goog.patch
recognizers.speech.gdc.goog.recognize
recognizers.speech.gdc.goog.streaming-recognize
recognizers.speech.gdc.goog.update
recognizers.speech.gdc.goog.watch
Vertex AI Speech 開發人員
(ai-speech-developer)

存取 Speech 服務。

Zonal
recognizers.speech.gdc.goog.create
recognizers.speech.gdc.goog.delete
recognizers.speech.gdc.goog.get
recognizers.speech.gdc.goog.list
recognizers.speech.gdc.goog.patch
recognizers.speech.gdc.goog.recognize
recognizers.speech.gdc.goog.streaming-recognize
recognizers.speech.gdc.goog.update
recognizers.speech.gdc.goog.watch
Vertex AI Text Embedding 開發人員
(ai-text-embedding-developer)

對文字嵌入模型端點執行預測要求。

Zonal
endpoints.text-embedding-005.gdc.goog.predict
endpoints.text-embedding.gdc.goog.predict
Vertex AI Text Embedding Multilingual Developer
(ai-text-embedding-multilingual-developer)

對 Text Embedding Multilingual 模型端點執行預測要求。

Zonal
endpoints.text-embedding-multilingual.gdc.goog.predict
Vertex AI Translation 開發人員
(ai-translation-developer)

存取翻譯服務。

Zonal
operations.translation.gdc.goog.batch-translate-document
operations.translation.gdc.goog.create
operations.translation.gdc.goog.create-glossary
operations.translation.gdc.goog.delete
operations.translation.gdc.goog.delete-glossary
operations.translation.gdc.goog.detect-language
operations.translation.gdc.goog.get
operations.translation.gdc.goog.get-glossary
operations.translation.gdc.goog.get-supported-languages
operations.translation.gdc.goog.list
operations.translation.gdc.goog.list-glossaries
operations.translation.gdc.goog.patch
operations.translation.gdc.goog.translate-document
operations.translation.gdc.goog.translate-text
operations.translation.gdc.goog.update
operations.translation.gdc.goog.watch
translators.translation.gdc.goog.batch-translate-document
translators.translation.gdc.goog.create
translators.translation.gdc.goog.create-glossary
translators.translation.gdc.goog.delete
translators.translation.gdc.goog.delete-glossary
translators.translation.gdc.goog.detect-language
translators.translation.gdc.goog.get
translators.translation.gdc.goog.get-glossary
translators.translation.gdc.goog.get-supported-languages
translators.translation.gdc.goog.list
translators.translation.gdc.goog.list-glossaries
translators.translation.gdc.goog.patch
translators.translation.gdc.goog.translate-document
translators.translation.gdc.goog.translate-text
translators.translation.gdc.goog.update
translators.translation.gdc.goog.watch
虛擬機器映像檔專案管理員
(project-vm-image-admin)

管理專案命名空間中的 VM 映像檔。

全球
virtualmachineimages.virtualmachine.global.gdc.goog.get
virtualmachineimages.virtualmachine.global.gdc.goog.list
virtualmachineimages.virtualmachine.global.gdc.goog.watch

Zonal
buckets.object.gdc.goog.create
buckets.object.gdc.goog.delete
buckets.object.gdc.goog.get
buckets.object.gdc.goog.list
buckets.object.gdc.goog.patch
buckets.object.gdc.goog.read-object
buckets.object.gdc.goog.update
buckets.object.gdc.goog.watch
buckets.object.gdc.goog.write-object
virtualmachineimage.virtualmachineview.gdc.goog.get
virtualmachineimage.virtualmachineview.gdc.goog.list
virtualmachineimage.virtualmachineview.gdc.goog.watch
virtualmachineimageimports.virtualmachine.gdc.goog.create
virtualmachineimageimports.virtualmachine.gdc.goog.delete
virtualmachineimageimports.virtualmachine.gdc.goog.get
virtualmachineimageimports.virtualmachine.gdc.goog.list
virtualmachineimageimports.virtualmachine.gdc.goog.patch
virtualmachineimageimports.virtualmachine.gdc.goog.update
virtualmachineimageimports.virtualmachine.gdc.goog.watch
virtualmachineimages.virtualmachine.gdc.goog.get
virtualmachineimages.virtualmachine.gdc.goog.list
virtualmachineimages.virtualmachine.gdc.goog.watch
虛擬機器映像檔專案檢視者
(project-vm-image-viewer)

查看專案命名空間中的 VM 映像檔。

全球
virtualmachineimages.virtualmachine.global.gdc.goog.get
virtualmachineimages.virtualmachine.global.gdc.goog.list
virtualmachineimages.virtualmachine.global.gdc.goog.watch

Zonal
virtualmachineimage.virtualmachineview.gdc.goog.get
virtualmachineimage.virtualmachineview.gdc.goog.list
virtualmachineimage.virtualmachineview.gdc.goog.watch
virtualmachineimages.virtualmachine.gdc.goog.get
virtualmachineimages.virtualmachine.gdc.goog.list
virtualmachineimages.virtualmachine.gdc.goog.watch
虛擬機器專案管理員
(project-vm-admin)

管理專案命名空間中的 VM。

全球
virtualmachineimages.virtualmachine.global.gdc.goog.get
virtualmachineimages.virtualmachine.global.gdc.goog.list
virtualmachineimages.virtualmachine.global.gdc.goog.watch
virtualmachinetemplates.virtualmachine.global.gdc.goog.create
virtualmachinetemplates.virtualmachine.global.gdc.goog.delete
virtualmachinetemplates.virtualmachine.global.gdc.goog.get
virtualmachinetemplates.virtualmachine.global.gdc.goog.list
virtualmachinetemplates.virtualmachine.global.gdc.goog.watch
volumereplicationrelationships.storage.global.gdc.goog.create
volumereplicationrelationships.storage.global.gdc.goog.delete
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.patch
volumereplicationrelationships.storage.global.gdc.goog.update
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
projectnetworkpolicies.networking.gdc.goog.get
projectnetworkpolicies.networking.gdc.goog.list
secrets.get
secrets.list
virtualmachineaccessrequests.virtualmachine.gdc.goog.create
virtualmachineaccessrequests.virtualmachine.gdc.goog.delete
virtualmachineaccessrequests.virtualmachine.gdc.goog.get
virtualmachineaccessrequests.virtualmachine.gdc.goog.list
virtualmachineaccessrequests.virtualmachine.gdc.goog.patch
virtualmachineaccessrequests.virtualmachine.gdc.goog.update
virtualmachineaccessrequests.virtualmachine.gdc.goog.watch
virtualmachinebackupplans.virtualmachine.gdc.goog.delete
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.patch
virtualmachinebackupplans.virtualmachine.gdc.goog.update
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.create
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.delete
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.patch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.update
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch
virtualmachinebackuprequests.virtualmachine.gdc.goog.create
virtualmachinebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinebackuprequests.virtualmachine.gdc.goog.get
virtualmachinebackuprequests.virtualmachine.gdc.goog.list
virtualmachinebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.create
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.delete
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinedisks.virtualmachine.gdc.goog.create
virtualmachinedisks.virtualmachine.gdc.goog.delete
virtualmachinedisks.virtualmachine.gdc.goog.get
virtualmachinedisks.virtualmachine.gdc.goog.list
virtualmachinedisks.virtualmachine.gdc.goog.patch
virtualmachinedisks.virtualmachine.gdc.goog.update
virtualmachinedisks.virtualmachine.gdc.goog.watch
virtualmachineexternalaccesses.virtualmachine.gdc.goog.create
virtualmachineexternalaccesses.virtualmachine.gdc.goog.delete
virtualmachineexternalaccesses.virtualmachine.gdc.goog.get
virtualmachineexternalaccesses.virtualmachine.gdc.goog.list
virtualmachineexternalaccesses.virtualmachine.gdc.goog.patch
virtualmachineexternalaccesses.virtualmachine.gdc.goog.update
virtualmachineexternalaccesses.virtualmachine.gdc.goog.watch
virtualmachineimages.virtualmachine.gdc.goog.get
virtualmachineimages.virtualmachine.gdc.goog.list
virtualmachineimages.virtualmachine.gdc.goog.watch
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.create
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.delete
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.get
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.list
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.patch
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.update
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.watch
virtualmachinerestorerequests.virtualmachine.gdc.goog.create
virtualmachinerestorerequests.virtualmachine.gdc.goog.delete
virtualmachinerestorerequests.virtualmachine.gdc.goog.get
virtualmachinerestorerequests.virtualmachine.gdc.goog.list
virtualmachinerestorerequests.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.delete
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.patch
virtualmachinerestores.virtualmachine.gdc.goog.update
virtualmachinerestores.virtualmachine.gdc.goog.watch
virtualmachines.virtualmachine.gdc.goog.console
virtualmachines.virtualmachine.gdc.goog.create
virtualmachines.virtualmachine.gdc.goog.delete
virtualmachines.virtualmachine.gdc.goog.get
virtualmachines.virtualmachine.gdc.goog.getmetadata
virtualmachines.virtualmachine.gdc.goog.list
virtualmachines.virtualmachine.gdc.goog.patch
virtualmachines.virtualmachine.gdc.goog.setmetadata
virtualmachines.virtualmachine.gdc.goog.update
virtualmachines.virtualmachine.gdc.goog.watch
virtualmachines/restart.virtualmachineoperations.gdc.goog.update
虛擬機器專案檢視者
(project-vm-viewer)

查看專案命名空間中的 VM。

全球
virtualmachineimages.virtualmachine.global.gdc.goog.get
virtualmachineimages.virtualmachine.global.gdc.goog.list
virtualmachineimages.virtualmachine.global.gdc.goog.watch
volumereplicationrelationships.storage.global.gdc.goog.get
volumereplicationrelationships.storage.global.gdc.goog.list
volumereplicationrelationships.storage.global.gdc.goog.watch

Zonal
projectnetworkpolicies.networking.gdc.goog.get
projectnetworkpolicies.networking.gdc.goog.list
secrets.get
secrets.list
virtualmachineaccessrequests.virtualmachine.gdc.goog.get
virtualmachineaccessrequests.virtualmachine.gdc.goog.list
virtualmachineaccessrequests.virtualmachine.gdc.goog.watch
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.get
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.list
virtualmachinebackupplantemplates.virtualmachine.gdc.goog.watch
virtualmachinebackuprequests.virtualmachine.gdc.goog.get
virtualmachinebackuprequests.virtualmachine.gdc.goog.list
virtualmachinebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.get
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.list
virtualmachinedeletebackuprequests.virtualmachine.gdc.goog.watch
virtualmachinedisks.virtualmachine.gdc.goog.get
virtualmachinedisks.virtualmachine.gdc.goog.list
virtualmachinedisks.virtualmachine.gdc.goog.watch
virtualmachineexternalaccesses.virtualmachine.gdc.goog.get
virtualmachineexternalaccesses.virtualmachine.gdc.goog.list
virtualmachineexternalaccesses.virtualmachine.gdc.goog.watch
virtualmachineimages.virtualmachine.gdc.goog.get
virtualmachineimages.virtualmachine.gdc.goog.list
virtualmachineimages.virtualmachine.gdc.goog.watch
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.get
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.list
virtualmachinepasswordresetrequests.virtualmachine.gdc.goog.watch
virtualmachinerestorerequests.virtualmachine.gdc.goog.get
virtualmachinerestorerequests.virtualmachine.gdc.goog.list
virtualmachinerestorerequests.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.watch
virtualmachines.virtualmachine.gdc.goog.get
virtualmachines.virtualmachine.gdc.goog.getmetadata
virtualmachines.virtualmachine.gdc.goog.list
virtualmachines.virtualmachine.gdc.goog.watch
虛擬機器備份使用者
(vmbackup-user)

具備建立 VM 備份和還原的權限,以及查看 VM 備份方案的檢視權限。

Zonal
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackuprequest.virtualmachine.gdc.goog.create
virtualmachinebackuprequest.virtualmachine.gdc.goog.delete
virtualmachinebackuprequest.virtualmachine.gdc.goog.get
virtualmachinebackuprequest.virtualmachine.gdc.goog.list
virtualmachinebackuprequest.virtualmachine.gdc.goog.patch
virtualmachinebackuprequest.virtualmachine.gdc.goog.update
virtualmachinebackuprequest.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinerestorerequest.virtualmachine.gdc.goog.create
virtualmachinerestorerequest.virtualmachine.gdc.goog.delete
virtualmachinerestorerequest.virtualmachine.gdc.goog.get
virtualmachinerestorerequest.virtualmachine.gdc.goog.list
virtualmachinerestorerequest.virtualmachine.gdc.goog.patch
virtualmachinerestorerequest.virtualmachine.gdc.goog.update
virtualmachinerestorerequest.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.watch
虛擬機器備份檢視者
(vmbackup-viewer)

授予 VM 備份、VM 還原、VM 備份方案和 VM 還原方案的檢視權限。

Zonal
virtualmachinebackupplans.virtualmachine.gdc.goog.get
virtualmachinebackupplans.virtualmachine.gdc.goog.list
virtualmachinebackupplans.virtualmachine.gdc.goog.watch
virtualmachinebackuprequest.virtualmachine.gdc.goog.get
virtualmachinebackuprequest.virtualmachine.gdc.goog.list
virtualmachinebackuprequest.virtualmachine.gdc.goog.watch
virtualmachinebackups.virtualmachine.gdc.goog.get
virtualmachinebackups.virtualmachine.gdc.goog.list
virtualmachinebackups.virtualmachine.gdc.goog.watch
virtualmachinerestorerequest.virtualmachine.gdc.goog.get
virtualmachinerestorerequest.virtualmachine.gdc.goog.list
virtualmachinerestorerequest.virtualmachine.gdc.goog.watch
virtualmachinerestores.virtualmachine.gdc.goog.get
virtualmachinerestores.virtualmachine.gdc.goog.list
virtualmachinerestores.virtualmachine.gdc.goog.watch
Workbench Notebooks 管理員
(workbench-notebooks-admin)

具備 Workbench 筆記本的建立、讀取及刪除存取權。具備 ClusterInfos 的讀取權限

Zonal
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
notebook/notebook-root.istio.resourcemanager.gdc.goog.CONNECT
notebook/notebook-root.istio.resourcemanager.gdc.goog.DELETE
notebook/notebook-root.istio.resourcemanager.gdc.goog.GET
notebook/notebook-root.istio.resourcemanager.gdc.goog.HEAD
notebook/notebook-root.istio.resourcemanager.gdc.goog.OPTIONS
notebook/notebook-root.istio.resourcemanager.gdc.goog.PATCH
notebook/notebook-root.istio.resourcemanager.gdc.goog.POST
notebook/notebook-root.istio.resourcemanager.gdc.goog.PUT
notebook/notebook-root.istio.resourcemanager.gdc.goog.TRACE
notebooks.aiplatform.gdc.goog.create
notebooks.aiplatform.gdc.goog.delete
notebooks.aiplatform.gdc.goog.deletecollection
notebooks.aiplatform.gdc.goog.get
notebooks.aiplatform.gdc.goog.list
notebooks.aiplatform.gdc.goog.patch
notebooks.aiplatform.gdc.goog.update
notebooks.aiplatform.gdc.goog.watch
notebooks/status.aiplatform.gdc.goog.get
notebooks/status.aiplatform.gdc.goog.list
Workbench Notebooks Viewer
(workbench-notebooks-viewer)

具備 Workbench Notebooks 的讀取權限

Zonal
clusterinfos.resourcemanager.private.gdc.goog.get
clusterinfos.resourcemanager.private.gdc.goog.list
notebook/notebook-root.istio.resourcemanager.gdc.goog.CONNECT
notebook/notebook-root.istio.resourcemanager.gdc.goog.DELETE
notebook/notebook-root.istio.resourcemanager.gdc.goog.GET
notebook/notebook-root.istio.resourcemanager.gdc.goog.HEAD
notebook/notebook-root.istio.resourcemanager.gdc.goog.OPTIONS
notebook/notebook-root.istio.resourcemanager.gdc.goog.PATCH
notebook/notebook-root.istio.resourcemanager.gdc.goog.POST
notebook/notebook-root.istio.resourcemanager.gdc.goog.PUT
notebook/notebook-root.istio.resourcemanager.gdc.goog.TRACE
notebooks.aiplatform.gdc.goog.get
notebooks.aiplatform.gdc.goog.list
notebooks/status.aiplatform.gdc.goog.get
notebooks/status.aiplatform.gdc.goog.list
工作負載檢視者
(workload-viewer)

查看專案中的 Pod 和 Deployment。

Kubernetes 叢集
deployments.apps.get
deployments.apps.list
deployments.apps.watch
pods.get
pods.list
pods.watch