Fetch all roles

bgeesaman · bgeesaman · commit 5762981b7718 · 2026-03-06T01:35:14.000Z
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/aiplatform.colabEnterpriseAdmin b/roles/aiplatform.colabEnterpriseAdmin
@@ -50,6 +50,7 @@
     "dataform.folders.addContents",
     "dataform.folders.create",
     "dataform.folders.delete",
+    "dataform.folders.deleteTree",
     "dataform.folders.get",
     "dataform.folders.getIamPolicy",
     "dataform.folders.move",
@@ -85,6 +86,7 @@
     "dataform.repositories.update",
     "dataform.teamFolders.create",
     "dataform.teamFolders.delete",
+    "dataform.teamFolders.deleteTree",
     "dataform.teamFolders.get",
     "dataform.teamFolders.getIamPolicy",
     "dataform.teamFolders.setIamPolicy",
diff --git a/roles/apihub.addonsAdmin b/roles/apihub.addonsAdmin
@@ -9,6 +9,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/apihub.addonsAdmin",
-  "stage": "BETA",
+  "stage": "GA",
   "title": "Cloud API hub Addons Admin"
 }
diff --git a/roles/apihub.editor b/roles/apihub.editor
@@ -85,6 +85,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/apihub.editor",
-  "stage": "BETA",
+  "stage": "GA",
   "title": "Cloud API Hub Editor"
 }
diff --git a/roles/apihub.runTimeProjectAttachmentsEditor b/roles/apihub.runTimeProjectAttachmentsEditor
@@ -5,6 +5,6 @@
     "apihub.runTimeProjectAttachments.attach"
   ],
   "name": "roles/apihub.runTimeProjectAttachmentsEditor",
-  "stage": "GA",
+  "stage": "BETA",
   "title": "Cloud API hub Runtime Project Attachment Editor"
 }
diff --git a/roles/apihub.viewer b/roles/apihub.viewer
@@ -55,6 +55,6 @@
     "resourcemanager.projects.list"
   ],
   "name": "roles/apihub.viewer",
-  "stage": "BETA",
+  "stage": "GA",
   "title": "Cloud API hub Viewer"
 }
diff --git a/roles/auditmanager.admin b/roles/auditmanager.admin
@@ -5,6 +5,10 @@
     "auditmanager.auditReports.generate",
     "auditmanager.auditReports.get",
     "auditmanager.auditReports.list",
+    "auditmanager.auditSchedules.create",
+    "auditmanager.auditSchedules.get",
+    "auditmanager.auditSchedules.list",
+    "auditmanager.auditSchedules.update",
     "auditmanager.auditScopeReports.generate",
     "auditmanager.billingSettings.get",
     "auditmanager.controlReports.get",
diff --git a/roles/bigquery.studioAdmin b/roles/bigquery.studioAdmin
@@ -254,7 +254,6 @@
     "dataform.folders.addContents",
     "dataform.folders.create",
     "dataform.folders.delete",
-    "dataform.folders.deleteTree",
     "dataform.folders.get",
     "dataform.folders.getIamPolicy",
     "dataform.folders.move",
@@ -290,7 +289,6 @@
     "dataform.repositories.update",
     "dataform.teamFolders.create",
     "dataform.teamFolders.delete",
-    "dataform.teamFolders.deleteTree",
     "dataform.teamFolders.get",
     "dataform.teamFolders.getIamPolicy",
     "dataform.teamFolders.setIamPolicy",
diff --git a/roles/cloudkms.admin b/roles/cloudkms.admin
@@ -5,6 +5,7 @@
     "cloudkms.autokeyConfigs.get",
     "cloudkms.autokeyConfigs.update",
     "cloudkms.cryptoKeyVersions.create",
+    "cloudkms.cryptoKeyVersions.delete",
     "cloudkms.cryptoKeyVersions.destroy",
     "cloudkms.cryptoKeyVersions.get",
     "cloudkms.cryptoKeyVersions.list",
@@ -13,6 +14,7 @@
     "cloudkms.cryptoKeyVersions.useToDecryptViaDelegation",
     "cloudkms.cryptoKeyVersions.useToEncryptViaDelegation",
     "cloudkms.cryptoKeys.create",
+    "cloudkms.cryptoKeys.delete",
     "cloudkms.cryptoKeys.get",
     "cloudkms.cryptoKeys.getIamPolicy",
     "cloudkms.cryptoKeys.list",
@@ -57,6 +59,8 @@
     "cloudkms.projects.showEffectiveAutokeyConfig",
     "cloudkms.projects.showEffectiveKajEnrollmentConfig",
     "cloudkms.projects.showEffectiveKajPolicyConfig",
+    "cloudkms.retiredResources.get",
+    "cloudkms.retiredResources.list",
     "cloudkms.singleTenantHsmInstanceProposals.delete",
     "cloudkms.singleTenantHsmInstanceProposals.get",
     "cloudkms.singleTenantHsmInstanceProposals.list",
diff --git a/roles/cloudkms.viewer b/roles/cloudkms.viewer
@@ -20,8 +20,6 @@
     "cloudkms.locations.get",
     "cloudkms.locations.list",
     "cloudkms.operations.get",
-    "cloudkms.retiredResources.get",
-    "cloudkms.retiredResources.list",
     "cloudkms.singleTenantHsmInstanceProposals.get",
     "cloudkms.singleTenantHsmInstanceProposals.list",
     "cloudkms.singleTenantHsmInstances.get",
diff --git a/roles/composer.serviceAgent b/roles/composer.serviceAgent
@@ -704,6 +704,7 @@
     "compute.regionTargetHttpsProxies.setUrlMap",
     "compute.regionTargetHttpsProxies.update",
     "compute.regionTargetHttpsProxies.use",
+    "compute.regionTargetTcpProxies.attach",
     "compute.regionTargetTcpProxies.create",
     "compute.regionTargetTcpProxies.createTagBinding",
     "compute.regionTargetTcpProxies.delete",
@@ -920,6 +921,7 @@
     "compute.targetSslProxies.setSslPolicy",
     "compute.targetSslProxies.update",
     "compute.targetSslProxies.use",
+    "compute.targetTcpProxies.attach",
     "compute.targetTcpProxies.create",
     "compute.targetTcpProxies.createTagBinding",
     "compute.targetTcpProxies.delete",
diff --git a/roles/compute.loadBalancerAdmin b/roles/compute.loadBalancerAdmin
@@ -281,7 +281,6 @@
     "compute.regionTargetHttpsProxies.setUrlMap",
     "compute.regionTargetHttpsProxies.update",
     "compute.regionTargetHttpsProxies.use",
-    "compute.regionTargetTcpProxies.attach",
     "compute.regionTargetTcpProxies.create",
     "compute.regionTargetTcpProxies.createTagBinding",
     "compute.regionTargetTcpProxies.delete",
@@ -410,7 +409,6 @@
     "compute.targetSslProxies.setSslPolicy",
     "compute.targetSslProxies.update",
     "compute.targetSslProxies.use",
-    "compute.targetTcpProxies.attach",
     "compute.targetTcpProxies.create",
     "compute.targetTcpProxies.createTagBinding",
     "compute.targetTcpProxies.delete",
diff --git a/roles/dataflow.serviceAgent b/roles/dataflow.serviceAgent
@@ -723,6 +723,7 @@
     "compute.regionTargetHttpsProxies.setUrlMap",
     "compute.regionTargetHttpsProxies.update",
     "compute.regionTargetHttpsProxies.use",
+    "compute.regionTargetTcpProxies.attach",
     "compute.regionTargetTcpProxies.create",
     "compute.regionTargetTcpProxies.createTagBinding",
     "compute.regionTargetTcpProxies.delete",
@@ -943,6 +944,7 @@
     "compute.targetSslProxies.setSslPolicy",
     "compute.targetSslProxies.update",
     "compute.targetSslProxies.use",
+    "compute.targetTcpProxies.attach",
     "compute.targetTcpProxies.create",
     "compute.targetTcpProxies.createTagBinding",
     "compute.targetTcpProxies.delete",
@@ -1033,6 +1035,7 @@
     "dataform.folders.addContents",
     "dataform.folders.create",
     "dataform.folders.delete",
+    "dataform.folders.deleteTree",
     "dataform.folders.get",
     "dataform.folders.getIamPolicy",
     "dataform.folders.move",
@@ -1068,6 +1071,7 @@
     "dataform.repositories.update",
     "dataform.teamFolders.create",
     "dataform.teamFolders.delete",
+    "dataform.teamFolders.deleteTree",
     "dataform.teamFolders.get",
     "dataform.teamFolders.getIamPolicy",
     "dataform.teamFolders.setIamPolicy",
diff --git a/roles/dataproc.serviceAgent b/roles/dataproc.serviceAgent
@@ -213,6 +213,8 @@
     "compute.projects.get",
     "compute.regionFirewallPolicies.create",
     "compute.regionFirewallPolicies.createTagBinding",
+    "compute.regionFirewallPolicies.delete",
+    "compute.regionFirewallPolicies.deleteTagBinding",
     "compute.regionFirewallPolicies.get",
     "compute.regionFirewallPolicies.update",
     "compute.regionFirewallPolicies.use",
diff --git a/roles/editor b/roles/editor
@@ -1186,6 +1186,10 @@
     "auditmanager.auditReports.generate",
     "auditmanager.auditReports.get",
     "auditmanager.auditReports.list",
+    "auditmanager.auditSchedules.create",
+    "auditmanager.auditSchedules.get",
+    "auditmanager.auditSchedules.list",
+    "auditmanager.auditSchedules.update",
     "auditmanager.auditScopeReports.generate",
     "auditmanager.billingSettings.get",
     "auditmanager.controlReports.get",
@@ -2820,10 +2824,12 @@
     "cloudkms.autokeyConfigs.get",
     "cloudkms.autokeyConfigs.update",
     "cloudkms.cryptoKeyVersions.create",
+    "cloudkms.cryptoKeyVersions.delete",
     "cloudkms.cryptoKeyVersions.get",
     "cloudkms.cryptoKeyVersions.list",
     "cloudkms.cryptoKeyVersions.update",
     "cloudkms.cryptoKeys.create",
+    "cloudkms.cryptoKeys.delete",
     "cloudkms.cryptoKeys.get",
     "cloudkms.cryptoKeys.getIamPolicy",
     "cloudkms.cryptoKeys.list",
@@ -2862,6 +2868,8 @@
     "cloudkms.projects.showEffectiveKajEnrollmentConfig",
     "cloudkms.projects.showEffectiveKajPolicyConfig",
     "cloudkms.protectedResources.search",
+    "cloudkms.retiredResources.get",
+    "cloudkms.retiredResources.list",
     "cloudkms.singleTenantHsmInstanceProposals.approve",
     "cloudkms.singleTenantHsmInstanceProposals.create",
     "cloudkms.singleTenantHsmInstanceProposals.delete",
@@ -3901,6 +3909,7 @@
     "compute.regionTargetHttpsProxies.setUrlMap",
     "compute.regionTargetHttpsProxies.update",
     "compute.regionTargetHttpsProxies.use",
+    "compute.regionTargetTcpProxies.attach",
     "compute.regionTargetTcpProxies.create",
     "compute.regionTargetTcpProxies.delete",
     "compute.regionTargetTcpProxies.get",
@@ -4117,6 +4126,7 @@
     "compute.targetSslProxies.setSslPolicy",
     "compute.targetSslProxies.update",
     "compute.targetSslProxies.use",
+    "compute.targetTcpProxies.attach",
     "compute.targetTcpProxies.create",
     "compute.targetTcpProxies.delete",
     "compute.targetTcpProxies.get",
@@ -5122,6 +5132,7 @@
     "dataform.folders.addContents",
     "dataform.folders.create",
     "dataform.folders.delete",
+    "dataform.folders.deleteTree",
     "dataform.folders.get",
     "dataform.folders.getIamPolicy",
     "dataform.folders.move",
@@ -5155,6 +5166,7 @@
     "dataform.repositories.update",
     "dataform.teamFolders.create",
     "dataform.teamFolders.delete",
+    "dataform.teamFolders.deleteTree",
     "dataform.teamFolders.get",
     "dataform.teamFolders.getIamPolicy",
     "dataform.teamFolders.update",
diff --git a/roles/iam.securityAdmin b/roles/iam.securityAdmin
@@ -275,6 +275,7 @@
     "assuredworkloads.violations.list",
     "assuredworkloads.workload.list",
     "auditmanager.auditReports.list",
+    "auditmanager.auditSchedules.list",
     "auditmanager.controlReports.list",
     "auditmanager.controls.list",
     "auditmanager.customComplianceFrameworks.list",
@@ -628,6 +629,7 @@
     "cloudkms.keyRings.list",
     "cloudkms.keyRings.setIamPolicy",
     "cloudkms.locations.list",
+    "cloudkms.retiredResources.list",
     "cloudkms.singleTenantHsmInstanceProposals.list",
     "cloudkms.singleTenantHsmInstances.list",
     "cloudlocationfinder.cloudLocations.list",
diff --git a/roles/iam.securityAuditor b/roles/iam.securityAuditor
@@ -305,7 +305,6 @@
     "assuredworkloads.violations.list",
     "assuredworkloads.workload.list",
     "auditmanager.auditReports.list",
-    "auditmanager.auditSchedules.list",
     "auditmanager.controlReports.list",
     "auditmanager.controls.list",
     "auditmanager.customComplianceFrameworks.list",
@@ -1220,8 +1219,6 @@
     "cloudkms.locations.get",
     "cloudkms.locations.list",
     "cloudkms.operations.get",
-    "cloudkms.retiredResources.get",
-    "cloudkms.retiredResources.list",
     "cloudkms.singleTenantHsmInstanceProposals.get",
     "cloudkms.singleTenantHsmInstanceProposals.list",
     "cloudkms.singleTenantHsmInstances.get",
diff --git a/roles/iam.securityReviewer b/roles/iam.securityReviewer
@@ -253,6 +253,7 @@
     "assuredworkloads.violations.list",
     "assuredworkloads.workload.list",
     "auditmanager.auditReports.list",
+    "auditmanager.auditSchedules.list",
     "auditmanager.controlReports.list",
     "auditmanager.controls.list",
     "auditmanager.customComplianceFrameworks.list",
@@ -562,6 +563,7 @@
     "cloudkms.keyRings.getIamPolicy",
     "cloudkms.keyRings.list",
     "cloudkms.locations.list",
+    "cloudkms.retiredResources.list",
     "cloudkms.singleTenantHsmInstanceProposals.list",
     "cloudkms.singleTenantHsmInstances.list",
     "cloudlocationfinder.cloudLocations.list",
diff --git a/roles/multiclusterservicediscovery.serviceAgent b/roles/multiclusterservicediscovery.serviceAgent
@@ -96,6 +96,7 @@
     "compute.networks.list",
     "compute.networks.updatePolicy",
     "compute.networks.use",
+    "compute.regionTargetTcpProxies.attach",
     "compute.regionTargetTcpProxies.create",
     "compute.regionTargetTcpProxies.createTagBinding",
     "compute.regionTargetTcpProxies.delete",
@@ -133,6 +134,7 @@
     "compute.targetHttpsProxies.setUrlMap",
     "compute.targetHttpsProxies.update",
     "compute.targetHttpsProxies.use",
+    "compute.targetTcpProxies.attach",
     "compute.targetTcpProxies.create",
     "compute.targetTcpProxies.createTagBinding",
     "compute.targetTcpProxies.delete",
diff --git a/roles/notebooks.legacyAdmin b/roles/notebooks.legacyAdmin
@@ -729,6 +729,7 @@
     "compute.regionTargetHttpsProxies.setUrlMap",
     "compute.regionTargetHttpsProxies.update",
     "compute.regionTargetHttpsProxies.use",
+    "compute.regionTargetTcpProxies.attach",
     "compute.regionTargetTcpProxies.create",
     "compute.regionTargetTcpProxies.createTagBinding",
     "compute.regionTargetTcpProxies.delete",
@@ -987,6 +988,7 @@
     "compute.targetSslProxies.setSslPolicy",
     "compute.targetSslProxies.update",
     "compute.targetSslProxies.use",
+    "compute.targetTcpProxies.attach",
     "compute.targetTcpProxies.create",
     "compute.targetTcpProxies.createTagBinding",
     "compute.targetTcpProxies.delete",
diff --git a/roles/spanner.serviceAgent b/roles/spanner.serviceAgent
@@ -26,12 +26,10 @@
     "logging.logEntries.create",
     "run.jobs.run",
     "run.routes.invoke",
-    "spanner.databases.beginOrRollbackReadWriteTransaction",
     "spanner.databases.beginReadOnlyTransaction",
     "spanner.databases.partitionQuery",
     "spanner.databases.select",
     "spanner.databases.useDataBoost",
-    "spanner.databases.write",
     "spanner.sessions.create",
     "storage.buckets.create",
     "storage.buckets.get",
diff --git a/roles/viewer b/roles/viewer
@@ -577,8 +577,6 @@
     "assuredworkloads.workload.list",
     "auditmanager.auditReports.get",
     "auditmanager.auditReports.list",
-    "auditmanager.auditSchedules.get",
-    "auditmanager.auditSchedules.list",
     "auditmanager.billingSettings.get",
     "auditmanager.controlReports.get",
     "auditmanager.controlReports.list",
@@ -1504,8 +1502,6 @@
     "cloudkms.projects.showEffectiveKajEnrollmentConfig",
     "cloudkms.projects.showEffectiveKajPolicyConfig",
     "cloudkms.protectedResources.search",
-    "cloudkms.retiredResources.get",
-    "cloudkms.retiredResources.list",
     "cloudkms.singleTenantHsmInstanceProposals.get",
     "cloudkms.singleTenantHsmInstanceProposals.list",
     "cloudkms.singleTenantHsmInstances.get",
diff --git a/roles/vpcaccess.serviceAgent b/roles/vpcaccess.serviceAgent
@@ -3,10 +3,6 @@
   "etag": "AA==",
   "includedPermissions": [
     "billing.accounts.get",
-    "compute.addresses.createInternal",
-    "compute.addresses.deleteInternal",
-    "compute.addresses.get",
-    "compute.addresses.list",
     "compute.autoscalers.create",
     "compute.autoscalers.delete",
     "compute.autoscalers.get",

Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,6 @@`
`9`	`9`	`"resourcemanager.projects.list"`
`10`	`10`	`],`
`11`	`11`	`"name": "roles/apihub.addonsAdmin",`
`12`		`- "stage": "BETA",`
	`12`	`+ "stage": "GA",`
`13`	`13`	`"title": "Cloud API hub Addons Admin"`
`14`	`14`	`}`
Original file line number	Diff line number	Diff line change
`@@ -85,6 +85,6 @@`
`85`	`85`	`"resourcemanager.projects.list"`
`86`	`86`	`],`
`87`	`87`	`"name": "roles/apihub.editor",`
`88`		`- "stage": "BETA",`
	`88`	`+ "stage": "GA",`
`89`	`89`	`"title": "Cloud API Hub Editor"`
`90`	`90`	`}`
Original file line number	Diff line number	Diff line change
`@@ -5,6 +5,6 @@`
`5`	`5`	`"apihub.runTimeProjectAttachments.attach"`
`6`	`6`	`],`
`7`	`7`	`"name": "roles/apihub.runTimeProjectAttachmentsEditor",`
`8`		`- "stage": "GA",`
	`8`	`+ "stage": "BETA",`
`9`	`9`	`"title": "Cloud API hub Runtime Project Attachment Editor"`
`10`	`10`	`}`
Original file line number	Diff line number	Diff line change
`@@ -55,6 +55,6 @@`
`55`	`55`	`"resourcemanager.projects.list"`
`56`	`56`	`],`
`57`	`57`	`"name": "roles/apihub.viewer",`
`58`		`- "stage": "BETA",`
	`58`	`+ "stage": "GA",`
`59`	`59`	`"title": "Cloud API hub Viewer"`
`60`	`60`	`}`