Fetch all roles

bgeesaman · bgeesaman · commit 585e39dd6688 · 2026-05-17T01:49:11.000Z
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/alloydb.backupDrAdmin b/roles/alloydb.backupDrAdmin
@@ -29,6 +29,6 @@
     "backupdr.serviceConfig.initialize"
   ],
   "name": "roles/alloydb.backupDrAdmin",
-  "stage": "GA",
+  "stage": "ALPHA",
   "title": "AlloyDB Admin for BackupDR"
 }
diff --git a/roles/chronicle.admin b/roles/chronicle.admin
@@ -321,7 +321,6 @@
     "chronicle.investigations.fetchAssociated",
     "chronicle.investigations.get",
     "chronicle.investigations.list",
-    "chronicle.investigations.transitionReviewState",
     "chronicle.investigations.trigger",
     "chronicle.involvedEntities.get",
     "chronicle.involvedEntities.update",
diff --git a/roles/compute.editor b/roles/compute.editor
@@ -431,16 +431,6 @@
     "compute.nodeTemplates.list",
     "compute.nodeTypes.get",
     "compute.nodeTypes.list",
-    "compute.orgRolloutPlans.create",
-    "compute.orgRolloutPlans.delete",
-    "compute.orgRolloutPlans.get",
-    "compute.orgRolloutPlans.list",
-    "compute.orgRollouts.cancel",
-    "compute.orgRollouts.delete",
-    "compute.orgRollouts.get",
-    "compute.orgRollouts.list",
-    "compute.orgRollouts.pause",
-    "compute.orgRollouts.resume",
     "compute.organizations.listAssociations",
     "compute.organizations.setFirewallPolicy",
     "compute.organizations.setSecurityPolicy",
diff --git a/roles/compute.viewer b/roles/compute.viewer
@@ -188,6 +188,10 @@
     "compute.nodeTemplates.list",
     "compute.nodeTypes.get",
     "compute.nodeTypes.list",
+    "compute.orgRolloutPlans.get",
+    "compute.orgRolloutPlans.list",
+    "compute.orgRollouts.get",
+    "compute.orgRollouts.list",
     "compute.organizations.listAssociations",
     "compute.packetMirrorings.get",
     "compute.packetMirrorings.list",
diff --git a/roles/datacatalog.admin b/roles/datacatalog.admin
@@ -106,7 +106,6 @@
     "dataplex.entryGroups.useDescriptionsAspect",
     "dataplex.entryGroups.useGenericAspect",
     "dataplex.entryGroups.useGenericEntry",
-    "dataplex.entryGroups.useGraphProfileAspect",
     "dataplex.entryGroups.useMySQLConnectorTypes",
     "dataplex.entryGroups.useOracleConnectorTypes",
     "dataplex.entryGroups.useOverviewAspect",
diff --git a/roles/datacatalog.entryGroupOwner b/roles/datacatalog.entryGroupOwner
@@ -60,6 +60,7 @@
     "dataplex.entryGroups.useDescriptionsAspect",
     "dataplex.entryGroups.useGenericAspect",
     "dataplex.entryGroups.useGenericEntry",
+    "dataplex.entryGroups.useGraphProfileAspect",
     "dataplex.entryGroups.useMySQLConnectorTypes",
     "dataplex.entryGroups.useOracleConnectorTypes",
     "dataplex.entryGroups.useOverviewAspect",
diff --git a/roles/datacatalog.entryOwner b/roles/datacatalog.entryOwner
@@ -45,7 +45,6 @@
     "dataplex.entryGroups.useDescriptionsAspect",
     "dataplex.entryGroups.useGenericAspect",
     "dataplex.entryGroups.useGenericEntry",
-    "dataplex.entryGroups.useGraphProfileAspect",
     "dataplex.entryGroups.useMySQLConnectorTypes",
     "dataplex.entryGroups.useOracleConnectorTypes",
     "dataplex.entryGroups.useOverviewAspect",
diff --git a/roles/dataflow.serviceAgent b/roles/dataflow.serviceAgent
@@ -1626,11 +1626,6 @@
     "storage.buckets.setIpFilter",
     "storage.buckets.update",
     "storage.buckets.viewIntelligenceDetails",
-    "storage.featureConfigs.create",
-    "storage.featureConfigs.delete",
-    "storage.featureConfigs.get",
-    "storage.featureConfigs.list",
-    "storage.featureConfigs.update",
     "storage.folders.create",
     "storage.folders.delete",
     "storage.folders.get",
diff --git a/roles/datapipelines.serviceAgent b/roles/datapipelines.serviceAgent
@@ -107,6 +107,11 @@
     "storage.buckets.setIpFilter",
     "storage.buckets.update",
     "storage.buckets.viewIntelligenceDetails",
+    "storage.featureConfigs.create",
+    "storage.featureConfigs.delete",
+    "storage.featureConfigs.get",
+    "storage.featureConfigs.list",
+    "storage.featureConfigs.update",
     "storage.folders.create",
     "storage.folders.delete",
     "storage.folders.get",
diff --git a/roles/dataplex.catalogAdmin b/roles/dataplex.catalogAdmin
@@ -38,7 +38,6 @@
     "dataplex.entryGroups.useDescriptionsAspect",
     "dataplex.entryGroups.useGenericAspect",
     "dataplex.entryGroups.useGenericEntry",
-    "dataplex.entryGroups.useGraphProfileAspect",
     "dataplex.entryGroups.useMySQLConnectorTypes",
     "dataplex.entryGroups.useOracleConnectorTypes",
     "dataplex.entryGroups.useOverviewAspect",
diff --git a/roles/dataplex.catalogEditor b/roles/dataplex.catalogEditor
@@ -34,6 +34,7 @@
     "dataplex.entryGroups.useDescriptionsAspect",
     "dataplex.entryGroups.useGenericAspect",
     "dataplex.entryGroups.useGenericEntry",
+    "dataplex.entryGroups.useGraphProfileAspect",
     "dataplex.entryGroups.useMySQLConnectorTypes",
     "dataplex.entryGroups.useOracleConnectorTypes",
     "dataplex.entryGroups.useOverviewAspect",
diff --git a/roles/dataplex.entryOwner b/roles/dataplex.entryOwner
@@ -25,7 +25,6 @@
     "dataplex.entryGroups.useDescriptionsAspect",
     "dataplex.entryGroups.useGenericAspect",
     "dataplex.entryGroups.useGenericEntry",
-    "dataplex.entryGroups.useGraphProfileAspect",
     "dataplex.entryGroups.useMySQLConnectorTypes",
     "dataplex.entryGroups.useOracleConnectorTypes",
     "dataplex.entryGroups.useOverviewAspect",
diff --git a/roles/firebase.admin b/roles/firebase.admin
@@ -693,6 +693,11 @@
     "storage.buckets.setIpFilter",
     "storage.buckets.update",
     "storage.buckets.viewIntelligenceDetails",
+    "storage.featureConfigs.create",
+    "storage.featureConfigs.delete",
+    "storage.featureConfigs.get",
+    "storage.featureConfigs.list",
+    "storage.featureConfigs.update",
     "storage.folders.create",
     "storage.folders.delete",
     "storage.folders.get",
diff --git a/roles/health.admin b/roles/health.admin
@@ -1,5 +1,5 @@
 {
-  "description": "Admin access to Health resources.",
+  "description": "Admin access to Google Health API resources.",
   "etag": "AA==",
   "includedPermissions": [
     "health.subscribers.create",
@@ -14,5 +14,5 @@
   ],
   "name": "roles/health.admin",
   "stage": "GA",
-  "title": "Health Admin"
+  "title": "Google Health API Admin"
 }
diff --git a/roles/health.viewer b/roles/health.viewer
@@ -1,5 +1,5 @@
 {
-  "description": "Read-only access to Google Health API resources.",
+  "description": "Read-only access to Health resources.",
   "etag": "AA==",
   "includedPermissions": [
     "health.subscribers.list",
@@ -8,5 +8,5 @@
   ],
   "name": "roles/health.viewer",
   "stage": "GA",
-  "title": "Google Health API Viewer"
+  "title": "Health Viewer"
 }
diff --git a/roles/iam.infrastructureAdmin b/roles/iam.infrastructureAdmin
@@ -536,16 +536,6 @@
     "compute.nodeTemplates.setIamPolicy",
     "compute.nodeTypes.get",
     "compute.nodeTypes.list",
-    "compute.orgRolloutPlans.create",
-    "compute.orgRolloutPlans.delete",
-    "compute.orgRolloutPlans.get",
-    "compute.orgRolloutPlans.list",
-    "compute.orgRollouts.cancel",
-    "compute.orgRollouts.delete",
-    "compute.orgRollouts.get",
-    "compute.orgRollouts.list",
-    "compute.orgRollouts.pause",
-    "compute.orgRollouts.resume",
     "compute.organizations.disableXpnHost",
     "compute.organizations.disableXpnResource",
     "compute.organizations.enableXpnHost",
@@ -1986,11 +1976,6 @@
     "storage.buckets.setIpFilter",
     "storage.buckets.update",
     "storage.buckets.viewIntelligenceDetails",
-    "storage.featureConfigs.create",
-    "storage.featureConfigs.delete",
-    "storage.featureConfigs.get",
-    "storage.featureConfigs.list",
-    "storage.featureConfigs.update",
     "storage.folders.create",
     "storage.folders.delete",
     "storage.folders.get",
diff --git a/roles/ml.serviceAgent b/roles/ml.serviceAgent
@@ -104,6 +104,11 @@
     "storage.buckets.setIpFilter",
     "storage.buckets.update",
     "storage.buckets.viewIntelligenceDetails",
+    "storage.featureConfigs.create",
+    "storage.featureConfigs.delete",
+    "storage.featureConfigs.get",
+    "storage.featureConfigs.list",
+    "storage.featureConfigs.update",
     "storage.folders.create",
     "storage.folders.delete",
     "storage.folders.get",
diff --git a/roles/modelarmor.editor b/roles/modelarmor.editor
@@ -16,6 +16,8 @@
     "modelarmor.templates.useToSanitizeModelResponse",
     "modelarmor.templates.useToSanitizeOutput",
     "modelarmor.templates.useToSanitizeUserPrompt",
+    "modelarmor.templates.useToStreamSanitizeModelResponse",
+    "modelarmor.templates.useToStreamSanitizeUserPrompt",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],
diff --git a/roles/modelarmor.user b/roles/modelarmor.user
@@ -8,8 +8,6 @@
     "modelarmor.templates.useToSanitizeModelResponse",
     "modelarmor.templates.useToSanitizeOutput",
     "modelarmor.templates.useToSanitizeUserPrompt",
-    "modelarmor.templates.useToStreamSanitizeModelResponse",
-    "modelarmor.templates.useToStreamSanitizeUserPrompt",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list"
   ],
diff --git a/roles/notebooks.admin b/roles/notebooks.admin
@@ -199,6 +199,10 @@
     "compute.nodeTemplates.list",
     "compute.nodeTypes.get",
     "compute.nodeTypes.list",
+    "compute.orgRolloutPlans.get",
+    "compute.orgRolloutPlans.list",
+    "compute.orgRollouts.get",
+    "compute.orgRollouts.list",
     "compute.organizations.listAssociations",
     "compute.packetMirrorings.get",
     "compute.packetMirrorings.list",
diff --git a/roles/notebooks.editor b/roles/notebooks.editor
@@ -192,10 +192,6 @@
     "compute.nodeTemplates.list",
     "compute.nodeTypes.get",
     "compute.nodeTypes.list",
-    "compute.orgRolloutPlans.get",
-    "compute.orgRolloutPlans.list",
-    "compute.orgRollouts.get",
-    "compute.orgRollouts.list",
     "compute.organizations.listAssociations",
     "compute.packetMirrorings.get",
     "compute.packetMirrorings.list",
diff --git a/roles/notebooks.legacyAdmin b/roles/notebooks.legacyAdmin
@@ -534,16 +534,6 @@
     "compute.nodeTemplates.setIamPolicy",
     "compute.nodeTypes.get",
     "compute.nodeTypes.list",
-    "compute.orgRolloutPlans.create",
-    "compute.orgRolloutPlans.delete",
-    "compute.orgRolloutPlans.get",
-    "compute.orgRolloutPlans.list",
-    "compute.orgRollouts.cancel",
-    "compute.orgRollouts.delete",
-    "compute.orgRollouts.get",
-    "compute.orgRollouts.list",
-    "compute.orgRollouts.pause",
-    "compute.orgRollouts.resume",
     "compute.organizations.disableXpnHost",
     "compute.organizations.disableXpnResource",
     "compute.organizations.enableXpnHost",
diff --git a/roles/notebooks.runner b/roles/notebooks.runner
@@ -199,6 +199,10 @@
     "compute.nodeTemplates.list",
     "compute.nodeTypes.get",
     "compute.nodeTypes.list",
+    "compute.orgRolloutPlans.get",
+    "compute.orgRolloutPlans.list",
+    "compute.orgRollouts.get",
+    "compute.orgRollouts.list",
     "compute.organizations.listAssociations",
     "compute.packetMirrorings.get",
     "compute.packetMirrorings.list",
diff --git a/roles/securitycenter.admin b/roles/securitycenter.admin
@@ -264,6 +264,8 @@
     "modelarmor.templates.useToSanitizeModelResponse",
     "modelarmor.templates.useToSanitizeOutput",
     "modelarmor.templates.useToSanitizeUserPrompt",
+    "modelarmor.templates.useToStreamSanitizeModelResponse",
+    "modelarmor.templates.useToStreamSanitizeUserPrompt",
     "monitoring.alertPolicies.get",
     "monitoring.alertPolicies.list",
     "monitoring.alertPolicies.listEffectiveTags",
diff --git a/roles/storage.admin b/roles/storage.admin
@@ -57,6 +57,11 @@
     "storage.buckets.setIpFilter",
     "storage.buckets.update",
     "storage.buckets.viewIntelligenceDetails",
+    "storage.featureConfigs.create",
+    "storage.featureConfigs.delete",
+    "storage.featureConfigs.get",
+    "storage.featureConfigs.list",
+    "storage.featureConfigs.update",
     "storage.folders.create",
     "storage.folders.delete",
     "storage.folders.get",
diff --git a/roles/storage.editor b/roles/storage.editor
@@ -10,11 +10,6 @@
     "storage.buckets.listEffectiveTags",
     "storage.buckets.listTagBindings",
     "storage.buckets.viewIntelligenceDetails",
-    "storage.featureConfigs.create",
-    "storage.featureConfigs.delete",
-    "storage.featureConfigs.get",
-    "storage.featureConfigs.list",
-    "storage.featureConfigs.update",
     "storage.folders.create",
     "storage.folders.delete",
     "storage.folders.get",

Original file line number	Diff line number	Diff line change
`@@ -29,6 +29,6 @@`
`29`	`29`	`"backupdr.serviceConfig.initialize"`
`30`	`30`	`],`
`31`	`31`	`"name": "roles/alloydb.backupDrAdmin",`
`32`		`- "stage": "GA",`
	`32`	`+ "stage": "ALPHA",`
`33`	`33`	`"title": "AlloyDB Admin for BackupDR"`
`34`	`34`	`}`