Consulte os conectores compatíveis com o Application Integration.

Papéis predefinidos do IAM do Application Integration

Os papéis predefinidos dão acesso granular a recursos específicos do Google Cloud. Esses papéis são criados e mantidos pelo Google. O Google atualiza automaticamente as permissões conforme necessário, por exemplo, quando o Google Cloud adiciona novos recursos ou serviços.

A tabela a seguir lista todos os papéis predefinidos do IAM para a integração de aplicativos:

Application Integration

Outros papéis	Permissões
Administrador das Notificações consultivas (roles/advisorynotifications.admin) Concede acesso de gravação às configurações nas Notificações consultivas	advisorynotifications.* resourcemanager.organizations.get resourcemanager.projects.get
Leitor das Notificações consultivas (roles/advisorynotifications.viewer) Fornece acesso de visualização nas Notificações consultivas	advisorynotifications.notifications.* advisorynotifications.settings.get resourcemanager.organizations.get resourcemanager.projects.get
Administrador do Hub da API Cloud ^Beta (roles/apihub.admin) Acesso total a todos os recursos do hub da API.	apihub.* resourcemanager.projects.get resourcemanager.projects.list
Administrador de atributos do hub da API do Cloud ^Beta (roles/apihub.attributeAdmin) Acesso total a todos os recursos do atributo do hub da API do Cloud.	apihub.attributes.* resourcemanager.projects.get resourcemanager.projects.list
Editor do Hub da API Cloud ^Beta (roles/apihub.editor) Acesso para editar a maioria dos recursos do hub da API do Cloud.	apihub.apiHubInstances.get apihub.apiHubInstances.list apihub.apiOperations.* apihub.apis.* apihub.attributes.get apihub.attributes.list apihub.definitions.* apihub.dependencies.* apihub.deployments.* apihub.externalApis.* apihub.hostProjectRegistrations.get apihub.hostProjectRegistrations.list apihub.llmEnablements.* apihub.locations.searchResources apihub.operations.get apihub.operations.list apihub.plugins.get apihub.plugins.list apihub.runTimeProjectAttachments.get apihub.runTimeProjectAttachments.list apihub.specs.* apihub.styleGuides.get apihub.versions.* resourcemanager.projects.get resourcemanager.projects.list
Administrador de plug-ins do hub da API do Cloud ^Beta (roles/apihub.pluginAdmin) Acesso total a todos os recursos do plug-in do hub da API do Cloud.	apihub.plugins.* apihub.specs.lint apihub.styleGuides.* resourcemanager.projects.get resourcemanager.projects.list
Administrador de provisionamento do hub da API do Cloud ^Beta (roles/apihub.provisioningAdmin) Acesso total aos recursos relacionados ao provisionamento do hub da API do Cloud.	apihub.apiHubInstances.* apihub.hostProjectRegistrations.* apihub.operations.* apihub.runTimeProjectAttachments.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do hub da API do Cloud ^Beta (roles/apihub.viewer) Acesso de leitura a todos os recursos do hub da API do Cloud	apihub.apiHubInstances.get apihub.apiHubInstances.list apihub.apiOperations.get apihub.apiOperations.list apihub.apis.get apihub.apis.list apihub.attributes.get apihub.attributes.list apihub.definitions.get apihub.definitions.list apihub.dependencies.get apihub.dependencies.list apihub.deployments.get apihub.deployments.list apihub.externalApis.get apihub.externalApis.list apihub.hostProjectRegistrations.get apihub.hostProjectRegistrations.list apihub.llmEnablements.get apihub.llmEnablements.list apihub.locations.searchResources apihub.operations.get apihub.operations.list apihub.plugins.get apihub.plugins.list apihub.runTimeProjectAttachments.get apihub.runTimeProjectAttachments.list apihub.specs.get apihub.specs.list apihub.styleGuides.get apihub.versions.get apihub.versions.list resourcemanager.projects.get resourcemanager.projects.list
Administrador da API Management ^Beta (roles/apim.admin) Acesso total aos recursos de gerenciamento de API.	apim.* resourcemanager.projects.get resourcemanager.projects.list
Leitor da API Management ^Beta (roles/apim.viewer) Acesso somente leitura aos recursos da API Management.	apim.apiObservations.get apim.apiObservations.list apim.apiOperations.* apim.locations.* apim.observationJobs.get apim.observationJobs.list apim.observationSources.get apim.observationSources.list apim.operations.get apim.operations.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do App Hub (roles/apphub.admin) Acesso total aos recursos do App Hub.	apphub.* resourcemanager.projects.get resourcemanager.projects.list
Editor do App Hub (roles/apphub.editor) Acesso para editar os recursos do App Hub.	apphub.applications.create apphub.applications.delete apphub.applications.get apphub.applications.list apphub.applications.update apphub.discoveredServices.* apphub.discoveredWorkloads.* apphub.locations.* apphub.operations.* apphub.serviceProjectAttachments.lookup apphub.services.* apphub.workloads.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do App Hub (roles/apphub.viewer) Acesso de leitura aos recursos do App Hub.	apphub.applications.get apphub.applications.list apphub.discoveredServices.get apphub.discoveredServices.list apphub.discoveredWorkloads.get apphub.discoveredWorkloads.list apphub.locations.* apphub.operations.get apphub.operations.list apphub.serviceProjectAttachments.lookup apphub.services.get apphub.services.list apphub.workloads.get apphub.workloads.list resourcemanager.projects.get resourcemanager.projects.list
Aprovador de comandos para solução de problemas do dispositivo ^Beta (roles/applianceactivation.approver) Concede acesso para aprovar comandos que serão executados nos dispositivos	applianceactivation.rttCommands.approve applianceactivation.rttCommands.get resourcemanager.projects.get resourcemanager.projects.list
Cliente para solução de problemas no dispositivo ^Beta (roles/applianceactivation.client) Concede acesso para ler comandos de um dispositivo e enviar o resultado dele.	applianceactivation.rttCommands.get applianceactivation.rttCommands.sendResult
Solucionador de problemas do dispositivo ^Beta (roles/applianceactivation.troubleshooter) Concede acesso para enviar novos comandos para execução nos dispositivos e visualizar as saídas	applianceactivation.rttCommands.create applianceactivation.rttCommands.get applianceactivation.rttCommands.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do Assured OSS (roles/assuredoss.admin) Acesso para usar o Assured OSS e gerenciar configurações.	artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.locations.* artifactregistry.mavenartifacts.* artifactregistry.npmpackages.* artifactregistry.packages.get artifactregistry.packages.list artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.repositories.create artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.get artifactregistry.tags.list artifactregistry.versions.get artifactregistry.versions.list assuredoss.* iam.serviceAccountKeys.create iam.serviceAccounts.create iam.serviceAccounts.get pubsub.schemas.get pubsub.schemas.list pubsub.schemas.listRevisions pubsub.schemas.validate pubsub.snapshots.get pubsub.snapshots.list pubsub.subscriptions.create pubsub.subscriptions.get pubsub.subscriptions.list pubsub.subscriptions.update pubsub.topics.get pubsub.topics.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.enable serviceusage.services.get serviceusage.services.list
Administrador de projeto do Assured OSS ^Beta (roles/assuredoss.projectAdmin) Acesso para usar o Assured OSS e gerenciar configurações.	artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.locations.* artifactregistry.mavenartifacts.* artifactregistry.npmpackages.* artifactregistry.packages.get artifactregistry.packages.list artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.repositories.create artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.get artifactregistry.tags.list artifactregistry.versions.get artifactregistry.versions.list assuredoss.* iam.serviceAccounts.create iam.serviceAccounts.get pubsub.schemas.get pubsub.schemas.list pubsub.schemas.listRevisions pubsub.schemas.validate pubsub.snapshots.get pubsub.snapshots.list pubsub.subscriptions.get pubsub.subscriptions.list pubsub.topics.get pubsub.topics.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.enable serviceusage.services.get serviceusage.services.list
Leitor do OSS Assured (roles/assuredoss.reader) Acesso para usar o Assured OSS e conferir as configurações do Assured OSS.	artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.locations.* artifactregistry.mavenartifacts.* artifactregistry.npmpackages.* artifactregistry.packages.get artifactregistry.packages.list artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.get artifactregistry.tags.list artifactregistry.versions.get artifactregistry.versions.list assuredoss.config.get assuredoss.locations.* assuredoss.metadata.* assuredoss.operations.get assuredoss.operations.list pubsub.schemas.get pubsub.schemas.list pubsub.schemas.listRevisions pubsub.schemas.validate pubsub.snapshots.get pubsub.snapshots.list pubsub.subscriptions.get pubsub.subscriptions.list pubsub.topics.get pubsub.topics.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Usuário do Assured OSS (roles/assuredoss.user) Acesso para usar o Assured OSS.	artifactregistry.attachments.get artifactregistry.attachments.list artifactregistry.dockerimages.* artifactregistry.files.download artifactregistry.files.get artifactregistry.files.list artifactregistry.locations.* artifactregistry.mavenartifacts.* artifactregistry.npmpackages.* artifactregistry.packages.get artifactregistry.packages.list artifactregistry.projectsettings.get artifactregistry.pythonpackages.* artifactregistry.repositories.downloadArtifacts artifactregistry.repositories.get artifactregistry.repositories.list artifactregistry.repositories.listEffectiveTags artifactregistry.repositories.listTagBindings artifactregistry.repositories.readViaVirtualRepository artifactregistry.rules.get artifactregistry.rules.list artifactregistry.tags.get artifactregistry.tags.list artifactregistry.versions.get artifactregistry.versions.list assuredoss.locations.* assuredoss.metadata.* assuredoss.operations.get assuredoss.operations.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list
Administrador do gerenciador de auditoria ^Beta (roles/auditmanager.admin) Acesso total aos recursos do gerenciador de auditoria.	auditmanager.* cloudasset.assets.searchAllResources resourcemanager.folders.get resourcemanager.folders.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list
Auditor do gerenciador de auditoria ^Beta (roles/auditmanager.auditor) Permite criar e visualizar um relatório de auditoria.	auditmanager.auditReports.* auditmanager.auditScopeReports.generate auditmanager.billingSettings.get auditmanager.controlReports.* auditmanager.controls.list auditmanager.findings.* auditmanager.locations.get auditmanager.locations.list auditmanager.operations.* auditmanager.resourceEnrollmentStatuses.* cloudasset.assets.searchAllResources resourcemanager.folders.get resourcemanager.folders.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list
Gravador de métricas de escalonamento automático ^Beta (roles/autoscaling.metricsWriter) Acesso para gravar métricas do site de escalonamento automático	autoscaling.sites.writeMetrics
Leitor de recomendações de escalonamento automático ^Beta (roles/autoscaling.recommendationsReader) Acesso para ler recomendações do site de escalonamento automático	autoscaling.sites.readRecommendations
Administrador de sites de escalonamento automático ^Beta (roles/autoscaling.sitesAdmin) Acesso total aos recursos de escalonamento automático do site	autoscaling.* resourcemanager.projects.get resourcemanager.projects.list
Gravador de estado de escalonamento automático ^Beta (roles/autoscaling.stateWriter) Acesso para gravar estados do site de escalonamento automático	autoscaling.sites.writeState
Administrador de batch (roles/batch.admin) Administrador de recursos em lote	batch.jobs.* batch.locations.* batch.operations.* batch.resourceAllowances.* batch.tasks.* resourcemanager.projects.get resourcemanager.projects.list
Relator do agente em lote (roles/batch.agentReporter) Relator de estados do agente em lote.	batch.states.report
Editor de jobs em lote (roles/batch.jobsEditor) Editor de jobs em lote	batch.jobs.* batch.locations.* batch.operations.* batch.tasks.* resourcemanager.projects.get resourcemanager.projects.list
Leitor de job em lote (roles/batch.jobsViewer) Leitor de jobs em lote, grupos de tarefas e tarefas	batch.jobs.get batch.jobs.list batch.locations.* batch.operations.* batch.tasks.* resourcemanager.projects.get resourcemanager.projects.list
Editor do Batch ResourceAllowance (roles/batch.resourceAllowancesEditor) Editor de ResourceAllowances em lote	batch.locations.* batch.operations.* batch.resourceAllowances.* resourcemanager.projects.get resourcemanager.projects.list
Visualizador de ResourceAllowance em lote (roles/batch.resourceAllowancesViewer) Visualizador do Batch ResourceAllowances	batch.locations.* batch.operations.* batch.resourceAllowances.get batch.resourceAllowances.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do BigLake (roles/biglake.admin) Permite acesso total a todos os recursos do BigLake.	biglake.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do BigLake (roles/biglake.viewer) Permite acesso somente leitura a todos os recursos do BigLake.	biglake.catalogs.get biglake.catalogs.list biglake.databases.get biglake.databases.list biglake.locks.list biglake.tables.get biglake.tables.list resourcemanager.projects.get resourcemanager.projects.list
Editor de MigrationWorkflow (roles/bigquerymigration.editor) Editor de fluxos de trabalho de migração de EDW.	bigquerymigration.locations.* bigquerymigration.subtasks.get bigquerymigration.subtasks.list bigquerymigration.workflows.create bigquerymigration.workflows.delete bigquerymigration.workflows.get bigquerymigration.workflows.list bigquerymigration.workflows.update
Orquestrador de tarefas (roles/bigquerymigration.orchestrator) Orquestrador de tarefas de migração de EDW.	bigquerymigration.subtasks.create bigquerymigration.taskTypes.* bigquerymigration.workflows.orchestrateTask storage.objects.list
Usuário de tradução da migração (roles/bigquerymigration.translationUser) Usuário do serviço interativo de tradução do SQL do EDW.	bigquerymigration.translation.translate
Visualizador do MigrationWorkflow (roles/bigquerymigration.viewer) Visualizador de MigrationWorkflow da migração de EDW.	bigquerymigration.locations.* bigquerymigration.subtasks.get bigquerymigration.subtasks.list bigquerymigration.workflows.get bigquerymigration.workflows.list
Worker de tarefa (roles/bigquerymigration.worker) Worker que executa subtarefas de migração de EDW.	bigquerymigration.subtaskTypes.executeTask bigquerymigration.subtasks.executeTask storage.objects.create storage.objects.get storage.objects.list
Leitor de pegada de carbono (roles/billing.carbonViewer)	billing.accounts.get billing.accounts.getCarbonInformation billing.accounts.list
Administrador do Blockchain Node Engine (roles/blockchainnodeengine.admin) Acesso total aos recursos do Blockchain Node Engine.	blockchainnodeengine.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do Blockchain Node Engine (roles/blockchainnodeengine.viewer) Read-only access to Blockchain Node Engine resources.	blockchainnodeengine.blockchainNodes.get blockchainnodeengine.blockchainNodes.list blockchainnodeengine.locations.* blockchainnodeengine.operations.get blockchainnodeengine.operations.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do gerenciador do validador da blockchain ^Beta (roles/blockchainvalidatormanager.admin) Acesso total aos recursos do gerenciador de validadores de blockchain.	blockchainvalidatormanager.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do validador de blockchain ^Beta (roles/blockchainvalidatormanager.viewer) Acesso somente para leitura aos recursos do gerenciador de validadores de blockchain.	blockchainvalidatormanager.blockchainValidatorConfigs.get blockchainvalidatormanager.blockchainValidatorConfigs.list blockchainvalidatormanager.locations.* blockchainvalidatormanager.operations.get blockchainvalidatormanager.operations.list resourcemanager.projects.get resourcemanager.projects.list
Leitor de uso do planejador de capacidade ^Beta (roles/capacityplanner.viewer) Acesso somente leitura aos recursos de uso do planejador de capacidade	capacityplanner.* cloudquotas.quotas.get compute.futureReservations.get compute.futureReservations.list compute.reservations.get compute.reservations.list monitoring.timeSeries.list resourcemanager.folders.get resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get
Leitor de pacientes do Care Studio (roles/carestudio.viewer) Pessoas com este papel podem ver todas as propriedades de pacientes.	carestudio.* resourcemanager.projects.get resourcemanager.projects.list
Administrador de serviço do Chronicle (roles/chroniclesm.admin) Os administradores podem ver e modificar detalhes de serviços do Chronicle.	chroniclesm.*
Visualizador de serviço do Chronicle (roles/chroniclesm.viewer) Os visualizadores podem ver detalhes de serviços do Chronicle, mas não alterá-los.	chroniclesm.gcpAssociations.get chroniclesm.gcpLogFlowFilters.get chroniclesm.gcpSettings.get
Leitor de local ^Beta (roles/cloud.locationReader) Lê e enumera os locais disponíveis para criação de recursos.	cloud.*
Administrador de índices do repositório de código ^Beta (roles/cloudaicompanion.codeRepositoryIndexesAdmin) Concede acesso total aos recursos de índices do repositório de código.	cloudaicompanion.codeRepositoryIndexes.* cloudaicompanion.operations.* cloudaicompanion.repositoryGroups.create cloudaicompanion.repositoryGroups.delete cloudaicompanion.repositoryGroups.get cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.list cloudaicompanion.repositoryGroups.setIamPolicy cloudaicompanion.repositoryGroups.update resourcemanager.projects.get resourcemanager.projects.list
Leitor de índices do repositório de código ^Beta (roles/cloudaicompanion.codeRepositoryIndexesViewer) Concede acesso somente leitura aos recursos de índices do repositório de código.	cloudaicompanion.codeRepositoryIndexes.get cloudaicompanion.codeRepositoryIndexes.list cloudaicompanion.operations.get cloudaicompanion.operations.list cloudaicompanion.repositoryGroups.get cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.list resourcemanager.projects.get resourcemanager.projects.list
Usuário de grupos de repositório ^Beta (roles/cloudaicompanion.repositoryGroupsUser) Concede acesso de leitura/uso ao grupo de repositórios de índices do repositório de código.	cloudaicompanion.codeRepositoryIndexes.get cloudaicompanion.repositoryGroups.get cloudaicompanion.repositoryGroups.getIamPolicy cloudaicompanion.repositoryGroups.use
Gemini para usuário do Google Cloud ^Beta (roles/cloudaicompanion.user) Um usuário que pode usar o Gemini para Google Cloud	cloudaicompanion.companions.* cloudaicompanion.entitlements.get cloudaicompanion.instances.* resourcemanager.projects.get resourcemanager.projects.list
Administrador do Cloud Controls Partner (roles/cloudcontrolspartner.admin) Acesso total aos recursos do Cloud Controls Partner.	cloudcontrolspartner.accessapprovalrequests.list cloudcontrolspartner.customers.* cloudcontrolspartner.ekmconnections.get cloudcontrolspartner.inspectabilityevents.get cloudcontrolspartner.partnerpermissions.get cloudcontrolspartner.partners.get cloudcontrolspartner.platformcontrols.get cloudcontrolspartner.violations.list cloudcontrolspartner.workloads.list
Editor do Cloud Controls Partner (roles/cloudcontrolspartner.editor) Acesso para editar os recursos do Cloud Controls Partner.	cloudcontrolspartner.*
Leitor de inspeção do Cloud Controls Partner (roles/cloudcontrolspartner.inspectabilityReader) Acesso somente leitura aos recursos de inspeção do Cloud Controls Partner.	cloudcontrolspartner.customers.get cloudcontrolspartner.customers.list cloudcontrolspartner.inspectabilityevents.get cloudcontrolspartner.platformcontrols.get
Leitor de monitoramento do Cloud Controls Partner (roles/cloudcontrolspartner.monitoringReader) Acesso somente leitura aos recursos de monitoramento do Cloud Controls Partner.	cloudcontrolspartner.customers.get cloudcontrolspartner.customers.list cloudcontrolspartner.violations.* cloudcontrolspartner.workloads.*
Leitor do Cloud Controls Partner (roles/cloudcontrolspartner.reader) Acesso somente leitura aos recursos do Cloud Controls Partner.	cloudcontrolspartner.accessapprovalrequests.list cloudcontrolspartner.customers.get cloudcontrolspartner.customers.list cloudcontrolspartner.ekmconnections.get cloudcontrolspartner.inspectabilityevents.get cloudcontrolspartner.partnerpermissions.get cloudcontrolspartner.partners.get cloudcontrolspartner.platformcontrols.get cloudcontrolspartner.violations.* cloudcontrolspartner.workloads.*
Administrador de IA de otimização do Cloud (roles/cloudoptimization.admin) Administrador de recursos de IA de otimização do Cloud	cloudoptimization.*
Editor de IA de otimização do Cloud (roles/cloudoptimization.editor) Editor de recursos de IA de otimização do Cloud	cloudoptimization.*
Leitor de IA de otimização do Cloud (roles/cloudoptimization.viewer) Leitor de recursos de IA de otimização do Cloud	cloudoptimization.operations.get
Administrador de cotas do Cloud ^Beta (roles/cloudquotas.admin) Acesso total aos recursos de cotas do Cloud.	cloudquotas.* monitoring.timeSeries.list resourcemanager.projects.get resourcemanager.projects.list
Visualizador de cotas do Cloud ^Beta (roles/cloudquotas.viewer) Acesso somente leitura aos recursos de cotas do Cloud.	cloudquotas.quotas.get resourcemanager.projects.get resourcemanager.projects.list
Administrador de publicação do contrato comercial ^Beta (roles/commerceagreementpublishing.admin) Administrador do serviço de publicação do contrato comercial	commerceagreementpublishing.* resourcemanager.projects.get resourcemanager.projects.list
Leitor de publicação do contrato comercial ^Beta (roles/commerceagreementpublishing.viewer) Visualizador do serviço de publicação do contrato comercial	commerceagreementpublishing.agreements.get commerceagreementpublishing.agreements.list commerceagreementpublishing.documents.get commerceagreementpublishing.documents.list resourcemanager.projects.get resourcemanager.projects.list
Usuário da carga de trabalho do Confidential Space (roles/confidentialcomputing.workloadUser) Concede a permissão para gerar um token de atestado e executar uma carga de trabalho em uma VM. Destinado a contas de serviço executadas em VMs do Confidential Space.	confidentialcomputing.* logging.logEntries.create
Administrador do ConfigDelivery ^Beta (roles/configdelivery.configDeliveryAdmin) Concede acesso total a todos os recursos do Config Delivery. Permite que os usuários criem, removam e gerenciem pacotes da frota e pacotes de recursos.	configdelivery.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do ConfigDelivery ^Beta (roles/configdelivery.configDeliveryViewer) Concede acesso de leitura a todos os recursos do Config Delivery. Permite que os usuários exibam pacotes da frota e pacotes de recursos atuais, mas eles não podem fazer alterações.	configdelivery.fleetPackages.get configdelivery.fleetPackages.list configdelivery.locations.* configdelivery.operations.get configdelivery.operations.list configdelivery.releases.get configdelivery.releases.list configdelivery.resourceBundles.get configdelivery.resourceBundles.list configdelivery.rollouts.get configdelivery.rollouts.list resourcemanager.projects.get resourcemanager.projects.list
Publisher de pacotes de recursos do Config Delivery ^Beta (roles/configdelivery.resourceBundlePublisher) Concede permissões de leitura e gravação a ResourceBundles e Releases do Config Delivery.	configdelivery.locations.* configdelivery.operations.get configdelivery.operations.list configdelivery.releases.create configdelivery.releases.get configdelivery.releases.list configdelivery.releases.update configdelivery.resourceBundles.create configdelivery.resourceBundles.get configdelivery.resourceBundles.list configdelivery.resourceBundles.update resourcemanager.projects.get resourcemanager.projects.list
Administrador da Contact Center AI Platform (roles/contactcenteraiplatform.admin) Acesso total aos recursos da Contact Center AI Platform.	contactcenteraiplatform.* resourcemanager.projects.get resourcemanager.projects.list
Leitor da Contact Center AI Platform (roles/contactcenteraiplatform.viewer) Acesso somente leitura aos recursos da Contact Center AI Platform.	contactcenteraiplatform.contactCenters.get contactcenteraiplatform.contactCenters.list contactcenteraiplatform.locations.* contactcenteraiplatform.operations.get contactcenteraiplatform.operations.list resourcemanager.projects.get resourcemanager.projects.list
Editor do Contact Center AI Insights (roles/contactcenterinsights.editor) Concede acesso de leitura e gravação para todos os recursos do Contact Center AI Insights.	contactcenterinsights.*
Leitor do Contact Center AI Insights (roles/contactcenterinsights.viewer) Concede acesso de leitura a todos os recursos do Contact Center AI Insights.	contactcenterinsights.analyses.get contactcenterinsights.analyses.list contactcenterinsights.analysisRules.get contactcenterinsights.analysisRules.list contactcenterinsights.conversations.get contactcenterinsights.conversations.list contactcenterinsights.faqEntries.get contactcenterinsights.faqEntries.list contactcenterinsights.faqModels.get contactcenterinsights.faqModels.list contactcenterinsights.feedbackLabels.get contactcenterinsights.feedbackLabels.list contactcenterinsights.issueModels.get contactcenterinsights.issueModels.list contactcenterinsights.issues.get contactcenterinsights.issues.list contactcenterinsights.operations.get contactcenterinsights.operations.list contactcenterinsights.phraseMatchers.get contactcenterinsights.phraseMatchers.list contactcenterinsights.qaQuestions.get contactcenterinsights.qaQuestions.list contactcenterinsights.qaScorecardRevisions.get contactcenterinsights.qaScorecardRevisions.list contactcenterinsights.qaScorecards.get contactcenterinsights.qaScorecards.list contactcenterinsights.settings.get contactcenterinsights.views.get contactcenterinsights.views.list
Leitor de postura de segurança do GKE ^Beta (roles/containersecurity.viewer) Acesso somente leitura aos recursos de postura de segurança no GKE.	container.clusters.list containersecurity.* resourcemanager.projects.get resourcemanager.projects.list
Administrador do armazenamento de conteúdo (roles/contentwarehouse.admin) Concede acesso total a todos os recursos no armazenamento de conteúdo	contentwarehouse.corpora.* contentwarehouse.dataExportJobs.* contentwarehouse.documentSchemas.* contentwarehouse.documents.* contentwarehouse.locations.* contentwarehouse.operations.get contentwarehouse.rawDocuments.* contentwarehouse.ruleSets.* contentwarehouse.synonymSets.* resourcemanager.projects.get resourcemanager.projects.list
Administrador de documentos do armazenamento de conteúdo (roles/contentwarehouse.documentAdmin) Concede acesso total ao recurso "documento" no armazenamento de conteúdo	contentwarehouse.documentSchemas.get contentwarehouse.documents.create contentwarehouse.documents.delete contentwarehouse.documents.get contentwarehouse.documents.getIamPolicy contentwarehouse.documents.setIamPolicy contentwarehouse.documents.update contentwarehouse.links.* contentwarehouse.locations.getStatus contentwarehouse.rawDocuments.* resourcemanager.projects.get resourcemanager.projects.list
Criador de documentos do armazenamento de conteúdo (roles/contentwarehouse.documentCreator) Concede acesso para criar documentos no armazenamento de conteúdo	contentwarehouse.documentSchemas.get contentwarehouse.documentSchemas.list contentwarehouse.documents.create contentwarehouse.locations.getStatus resourcemanager.projects.get resourcemanager.projects.list
Editor de documentos do armazenamento de conteúdo (roles/contentwarehouse.documentEditor) Concede acesso para atualizar o recurso "documento" no armazenamento de conteúdo	contentwarehouse.documentSchemas.get contentwarehouse.documents.get contentwarehouse.documents.getIamPolicy contentwarehouse.documents.update contentwarehouse.links.* contentwarehouse.locations.getStatus contentwarehouse.rawDocuments.* resourcemanager.projects.get resourcemanager.projects.list
Leitor de esquemas de documentos do armazenamento de conteúdo (roles/contentwarehouse.documentSchemaViewer) Concede acesso para visualizar os esquemas de documentos no armazenamento de conteúdo	contentwarehouse.documentSchemas.get contentwarehouse.documentSchemas.list contentwarehouse.locations.getStatus resourcemanager.projects.get resourcemanager.projects.list
Leitor do armazenamento de conteúdo (roles/contentwarehouse.documentViewer) Concede acesso para visualizar todos os recursos no armazenamento de conteúdo	contentwarehouse.documentSchemas.get contentwarehouse.documents.get contentwarehouse.documents.getIamPolicy contentwarehouse.links.get contentwarehouse.locations.getStatus contentwarehouse.rawDocuments.download resourcemanager.projects.get resourcemanager.projects.list
Leitor da central de banco de dados ^Beta (roles/databasecenter.viewer) Papel de visualizador para dados de recursos do Database Center	cloudaicompanion.entitlements.get databasecenter.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do serviço de eventos ^Beta (roles/databaseinsights.eventsViewer) Papel de leitor para dados do serviço de eventos	databaseinsights.aggregatedEvents.query databaseinsights.clusterEvents.query databaseinsights.instanceEvents.query
Leitor de monitoramento do Database Insights ^Beta (roles/databaseinsights.monitoringViewer) Papel de Leitor para dados de monitoramento do Database Insights	databaseinsights.activeQueries.fetch databaseinsights.activitySummary.fetch databaseinsights.aggregatedStats.query databaseinsights.locations.* databaseinsights.timeSeries.query databaseinsights.workloadRecommendations.fetch resourcemanager.projects.get resourcemanager.projects.list
Operações de desempenho do Database Insights ^Beta (roles/databaseinsights.operationsAdmin) Papel de administrador para executar operações do Database Insights	databaseinsights.activeQuery.terminate
Leitor de recomendações do Database Insights ^Beta (roles/databaseinsights.recommendationViewer) Papel de Leitor para dados de recomendação do Database Insights	databaseinsights.locations.* databaseinsights.recommendations.query databaseinsights.resourceRecommendations.query databaseinsights.workloadRecommendations.fetch resourcemanager.projects.get resourcemanager.projects.list
Leitor do Database Insights ^Beta (roles/databaseinsights.viewer) Papel de Leitor para dados do Database Insights	databaseinsights.activeQueries.fetch databaseinsights.activitySummary.fetch databaseinsights.aggregatedStats.query databaseinsights.locations.* databaseinsights.recommendations.query databaseinsights.resourceRecommendations.query databaseinsights.timeSeries.query databaseinsights.workloadRecommendations.fetch resourcemanager.projects.get resourcemanager.projects.list
Administrador da linhagem de dados (roles/datalineage.admin) Concede acesso total a todos os recursos na API Data Lineage	datalineage.* resourcemanager.projects.get resourcemanager.projects.list
Editor da linhagem de dados (roles/datalineage.editor) Concede acesso de edição a todos os recursos na API Data Lineage	datalineage.events.* datalineage.locations.searchLinks datalineage.operations.get datalineage.processes.create datalineage.processes.get datalineage.processes.list datalineage.processes.update datalineage.runs.create datalineage.runs.get datalineage.runs.list datalineage.runs.update resourcemanager.projects.get resourcemanager.projects.list
Produtor de eventos de linhagem de dados (roles/datalineage.producer) Concede acesso para criar todos os recursos na API Data Lineage	datalineage.events.create datalineage.processes.create datalineage.processes.get datalineage.processes.update datalineage.runs.create datalineage.runs.get datalineage.runs.update resourcemanager.projects.get resourcemanager.projects.list
Leitor da linhagem de dados (roles/datalineage.viewer) Concede acesso de leitura a todos os recursos na API Data Lineage	datalineage.events.get datalineage.events.list datalineage.locations.searchLinks datalineage.processes.get datalineage.processes.list datalineage.runs.get datalineage.runs.list resourcemanager.projects.get resourcemanager.projects.list
Administrador de recursos de controles de processamento de dados (roles/dataprocessing.admin) O administrador de controles do processamento de dados que pode gerenciar totalmente as configurações desses controles e visualizar todos os dados da fonte.	billing.accounts.get billing.accounts.list dataprocessing.*
Gerente da fonte de dados dos controles de processamento de dados (roles/dataprocessing.dataSourceManager) Gerente da fonte de dados dos controles de processamento de dados que pode ver, listar e atualizar as informações subjacentes.	dataprocessing.datasources.list dataprocessing.datasources.update
Administrador do Dataproc Resource Manager ^Beta (roles/dataprocrm.admin) Concede acesso total a todos os recursos do Dataproc Resource Manager. Destinado a usuários que precisam criar e excluir qualquer recurso do Dataproc Resource Manager.	dataprocrm.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do Dataproc Resource Manager ^Beta (roles/dataprocrm.viewer) Concede acesso de leitura a todos os recursos do Dataproc Resource Manager. Destinado a usuários que precisam de acesso somente leitura aos recursos do Dataproc Resource Manager.	dataprocrm.locations.* dataprocrm.nodePools.get dataprocrm.nodePools.list dataprocrm.nodes.get dataprocrm.nodes.list dataprocrm.nodes.mintOAuthToken dataprocrm.operations.get dataprocrm.operations.list dataprocrm.workloads.get dataprocrm.workloads.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do Developer Connect ^Beta (roles/developerconnect.admin) Acesso total aos recursos do Developer Connect.	developerconnect.connections.* developerconnect.gitRepositoryLinks.create developerconnect.gitRepositoryLinks.delete developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.list developerconnect.locations.* developerconnect.operations.* resourcemanager.projects.get resourcemanager.projects.list
Acessador de token de leitura do Developer Connect ^Beta (roles/developerconnect.readTokenAccessor) Concede acesso a tokens somente leitura (PAT e de curta duração). Também dá acesso para ler o link do repositório git.	developerconnect.connections.get developerconnect.gitRepositoryLinks.fetchReadToken developerconnect.gitRepositoryLinks.get
Acessador de token do Developer Connect ^Beta (roles/developerconnect.tokenAccessor) Concede acesso a tokens de leitura/gravação e somente leitura (ambos PAT e de curta duração). Também dá acesso para ler o link do repositório git.	developerconnect.connections.get developerconnect.gitRepositoryLinks.fetchReadToken developerconnect.gitRepositoryLinks.fetchReadWriteToken developerconnect.gitRepositoryLinks.get
Usuário do Developer Connect ^Beta (roles/developerconnect.user) Concede acesso para ler a conexão e os recursos que interagem com o repositório real, como a leitura do conteúdo do repositório	developerconnect.connections.fetchGitHubInstallations developerconnect.connections.fetchLinkableGitRepositories developerconnect.connections.get developerconnect.connections.list developerconnect.gitRepositoryLinks.fetchGitRefs developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.list developerconnect.locations.* developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
Leitor do Developer Connect ^Beta (roles/developerconnect.viewer) Acesso somente leitura aos recursos do Developer Connect.	developerconnect.connections.get developerconnect.connections.list developerconnect.gitRepositoryLinks.get developerconnect.gitRepositoryLinks.list developerconnect.locations.* developerconnect.operations.get developerconnect.operations.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do Discovery Engine (roles/discoveryengine.admin) Concede acesso total a todos os recursos de discoveryengine.	discoveryengine.* resourcemanager.projects.get resourcemanager.projects.list
Editor do Discovery Engine (roles/discoveryengine.editor) Concede acesso de leitura e gravação a todos os recursos do Discovery Engine.	discoveryengine.aclConfigs.get discoveryengine.analytics.* discoveryengine.answers.get discoveryengine.branches.* discoveryengine.cmekConfigs.get discoveryengine.cmekConfigs.list discoveryengine.collections.get discoveryengine.collections.list discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.get discoveryengine.controls.get discoveryengine.controls.list discoveryengine.conversations.* discoveryengine.dataStores.completeQuery discoveryengine.dataStores.get discoveryengine.dataStores.list discoveryengine.documentProcessingConfigs.get discoveryengine.documents.batchGetDocumentsMetadata discoveryengine.documents.create discoveryengine.documents.delete discoveryengine.documents.get discoveryengine.documents.import discoveryengine.documents.list discoveryengine.documents.update discoveryengine.engines.get discoveryengine.engines.list discoveryengine.engines.pause discoveryengine.engines.resume discoveryengine.engines.tune discoveryengine.evaluations.get discoveryengine.evaluations.list discoveryengine.groundingConfigs.check discoveryengine.models.* discoveryengine.operations.* discoveryengine.projects.get discoveryengine.rankingConfigs.rank discoveryengine.sampleQueries.* discoveryengine.sampleQuerySets.* discoveryengine.schemas.get discoveryengine.schemas.list discoveryengine.schemas.preview discoveryengine.schemas.validate discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.get discoveryengine.servingConfigs.list discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.sessions.* discoveryengine.siteSearchEngines.get discoveryengine.targetSites.get discoveryengine.targetSites.list discoveryengine.userEvents.create discoveryengine.userEvents.fetchStats discoveryengine.userEvents.import discoveryengine.widgetConfigs.* resourcemanager.projects.get resourcemanager.projects.list
Usuário do Discovery Engine ^Beta (roles/discoveryengine.user) Concede acesso de usuário aos recursos do Discovery Engine.	discoveryengine.answers.get discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.search discoveryengine.sessions.get
Leitor do Discovery Engine (roles/discoveryengine.viewer) Concede acesso de leitura a todos os recursos do Discovery Engine.	discoveryengine.aclConfigs.get discoveryengine.analytics.* discoveryengine.answers.get discoveryengine.branches.* discoveryengine.cmekConfigs.get discoveryengine.cmekConfigs.list discoveryengine.collections.get discoveryengine.collections.list discoveryengine.completionConfigs.completeQuery discoveryengine.completionConfigs.get discoveryengine.controls.get discoveryengine.controls.list discoveryengine.conversations.converse discoveryengine.conversations.get discoveryengine.conversations.list discoveryengine.dataStores.completeQuery discoveryengine.dataStores.get discoveryengine.dataStores.list discoveryengine.documentProcessingConfigs.get discoveryengine.documents.batchGetDocumentsMetadata discoveryengine.documents.get discoveryengine.documents.list discoveryengine.engines.get discoveryengine.engines.list discoveryengine.evaluations.get discoveryengine.evaluations.list discoveryengine.groundingConfigs.check discoveryengine.models.get discoveryengine.models.list discoveryengine.operations.* discoveryengine.projects.get discoveryengine.rankingConfigs.rank discoveryengine.sampleQueries.get discoveryengine.sampleQueries.list discoveryengine.sampleQuerySets.get discoveryengine.sampleQuerySets.list discoveryengine.schemas.get discoveryengine.schemas.list discoveryengine.schemas.preview discoveryengine.schemas.validate discoveryengine.servingConfigs.answer discoveryengine.servingConfigs.get discoveryengine.servingConfigs.list discoveryengine.servingConfigs.recommend discoveryengine.servingConfigs.search discoveryengine.sessions.get discoveryengine.sessions.list discoveryengine.siteSearchEngines.get discoveryengine.targetSites.get discoveryengine.targetSites.list discoveryengine.userEvents.fetchStats discoveryengine.widgetConfigs.get resourcemanager.projects.get resourcemanager.projects.list
Administrador do Enterprise Purchasing ^Beta (roles/enterprisepurchasing.admin) Acesso total aos recursos do Enterprise Purchasing.	enterprisepurchasing.* resourcemanager.projects.get resourcemanager.projects.list
Editor de compras corporativas ^Beta (roles/enterprisepurchasing.editor) Editar o acesso aos recursos do Enterprise Purchasing.	enterprisepurchasing.gcveCuds.get enterprisepurchasing.gcveCuds.list enterprisepurchasing.gcveNodePricingInfo.list enterprisepurchasing.locations.* enterprisepurchasing.operations.get enterprisepurchasing.operations.list resourcemanager.projects.get resourcemanager.projects.list
Leitor do Enterprise Purchasing ^Beta (roles/enterprisepurchasing.viewer) Acesso somente de leitura aos recursos do Enterprise Purchasing.	enterprisepurchasing.gcveCuds.get enterprisepurchasing.gcveCuds.list enterprisepurchasing.gcveNodePricingInfo.list enterprisepurchasing.locations.* enterprisepurchasing.operations.get enterprisepurchasing.operations.list resourcemanager.projects.get resourcemanager.projects.list
Administrador de contatos essenciais (roles/essentialcontacts.admin) Acesso total a todos os contatos essenciais	essentialcontacts.*
Leitor de contatos essenciais (roles/essentialcontacts.viewer) Visualizador para todos os contatos essenciais	essentialcontacts.contacts.get essentialcontacts.contacts.list
Administrador da API Firebase Cloud Messaging ^Beta (roles/firebasecloudmessaging.admin) Acesso total de leitura/gravação aos recursos da API Firebase Cloud Messaging.	cloudmessaging.messages.create fcmdata.deliverydata.list resourcemanager.projects.get resourcemanager.projects.list
Ferramenta de envio de símbolo de erro do Firebase (roles/firebasecrash.symbolMappingsAdmin) Acesso completo de leitura/gravação aos recursos do arquivo de mapeamento de símbolos para o Firebase Crash Reporting.	firebase.clients.get firebase.clients.list resourcemanager.projects.get
Administrador da API Firebase Data Connect ^Beta (roles/firebasedataconnect.admin) Acesso completo aos recursos da API Firebase Data Connect, inclusive dados.	firebasedataconnect.* resourcemanager.projects.get resourcemanager.projects.list
Administrador de dados da API Firebase Data Connect ^Beta (roles/firebasedataconnect.dataAdmin) Acesso completo às origens de dados.	firebasedataconnect.services.executeGraphql firebasedataconnect.services.executeGraphqlRead
Leitor de dados da API Firebase Data Connect ^Beta (roles/firebasedataconnect.dataViewer) Acesso somente leitura a origens de dados.	firebasedataconnect.services.executeGraphqlRead
Leitor da API Firebase Data Connect ^Beta (roles/firebasedataconnect.viewer) Acesso somente leitura aos recursos da API Firebase Data Connect. O papel não concede acesso aos dados.	firebasedataconnect.connectorRevisions.get firebasedataconnect.connectorRevisions.list firebasedataconnect.connectors.get firebasedataconnect.connectors.list firebasedataconnect.locations.* firebasedataconnect.operations.get firebasedataconnect.operations.list firebasedataconnect.schemaRevisions.get firebasedataconnect.schemaRevisions.list firebasedataconnect.schemas.get firebasedataconnect.schemas.list firebasedataconnect.services.get firebasedataconnect.services.list resourcemanager.projects.get resourcemanager.projects.list
Administrador de gerenciamento de hardware do GDC ^Beta (roles/gdchardwaremanagement.admin) Acesso total aos recursos de gerenciamento de hardware do GDC.	gdchardwaremanagement.* resourcemanager.projects.get resourcemanager.projects.list
Operador de gerenciamento de hardware do GDC ^Beta (roles/gdchardwaremanagement.operator) Cria, lê e atualiza o acesso aos recursos de gerenciamento de hardware do GDC que aceitam essas operações. Também concede acesso de exclusão ao recurso HardwareGroup.	gdchardwaremanagement.changeLogEntries.* gdchardwaremanagement.comments.* gdchardwaremanagement.hardware.* gdchardwaremanagement.hardwareGroups.* gdchardwaremanagement.locations.* gdchardwaremanagement.operations.get gdchardwaremanagement.operations.list gdchardwaremanagement.orders.create gdchardwaremanagement.orders.get gdchardwaremanagement.orders.list gdchardwaremanagement.orders.update gdchardwaremanagement.sites.* gdchardwaremanagement.skus.* gdchardwaremanagement.zones.* resourcemanager.projects.get resourcemanager.projects.list
Leitor de gerenciamento de hardware do GDC ^Beta (roles/gdchardwaremanagement.reader) Acesso somente leitura aos recursos de gerenciamento de hardware do GDC.	gdchardwaremanagement.changeLogEntries.* gdchardwaremanagement.comments.get gdchardwaremanagement.comments.list gdchardwaremanagement.hardware.get gdchardwaremanagement.hardware.list gdchardwaremanagement.hardwareGroups.get gdchardwaremanagement.hardwareGroups.list gdchardwaremanagement.locations.* gdchardwaremanagement.operations.get gdchardwaremanagement.operations.list gdchardwaremanagement.orders.get gdchardwaremanagement.orders.list gdchardwaremanagement.sites.get gdchardwaremanagement.sites.list gdchardwaremanagement.skus.* gdchardwaremanagement.zones.get gdchardwaremanagement.zones.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do Identity Platform ^Beta (roles/identityplatform.admin) Acesso total aos recursos do Identity Platform.	firebaseauth.* identitytoolkit.*
Leitor do Identity Platform ^Beta (roles/identityplatform.viewer) Acesso de leitura aos recursos do Identity Platform.	firebaseauth.configs.get firebaseauth.users.get identitytoolkit.tenants.get identitytoolkit.tenants.getIamPolicy identitytoolkit.tenants.list
Administrador do Identity Toolkit (roles/identitytoolkit.admin) Acesso completo aos recursos do Identity Toolkit.	firebaseauth.* identitytoolkit.*
Leitor do Identity Toolkit (roles/identitytoolkit.viewer) Acesso de leitura aos recursos do Identity Toolkit.	firebaseauth.configs.get firebaseauth.users.get identitytoolkit.tenants.get identitytoolkit.tenants.getIamPolicy identitytoolkit.tenants.list
Administrador de integrações da Apigee (roles/integrations.apigeeIntegrationAdminRole) Um usuário com acesso total a todas as integrações da Apigee.	connectors.actions.* connectors.connections.executeSqlQuery connectors.entities.* connectors.entityTypes.list integrations.apigeeAuthConfigs.* integrations.apigeeCertificates.* integrations.apigeeExecutions.list integrations.apigeeIntegrationVers.* integrations.apigeeIntegrations.* integrations.apigeeSfdcChannels.* integrations.apigeeSfdcInstances.* integrations.apigeeSuspensions.* integrations.authConfigs.* integrations.certificates.* integrations.executions.get integrations.executions.list integrations.integrationVersions.create integrations.integrationVersions.delete integrations.integrationVersions.deploy integrations.integrationVersions.get integrations.integrationVersions.list integrations.integrationVersions.update integrations.integrations.create integrations.integrations.delete integrations.integrations.deploy integrations.integrations.get integrations.integrations.invoke integrations.integrations.list integrations.integrations.update integrations.sfdcChannels.* integrations.sfdcInstances.* integrations.suspensions.* resourcemanager.projects.get resourcemanager.projects.list
Implantador de integrações da Apigee (roles/integrations.apigeeIntegrationDeployerRole) Um desenvolvedor que pode implantar/cancelar a implantação de integrações no ambiente de execução da integração.	integrations.apigeeIntegrationVers.deploy integrations.apigeeIntegrationVers.get integrations.apigeeIntegrationVers.list integrations.apigeeIntegrations.list integrations.integrationVersions.deploy integrations.integrationVersions.get integrations.integrationVersions.list integrations.integrations.deploy integrations.integrations.get integrations.integrations.list resourcemanager.projects.get resourcemanager.projects.list
Editor de integrações da Apigee (roles/integrations.apigeeIntegrationEditorRole) Um desenvolvedor que pode listar, criar e atualizar integrações da Apigee.	connectors.actions.* connectors.connections.executeSqlQuery connectors.entities.* connectors.entityTypes.list integrations.apigeeAuthConfigs.create integrations.apigeeAuthConfigs.get integrations.apigeeAuthConfigs.list integrations.apigeeAuthConfigs.update integrations.apigeeCertificates.create integrations.apigeeCertificates.get integrations.apigeeCertificates.list integrations.apigeeCertificates.update integrations.apigeeExecutions.list integrations.apigeeIntegrationVers.* integrations.apigeeIntegrations.* integrations.apigeeSfdcChannels.create integrations.apigeeSfdcChannels.get integrations.apigeeSfdcChannels.list integrations.apigeeSfdcChannels.update integrations.apigeeSfdcInstances.create integrations.apigeeSfdcInstances.get integrations.apigeeSfdcInstances.list integrations.apigeeSfdcInstances.update integrations.authConfigs.create integrations.authConfigs.get integrations.authConfigs.list integrations.authConfigs.update integrations.certificates.get integrations.executions.get integrations.executions.list integrations.integrationVersions.create integrations.integrationVersions.delete integrations.integrationVersions.deploy integrations.integrationVersions.get integrations.integrationVersions.list integrations.integrationVersions.update integrations.integrations.create integrations.integrations.get integrations.integrations.invoke integrations.integrations.list integrations.integrations.update integrations.sfdcChannels.* integrations.sfdcInstances.* resourcemanager.projects.get resourcemanager.projects.list
Invocador de integração da Apigee (roles/integrations.apigeeIntegrationInvokerRole) Um papel que pode invocar integrações da Apigee.	connectors.actions.* connectors.connections.executeSqlQuery connectors.entities.* connectors.entityTypes.list integrations.apigeeExecutions.list integrations.apigeeIntegrationVers.get integrations.apigeeIntegrationVers.list integrations.apigeeIntegrations.* integrations.executions.get integrations.executions.list integrations.integrationVersions.get integrations.integrationVersions.invoke integrations.integrationVersions.list integrations.integrations.get integrations.integrations.invoke integrations.integrations.list resourcemanager.projects.get resourcemanager.projects.list
Leitor de integrações da Apigee (roles/integrations.apigeeIntegrationsViewer) Um desenvolvedor que pode listar e visualizar integrações da Apigee.	integrations.apigeeAuthConfigs.list integrations.apigeeCertificates.list integrations.apigeeIntegrationVers.get integrations.apigeeIntegrationVers.list integrations.apigeeIntegrations.list integrations.apigeeSfdcChannels.list integrations.apigeeSfdcInstances.list integrations.authConfigs.get integrations.authConfigs.list integrations.certificates.get integrations.certificates.list integrations.executions.get integrations.executions.list integrations.integrationVersions.get integrations.integrationVersions.list integrations.integrations.get integrations.integrations.list integrations.sfdcChannels.list integrations.sfdcInstances.list resourcemanager.projects.get resourcemanager.projects.list
Aprovador de integrações da Apigee (roles/integrations.apigeeSuspensionResolver) Um papel que pode aprovar/recusar integrações da Apigee que contêm uma tarefa de suspensão/espera.	integrations.apigeeSuspensions.* integrations.suspensions.* resourcemanager.projects.get resourcemanager.projects.list
Visualizador de certificados (roles/integrations.certificateViewer) Um desenvolvedor que pode listar e visualizar certificados.	integrations.certificates.get resourcemanager.projects.get resourcemanager.projects.list
Administrador do Application Integration (roles/integrations.integrationAdmin) Um usuário com acesso total (CRUD, na sigla em inglês) a todas as integrações.	integrations.apigeeAuthConfigs.* integrations.apigeeCertificates.* integrations.apigeeExecutions.list integrations.apigeeIntegrationVers.* integrations.apigeeIntegrations.* integrations.apigeeSfdcChannels.* integrations.apigeeSfdcInstances.* integrations.apigeeSuspensions.* integrations.authConfigs.* integrations.certificates.* integrations.executions.* integrations.integrationVersions.create integrations.integrationVersions.delete integrations.integrationVersions.deploy integrations.integrationVersions.get integrations.integrationVersions.list integrations.integrationVersions.update integrations.integrations.* integrations.sfdcChannels.* integrations.sfdcInstances.* integrations.suspensions.* integrations.testCases.* resourcemanager.projects.get resourcemanager.projects.list
Implantador do Application Integration (roles/integrations.integrationDeployer) Um desenvolvedor que pode implantar/cancelar a implantação de integrações no ambiente de execução da integração.	integrations.apigeeIntegrationVers.deploy integrations.apigeeIntegrationVers.get integrations.apigeeIntegrationVers.list integrations.apigeeIntegrations.list integrations.integrationVersions.deploy integrations.integrationVersions.get integrations.integrationVersions.list integrations.integrations.deploy integrations.integrations.get integrations.integrations.list resourcemanager.projects.get resourcemanager.projects.list
Editor do Application Integration (roles/integrations.integrationEditor) Um desenvolvedor que pode listar, criar e atualizar integrações.	integrations.apigeeAuthConfigs.create integrations.apigeeAuthConfigs.get integrations.apigeeAuthConfigs.list integrations.apigeeAuthConfigs.update integrations.apigeeCertificates.create integrations.apigeeCertificates.get integrations.apigeeCertificates.list integrations.apigeeCertificates.update integrations.apigeeExecutions.list integrations.apigeeIntegrationVers.* integrations.apigeeIntegrations.* integrations.apigeeSfdcChannels.create integrations.apigeeSfdcChannels.get integrations.apigeeSfdcChannels.list integrations.apigeeSfdcChannels.update integrations.apigeeSfdcInstances.create integrations.apigeeSfdcInstances.get integrations.apigeeSfdcInstances.list integrations.apigeeSfdcInstances.update integrations.authConfigs.create integrations.authConfigs.get integrations.authConfigs.list integrations.authConfigs.update integrations.certificates.get integrations.executions.* integrations.integrationVersions.create integrations.integrationVersions.delete integrations.integrationVersions.deploy integrations.integrationVersions.get integrations.integrationVersions.list integrations.integrationVersions.update integrations.integrations.create integrations.integrations.generateOpenApiSpec integrations.integrations.get integrations.integrations.invoke integrations.integrations.list integrations.integrations.update integrations.sfdcChannels.* integrations.sfdcInstances.* integrations.testCases.* resourcemanager.projects.get resourcemanager.projects.list
Invocador do Application Integration (roles/integrations.integrationInvoker) Um papel que pode invocar integrações.	integrations.apigeeExecutions.list integrations.apigeeIntegrationVers.get integrations.apigeeIntegrationVers.list integrations.apigeeIntegrations.* integrations.executions.* integrations.integrationVersions.get integrations.integrationVersions.invoke integrations.integrationVersions.list integrations.integrations.get integrations.integrations.invoke integrations.integrations.list integrations.testCases.get integrations.testCases.invoke integrations.testCases.list resourcemanager.projects.get resourcemanager.projects.list
Leitor do Application Integration (roles/integrations.integrationViewer) Um desenvolvedor que pode listar e visualizar integrações.	integrations.apigeeAuthConfigs.list integrations.apigeeCertificates.list integrations.apigeeIntegrationVers.get integrations.apigeeIntegrationVers.list integrations.apigeeIntegrations.list integrations.apigeeSfdcChannels.list integrations.apigeeSfdcInstances.list integrations.authConfigs.get integrations.authConfigs.list integrations.certificates.get integrations.certificates.list integrations.executions.get integrations.executions.list integrations.integrationVersions.get integrations.integrationVersions.list integrations.integrations.generateOpenApiSpec integrations.integrations.get integrations.integrations.list integrations.sfdcChannels.list integrations.sfdcInstances.list integrations.testCases.get integrations.testCases.list resourcemanager.projects.get resourcemanager.projects.list
Administrador da integração de segurança ^Beta (roles/integrations.securityIntegrationAdmin) Um usuário com acesso total a todas as integrações de segurança.	integrations.securityAuthConfigs.* integrations.securityExecutions.* integrations.securityIntegTempVers.* integrations.securityIntegrationVers.* integrations.securityIntegrations.*
Administrador de instâncias do SFDC do Application Integration (roles/integrations.sfdcInstanceAdmin) Um usuário com acesso total (CRUD, na sigla em inglês) a todas as instâncias do SFDC.	integrations.sfdcChannels.* integrations.sfdcInstances.* resourcemanager.projects.get resourcemanager.projects.list
Editor de instâncias do SFDC do Application Integration (roles/integrations.sfdcInstanceEditor) Um desenvolvedor que pode listar, criar e atualizar integrações.	integrations.sfdcChannels.create integrations.sfdcChannels.get integrations.sfdcChannels.list integrations.sfdcChannels.update integrations.sfdcInstances.create integrations.sfdcInstances.get integrations.sfdcInstances.list integrations.sfdcInstances.update resourcemanager.projects.get resourcemanager.projects.list
Leitor de instâncias do SFDC do Application Integration (roles/integrations.sfdcInstanceViewer) Um desenvolvedor que pode listar e visualizar instâncias do SFDC.	integrations.sfdcChannels.get integrations.sfdcChannels.list integrations.sfdcInstances.get integrations.sfdcInstances.list resourcemanager.projects.get resourcemanager.projects.list
Aprovador do Application Integration (roles/integrations.suspensionResolver) Um papel que pode resolver integrações suspensas.	integrations.apigeeSuspensions.* integrations.suspensions.* resourcemanager.projects.get resourcemanager.projects.list
Administrador do gerente da conta do switch do emissor ^Beta (roles/issuerswitch.accountManagerAdmin) Este papel pode realizar todas as operações relacionadas ao gerente de contas	issuerswitch.accountManagerTransactions.* issuerswitch.managedAccounts.* issuerswitch.operations.get issuerswitch.operations.list resourcemanager.projects.get resourcemanager.projects.list
Administrador de transações do gerente da conta do switch do emissor ^Beta (roles/issuerswitch.accountManagerTransactionsAdmin) Este papel pode realizar todas as operações relacionadas a transações do gerente da conta	issuerswitch.accountManagerTransactions.* issuerswitch.operations.get issuerswitch.operations.list resourcemanager.projects.get resourcemanager.projects.list
Leitor de transações do gerente da conta do switch do emissor ^Beta (roles/issuerswitch.accountManagerTransactionsViewer) Este papel pode conferir todas as transações do gerente da conta	issuerswitch.accountManagerTransactions.list issuerswitch.operations.get issuerswitch.operations.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do issuerswitch ^Beta (roles/issuerswitch.admin) Fornece acesso a todos os papéis do switch do emissor	issuerswitch.* resourcemanager.projects.get resourcemanager.projects.list
Administrador de participantes do switch do emissor ^Beta (roles/issuerswitch.issuerParticipantsAdmin) Acesso total aos participantes do switch do emissor	issuerswitch.issuerParticipants.* resourcemanager.projects.get resourcemanager.projects.list
Administrador de resoluções do issuerswitch ^Beta (roles/issuerswitch.resolutionsAdmin) Acesso total às resoluções issuer switch	issuerswitch.complaintTransactions.list issuerswitch.complaints.* issuerswitch.disputes.* issuerswitch.operations.get resourcemanager.projects.get resourcemanager.projects.list
Administrador de regras do issuerswitch ^Beta (roles/issuerswitch.rulesAdmin) Fornece acesso total às regras do switch do emissor	issuerswitch.ruleMetadata.list issuerswitch.ruleMetadataValues.* issuerswitch.rules.list resourcemanager.projects.get resourcemanager.projects.list
Leitor de regras do issuerswitch ^Beta (roles/issuerswitch.rulesViewer) Este papel permite a visualização de regras e metadados relacionados.	issuerswitch.ruleMetadata.list issuerswitch.ruleMetadataValues.list issuerswitch.rules.list resourcemanager.projects.get resourcemanager.projects.list
Leitor de transações do issuerswitch ^Beta (roles/issuerswitch.transactionsViewer) Este papel permite a visualização de todas as transações	issuerswitch.complaintTransactions.list issuerswitch.financialTransactions.list issuerswitch.mandateTransactions.list issuerswitch.metadataTransactions.list issuerswitch.operations.get issuerswitch.operations.list resourcemanager.projects.get resourcemanager.projects.list
Editor de metadados ^Beta (roles/kubernetesmetadata.publisher) Editor de metadados de clusters do Kubernetes	kubernetesmetadata.*
Administrador de Flink gerenciado ^Beta (roles/managedflink.admin) Acesso total a recursos do Flink gerenciado.	managedflink.* resourcemanager.projects.get resourcemanager.projects.list
Desenvolvedor Flink gerenciado ^Beta (roles/managedflink.developer) Acesso total aos jobs do Flink gerenciado e acesso de leitura a implantações.	managedflink.deployments.get managedflink.deployments.list managedflink.jobs.* managedflink.locations.* managedflink.operations.get managedflink.operations.list managedflink.sessions.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do Flink gerenciado ^Beta (roles/managedflink.viewer) Acesso somente leitura aos recursos do Flink gerenciado.	managedflink.deployments.get managedflink.deployments.list managedflink.jobs.get managedflink.jobs.list managedflink.locations.* managedflink.operations.get managedflink.operations.list managedflink.sessions.get managedflink.sessions.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do Kafka gerenciado ^Beta (roles/managedkafka.admin) Acesso total aos recursos do Kafka gerenciado.	managedkafka.* resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Cliente Kafka gerenciado ^Beta (roles/managedkafka.client) Fornece acesso para se conectar aos servidores do Kafka em um cluster, ou seja, concede acesso ao plano de dados do Kafka. Planejado para produtores e consumidores, por exemplo.	managedkafka.clusters.connect managedkafka.clusters.get managedkafka.clusters.list managedkafka.consumerGroups.* managedkafka.locations.* managedkafka.operations.get managedkafka.operations.list managedkafka.topics.* resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Editor de cluster do Kafka gerenciado ^Beta (roles/managedkafka.clusterEditor) Concede acesso de leitura e gravação aos clusters do Kafka. Projetado para, por exemplo, Departamentos de TI que provisionam clusters Kafka, mas não precisam ler ou modificar tópicos ou grupos de consumidores.	managedkafka.clusters.create managedkafka.clusters.delete managedkafka.clusters.get managedkafka.clusters.list managedkafka.clusters.update managedkafka.consumerGroups.get managedkafka.consumerGroups.list managedkafka.locations.* managedkafka.operations.get managedkafka.operations.list managedkafka.topics.get managedkafka.topics.list resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Editor do grupo de consumidores Kafka gerenciado ^Beta (roles/managedkafka.consumerGroupEditor) Fornece acesso de leitura e gravação aos metadados do grupo de consumidores. Projetado para desenvolvedores que configuram grupos de consumidores, por exemplo.	managedkafka.clusters.get managedkafka.clusters.list managedkafka.consumerGroups.* managedkafka.locations.* managedkafka.operations.get managedkafka.operations.list managedkafka.topics.get managedkafka.topics.list resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Editor de tópicos do Kafka gerenciado ^Beta (roles/managedkafka.topicEditor) Fornece acesso de leitura e gravação aos metadados do tópico. Projetado para desenvolvedores que configuram tópicos, por exemplo.	managedkafka.clusters.get managedkafka.clusters.list managedkafka.consumerGroups.get managedkafka.consumerGroups.list managedkafka.locations.* managedkafka.operations.get managedkafka.operations.list managedkafka.topics.* resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Leitor do Kafka gerenciado ^Beta (roles/managedkafka.viewer) Acesso somente leitura aos recursos do Kafka gerenciados.	managedkafka.clusters.get managedkafka.clusters.list managedkafka.consumerGroups.get managedkafka.consumerGroups.list managedkafka.locations.* managedkafka.operations.get managedkafka.operations.list managedkafka.topics.get managedkafka.topics.list resourcemanager.projects.get resourcemanager.projects.list serviceusage.quotas.get serviceusage.services.get serviceusage.services.list
Editor do Gerenciamento de superfície de ataque da Mandiant ^Beta (roles/mandiant.attackSurfaceManagementEditor) Acesso de gravação ao gerenciamento de superfície de ataque	mandiant.genericAttackSurfaceManagements.create mandiant.genericAttackSurfaceManagements.delete mandiant.genericAttackSurfaceManagements.update mandiant.genericPlatforms.create mandiant.genericPlatforms.delete mandiant.genericPlatforms.update resourcemanager.projects.get resourcemanager.projects.list
Visualizador do gerenciamento de superfície de ataque da Mandiant ^Beta (roles/mandiant.attackSurfaceManagementViewer) Acesso de leitura do gerenciamento de superfície de ataque	mandiant.genericAttackSurfaceManagements.get mandiant.genericPlatforms.get resourcemanager.projects.get resourcemanager.projects.list
Editor de monitoramento de ameaças digitais da Mandiant ^Beta (roles/mandiant.digitalThreatMonitoringEditor) Acesso para gravar monitoramento de ameaças digitais	mandiant.genericDigitalThreatMonitorings.create mandiant.genericDigitalThreatMonitorings.update mandiant.genericPlatforms.create mandiant.genericPlatforms.update resourcemanager.projects.get resourcemanager.projects.list
Visualizador de monitoramento de ameaças digitais da Mandiant ^Beta (roles/mandiant.digitalThreatMonitoringViewer) Acesso de leitura do monitoramento de ameaças digitais	mandiant.genericDigitalThreatMonitorings.get mandiant.genericPlatforms.get resourcemanager.projects.get resourcemanager.projects.list
Editor do Expertise On Demand da Mandiant ^Beta (roles/mandiant.expertiseOnDemandEditor) Acesso de gravação do Expertise On Demand	mandiant.genericExpertiseOnDemands.create mandiant.genericExpertiseOnDemands.delete mandiant.genericExpertiseOnDemands.update mandiant.genericPlatforms.create mandiant.genericPlatforms.delete mandiant.genericPlatforms.update resourcemanager.projects.get resourcemanager.projects.list
Leitor do Expertise On Demand da Mandiant ^Beta (roles/mandiant.expertiseOnDemandViewer) Acesso de leitura do Expertise On Demand	mandiant.genericExpertiseOnDemands.get mandiant.genericPlatforms.get resourcemanager.projects.get resourcemanager.projects.list
Editor do Mandiant Threat Intel ^Beta (roles/mandiant.threatIntelEditor) Acesso de gravação do Mandiant Threat Intelligence	mandiant.genericPlatforms.create mandiant.genericPlatforms.delete mandiant.genericPlatforms.update mandiant.genericThreatIntels.create mandiant.genericThreatIntels.delete mandiant.genericThreatIntels.update resourcemanager.projects.get resourcemanager.projects.list
Leitor do Mandiant Threat Intelligence ^Beta (roles/mandiant.threatIntelViewer) Acesso de leitura do Mandiant Threat Intelligence	mandiant.genericPlatforms.get mandiant.genericThreatIntels.get resourcemanager.projects.get resourcemanager.projects.list
Editor de validação da Mandiant ^Beta (roles/mandiant.validationEditor) Acesso à gravação de validação	mandiant.genericPlatforms.create mandiant.genericPlatforms.delete mandiant.genericPlatforms.update mandiant.genericValidations.create mandiant.genericValidations.delete mandiant.genericValidations.update resourcemanager.projects.get resourcemanager.projects.list
Leitor de validação da Mandiant ^Beta (roles/mandiant.validationViewer) Acesso de leitura de validação	mandiant.genericPlatforms.get mandiant.genericValidations.get resourcemanager.projects.get resourcemanager.projects.list
Leitor de uso excedente de soluções de mobilidade ^Beta (roles/mapsanalytics.mobilitySolutionsOverageViewer) Dá acesso somente leitura aos dados de métricas de uso excedente de soluções de mobilidade.	mapsanalytics.metricData.queryMobilitySolutionsOverageData resourcemanager.projects.get resourcemanager.projects.list serviceusage.services.list
Leitor do Maps Analytics ^Beta (roles/mapsanalytics.viewer) Concede acesso somente leitura a todos os recursos do Maps Analytics.	mapsanalytics.metricData.query mapsanalytics.metricMetadata.list resourcemanager.projects.get resourcemanager.projects.list serviceusage.services.list
Administrador de conjuntos de dados da Plataforma Google Maps ^Beta (roles/mapsplatformdatasets.admin) Concede acesso de leitura e gravação a todos os recursos da API Datasets da Plataforma Google Maps	mapsadmin.clientStyles.* mapsplatformdatasets.* resourcemanager.projects.get resourcemanager.projects.list
Leitor de conjuntos de dados da Plataforma Google Maps ^Beta (roles/mapsplatformdatasets.viewer) Concede acesso de somente leitura a todos os recursos da API Datasets da Plataforma Google Maps	mapsadmin.clientStyles.get mapsadmin.clientStyles.list mapsplatformdatasets.datasets.export mapsplatformdatasets.datasets.get mapsplatformdatasets.datasets.list resourcemanager.projects.get resourcemanager.projects.list
Administrador de soluções do Marketplace ^Beta (roles/marketplacesolutions.admin) Acesso total aos recursos de soluções do Marketplace.	marketplacesolutions.* resourcemanager.projects.get resourcemanager.projects.list
Editor de soluções do Marketplace ^Beta (roles/marketplacesolutions.editor) Acesso para edição aos recursos das soluções do Marketplace.	marketplacesolutions.locations.* marketplacesolutions.operations.get marketplacesolutions.operations.list marketplacesolutions.powerImages.* marketplacesolutions.powerInstances.get marketplacesolutions.powerInstances.list marketplacesolutions.powerInstances.update marketplacesolutions.powerNetworks.* marketplacesolutions.powerSshKeys.* marketplacesolutions.powerVolumes.* resourcemanager.projects.get resourcemanager.projects.list
Leitor de soluções do Marketplace ^Beta (roles/marketplacesolutions.viewer) Acesso somente leitura aos recursos de soluções do Marketplace.	marketplacesolutions.locations.* marketplacesolutions.operations.get marketplacesolutions.operations.list marketplacesolutions.powerImages.* marketplacesolutions.powerInstances.get marketplacesolutions.powerInstances.list marketplacesolutions.powerNetworks.* marketplacesolutions.powerSshKeys.* marketplacesolutions.powerVolumes.* resourcemanager.projects.get resourcemanager.projects.list
Administrador do Memorystore ^Beta (roles/memorystore.admin) Acesso total aos recursos do Memorystore.	memorystore.instances.create memorystore.instances.delete memorystore.instances.get memorystore.instances.list memorystore.instances.update memorystore.locations.* memorystore.operations.* resourcemanager.projects.get resourcemanager.projects.list
Usuário do conector de banco de dados do Memorystore ^Beta (roles/memorystore.dbConnectionUser) Acesso à conexão com o banco de dados do servidor Memorystore.	memorystore.instances.connect
Leitor do Memorystore ^Beta (roles/memorystore.viewer) Acesso somente leitura aos recursos do Memorystore.	memorystore.instances.get memorystore.instances.list memorystore.locations.* memorystore.operations.get memorystore.operations.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do Play Console do Google Home (roles/nestconsole.homeDeveloperAdmin) Acesso de administrador aos recursos do Play Console do Google Home	nestconsole.* resourcemanager.projects.get resourcemanager.projects.list
Editor do Play Console do Google Home (roles/nestconsole.homeDeveloperEditor) Acesso de leitura e gravação aos recursos do Play Console do Google Home	nestconsole.smarthomePreviews.update nestconsole.smarthomeProjects.get nestconsole.smarthomeProjects.update nestconsole.smarthomeVersions.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do Play Console do Google Home (roles/nestconsole.homeDeveloperViewer) Acesso para ler os recursos do Play Console do Google Home	nestconsole.smarthomeProjects.get nestconsole.smarthomeVersions.get resourcemanager.projects.get resourcemanager.projects.list
Administrador do Google Cloud NetApp Volumes ^Beta (roles/netapp.admin) Acesso total aos recursos do Google Cloud NetApp Volumes.	netapp.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do Google Cloud NetApp Volumes ^Beta (roles/netapp.viewer) Acesso somente leitura aos recursos do Google Cloud NetApp Volumes.	netapp.activeDirectories.get netapp.activeDirectories.list netapp.backupPolicies.get netapp.backupPolicies.list netapp.backupVaults.get netapp.backupVaults.list netapp.backups.get netapp.backups.list netapp.kmsConfigs.get netapp.kmsConfigs.list netapp.locations.* netapp.operations.get netapp.operations.list netapp.replications.get netapp.replications.list netapp.snapshots.get netapp.snapshots.list netapp.storagePools.get netapp.storagePools.list netapp.volumes.get netapp.volumes.list resourcemanager.projects.get resourcemanager.projects.list
Editor de configuração do OAuth ^Beta (roles/oauthconfig.editor) Acesso de leitura/gravação aos recursos de configuração do OAuth	clientauthconfig.* oauthconfig.*
Leitor de configuração do OAuth ^Beta (roles/oauthconfig.viewer) Acesso somente leitura a recursos de configuração OAuth	clientauthconfig.brands.get clientauthconfig.brands.list clientauthconfig.clients.get clientauthconfig.clients.list oauthconfig.clientpolicy.get oauthconfig.testusers.get oauthconfig.verification.get
Administrador de observabilidade ^Beta (roles/observability.admin) Acesso total a recursos de observabilidade.	observability.*
Editor de observabilidade ^Beta (roles/observability.editor) Edite o acesso aos recursos de observabilidade.	observability.*
Leitor de observabilidade ^Beta (roles/observability.viewer) Acesso somente leitura a recursos de observabilidade.	observability.scopes.get
Administrador do Oracle Database no Google Cloud (roles/oracledatabase.admin) Concede acesso completo para gerenciar todos os recursos do Oracle Database.	oracledatabase.* resourcemanager.projects.get resourcemanager.projects.list
Administrador de banco de dados autônomo do Oracle Database no Google Cloud (roles/oracledatabase.autonomousDatabaseAdmin) Concede acesso completo para gerenciar todos os recursos do banco de dados autônomo.	oracledatabase.autonomousDatabaseBackups.* oracledatabase.autonomousDatabaseCharacterSets.list oracledatabase.autonomousDatabases.* oracledatabase.autonomousDbVersions.list oracledatabase.entitlements.list oracledatabase.locations.* oracledatabase.operations.* resourcemanager.projects.get resourcemanager.projects.list
Leitor de banco de dados autônomo do Oracle Database no Google Cloud (roles/oracledatabase.autonomousDatabaseViewer) Concede acesso de leitura a todos os recursos do banco de dados autônomo.	oracledatabase.autonomousDatabaseBackups.get oracledatabase.autonomousDatabaseBackups.list oracledatabase.autonomousDatabaseCharacterSets.list oracledatabase.autonomousDatabases.generateWallet oracledatabase.autonomousDatabases.get oracledatabase.autonomousDatabases.list oracledatabase.autonomousDbVersions.list oracledatabase.entitlements.list oracledatabase.locations.* oracledatabase.operations.get oracledatabase.operations.list resourcemanager.projects.get resourcemanager.projects.list
Administrador da infraestrutura do Exadata do Oracle Database@Google Cloud (roles/oracledatabase.cloudExadataInfrastructureAdmin) Concede acesso completo para gerenciar todos os recursos de infraestrutura do Exadata.	oracledatabase.cloudExadataInfrastructures.create oracledatabase.cloudExadataInfrastructures.delete oracledatabase.cloudExadataInfrastructures.get oracledatabase.cloudExadataInfrastructures.list oracledatabase.cloudExadataInfrastructures.update oracledatabase.dbServers.list oracledatabase.dbSystemShapes.list oracledatabase.entitlements.list oracledatabase.giVersions.list oracledatabase.locations.* oracledatabase.operations.* resourcemanager.projects.get resourcemanager.projects.list
Leitor de infraestrutura do Exadata do Oracle Database@Google Cloud (roles/oracledatabase.cloudExadataInfrastructureViewer) Concede acesso de leitura a todos os recursos de infraestrutura do Exadata.	oracledatabase.cloudExadataInfrastructures.get oracledatabase.cloudExadataInfrastructures.list oracledatabase.dbServers.list oracledatabase.dbSystemShapes.list oracledatabase.entitlements.list oracledatabase.giVersions.list oracledatabase.locations.* oracledatabase.operations.get oracledatabase.operations.list resourcemanager.projects.get resourcemanager.projects.list
Administrador do cluster de VM do Oracle Database@Google Cloud (roles/oracledatabase.cloudVmClusterAdmin) Concede acesso completo para gerenciar todos os recursos do cluster de VMs.	oracledatabase.cloudExadataInfrastructures.list oracledatabase.cloudExadataInfrastructures.use oracledatabase.cloudVmClusters.* oracledatabase.dbNodes.list oracledatabase.dbServers.list oracledatabase.entitlements.list oracledatabase.giVersions.list oracledatabase.locations.* oracledatabase.operations.* resourcemanager.projects.get resourcemanager.projects.list
Leitor do cluster de VM do Oracle Database@Google Cloud (roles/oracledatabase.cloudVmClusterViewer) Concede acesso de leitura a todos os recursos do cluster de VM.	oracledatabase.cloudVmClusters.get oracledatabase.cloudVmClusters.list oracledatabase.dbNodes.list oracledatabase.entitlements.list oracledatabase.locations.* oracledatabase.operations.get oracledatabase.operations.list resourcemanager.projects.get resourcemanager.projects.list
Leitor do Oracle Database@Google Cloud (roles/oracledatabase.viewer) Concede acesso para exibir todos os recursos do Oracle Database.	oracledatabase.autonomousDatabaseBackups.get oracledatabase.autonomousDatabaseBackups.list oracledatabase.autonomousDatabaseCharacterSets.list oracledatabase.autonomousDatabases.generateWallet oracledatabase.autonomousDatabases.get oracledatabase.autonomousDatabases.list oracledatabase.autonomousDbVersions.list oracledatabase.cloudExadataInfrastructures.get oracledatabase.cloudExadataInfrastructures.list oracledatabase.cloudVmClusters.get oracledatabase.cloudVmClusters.list oracledatabase.dbNodes.list oracledatabase.dbServers.list oracledatabase.dbSystemShapes.list oracledatabase.entitlements.list oracledatabase.giVersions.list oracledatabase.locations.* oracledatabase.operations.get oracledatabase.operations.list resourcemanager.projects.get resourcemanager.projects.list
Administrador de revendedores de pagamentos ^Beta (roles/paymentsresellersubscription.partnerAdmin) Acesso total a todos os recursos para revendedores do Payments, incluindo assinaturas, produtos e promoções	paymentsresellersubscription.* resourcemanager.projects.get resourcemanager.projects.list
Visualizador de revendedores do Payments ^Beta (roles/paymentsresellersubscription.partnerViewer) Acesso de leitura a todos os recursos para revendedores do Payments, incluindo assinaturas, produtos e promoções	paymentsresellersubscription.products.list paymentsresellersubscription.promotions.list paymentsresellersubscription.subscriptions.get resourcemanager.projects.get resourcemanager.projects.list
Visualizador de produtos de revendedores do Payments ^Beta (roles/paymentsresellersubscription.productViewer) Acesso de leitura ao recurso de produtos para revendedores do Google Payments	paymentsresellersubscription.products.list resourcemanager.projects.get resourcemanager.projects.list
Visualizador de promoções de revendedores do Payments ^Beta (roles/paymentsresellersubscription.promotionViewer) Acesso de leitura ao recurso de promoção de revendedor do Google Payments	paymentsresellersubscription.promotions.list resourcemanager.projects.get resourcemanager.projects.list
Editor de assinaturas do revendedor do Payments ^Beta (roles/paymentsresellersubscription.subscriptionEditor) Acesso de gravação ao recurso de assinatura de revendedor do Google Payments	paymentsresellersubscription.subscriptions.* resourcemanager.projects.get resourcemanager.projects.list
Leitor de assinaturas do revendedor do Payments ^Beta (roles/paymentsresellersubscription.subscriptionViewer) Acesso de leitura ao recurso de assinatura de revendedor do Google Payments	paymentsresellersubscription.subscriptions.get resourcemanager.projects.get resourcemanager.projects.list
Leitor de análise de atividades ^Beta (roles/policyanalyzer.activityAnalysisViewer) Usuário do visualizador que pode ler toda a análise de atividade.	policyanalyzer.*
Administrador do remediador de políticas ^Beta (roles/policyremediatormanager.policyRemediatorAdmin) Permite ativar e desativar o uso do remediador de políticas da organização	policyremediatormanager.*
Leitor do remediador de políticas ^Beta (roles/policyremediatormanager.policyRemediatorReader) Permite ler/visualizar o estado do remediador de políticas da organização	policyremediatormanager.locations.* policyremediatormanager.operations.get policyremediatormanager.operations.list policyremediatormanager.remediatorServices.get
Administrador do simulador ^Beta (roles/policysimulator.admin) Usuário administrador que pode executar e acessar replays.	policysimulator.replayResults.list policysimulator.replays.*
Administrador do simulador da OrgPolicy ^Beta (roles/policysimulator.orgPolicyAdmin) Administrador da OrgPolicy que pode executar e acessar simulações.	cloudasset.assets.analyzeOrgPolicy cloudasset.assets.exportResource cloudasset.assets.listResource cloudasset.assets.searchAllResources orgpolicy.customConstraints.get orgpolicy.customConstraints.list orgpolicy.policies.list orgpolicy.policy.get policysimulator.orgPolicyViolations.list policysimulator.orgPolicyViolationsPreviews.* resourcemanager.organizations.get
Criador de chaves externas da conta ^Beta (roles/publicca.externalAccountKeyCreator) Esse papel pode criar um novo recurso externalAccountKey.	publicca.externalAccountKeys.create resourcemanager.projects.get resourcemanager.projects.list
Administrador de vinculação de assinaturas (roles/readerrevenuesubscriptionlinking.admin) Acesso total aos recursos de leitura da publicação	readerrevenuesubscriptionlinking.* resourcemanager.projects.get resourcemanager.projects.list
Leitor de direitos de vinculação de assinatura (roles/readerrevenuesubscriptionlinking.entitlementsViewer) Este papel pode ver todos os direitos do leitor de publicações	readerrevenuesubscriptionlinking.readerEntitlements.get
Leitor de vinculação de assinatura (roles/readerrevenuesubscriptionlinking.viewer) Este papel pode ver todos os recursos de leitura da publicação	readerrevenuesubscriptionlinking.readerEntitlements.get readerrevenuesubscriptionlinking.readers.get resourcemanager.projects.get resourcemanager.projects.list
Exportador de recomendações (roles/recommender.exporter) Exportador de recomendações	recommender.resources.export
Remote Build Execution: gravador do cache de ação ^Beta (roles/remotebuildexecution.actionCacheWriter) Remote Build Execution: gravador do cache de ação	remotebuildexecution.actions.set remotebuildexecution.blobs.create
Administrador de Artefato do Remote Build Execution ^Beta (roles/remotebuildexecution.artifactAdmin) Remote Build Execution: administrador de artefatos	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get remotebuildexecution.blobs.* remotebuildexecution.logstreams.*
Criador de artefatos do Remote Build Execution ^Beta (roles/remotebuildexecution.artifactCreator) Remote Build Execution: criador de artefatos	remotebuildexecution.actions.create remotebuildexecution.actions.get remotebuildexecution.blobs.* remotebuildexecution.logstreams.*
Leitor de Artefato do Remote Build Execution ^Beta (roles/remotebuildexecution.artifactViewer) Remote Build Execution: leitor de artefatos	remotebuildexecution.actions.get remotebuildexecution.blobs.get remotebuildexecution.logstreams.get
Administrador de configuração do Remote Build Execution ^Beta (roles/remotebuildexecution.configurationAdmin) Remote Build Execution: administrador de configuração	remotebuildexecution.instances.* remotebuildexecution.workerpools.*
Leitor de configuração do Remote Build Execution ^Beta (roles/remotebuildexecution.configurationViewer) Remote Build Execution: leitor de configuração	remotebuildexecution.instances.get remotebuildexecution.instances.list remotebuildexecution.workerpools.get remotebuildexecution.workerpools.list
Gravador do stream de registro do Remote Build Execution ^Beta (roles/remotebuildexecution.logstreamWriter) Gravador do stream de registro do Remote Build Execution	remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update
Administrador de reservas do Remote Build Execution ^Beta (roles/remotebuildexecution.reservationAdmin) Administrador de reservas do Remote Build Execution	remotebuildexecution.actions.create remotebuildexecution.actions.delete remotebuildexecution.actions.get
Worker do Remote Build Execution ^Beta (roles/remotebuildexecution.worker) Worker do Remote Build Execution	remotebuildexecution.actions.update remotebuildexecution.blobs.* remotebuildexecution.botsessions.* remotebuildexecution.logstreams.create remotebuildexecution.logstreams.update
Administrador de varejo (roles/retail.admin) Acesso total aos recursos da API Retail	automlrecommendations.apiKeys.create automlrecommendations.apiKeys.delete automlrecommendations.catalogItems.* automlrecommendations.catalogs.* automlrecommendations.eventStores.getStats automlrecommendations.events.create automlrecommendations.events.list automlrecommendations.events.purge automlrecommendations.events.rejoin automlrecommendations.placements.* automlrecommendations.recommendations.* retail.*
Editor de varejo (roles/retail.editor) Acesso total aos recursos da API Retail, exceto purge, rejoin e setSponsorship.	automlrecommendations.apiKeys.create automlrecommendations.apiKeys.delete automlrecommendations.catalogItems.* automlrecommendations.catalogs.* automlrecommendations.eventStores.getStats automlrecommendations.events.create automlrecommendations.events.list automlrecommendations.placements.* automlrecommendations.recommendations.* retail.alertConfigs.* retail.attributesConfigs.addCatalogAttribute retail.attributesConfigs.exportCatalogAttributes retail.attributesConfigs.get retail.attributesConfigs.importCatalogAttributes retail.attributesConfigs.replaceCatalogAttribute retail.attributesConfigs.update retail.branches.* retail.catalogs.* retail.controls.* retail.experiments.* retail.models.* retail.operations.* retail.placements.* retail.products.create retail.products.delete retail.products.export retail.products.get retail.products.import retail.products.list retail.products.update retail.retailProjects.get retail.servingConfigs.* retail.userEvents.create retail.userEvents.import
Leitor de Varejo (roles/retail.viewer) Concede acesso para ler todos os recursos no Varejo.	automlrecommendations.catalogItems.get automlrecommendations.catalogItems.list automlrecommendations.catalogs.getStats automlrecommendations.catalogs.list automlrecommendations.eventStores.getStats automlrecommendations.events.list automlrecommendations.placements.getStats automlrecommendations.placements.list automlrecommendations.recommendations.list retail.alertConfigs.get retail.attributesConfigs.exportCatalogAttributes retail.attributesConfigs.get retail.branches.* retail.catalogs.completeQuery retail.catalogs.exportAnalyticsMetrics retail.catalogs.list retail.controls.export retail.controls.get retail.controls.list retail.experiments.get retail.experiments.list retail.experiments.loadExperimentLookerDashboard retail.experiments.queryTrafficMetrics retail.models.get retail.models.list retail.operations.* retail.placements.* retail.products.export retail.products.get retail.products.list retail.retailProjects.get retail.servingConfigs.get retail.servingConfigs.list retail.servingConfigs.predict retail.servingConfigs.search
Administrador de configuração RISC ^Beta (roles/riscconfigs.admin) Acesso de leitura/gravação aos recursos de configuração RISC	clientauthconfig.clients.list riscconfigurationservice.*
Leitor de configuração RISC ^Beta (roles/riscconfigs.viewer) Acesso somente leitura a recursos de configuração RISC	clientauthconfig.clients.list riscconfigurationservice.riscconfigs.get
Editor de otimização de rotas (roles/routeoptimization.editor) Este papel pode criar operações de longa duração com BatchOptimizeTours.	resourcemanager.projects.get resourcemanager.projects.list routeoptimization.*
Leitor de otimização de rotas (roles/routeoptimization.viewer) Esse papel pode visualizar qualquer operação de longa duração.	resourcemanager.projects.get resourcemanager.projects.list routeoptimization.operations.get
Desenvolvedor de integrações sem servidor ^Beta (roles/runapps.developer) Acesso para criar e mudar integrações sem servidor e a configuração delas.	resourcemanager.projects.get resourcemanager.projects.list runapps.applications.* runapps.deployments.get runapps.deployments.list runapps.locations.* runapps.operations.*
Operador de integrações sem servidor ^Beta (roles/runapps.operator) Acesso para implantar integrações sem servidor.	resourcemanager.projects.get resourcemanager.projects.list runapps.applications.get runapps.applications.getStatus runapps.applications.list runapps.deployments.* runapps.locations.* runapps.operations.*
Leitor de integrações sem servidor ^Beta (roles/runapps.viewer) Acesso somente leitura aos recursos de integrações sem servidor.	resourcemanager.projects.get resourcemanager.projects.list runapps.applications.get runapps.applications.getStatus runapps.applications.list runapps.deployments.get runapps.deployments.list runapps.locations.* runapps.operations.get runapps.operations.list
Administrador do Cloud RuntimeConfig (roles/runtimeconfig.admin) Acesso completo aos recursos do RuntimeConfig.	runtimeconfig.*
Remediador do nível SLZ BQDW Blueprint da organização ^Beta (roles/securedlandingzone.bqdwOrgRemediator) Acesso para modificar (remediar) recursos em SLZ BQDW Blueprint na organização.	accesscontextmanager.servicePerimeters.get accesscontextmanager.servicePerimeters.list accesscontextmanager.servicePerimeters.update
Remediador do nível SLZ BQDW Blueprint do projeto ^Beta (roles/securedlandingzone.bqdwProjectRemediator) Acesso para modificar (remediar) recursos em SLZ BQDW Blueprint no projeto.	bigquery.datasets.get bigquery.datasets.getIamPolicy bigquery.datasets.setIamPolicy bigquery.datasets.update cloudkms.cryptoKeys.get cloudkms.cryptoKeys.getIamPolicy cloudkms.cryptoKeys.list cloudkms.cryptoKeys.setIamPolicy cloudkms.cryptoKeys.update cloudkms.keyRings.getIamPolicy cloudkms.keyRings.setIamPolicy pubsub.topics.get pubsub.topics.getIamPolicy pubsub.topics.list pubsub.topics.setIamPolicy pubsub.topics.update resourcemanager.projects.update serviceusage.services.use storage.buckets.get storage.buckets.getIamPolicy storage.buckets.list storage.buckets.setIamPolicy storage.buckets.update
Ativador de supervisão ^Beta (roles/securedlandingzone.overwatchActivator) Este papel pode ativar ou suspender Supervisões	resourcemanager.projects.get resourcemanager.projects.list securedlandingzone.overwatches.activate securedlandingzone.overwatches.suspend
Administrador de supervisão ^Beta (roles/securedlandingzone.overwatchAdmin) Acesso total às supervisões	resourcemanager.projects.get resourcemanager.projects.list securedlandingzone.*
Leitor de supervisão ^Beta (roles/securedlandingzone.overwatchViewer) Pessoas com este papel podem ver todas as propriedades de supervisões	resourcemanager.projects.get resourcemanager.projects.list securedlandingzone.operations.get securedlandingzone.overwatches.get securedlandingzone.overwatches.list
Administrador do Security posture (roles/securityposture.admin) Acesso total às APIs do serviço Security posture.	orgpolicy.* resourcemanager.organizations.get securitycenter.securityhealthanalyticssettings.* securitycentermanagement.effectiveSecurityHealthAnalyticsCustomModules.* securitycentermanagement.securityHealthAnalyticsCustomModules.create securitycentermanagement.securityHealthAnalyticsCustomModules.delete securitycentermanagement.securityHealthAnalyticsCustomModules.get securitycentermanagement.securityHealthAnalyticsCustomModules.list securitycentermanagement.securityHealthAnalyticsCustomModules.update securityposture.*
Implantador do Security posture (roles/securityposture.postureDeployer) Permissões de modificação e leitura no recurso de implantação de postura.	orgpolicy.* resourcemanager.organizations.get securitycenter.securityhealthanalyticssettings.* securitycentermanagement.securityHealthAnalyticsCustomModules.create securitycentermanagement.securityHealthAnalyticsCustomModules.delete securitycentermanagement.securityHealthAnalyticsCustomModules.update securityposture.operations.get securityposture.postureDeployments.*
Leitor de implantações do Security posture (roles/securityposture.postureDeploymentsViewer) Acesso somente leitura ao recurso de implantação de postura.	resourcemanager.organizations.get securityposture.operations.get securityposture.postureDeployments.get securityposture.postureDeployments.list
Editor de recursos do Security posture (roles/securityposture.postureEditor) Permissões de modificação e leitura no recurso de postura.	securityposture.operations.get securityposture.postures.*
Leitor de recursos do Security posture (roles/securityposture.postureViewer) Acesso somente leitura ao recurso de postura.	resourcemanager.organizations.get securityposture.operations.get securityposture.postures.get securityposture.postures.list
Validador Shift-Left do Security Posture (roles/securityposture.reportCreator) Crie acesso para relatórios, como o Relatório de validação de IaC.	securityposture.operations.get securityposture.reports.*
Leitor do Security posture (roles/securityposture.viewer) Acesso somente leitura a todos os recursos do serviço SecurityPosture.	resourcemanager.organizations.get securityposture.operations.get securityposture.postureDeployments.get securityposture.postureDeployments.list securityposture.postureTemplates.* securityposture.postures.get securityposture.postures.list
Leitor do Personalized Service Health (roles/servicehealth.viewer) Acesso somente leitura aos recursos do Personalized Service Health.	resourcemanager.projects.get resourcemanager.projects.list servicehealth.*
Leitor do Security Insights ^Beta (roles/servicesecurityinsights.securityInsightsViewer) Acesso para ler os recursos de Insights de segurança	servicesecurityinsights.*
Administrador do Speaker ID (roles/speakerid.admin) Concede acesso total a todos os recursos do código de alto-falantes, incluindo as configurações do projeto.	speakerid.*
Editor do Speaker ID (roles/speakerid.editor) Concede acesso de leitura e gravação a todos os recursos de código do alto-falante.	speakerid.phrases.* speakerid.speakers.*
Verificador do Speaker ID (roles/speakerid.verifier) Concede acesso de leitura a todos os recursos de ID do alto-falante e permite a verificação.	speakerid.phrases.get speakerid.phrases.list speakerid.speakers.get speakerid.speakers.list speakerid.speakers.verify
Leitor do Speaker ID (roles/speakerid.viewer) Concede acesso de leitura a todos os recursos de código do alto-falante.	speakerid.phrases.get speakerid.phrases.list speakerid.speakers.get speakerid.speakers.list
Administrador do Cloud Speech (roles/speech.admin) Concede acesso total a todos os recursos da conversão de voz em texto	speech.*
Cliente do Cloud Speech (roles/speech.client) Concede acesso às APIs de reconhecimento.	speech.adaptations.execute speech.customClasses.get speech.customClasses.list speech.locations.* speech.operations.get speech.operations.list speech.operations.wait speech.phraseSets.get speech.phraseSets.list speech.recognizers.get speech.recognizers.list speech.recognizers.recognize
Editor do Cloud Speech (roles/speech.editor) Concede acesso para editar os recursos da conversão de voz em texto	speech.adaptations.execute speech.customClasses.* speech.locations.* speech.operations.* speech.phraseSets.* speech.recognizers.*
Administrador do Storage Insights (roles/storageinsights.admin) Acesso total aos recursos do Storage Insights.	resourcemanager.projects.get resourcemanager.projects.list storageinsights.*
Analista do Storage Insights (roles/storageinsights.analyst) Acesso de dados ao Storage Insights.	resourcemanager.projects.get resourcemanager.projects.list storageinsights.datasetConfigs.get storageinsights.datasetConfigs.linkDataset storageinsights.datasetConfigs.list storageinsights.datasetConfigs.unlinkDataset storageinsights.locations.* storageinsights.operations.get storageinsights.operations.list storageinsights.reportConfigs.get storageinsights.reportConfigs.list storageinsights.reportDetails.*
Leitor do Storage Insights (roles/storageinsights.viewer) Acesso somente leitura aos recursos do Storage Insights.	resourcemanager.projects.get resourcemanager.projects.list storageinsights.datasetConfigs.get storageinsights.datasetConfigs.list storageinsights.locations.* storageinsights.operations.get storageinsights.operations.list storageinsights.reportConfigs.get storageinsights.reportConfigs.list storageinsights.reportDetails.*
Desenvolvedor do Assine com o Google ^Beta (roles/subscribewithgoogledeveloper.developer) Acesso ao DevTools para usar o Assine com o Google.	resourcemanager.projects.get resourcemanager.projects.list subscribewithgoogledeveloper.tools.get
Administrador de automação de telecomunicações ^Beta (roles/telcoautomation.admin) Acesso total a recursos do Telco Automation.	logging.buckets.get logging.buckets.list logging.exclusions.get logging.exclusions.list logging.links.get logging.links.list logging.locations.* logging.logEntries.list logging.logMetrics.get logging.logMetrics.list logging.logServiceIndexes.list logging.logServices.list logging.logs.list logging.operations.get logging.operations.list logging.queries.getShared logging.queries.listShared logging.queries.usePrivate logging.sinks.get logging.sinks.list logging.usage.get logging.views.get logging.views.list monitoring.timeSeries.list observability.scopes.get resourcemanager.projects.get serviceusage.quotas.* serviceusage.services.* source.repos.get source.repos.list telcoautomation.*
Designer de blueprint de automação de telecomunicações ^Beta (roles/telcoautomation.blueprintDesigner) Capacidade de gerenciar blueprints	telcoautomation.blueprints.create telcoautomation.blueprints.delete telcoautomation.blueprints.get telcoautomation.blueprints.list telcoautomation.blueprints.propose telcoautomation.blueprints.update telcoautomation.deployments.computeStatus telcoautomation.deployments.get telcoautomation.deployments.list telcoautomation.hydratedDeployments.get telcoautomation.hydratedDeployments.list telcoautomation.orchestrationClusters.get telcoautomation.orchestrationClusters.list telcoautomation.publicBlueprints.*
Administrador de implantação da automação de telecomunicações ^Beta (roles/telcoautomation.deploymentAdmin) Capacidade de gerenciar implantações	telcoautomation.blueprints.get telcoautomation.blueprints.list telcoautomation.deployments.* telcoautomation.hydratedDeployments.* telcoautomation.orchestrationClusters.get telcoautomation.orchestrationClusters.list
Administrador de operações de nível 1 da automação de telecomunicações ^Beta (roles/telcoautomation.opsAdminTier1) Capacidade de conferir o status das implantações	logging.buckets.get logging.buckets.list logging.exclusions.get logging.exclusions.list logging.links.get logging.links.list logging.locations.* logging.logEntries.list logging.logMetrics.get logging.logMetrics.list logging.logServiceIndexes.list logging.logServices.list logging.logs.list logging.operations.get logging.operations.list logging.queries.getShared logging.queries.listShared logging.queries.usePrivate logging.sinks.get logging.sinks.list logging.usage.get logging.views.get logging.views.list observability.scopes.get resourcemanager.projects.get telcoautomation.blueprints.get telcoautomation.blueprints.list telcoautomation.deployments.computeStatus telcoautomation.deployments.get telcoautomation.deployments.list telcoautomation.hydratedDeployments.get telcoautomation.hydratedDeployments.list telcoautomation.orchestrationClusters.get telcoautomation.orchestrationClusters.list
Administrador de operações de nível 4 de automação de telecomunicações ^Beta (roles/telcoautomation.opsAdminTier4) Capacidade de gerenciar implantações e os status delas	logging.buckets.get logging.buckets.list logging.exclusions.get logging.exclusions.list logging.links.get logging.links.list logging.locations.* logging.logEntries.list logging.logMetrics.get logging.logMetrics.list logging.logServiceIndexes.list logging.logServices.list logging.logs.list logging.operations.get logging.operations.list logging.queries.getShared logging.queries.listShared logging.queries.usePrivate logging.sinks.get logging.sinks.list logging.usage.get logging.views.get logging.views.list observability.scopes.get resourcemanager.projects.get telcoautomation.blueprints.get telcoautomation.blueprints.list telcoautomation.deployments.* telcoautomation.hydratedDeployments.* telcoautomation.orchestrationClusters.get telcoautomation.orchestrationClusters.list
Orquestrador do serviço de automação de telecomunicações ^Beta (roles/telcoautomation.serviceOrchestrator) Capacidade de gerenciar implantações	telcoautomation.blueprints.get telcoautomation.blueprints.list telcoautomation.deployments.* telcoautomation.hydratedDeployments.* telcoautomation.orchestrationClusters.get telcoautomation.orchestrationClusters.list
Editor de conjunto de dados de Insights de série temporal ^Beta (roles/timeseriesinsights.datasetsEditor) Editar o acesso aos conjuntos de dados.	timeseriesinsights.*
Proprietário do conjunto de dados de Insights de série temporal ^Beta (roles/timeseriesinsights.datasetsOwner) Acesso completo aos conjuntos de dados.	timeseriesinsights.*
Leitor do conjunto de dados de Insights de série temporal ^Beta (roles/timeseriesinsights.datasetsViewer) Acesso somente leitura (lista e consulta) aos conjuntos de dados.	timeseriesinsights.datasets.evaluate timeseriesinsights.datasets.list timeseriesinsights.datasets.query timeseriesinsights.locations.*
Cliente do Traffic Director ^Beta (roles/trafficdirector.client) Buscar configurações de serviço e métricas de relatórios.	trafficdirector.*
Administrador do Translation Hub ^Beta (roles/translationhub.admin) Administrador do Translation Hub	automl.models.get automl.models.list automl.models.predict cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.glossaries.create cloudtranslate.glossaries.delete cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict resourcemanager.projects.get resourcemanager.projects.list translationhub.*
Usuário do portal Translation Hub ^Beta (roles/translationhub.portalUser) Usuário do portal do Translation Hub	automl.models.get automl.models.list automl.models.predict cloudtranslate.customModels.get cloudtranslate.customModels.list cloudtranslate.customModels.predict cloudtranslate.glossaries.get cloudtranslate.glossaries.list cloudtranslate.glossaries.predict resourcemanager.projects.get resourcemanager.projects.list translationhub.portals.get translationhub.portals.list
Editor de soluções do Visual Inspection AI (roles/visualinspection.editor) Acesso de leitura e gravação a todos os recursos do Visual Inspection AI, exceto visualinspection.locations.reportUsageMetrics	visualinspection.annotationSets.* visualinspection.annotationSpecs.* visualinspection.annotations.* visualinspection.datasets.* visualinspection.images.* visualinspection.locations.get visualinspection.locations.list visualinspection.modelEvaluations.* visualinspection.models.* visualinspection.modules.* visualinspection.operations.* visualinspection.solutionArtifacts.* visualinspection.solutions.*
Gerador de relatórios de métricas de uso do Visual Inspection AI (roles/visualinspection.usageMetricsReporter) Acesso de geração de relatórios de métricas de uso ao serviço do Visual Inspection AI	visualinspection.locations.reportUsageMetrics
Visualizador do Visual Inspection AI (roles/visualinspection.viewer) Acesso de leitura aos recursos do Visual Inspection AI	visualinspection.annotationSets.get visualinspection.annotationSets.list visualinspection.annotationSpecs.get visualinspection.annotationSpecs.list visualinspection.annotations.get visualinspection.annotations.list visualinspection.datasets.export visualinspection.datasets.get visualinspection.datasets.list visualinspection.images.get visualinspection.images.list visualinspection.locations.get visualinspection.locations.list visualinspection.modelEvaluations.* visualinspection.models.get visualinspection.models.list visualinspection.modules.get visualinspection.modules.list visualinspection.operations.* visualinspection.solutionArtifacts.get visualinspection.solutionArtifacts.list visualinspection.solutionArtifacts.predict visualinspection.solutions.get visualinspection.solutions.list

Para mais informações sobre papéis predefinidos, consulte Papéis e permissões. Para receber ajuda para escolher os papéis predefinidos mais apropriados, consulte Escolher papéis predefinidos.